last executing test programs: 1m31.871241272s ago: executing program 1 (id=434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000002060104000000000000000005005e801497ff0000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a310000000004000780050005000a0000000500040000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m29.257017508s ago: executing program 1 (id=444): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000300)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d4a00120002000a0000005ade4a460d89b6ec0cff3959547f509058ba86c902000000004a2200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4880, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000019200)={{&(0x7f0000265000/0x4000)=nil, 0x4000}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r7, &(0x7f0000000180)='net/ip_tables_names\x00') r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000440)={0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m28.59448269s ago: executing program 1 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x8) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be000000000000000000000000aaff02000000000000000000000000000100000000000000a410e8"], 0xfdef) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5f1, 0x0, r3, 0x9, '\x00', 0x0, r3, 0x2, 0x3, 0x5}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00004000000062cf004ab77f8437"}}}}}, 0x0) 1m28.450558312s ago: executing program 1 (id=450): mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x29, @remote, 0x1}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000240)="e5", 0x1}], 0x1}}], 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) shutdown(r1, 0x1) r6 = syz_clone(0x9803b400, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000040), 0x0, 0x0) 1m28.176871798s ago: executing program 1 (id=451): syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000200)=ANY=[@ANYBLOB="80000000fffffffffffffff0ffffffff505050505050000000000000000000006400010000060202020202020101960507801a0e998d61a92503016c002d1a0c000c20e900000000ed0005000300120000000000ff07000008760601ac40007f00e24cdd53b1c198f0518a3898e310495126181e9ac74f083f2a8077c15f8e54eb20"], 0x61) syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m27.238947084s ago: executing program 1 (id=453): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000440)={&(0x7f0000000400)=""/29, 0x1d}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto(r4, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="2aa2eec229d656f4e410463ed18615d4f5104301389dcdb665c13148b2b62e46974ba4c980f40db6487ae57edc0413faedb0db5fa0da15020863d425f3f0ef30728f5c13f52e7227570e493c3f2223844f1c4ac7b3dd803a9fe4c37f76405972065252fd86cf56a63e19af5bcedfda2d283453a2316ef4b98df3fc88cae9073e2cfa447ff52cb321ccb0a02c550f678384f1742da1f1ae5f3916c08c9a5e443160ecef2550b4161a661c7b0059e18f9c3b0d07700041a9de5a16a87fa184946232b92c"}], 0x0, &(0x7f0000000500)}}], 0xffffffffffffff12, 0x4048804) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000340)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @host, 0x0, 0x0, 0x4000000f0, 0x0, 0x0, 0x4000000, 0x7}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000500), 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x48, 0x25, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x6, 0xffff}, {0xd, 0x88276a72aca5a1e5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xa, 0x7, 0x7}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x48}}, 0x80d4) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltfilter={0x64, 0x2d, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xfff2}, {0xfff1, 0x9}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffeffff}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0xfe, 0xe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x24040004) 1m27.168444138s ago: executing program 32 (id=453): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000440)={&(0x7f0000000400)=""/29, 0x1d}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto(r4, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="2aa2eec229d656f4e410463ed18615d4f5104301389dcdb665c13148b2b62e46974ba4c980f40db6487ae57edc0413faedb0db5fa0da15020863d425f3f0ef30728f5c13f52e7227570e493c3f2223844f1c4ac7b3dd803a9fe4c37f76405972065252fd86cf56a63e19af5bcedfda2d283453a2316ef4b98df3fc88cae9073e2cfa447ff52cb321ccb0a02c550f678384f1742da1f1ae5f3916c08c9a5e443160ecef2550b4161a661c7b0059e18f9c3b0d07700041a9de5a16a87fa184946232b92c"}], 0x0, &(0x7f0000000500)}}], 0xffffffffffffff12, 0x4048804) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000340)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @host, 0x0, 0x0, 0x4000000f0, 0x0, 0x0, 0x4000000, 0x7}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000500), 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delqdisc={0x48, 0x25, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x6, 0xffff}, {0xd, 0x88276a72aca5a1e5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xa, 0x7, 0x7}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x48}}, 0x80d4) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltfilter={0x64, 0x2d, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xfff2}, {0xfff1, 0x9}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffeffff}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0xfe, 0xe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x24040004) 5.533892519s ago: executing program 2 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000900", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdb036199122bd7242b23cd71ba0c521ba608220da7460f8021686de3882227cbb7314eab187b7d8ec1d2fa0d8a7bd6eb377fa6d0008c0925c2af5e0f4410af6d2fb0df1302894ed1e1b726e9d75c6cbf8be002a0bcaea476464fa96985e83450b6e1002000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r2, 0x4}, 0x38) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae1ab42a83945264b1eba9e2a7274d9a86197a663b5dc0c78b5539fa3115cc2e56095d923d8e2634d9a53a0711cf638a8fe0778ca53e689d5766cd9710477a"], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(0xffffffffffffffff, 0x60182) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) 4.646131299s ago: executing program 3 (id=854): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, r0, 'id1\x00'}) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)="12037cfb55fd732b3262957509d60aa2d6564c1e1998a7cd61b7999348e09e", 0x1f) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)='syz') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.967947802s ago: executing program 3 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.880394669s ago: executing program 3 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f0000002840)={{r0, &(0x7f0000000280)='@,},\x00', 0x11040, &(0x7f0000000300)={@_ha_fsid={[0x1, 0x2]}, {0x3, 0x48, 0xfffffffc, 0x5147}}, 0x9, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)}, {[0x3, 0xa, 0x5, 0x5]}, 0x81, 0x1000, &(0x7f0000001840)=""/4096}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000002880)={{0x21, @multicast2, 0x4e21, 0x2, 'none\x00', 0x30, 0xf4f, 0x6d}, {@remote, 0x4e20, 0x1, 0x2, 0xde5, 0xf}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x721}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb8}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) madvise(&(0x7f00004ac000/0x1000)=nil, 0x1000, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x224383) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2.548482079s ago: executing program 4 (id=863): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002ec0)="91", 0x1}], 0x1}}], 0x4, 0x40480c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000b0b43b16d7190b98ec3d4e000001010400000000141a0000020000000c14761273cc115a2652cc71c0b793575194d5e72e7d02ec451f9d89b9cbba03a53efc100c4770ddb094af80", @ANYRESHEX=r1], 0x62}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.449674409s ago: executing program 4 (id=864): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f00000010c0)) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='\\x01000000 2000000000 0 - 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0', 0x6a) getgroups(0x44, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) 2.130880493s ago: executing program 2 (id=865): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x2, 0x2, 0x3c, 0x3, 0x8}) r3 = creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2e) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000100009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000021c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000002180)={r7, 0x2, r0, 0x80, 0x80000}) r8 = dup(r6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_nanosleep(0x9, 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) mmap$panthor(&(0x7f0000b4d000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r8, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) write(r9, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) file_setattr(r3, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000020c0)={0x110, 0x2, 0x264e, 0x9, 0x1}, 0x18, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002140)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x400}], 0x1c) 2.047250762s ago: executing program 3 (id=866): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='b', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)=0xfffffffb) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0x5509, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x9c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x5, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x181441, 0x0) write(r4, &(0x7f0000000300)='bfq', 0x3) 1.491396759s ago: executing program 4 (id=868): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x1, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x400) waitid(0x0, 0x0, 0x0, 0x0, 0x0) gettid() r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(0x0) acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.27147399s ago: executing program 0 (id=869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) read(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="3504000041000511d25a35963f400c00020001ffe72037153e370c040100450000000c560000e7ff00400000", 0x2c}, {&(0x7f0000000600)="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", 0x3b0}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f5", 0x59}], 0x3}, 0x10049014) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a"], 0xbc}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000400)=@urb_type_control={0x2, {0x0, 0x1}, 0x20006, 0x1, &(0x7f0000000000)={0x1f, 0x14, 0xf803, 0x204}, 0x8, 0x8004, 0x1, 0x0, 0x1676ab37, 0xdffffff9, 0x0}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 828.10882ms ago: executing program 0 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x800004, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x480, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 813.642825ms ago: executing program 3 (id=871): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = epoll_create(0x7) r4 = epoll_create(0x7) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x60000000}) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$getflags(r6, 0xb) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0xc000001c}) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") 659.66859ms ago: executing program 0 (id=872): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x21, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0}, 0x50) 659.324006ms ago: executing program 0 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4004, 0x8, 0x8002}, 0x50) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r2, 0x8}, &(0x7f0000000300)=0x8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ad000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0xfffffffd}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) 551.810735ms ago: executing program 4 (id=874): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x12, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) 551.543993ms ago: executing program 3 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='prev_state.function == kallsyms_lookup', 0x26) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}], 0x1, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010001000000000013730000850000001100000018010000646c6c2500000000002020207b1af8ff00000000bfa1000068f0c3ee2a92d9000000000701f8fff8ffffffb702000008000000b70300000000000085000000b00000009500000000400000040bcd926537bf3d9ce253da1d746230072dcb655e688de08e29576b8a92d46f66ab8f68dad0d439d68d7cbc1a5254f5c4e3d8be25dfcb7c590c14bc747434378e36ec75d877670c4ec5d188a888fe53d663414702968b1503207e79ed6f08d090930925d52d210d"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 372.077664ms ago: executing program 0 (id=876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000000380)={0x1, 0x5, @status={[0x7, 0x9, 0x0, 0x8, 0x5, 0x3]}, [0x80, 0x8, 0x8000000000000001, 0x9, 0x100000001, 0x0, 0x7, 0x9, 0x5, 0x80000000, 0x5, 0x7, 0x7, 0x1, 0x0, 0xfff, 0xffff, 0x4, 0x7, 0x37a0, 0xc, 0xd, 0x8, 0x7, 0x6, 0x5, 0xef35, 0x1, 0x5, 0x1, 0x7264, 0x3, 0x8000000000000001, 0xfff, 0x1, 0xfffffffffffffffd, 0xf, 0x6, 0xcd, 0x5, 0x9, 0x2, 0x1, 0x8, 0x1, 0x0, 0x5, 0x5, 0x8000000000000001, 0x597, 0xfffffffffffffffe, 0x3, 0x2000000000000004, 0xf, 0x4, 0x5, 0x28000000, 0x0, 0x2, 0x0, 0x4, 0x2, 0x8, 0x8]}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003a00), 0x0, 0x4c0c4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x6, 0x5, 0x7ff, 0xfffffff9, 0x1, 0x9, 0x5, r1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0xd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x67, 0x1, 0x53, 0xba, 0xfffffffd, 0x1000002, 0x8, 0xff, 0x9a, 0x46, [0x203, 0xfffffffc]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 371.854486ms ago: executing program 0 (id=877): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') pread64(r0, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000340)='./file0\x00', 0x28) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000340), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000480)="afd28d6683b24a39deb73a861b573605ea0c36094a4249b7bb0652ef9a6cc45384462928818c0ccef48de47dad03ed950ed3fa1f0a804f875a429428a7e98ad1dfd7c4899812a8070ee44e7eca1cec18afaa4943f81a271b94aeb65d330336a9ae92a05cd6706953fc2c210f15f107bfd4803212800f89cf5d2fd8bda990876640184073b12d25fa8f20f2696f16673c8b7f284ebf203a33c25ad8ec3a07b8583082714dde4ba2f73a7d938955de13d3453f3c8ace806f92504bd7cb7812a1e64eed7ba8099764ce1839d09c03d54b231e415e877ba50e30b844", 0xda, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 318.440057ms ago: executing program 2 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_auto, 0x3a}], [{@smackfsroot={'smackfsroot', 0x3d, 'ove\xf2lay\x00\xe2F\xad3\xf3\xb8\fDK{\xd7\x16\f\xf1\x18\xb7\x81\xd3\xd86\xebs7\xa4ZPb\x1a\xdc\xbb\xe8<\xd8FaSz\x98\xd5\xa8}D@\xc8\xad6\xffU;\xef_\xc8\x95\x98\xe8>\x01\xbc\n27\xc2\xd3\x9d\x9b\xa8\xc8\xf5k\a\xc8\b\a\xae<\xb1\xd5\x8d\xb2fjH\x9c\x9f]\xc8\x1c\x1ahMh8\x01\xfc\xb0\xca\x12\xea\xfdB\xd8\xd93]g\xa8~\x97\x9d\xbem\xf6\x00\x00\x00\xae\xc8\xf7\x8d\xdeFd\x9e\xcf\x96,\xde2\xc9\x1a\x1e\x0e\xe4\x9b1\x06s\x16\xd6\xf6\xda\x14\xfaC\xc7\xc8\x91\xe0\xe6<\xd9\xd6\xc0\xdbk\"\xbc[\xa7\xd3kA\x9b\x94'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, ')]!{:}\x82'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@euid_gt={'euid>', r1}}, {@fowner_lt}], 0x2f}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r2, 0xfffffffffffffffe, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040), 0x4) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000880)="fe7d1ebf8b54e2eb08cda3b5867c87b291f9efa2e72ea08efd5e3f6d395c9d1c49c7d293c08b46fc45fb1f0af40450dfa910618085a53f4ec2d92e166c44ecc6fabba8528c0263112232a0dedb2cd1cc37d7cd723fa70f2b8986365a71e8f22575a52e5be00f8d5af497a3cfe8025d686e62f716733bbf9d6215281c3d6c0c8f606da561c590cd4da6d525fcc41ae839e280b437061bf79a12f1826f26f43d4d7d05b71a81395c6cfb219287ba95a6cc7c3dc48686d86da4d10cbb0607dd33fa0ef5a7f6", 0xc4}, {&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000a80)="691b5dbbebc1c3def662be674208b7eeae", 0x11}, {&(0x7f0000000ac0)="14c348563ea68522cea961950159ee71f70ce4cc36a5d60282ec231b12334b1e4c33801a36c3e6e64f49957941f4d43473931fdfda22bad8a892b9663854ab2d57b26e505bd439", 0x47}], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x1, 0x700, 0x9, 0x3, {{0x2d, 0x4, 0x0, 0x1a, 0xb4, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x30}, {[@ssrr={0x89, 0xf, 0xa2, [@dev={0xac, 0x14, 0x14, 0x2a}, @local, @rand_addr=0x64010101]}, @cipso={0x86, 0x67, 0x3, [{0x7, 0x4, "3102"}, {0x5, 0x9, "06d24f851562e9"}, {0x1, 0xe, "a8d41c50b218c3cff269604d"}, {0x5, 0xc, "0291ce713ddb72e536e1"}, {0x1, 0xb, "ca7d3bdf292516a4b5"}, {0x7, 0x12, "69d52a8a91aeb9e9df05bdd6192fc358"}, {0x0, 0xb, "cb7ba6765566727b71"}, {0x5, 0x12, "d1306a477a61aa4ef2e19b6c86e4ddc2"}]}, @generic={0x83, 0x11, "59fbf174cd3660bb91c3f7e742a741"}, @cipso={0x86, 0x19, 0x3, [{0x5, 0x6, "1d51e763"}, {0x2, 0xd, "38464039f95f79a661a2f4"}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 215.103329ms ago: executing program 2 (id=879): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x1a0c000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) (async) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x5, {{0x5, 0xce7, 0xf4ae47949ac711b5, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) (async) r9 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r9, &(0x7f0000001480)={&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/131, 0x83}, {&(0x7f0000001300)=""/55, 0x37}, {&(0x7f0000001340)=""/19, 0x13}], 0x6, &(0x7f00000013c0)=""/135, 0x87}, 0x143) (async) open(&(0x7f0000000080)='./cgroup\x00', 0x80040, 0x4) 214.172808ms ago: executing program 4 (id=880): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x6, 0x81, 0x9, 0x1}, {0x1, 0x3, 0x5, 0x549cf7b2}, {0x6ca2, 0x15, 0x7}, {0x7fff, 0x0, 0x6, 0xb}, {0x7fff, 0x8, 0x2, 0x254}, {0x6, 0x76, 0x6, 0x81}, {0x2, 0x7f, 0x2, 0x401}]}, 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r9, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r12, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) 133.747905ms ago: executing program 2 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1900, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 36.331657ms ago: executing program 2 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) ioctl(r1, 0x3b76, &(0x7f00000003c0)="100000000000000064") setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x3, [{}, {}, {}]}, 0x54) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)={0x20, 0x16, 0x221, 0x0, 0x0, {0xe}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18008000260001031dbd7002f4dbdf252000000004006700e17abc7a48409579e67b13a6f024c29b0ffb43480a550eaa12bb6c9fcf83ca0688bb329d4b396dbbc7472e2d2801843bb1cae9e8c50376295a9430f8b5822ea7ae10183e3ce50c225e3c820df2a5690889308d514eceee6b6e9662d08349f4bd674a59cc6dd4697eb375"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x3) poll(&(0x7f0000001640)=[{r0, 0x1}], 0x1, 0xfff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 0s ago: executing program 4 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="2c7eaeaa6f83f16cbc705ce90148ec63f879d3923bd7351eb631605e0825bff9d782a5cece5a435cf96b579afc6372a6518f67e30907667132e9b362e8ae359a6b3788b76c454c1f40f735159421bf995d196da0717230e52dc0b98369cc743ce0ea6014f272c6444d9939b296263a6e962122ee94c57a5a2cf01b02cd4e4b2bdba3c75bbfaedc2b2d710d03848dc7cbf26d25fffede8955147e1605089f397e9a570ec62ff90ee154287fca5aac1b94388082b0638b38d6646a38", @ANYRESDEC=0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (rerun: 32) getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x8}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x3, 0x8000000000, 0x9, 0xebd, 0xebad, {0x5, 0x0, 0x4, 0x1, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r1, &(0x7f0000000180)='./cgroup\x00', 0x400, 0x200, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x0, r6}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="09000000010000", 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a30302c0037dee519afbc84d6cd05a87055c81362d1cc3b7a657a04da5548b2f086d25d2d4e3c25614b5a1818c6a0a23fcb8fe41dfdef4c0d58c2ef76866785cb87f98f1ec16dbb83d47a513b6a6b6e772c6a3cfbf1ff6bd40ccae5df"]) kernel console output (not intermixed with test programs): sb 6-1: Manufacturer: syz [ 157.386439][ T29] usb 6-1: SerialNumber: syz [ 157.466638][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.483446][ T29] usb 6-1: config 0 descriptor?? [ 157.729916][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 157.848404][ T29] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 158.107543][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.110648][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.285327][ T29] usb 6-1: USB disconnect, device number 15 [ 159.518459][ T7284] syzkaller0: entered promiscuous mode [ 159.520259][ T7284] syzkaller0: entered allmulticast mode [ 159.546444][ T7284] tipc: Started in network mode [ 159.546667][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.552613][ T7284] tipc: Node identity 12e0e1ad2ebc, cluster identity 4711 [ 159.555959][ T7284] tipc: Enabled bearer , priority 0 [ 159.562790][ T7283] tipc: Resetting bearer [ 159.570845][ T42] audit: type=1804 audit(1785474538.767:2): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.407" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=620 res=1 errno=0 [ 159.578433][ T7283] tipc: Disabling bearer [ 159.586173][ T42] audit: type=1800 audit(1785474538.777:3): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="cgroup.controllers" dev="tmpfs" ino=620 res=0 errno=0 [ 159.724046][ T7287] random: crng reseeded on system resumption [ 159.872527][ T7281] fuse: Bad value for 'fd' [ 160.116638][ T1041] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 160.186665][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.186918][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.272265][ T1041] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 160.275784][ T1041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.280074][ T1041] usb 5-1: config 0 has no interface number 0 [ 160.282753][ T1041] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.287589][ T1041] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.293011][ T1041] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 160.297107][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.302661][ T1041] usb 5-1: config 0 descriptor?? [ 160.310759][ T1041] ldusb 5-1:0.55: Interrupt in endpoint not found [ 160.360867][ T5754] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 160.569196][ T1041] usb 5-1: USB disconnect, device number 13 [ 161.645342][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.711761][ T7317] lo: entered allmulticast mode [ 161.715340][ T7317] lo: left allmulticast mode [ 161.722069][ T7317] bond0: entered promiscuous mode [ 161.724114][ T7317] bond_slave_0: entered promiscuous mode [ 161.726629][ T7317] bond_slave_1: entered promiscuous mode [ 161.729377][ T7317] batadv0: entered promiscuous mode [ 161.732709][ T7317] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.789344][ T7317] bond0: left promiscuous mode [ 161.791200][ T7317] bond_slave_0: left promiscuous mode [ 161.793735][ T7317] bond_slave_1: left promiscuous mode [ 161.813845][ T7317] batadv0: left promiscuous mode [ 161.984389][ T7323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.236696][ T845] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 162.241559][ T7327] program syz.3.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.266834][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.276590][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.388051][ T845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 162.392353][ T845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.395898][ T845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 162.400399][ T845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 162.408229][ T845] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 162.412187][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.415402][ T845] usb 6-1: Product: syz [ 162.417194][ T845] usb 6-1: Manufacturer: syz [ 162.419057][ T845] usb 6-1: SerialNumber: syz [ 162.424803][ T845] usb 6-1: config 0 descriptor?? [ 162.657446][ T845] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 162.912703][ T5833] usb 6-1: USB disconnect, device number 16 [ 163.272061][ T7339] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 163.378026][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.380849][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.383227][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.385648][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.389133][ T5925] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 163.392075][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.394563][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.397130][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.399906][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.402264][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.404642][ T1350] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.414075][ T1350] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 163.457288][ T7342] fido_id[7342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.462018][ T7344] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 163.550213][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.579395][ T5925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.584348][ T5925] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.590055][ T5925] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.595666][ T5925] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 163.598822][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 163.602738][ T5925] usb 7-1: Product: syz [ 163.604098][ T5925] usb 7-1: Manufacturer: syz [ 163.607857][ T5925] usb 7-1: SerialNumber: syz [ 163.747436][ T7348] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 163.749697][ T7348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.754147][ T7348] vhci_hcd vhci_hcd.0: Device attached [ 163.847952][ T5925] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.904459][ T7348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 164.106716][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 164.109684][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 164.348077][ T7349] vhci_hcd: connection reset by peer [ 164.354361][ T13] vhci_hcd vhci_hcd.3: stop threads [ 164.357640][ T13] vhci_hcd vhci_hcd.3: release socket [ 164.360209][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 166.168195][ T7371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.434'. [ 166.313652][ T7374] 9pnet_fd: p9_fd_create_tcp (7374): problem connecting socket to 127.0.0.1 [ 166.325908][ T7374] tipc: Enabled bearer , priority 10 [ 166.331736][ T5833] usb 7-1: USB disconnect, device number 8 [ 166.335104][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 166.339254][ T7374] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 166.341698][ T5833] usblp0: removed [ 166.723493][ T7381] lo: entered allmulticast mode [ 166.728763][ T7381] lo: left allmulticast mode [ 166.737540][ T7381] bond0: entered promiscuous mode [ 166.739849][ T7381] bond_slave_0: entered promiscuous mode [ 166.742514][ T7381] bond_slave_1: entered promiscuous mode [ 166.746420][ T7381] batadv0: entered promiscuous mode [ 166.753322][ T7381] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 166.758187][ T7381] bond0: left promiscuous mode [ 166.760374][ T7381] bond_slave_0: left promiscuous mode [ 166.763023][ T7381] bond_slave_1: left promiscuous mode [ 166.766328][ T7381] batadv0: left promiscuous mode [ 166.968145][ T7388] lo: entered allmulticast mode [ 166.973165][ T7388] lo: left allmulticast mode [ 166.978480][ T7388] bond0: entered promiscuous mode [ 166.980100][ T7388] bond_slave_0: entered promiscuous mode [ 166.981963][ T7388] bond_slave_1: entered promiscuous mode [ 166.984857][ T7388] batadv0: entered promiscuous mode [ 166.988333][ T7388] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 166.991418][ T7388] bond0: left promiscuous mode [ 166.993009][ T7388] bond_slave_0: left promiscuous mode [ 166.994899][ T7388] bond_slave_1: left promiscuous mode [ 166.998924][ T7388] batadv0: left promiscuous mode [ 167.146271][ T42] audit: type=1326 audit(1785474546.357:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.3.441" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7fec code=0x0 [ 167.338310][ T1350] tipc: Node number set to 1012720045 [ 168.987843][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 169.157361][ T29] usb 44-1: device descriptor read/8, error -110 [ 169.306631][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.469351][ T50] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 220, changing to 11 [ 169.476585][ T50] usb 5-1: config 1 interface 0 has no altsetting 0 [ 169.483198][ T50] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.40 [ 169.485496][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.486211][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.496347][ T50] usb 5-1: Product: syz [ 169.498360][ T50] usb 5-1: Manufacturer: 늧淄锭쩙䑱ཥ뗔茹볩ಠ㓋옛㫽堉꿿淢䍨还邽編佗讃鉂⾲㣣촎䪃㌗◥洧懽䳦냟⤒榬相ᄉ♕ﭏ∱謾җ私贊䨵뺚닲᜾ [ 169.504854][ T50] usb 5-1: SerialNumber: syz [ 169.556812][ T41] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 169.568907][ T29] usb usb44-port1: attempt power cycle [ 169.720608][ T41] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.723139][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.726182][ T41] usb 8-1: config 0 has no interface number 0 [ 169.728338][ T41] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.731597][ T41] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.735571][ T41] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.738814][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.752657][ T41] usb 8-1: config 0 descriptor?? [ 169.775228][ T41] ldusb 8-1:0.55: Interrupt in endpoint not found [ 169.897661][ T7425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.452'. [ 170.055911][ T50] usbhid 5-1:1.0: can't add hid device: -71 [ 170.061456][ T50] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 170.079750][ T50] usb 5-1: USB disconnect, device number 14 [ 170.155140][ T5833] usb 8-1: USB disconnect, device number 5 [ 170.177626][ T29] usb usb44-port1: unable to enumerate USB device [ 170.376173][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.459586][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.585592][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.594167][ T5761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.601609][ T5761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.605255][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.609309][ T5761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.612414][ T5761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.738366][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.287426][ T12] bridge_slave_1: left allmulticast mode [ 171.289809][ T12] bridge_slave_1: left promiscuous mode [ 171.292837][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.300355][ T12] bridge_slave_0: left allmulticast mode [ 171.302306][ T12] bridge_slave_0: left promiscuous mode [ 171.304073][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.418192][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.423261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.428378][ T12] bond0 (unregistering): Released all slaves [ 171.515893][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.523407][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.526824][ T7428] bridge_slave_0: entered allmulticast mode [ 171.529589][ T7428] bridge_slave_0: entered promiscuous mode [ 171.534593][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.539556][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.542599][ T7428] bridge_slave_1: entered allmulticast mode [ 171.548422][ T7428] bridge_slave_1: entered promiscuous mode [ 171.610576][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.614882][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.631071][ T7428] team0: Port device team_slave_0 added [ 171.634078][ T7428] team0: Port device team_slave_1 added [ 171.650670][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.655969][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.666702][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.681638][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.687140][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.695237][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.701888][ T5459] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.741586][ T7428] hsr_slave_0: entered promiscuous mode [ 171.743795][ T7428] hsr_slave_1: entered promiscuous mode [ 171.745851][ T7428] debugfs: 'hsr0' already exists in 'hsr' [ 171.748235][ T7428] Cannot create hsr debugfs directory [ 171.797084][ T12] hsr_slave_0: left promiscuous mode [ 171.799366][ T12] hsr_slave_1: left promiscuous mode [ 171.801380][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.803733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.808077][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.810354][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.821320][ T12] veth1_macvtap: left promiscuous mode [ 171.823151][ T12] veth0_macvtap: left promiscuous mode [ 171.825371][ T12] veth1_vlan: left promiscuous mode [ 171.828842][ T12] veth0_vlan: left promiscuous mode [ 171.975241][ T7468] sctp: [Deprecated]: syz.2.457 (pid 7468) Use of int in maxseg socket option. [ 171.975241][ T7468] Use struct sctp_assoc_value instead [ 172.032606][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.042567][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.100496][ T5459] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.104575][ T7471] lo: entered allmulticast mode [ 172.121208][ T7470] lo: left allmulticast mode [ 172.131929][ T7470] bond0: entered promiscuous mode [ 172.133547][ T7470] bond_slave_0: entered promiscuous mode [ 172.146710][ T7470] bond_slave_1: entered promiscuous mode [ 172.150446][ T7470] batadv0: entered promiscuous mode [ 172.153427][ T7470] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 172.159313][ T7470] bond0: left promiscuous mode [ 172.162484][ T7470] bond_slave_0: left promiscuous mode [ 172.164197][ T7470] bond_slave_1: left promiscuous mode [ 172.167803][ T7470] batadv0: left promiscuous mode [ 172.181932][ T7471] netlink: 80 bytes leftover after parsing attributes in process `syz.2.458'. [ 172.297148][ T7475] lo: entered allmulticast mode [ 172.305385][ T7475] lo: left allmulticast mode [ 172.311447][ T7475] bond0: entered promiscuous mode [ 172.313077][ T7475] bond_slave_0: entered promiscuous mode [ 172.314891][ T7475] bond_slave_1: entered promiscuous mode [ 172.317837][ T7475] batadv0: entered promiscuous mode [ 172.320330][ T7475] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 172.323421][ T7475] bond0: left promiscuous mode [ 172.325048][ T7475] bond_slave_0: left promiscuous mode [ 172.328977][ T7475] bond_slave_1: left promiscuous mode [ 172.331372][ T7475] batadv0: left promiscuous mode [ 172.363127][ T7480] netlink: 80 bytes leftover after parsing attributes in process `syz.2.459'. [ 172.669369][ T5761] Bluetooth: hci3: command tx timeout [ 172.780835][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 173.015331][ T7487] gretap1: entered promiscuous mode [ 173.064385][ T7493] program syz.0.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.065077][ T7428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.080100][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.084831][ T7428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.098595][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.110856][ T7428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.120605][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.125726][ T7428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.133296][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.266294][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 173.299952][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.343026][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.350011][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.352539][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.361425][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.363657][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.634979][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.669736][ T7530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.465'. [ 174.045627][ T7428] veth0_vlan: entered promiscuous mode [ 174.051528][ T7428] veth1_vlan: entered promiscuous mode [ 174.074649][ T7428] veth0_macvtap: entered promiscuous mode [ 174.099353][ T7428] veth1_macvtap: entered promiscuous mode [ 174.162426][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.181463][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.236646][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.239476][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.316835][ T7460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.319622][ T7460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.441511][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.443943][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.519463][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.521947][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.746945][ T5761] Bluetooth: hci3: command tx timeout [ 175.765771][ T7555] binder: BINDER_SET_CONTEXT_MGR already set [ 175.771660][ T7555] binder: 7554:7555 ioctl 4018620d 80000100 returned -16 [ 175.965781][ T7551] binder: BINDER_SET_CONTEXT_MGR already set [ 175.968924][ T7551] binder: 7550:7551 ioctl 4018620d 80000100 returned -16 [ 175.974530][ T7551] binder: BINDER_SET_CONTEXT_MGR already set [ 175.977730][ T7551] binder: 7550:7551 ioctl 4018620d 80000140 returned -16 [ 175.981159][ T7551] binder: 7550:7551 ioctl c0306201 0 returned -14 [ 176.010595][ T7567] program syz.3.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.836944][ T5761] Bluetooth: hci3: command tx timeout [ 176.977041][ T7577] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 177.087386][ T7580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.095765][ T7580] bond0: (slave bond1): making interface the new active one [ 177.104907][ T7580] bond0: (slave bond1): Enslaving as an active interface with an up link [ 177.657099][ T7580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.659771][ T7580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.663483][ T7580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.666094][ T7580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.675591][ T7580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.789820][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.793601][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 177.797805][ T12] bond0 (unregistering): Released all slaves [ 177.807510][ T12] bond1 (unregistering): Released all slaves [ 178.064569][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 178.244518][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 178.259838][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.267926][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 178.277314][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 178.314720][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 178.322512][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.335555][ T24] usb 7-1: Product: syz [ 178.340164][ T24] usb 7-1: Manufacturer: syz [ 178.342926][ T24] usb 7-1: SerialNumber: syz [ 178.394838][ T24] usb 7-1: config 0 descriptor?? [ 178.611432][ T24] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 178.960168][ T5833] usb 7-1: USB disconnect, device number 9 [ 179.078334][ T7618] program syz.4.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.285783][ T7624] comedi comedi3: fl512: I/O base address not correctly aligned [ 179.295535][ T7624] capability: warning: `syz.3.488' uses deprecated v2 capabilities in a way that may be insecure [ 179.306685][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.706867][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.716972][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.809740][ T7634] mmap: syz.0.491 (7634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.534285][ T7653] FAULT_INJECTION: forcing a failure. [ 180.534285][ T7653] name failslab, interval 1, probability 0, space 0, times 1 [ 180.538860][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 180.538876][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.538889][ T7653] Call Trace: [ 180.538899][ T7653] [ 180.538904][ T7653] dump_stack_lvl+0x100/0x190 [ 180.538925][ T7653] should_fail_ex.cold+0x5/0xa [ 180.538943][ T7653] should_failslab+0xc2/0x120 [ 180.538966][ T7653] __kmalloc_noprof+0xfc/0x820 [ 180.538990][ T7653] ? tomoyo_encode2+0xfb/0x3c0 [ 180.539021][ T7653] tomoyo_encode2+0xfb/0x3c0 [ 180.539050][ T7653] tomoyo_encode+0x29/0x50 [ 180.539070][ T7653] tomoyo_realpath_from_path+0x18c/0x690 [ 180.539103][ T7653] tomoyo_path_number_perm+0x23c/0x580 [ 180.539119][ T7653] ? tomoyo_path_number_perm+0x22e/0x580 [ 180.539134][ T7653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.539148][ T7653] ? get_pid_task+0x106/0x250 [ 180.539166][ T7653] ? find_held_lock+0x2b/0x80 [ 180.539179][ T7653] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 180.539208][ T7653] ? security_file_ioctl_compat+0xa6/0x230 [ 180.539224][ T7653] security_file_ioctl_compat+0xd3/0x230 [ 180.539247][ T7653] __ia32_compat_sys_ioctl+0xc2/0x360 [ 180.539267][ T7653] __do_fast_syscall_32+0xe7/0x970 [ 180.539282][ T7653] ? lockdep_hardirqs_on+0x78/0x100 [ 180.539296][ T7653] do_fast_syscall_32+0x32/0x70 [ 180.539310][ T7653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.539324][ T7653] RIP: 0023:0xf7fe7fec [ 180.539339][ T7653] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 180.539344][ T7653] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 180.539356][ T7653] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 180.539363][ T7653] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.539369][ T7653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.539376][ T7653] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.539382][ T7653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.539396][ T7653] [ 180.539422][ T7653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.619518][ T7653] syz.3.495: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.627145][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 180.627170][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.627181][ T7653] Call Trace: [ 180.627189][ T7653] [ 180.627198][ T7653] dump_stack_lvl+0x100/0x190 [ 180.627226][ T7653] warn_alloc.cold+0x94/0xa8 [ 180.627247][ T7653] ? __pfx_warn_alloc+0x10/0x10 [ 180.627271][ T7653] ? kasan_save_stack+0x3f/0x50 [ 180.627297][ T7653] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 180.627315][ T7653] ? vb2_vmalloc_alloc+0xf9/0x410 [ 180.627335][ T7653] ? __vb2_queue_alloc+0x8d5/0x1160 [ 180.627352][ T7653] ? vb2_core_create_bufs+0x5fa/0xa30 [ 180.627370][ T7653] ? vb2_create_bufs+0x40c/0x830 [ 180.627394][ T7653] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 180.627422][ T7653] ? vidioc_create_bufs+0x7d/0xf0 [ 180.627443][ T7653] ? v4l_create_bufs+0x17d/0x270 [ 180.627465][ T7653] ? video_usercopy+0x3d3/0x14c0 [ 180.627487][ T7653] ? v4l2_ioctl+0x1bd/0x250 [ 180.627512][ T7653] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 180.627537][ T7653] ? vb2_vmalloc_alloc+0x135/0x410 [ 180.627558][ T7653] __vmalloc_node_range_noprof+0x136c/0x1630 [ 180.627596][ T7653] ? vb2_vmalloc_alloc+0x135/0x410 [ 180.627625][ T7653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.627658][ T7653] ? kasan_save_track+0x14/0x30 [ 180.627681][ T7653] ? __kasan_kmalloc+0xaa/0xb0 [ 180.627721][ T7653] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 180.627743][ T7653] ? vb2_vmalloc_alloc+0x135/0x410 [ 180.627770][ T7653] vmalloc_user_noprof+0x9e/0xe0 [ 180.627798][ T7653] ? vb2_vmalloc_alloc+0x135/0x410 [ 180.627820][ T7653] vb2_vmalloc_alloc+0x135/0x410 [ 180.627840][ T7653] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 180.627864][ T7653] __vb2_queue_alloc+0x8d5/0x1160 [ 180.627896][ T7653] vb2_core_create_bufs+0x5fa/0xa30 [ 180.627921][ T7653] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 180.627948][ T7653] ? lock_acquire+0x1b9/0x370 [ 180.627980][ T7653] vb2_create_bufs+0x40c/0x830 [ 180.628008][ T7653] ? __pfx_vb2_create_bufs+0x10/0x10 [ 180.628037][ T7653] ? v4l_sanitize_colorspace+0x220/0x410 [ 180.628067][ T7653] vb2_ioctl_create_bufs+0x244/0x3e0 [ 180.628093][ T7653] ? v4l2_compat_get_user+0x883/0x11f0 [ 180.628115][ T7653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.628145][ T7653] vidioc_create_bufs+0x7d/0xf0 [ 180.628167][ T7653] v4l_create_bufs+0x17d/0x270 [ 180.628192][ T7653] __video_do_ioctl+0xb2a/0xdf0 [ 180.628221][ T7653] ? trace_kmalloc+0xeb/0x110 [ 180.628246][ T7653] ? __pfx___video_do_ioctl+0x10/0x10 [ 180.628272][ T7653] ? get_pid_task+0x106/0x250 [ 180.628295][ T7653] ? video_usercopy+0x145/0x14c0 [ 180.628324][ T7653] video_usercopy+0x3d3/0x14c0 [ 180.628351][ T7653] ? __pfx___video_do_ioctl+0x10/0x10 [ 180.628379][ T7653] ? __pfx_video_usercopy+0x10/0x10 [ 180.628422][ T7653] v4l2_ioctl+0x1bd/0x250 [ 180.628450][ T7653] v4l2_compat_ioctl32+0x20f/0x2d0 [ 180.628473][ T7653] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 180.628518][ T7653] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 180.628550][ T7653] __do_fast_syscall_32+0xe7/0x970 [ 180.628574][ T7653] ? lockdep_hardirqs_on+0x78/0x100 [ 180.628599][ T7653] do_fast_syscall_32+0x32/0x70 [ 180.628623][ T7653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.628646][ T7653] RIP: 0023:0xf7fe7fec [ 180.628668][ T7653] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 180.628675][ T7653] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 180.628708][ T7653] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 180.628720][ T7653] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.628731][ T7653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.628742][ T7653] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.628753][ T7653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.628783][ T7653] [ 180.628938][ T7653] Mem-Info: [ 180.775728][ T7653] active_anon:5749 inactive_anon:705 isolated_anon:0 [ 180.775728][ T7653] active_file:212 inactive_file:53297 isolated_file:0 [ 180.775728][ T7653] unevictable:1768 dirty:378 writeback:0 [ 180.775728][ T7653] slab_reclaimable:9737 slab_unreclaimable:52731 [ 180.775728][ T7653] mapped:24967 shmem:2297 pagetables:1616 [ 180.775728][ T7653] sec_pagetables:298 bounce:0 [ 180.775728][ T7653] kernel_misc_reclaimable:0 [ 180.775728][ T7653] free:42726 free_pcp:7534 free_cma:0 [ 180.789360][ T7653] Node 0 active_anon:628kB inactive_anon:668kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:2012kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.799862][ T7653] Node 1 active_anon:22368kB inactive_anon:2152kB active_file:848kB inactive_file:213188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99840kB dirty:1512kB writeback:0kB shmem:5652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5624kB pagetables:4452kB sec_pagetables:48kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.810283][ T7653] Node 0 DMA free:2040kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:432kB local_pcp:76kB free_cma:0kB [ 180.819303][ T7653] lowmem_reserve[]: 0 280 280 280 280 [ 180.821113][ T7653] Node 0 DMA32 free:20344kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:624kB inactive_anon:668kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:3164kB local_pcp:1156kB free_cma:0kB [ 180.831250][ T7653] lowmem_reserve[]: 0 0 0 0 0 [ 180.832710][ T7653] Node 1 DMA32 free:152980kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22368kB inactive_anon:2152kB active_file:848kB inactive_file:213188kB unevictable:3536kB writepending:1512kB zspages:2996kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:26284kB local_pcp:11708kB free_cma:0kB [ 180.845734][ T7653] lowmem_reserve[]: 0 0 0 0 0 [ 180.847373][ T7653] Node 0 DMA: 116*4kB (UM) 15*8kB (UM) 21*16kB (UM) 11*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2040kB [ 180.851864][ T7653] Node 0 DMA32: 192*4kB (UME) 51*8kB (UME) 88*16kB (UME) 85*32kB (UME) 51*64kB (UME) 20*128kB (UME) 8*256kB (UM) 4*512kB (UME) 3*1024kB (M) 1*2048kB (U) 0*4096kB = 20344kB [ 180.859140][ T7653] Node 1 DMA32: 3*4kB (ME) 235*8kB (UME) 193*16kB (UME) 428*32kB (UME) 182*64kB (UME) 78*128kB (UME) 52*256kB (UME) 18*512kB (UME) 6*1024kB (UME) 3*2048kB (UME) 19*4096kB (UM) = 152948kB [ 180.865001][ T7653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.868047][ T7653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.870940][ T7653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.873906][ T7653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.876958][ T7653] 56088 total pagecache pages [ 180.878465][ T7653] 285 pages in swap cache [ 180.881328][ T7653] Free swap = 118928kB [ 180.882685][ T7653] Total swap = 124996kB [ 180.884023][ T7653] 524155 pages RAM [ 180.885233][ T7653] 0 pages HighMem/MovableOnly [ 180.886816][ T7653] 211537 pages reserved [ 180.888265][ T7653] 0 pages cma reserved [ 181.086858][ T7660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.261182][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.271824][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.347458][ T7669] netlink: 80 bytes leftover after parsing attributes in process `syz.2.498'. [ 181.459817][ T7656] gretap1: left promiscuous mode [ 181.467618][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.472169][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.476286][ T7664] lo: entered allmulticast mode [ 181.480216][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.486351][ T7666] lo: left allmulticast mode [ 181.494832][ T7667] bond0: entered promiscuous mode [ 181.498933][ T7667] bond_slave_0: entered promiscuous mode [ 181.503241][ T7667] bond_slave_1: entered promiscuous mode [ 181.506079][ T7667] batadv0: entered promiscuous mode [ 181.509230][ T7667] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.512251][ T7667] bond0: left promiscuous mode [ 181.513880][ T7667] bond_slave_0: left promiscuous mode [ 181.515683][ T7667] bond_slave_1: left promiscuous mode [ 181.518482][ T7667] batadv0: left promiscuous mode [ 181.546680][ T7460] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.786823][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.839186][ T7679] program syz.0.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.926631][ T24] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 182.088850][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.091532][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.094781][ T24] usb 7-1: config 0 has no interface number 0 [ 182.097000][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.100503][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 182.104093][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 182.107843][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.110761][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.131404][ T24] usb 7-1: config 0 descriptor?? [ 182.140965][ T24] ldusb 7-1:0.55: Interrupt in endpoint not found [ 182.347379][ T7686] lo: entered allmulticast mode [ 182.350672][ T7686] lo: left allmulticast mode [ 182.358299][ T7686] bond0: entered promiscuous mode [ 182.360611][ T7686] bond_slave_0: entered promiscuous mode [ 182.363321][ T7686] bond_slave_1: entered promiscuous mode [ 182.368135][ T7686] batadv0: entered promiscuous mode [ 182.371965][ T7686] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 182.375491][ T5833] usb 7-1: USB disconnect, device number 10 [ 182.379690][ T7686] bond0: left promiscuous mode [ 182.382089][ T7686] bond_slave_0: left promiscuous mode [ 182.384607][ T7686] bond_slave_1: left promiscuous mode [ 182.388179][ T7686] batadv0: left promiscuous mode [ 182.410640][ T7687] netlink: 80 bytes leftover after parsing attributes in process `syz.4.505'. [ 183.394542][ T7701] lo: entered allmulticast mode [ 183.398575][ T7701] lo: left allmulticast mode [ 183.404876][ T7701] bond0: entered promiscuous mode [ 183.406726][ T7701] bond_slave_0: entered promiscuous mode [ 183.408644][ T7701] bond_slave_1: entered promiscuous mode [ 183.451574][ T7701] batadv0: entered promiscuous mode [ 183.461032][ T7701] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 183.483105][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.488275][ T7702] netlink: 80 bytes leftover after parsing attributes in process `syz.3.509'. [ 183.488309][ T7701] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 183.493002][ T7701] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 183.499593][ T7701] bond0: left promiscuous mode [ 183.501189][ T7701] bond_slave_0: left promiscuous mode [ 183.503126][ T7701] bond_slave_1: left promiscuous mode [ 183.507822][ T7701] batadv0: left promiscuous mode [ 183.518161][ T7706] FAULT_INJECTION: forcing a failure. [ 183.518161][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 183.523960][ T7706] CPU: 3 UID: 0 PID: 7706 Comm: syz.4.511 Not tainted syzkaller #0 PREEMPT(full) [ 183.523988][ T7706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.523996][ T7706] Call Trace: [ 183.524000][ T7706] [ 183.524005][ T7706] dump_stack_lvl+0x100/0x190 [ 183.524022][ T7706] should_fail_ex.cold+0x5/0xa [ 183.524035][ T7706] should_failslab+0xc2/0x120 [ 183.524052][ T7706] kmem_cache_alloc_noprof+0x91/0x6a0 [ 183.524067][ T7706] ? __anon_vma_prepare+0x344/0x5e0 [ 183.524081][ T7706] __anon_vma_prepare+0x344/0x5e0 [ 183.524091][ T7706] ? __pfx___pte_alloc+0x10/0x10 [ 183.524107][ T7706] __vmf_anon_prepare+0x11f/0x250 [ 183.524124][ T7706] do_anonymous_page+0x51b/0x2080 [ 183.524139][ T7706] __handle_mm_fault+0x1d2c/0x2a00 [ 183.524153][ T7706] ? mt_find+0x45e/0x8e0 [ 183.524168][ T7706] ? __pfx___handle_mm_fault+0x10/0x10 [ 183.524178][ T7706] ? __pfx_mt_find+0x10/0x10 [ 183.524200][ T7706] ? find_vma+0xbf/0x140 [ 183.524215][ T7706] ? __pfx_find_vma+0x10/0x10 [ 183.524230][ T7706] handle_mm_fault+0x37b/0xa30 [ 183.524243][ T7706] do_user_addr_fault+0x74c/0x12f0 [ 183.524263][ T7706] exc_page_fault+0x6f/0xd0 [ 183.524277][ T7706] asm_exc_page_fault+0x26/0x30 [ 183.524288][ T7706] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 183.524306][ T7706] Code: 89 ee 48 89 ef e8 31 d0 ed fc 4d 85 ff 75 26 e8 47 d6 ed fc 89 de 4c 89 e7 e8 cd 69 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 21 d6 ed fc 48 89 d8 5b 5d 41 [ 183.524316][ T7706] RSP: 0018:ffffc900073efc10 EFLAGS: 00050246 [ 183.524326][ T7706] RAX: 0000000000000001 RBX: 0000000000000035 RCX: 0000000000000035 [ 183.524333][ T7706] RDX: 0000000000000001 RSI: ffff88805098d000 RDI: 0000000080000140 [ 183.524339][ T7706] RBP: 0000000080000140 R08: 0000000000000000 R09: ffffed100a131a06 [ 183.524346][ T7706] R10: ffff88805098d034 R11: 0000000000000000 R12: ffff88805098d000 [ 183.524352][ T7706] R13: 0000000080000175 R14: 00007ffffffff000 R15: 0000000000000000 [ 183.524367][ T7706] syslog_print_all+0x1cd/0x3f0 [ 183.524388][ T7706] ? __pfx_syslog_print_all+0x10/0x10 [ 183.524410][ T7706] ? ksys_write+0x190/0x250 [ 183.524425][ T7706] do_syslog+0x350/0x6d0 [ 183.524436][ T7706] ? __pfx_do_syslog+0x10/0x10 [ 183.524447][ T7706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.524461][ T7706] ? __fget_files+0x21f/0x3d0 [ 183.524491][ T7706] ? fput+0x79/0x100 [ 183.524516][ T7706] ? ksys_write+0x1ac/0x250 [ 183.524526][ T7706] ? __pfx_ksys_write+0x10/0x10 [ 183.524537][ T7706] __ia32_sys_syslog+0x73/0xb0 [ 183.524548][ T7706] ? lockdep_hardirqs_on+0x78/0x100 [ 183.524561][ T7706] __do_fast_syscall_32+0xe7/0x970 [ 183.524574][ T7706] ? lockdep_hardirqs_on+0x78/0x100 [ 183.524588][ T7706] do_fast_syscall_32+0x32/0x70 [ 183.524602][ T7706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.524615][ T7706] RIP: 0023:0xf70befec [ 183.524629][ T7706] Code: Unable to access opcode bytes at 0xf70befc2. [ 183.524633][ T7706] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000067 [ 183.524643][ T7706] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 183.524650][ T7706] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.524656][ T7706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.524662][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.524668][ T7706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.524681][ T7706] [ 183.784803][ T7717] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 183.801788][ T7717] bond1: entered promiscuous mode [ 183.807012][ T7717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.867708][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.714552][ T7748] lo: entered allmulticast mode [ 184.718305][ T7748] lo: left allmulticast mode [ 184.719061][ T7743] Invalid ELF header magic: != ELF [ 184.722965][ T7748] bond0: entered promiscuous mode [ 184.724659][ T7748] bond_slave_0: entered promiscuous mode [ 184.726731][ T7748] bond_slave_1: entered promiscuous mode [ 184.729504][ T7748] batadv0: entered promiscuous mode [ 184.730792][ T7743] overlayfs: overlapping lowerdir path [ 184.732020][ T7748] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 184.738112][ T7748] bond0: left promiscuous mode [ 184.739921][ T7748] bond_slave_0: left promiscuous mode [ 184.741800][ T7748] bond_slave_1: left promiscuous mode [ 184.746914][ T7748] batadv0: left promiscuous mode [ 184.773517][ T7754] netlink: 80 bytes leftover after parsing attributes in process `syz.0.521'. [ 185.105159][ T7760] Invalid logical block size (63) [ 185.287102][ T7764] syzkaller0: entered promiscuous mode [ 185.288958][ T7764] syzkaller0: entered allmulticast mode [ 185.585191][ T7781] FAULT_INJECTION: forcing a failure. [ 185.585191][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 185.618865][ T7781] CPU: 2 UID: 0 PID: 7781 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) [ 185.618883][ T7781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.618890][ T7781] Call Trace: [ 185.618894][ T7781] [ 185.618899][ T7781] dump_stack_lvl+0x100/0x190 [ 185.618918][ T7781] should_fail_ex.cold+0x5/0xa [ 185.618931][ T7781] should_failslab+0xc2/0x120 [ 185.618947][ T7781] __kmalloc_noprof+0xfc/0x820 [ 185.618961][ T7781] ? rcu_is_watching+0x12/0xc0 [ 185.618975][ T7781] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.618994][ T7781] tomoyo_realpath_from_path+0xb6/0x690 [ 185.619013][ T7781] tomoyo_path_number_perm+0x23c/0x580 [ 185.619026][ T7781] ? tomoyo_path_number_perm+0x22e/0x580 [ 185.619041][ T7781] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.619055][ T7781] ? get_pid_task+0x106/0x250 [ 185.619080][ T7781] ? find_held_lock+0x2b/0x80 [ 185.619094][ T7781] ? __fget_files+0x215/0x3d0 [ 185.619103][ T7781] ? hook_file_ioctl_common+0x140/0x440 [ 185.619117][ T7781] ? __fget_files+0x215/0x3d0 [ 185.619129][ T7781] ? __fget_files+0x21f/0x3d0 [ 185.619141][ T7781] security_file_ioctl_compat+0xd3/0x230 [ 185.619156][ T7781] __ia32_compat_sys_ioctl+0xc2/0x360 [ 185.619174][ T7781] __do_fast_syscall_32+0xe7/0x970 [ 185.619188][ T7781] ? lockdep_hardirqs_on+0x78/0x100 [ 185.619201][ T7781] do_fast_syscall_32+0x32/0x70 [ 185.619215][ T7781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.619230][ T7781] RIP: 0023:0xf70befec [ 185.619242][ T7781] Code: Unable to access opcode bytes at 0xf70befc2. [ 185.619247][ T7781] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 185.619258][ T7781] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400452c9 [ 185.619265][ T7781] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.619272][ T7781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.619278][ T7781] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.619284][ T7781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.619298][ T7781] [ 185.619302][ T7781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.722393][ T7787] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 185.882638][ T7792] lo: entered allmulticast mode [ 185.885154][ T7792] lo: left allmulticast mode [ 185.895865][ T7792] bond0: entered promiscuous mode [ 185.898344][ T7792] bond_slave_0: entered promiscuous mode [ 185.904166][ T7792] bond_slave_1: entered promiscuous mode [ 185.909678][ T7792] batadv0: entered promiscuous mode [ 185.913316][ T7796] overlayfs: workdir and upperdir must be separate subtrees [ 185.913508][ T7792] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 185.919943][ T7792] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 185.923749][ T7792] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 185.928100][ T7792] bond0: left promiscuous mode [ 185.929523][ T7792] bond_slave_0: left promiscuous mode [ 185.931441][ T7792] bond_slave_1: left promiscuous mode [ 185.934034][ T7792] batadv0: left promiscuous mode [ 185.941221][ T7797] netlink: 80 bytes leftover after parsing attributes in process `syz.3.531'. [ 185.948952][ T7794] tipc: Enabled bearer , priority 10 [ 185.952281][ T7793] tipc: Resetting bearer [ 185.961957][ T7793] tipc: Disabling bearer [ 186.020571][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 186.107865][ T5894] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 186.258320][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.261755][ T5894] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.266006][ T5894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.271068][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.380895][ T7816] syz.4.540 uses obsolete (PF_INET,SOCK_PACKET) [ 186.400800][ T5925] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 186.479998][ T5894] usb 7-1: usb_control_msg returned -32 [ 186.482023][ T5894] usbtmc 7-1:16.0: can't read capabilities [ 186.568343][ T5925] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 186.571280][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.574538][ T5925] usb 5-1: config 0 has no interface number 0 [ 186.577238][ T5925] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.580807][ T5925] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 186.584290][ T5925] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 186.587583][ T5925] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 186.590677][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.595011][ T5925] usb 5-1: config 0 descriptor?? [ 186.599101][ T5925] ldusb 5-1:0.55: Interrupt in endpoint not found [ 186.833899][ T50] usb 5-1: USB disconnect, device number 15 [ 186.842115][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 186.982325][ T7828] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.108377][ T5925] usb 7-1: USB disconnect, device number 11 [ 187.199305][ T7833] binder: BINDER_SET_CONTEXT_MGR already set [ 187.201315][ T7833] binder: 7832:7833 ioctl 4018620d 80000100 returned -16 [ 187.205697][ T7833] binder: BINDER_SET_CONTEXT_MGR already set [ 187.207914][ T7833] binder: 7832:7833 ioctl 4018620d 80000140 returned -16 [ 187.641748][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.078764][ T7842] FAULT_INJECTION: forcing a failure. [ 188.078764][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 188.084558][ T7842] CPU: 2 UID: 0 PID: 7842 Comm: syz.3.548 Not tainted syzkaller #0 PREEMPT(full) [ 188.084581][ T7842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.084591][ T7842] Call Trace: [ 188.084597][ T7842] [ 188.084604][ T7842] dump_stack_lvl+0x100/0x190 [ 188.084631][ T7842] should_fail_ex.cold+0x5/0xa [ 188.084651][ T7842] should_failslab+0xc2/0x120 [ 188.084676][ T7842] kmem_cache_alloc_noprof+0x91/0x6a0 [ 188.084706][ T7842] ? mas_preallocate+0x1105/0x14a0 [ 188.084736][ T7842] mas_preallocate+0x1105/0x14a0 [ 188.084769][ T7842] ? __pfx_mas_preallocate+0x10/0x10 [ 188.084800][ T7842] ? vm_area_alloc+0x1f/0x160 [ 188.084818][ T7842] ? lockdep_init_map_type+0x5c/0x250 [ 188.084837][ T7842] __mmap_region+0x1230/0x2db0 [ 188.084857][ T7842] ? __pfx___mmap_region+0x10/0x10 [ 188.084872][ T7842] ? find_held_lock+0x2b/0x80 [ 188.084934][ T7842] ? find_held_lock+0x2b/0x80 [ 188.084955][ T7842] ? is_bpf_text_address+0x8a/0x1a0 [ 188.084978][ T7842] ? is_bpf_text_address+0x8a/0x1a0 [ 188.085057][ T7842] mmap_region+0x35d/0x620 [ 188.085081][ T7842] ? __pfx_mmap_region+0x10/0x10 [ 188.085100][ T7842] ? shmem_get_unmapped_area+0x141/0x960 [ 188.085129][ T7842] ? cap_mmap_addr+0x4b/0x120 [ 188.085148][ T7842] ? bpf_lsm_mmap_addr+0x9/0x30 [ 188.085164][ T7842] ? security_mmap_addr+0x71/0x1e0 [ 188.085188][ T7842] ? __get_unmapped_area+0x255/0x3e0 [ 188.085214][ T7842] do_mmap+0xc63/0x12f0 [ 188.085243][ T7842] ? __pfx_do_mmap+0x10/0x10 [ 188.085268][ T7842] ? __pfx_down_write_killable+0x10/0x10 [ 188.085297][ T7842] vm_mmap_pgoff+0x29e/0x470 [ 188.085327][ T7842] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 188.085350][ T7842] ? __mutex_unlock_slowpath+0x35d/0x930 [ 188.085376][ T7842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.085401][ T7842] ksys_mmap_pgoff+0xe4/0x610 [ 188.085425][ T7842] ? fput+0x79/0x100 [ 188.085444][ T7842] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 188.085466][ T7842] ? ksys_write+0x1ac/0x250 [ 188.085481][ T7842] ? __pfx_ksys_write+0x10/0x10 [ 188.085501][ T7842] __do_fast_syscall_32+0xe7/0x970 [ 188.085538][ T7842] ? lockdep_hardirqs_on+0x78/0x100 [ 188.085562][ T7842] do_fast_syscall_32+0x32/0x70 [ 188.085585][ T7842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.085608][ T7842] RIP: 0023:0xf7fe7fec [ 188.085628][ T7842] Code: Unable to access opcode bytes at 0xf7fe7fc2. [ 188.085636][ T7842] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 188.085654][ T7842] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 188.085665][ T7842] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 188.085676][ T7842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.085686][ T7842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.085702][ T7842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.085725][ T7842] [ 189.061228][ T7857] syz.2.550 (7857) used greatest stack depth: 19104 bytes left [ 189.706121][ T7875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.516329][ T7891] tipc: Started in network mode [ 190.518797][ T7891] tipc: Node identity a291ca112b5f, cluster identity 4711 [ 190.522025][ T7891] tipc: Enabled bearer , priority 10 [ 190.578452][ T7889] tipc: Resetting bearer [ 190.600069][ T7889] tipc: Disabling bearer [ 190.674092][ T7886] syzkaller0: entered promiscuous mode [ 190.678674][ T7886] syzkaller0: entered allmulticast mode [ 190.936908][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 191.927068][ T1482] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 192.034678][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 192.088662][ T1482] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.092305][ T1482] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.096255][ T1482] usb 9-1: config 0 has no interface number 0 [ 192.099057][ T1482] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.103691][ T1482] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 192.108617][ T1482] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 192.113059][ T1482] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.117067][ T1482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.122483][ T1482] usb 9-1: config 0 descriptor?? [ 192.125666][ T7909] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.131218][ T1482] ldusb 9-1:0.55: Interrupt in endpoint not found [ 192.342926][ T1482] usb 9-1: USB disconnect, device number 2 [ 192.346851][ T5940] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 192.496627][ T5940] usb 8-1: Using ep0 maxpacket: 32 [ 192.499528][ T5940] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 192.502281][ T5940] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 192.505026][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.508167][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.511189][ T5940] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.514220][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 1024 [ 192.518448][ T5940] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 192.521603][ T5940] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.525699][ T5940] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.529191][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.535570][ T5940] usb 8-1: config 0 descriptor?? [ 192.696686][ T50] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.742058][ T5940] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 192.750097][ T5940] usb 8-1: USB disconnect, device number 6 [ 192.759506][ T5940] usblp0: removed [ 192.858152][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.861739][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.864811][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.869010][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.871913][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.876177][ T50] usb 5-1: config 0 descriptor?? [ 193.216533][ T5940] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 193.313243][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 193.315243][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 193.322372][ T50] usb 5-1: USB disconnect, device number 16 [ 193.324635][ T7925] binder: BINDER_SET_CONTEXT_MGR already set [ 193.329917][ T7925] binder: 7924:7925 ioctl 4018620d 800002c0 returned -16 [ 193.379011][ T5940] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.382066][ T5940] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.384816][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.387776][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.390757][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 64 [ 193.394339][ T5940] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.399171][ T5940] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.402011][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.406781][ T5940] usb 8-1: config 0 descriptor?? [ 193.409335][ T7916] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.616255][ T5940] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 193.790200][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.792146][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.795697][ T24] usb 8-1: USB disconnect, device number 7 [ 193.809169][ T24] usblp0: removed [ 194.119897][ T7939] binder: BINDER_SET_CONTEXT_MGR already set [ 194.122435][ T7939] binder: 7938:7939 ioctl 4018620d 80000100 returned -16 [ 194.127076][ T7939] binder: BINDER_SET_CONTEXT_MGR already set [ 194.129526][ T7939] binder: 7938:7939 ioctl 4018620d 80000140 returned -16 [ 195.146617][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 195.308157][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 195.310827][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.313965][ T24] usb 9-1: config 0 has no interface number 0 [ 195.315891][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.319568][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 195.323160][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.326024][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.330029][ T24] usb 9-1: config 0 descriptor?? [ 195.332582][ T7954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.336404][ T24] ldusb 9-1:0.55: Interrupt in endpoint not found [ 195.466567][ T5940] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 195.571820][ T24] usb 9-1: USB disconnect, device number 3 [ 195.618048][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.622043][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.625667][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.633318][ T5940] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.639576][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.646118][ T5940] usb 7-1: config 0 descriptor?? [ 196.080192][ T5940] usbhid 7-1:0.0: can't add hid device: -71 [ 196.083195][ T5940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.090482][ T5940] usb 7-1: USB disconnect, device number 12 [ 196.214122][ T7969] lo: entered allmulticast mode [ 196.219114][ T7969] lo: left allmulticast mode [ 196.225803][ T7969] bond0: entered promiscuous mode [ 196.228870][ T7969] bond_slave_0: entered promiscuous mode [ 196.231331][ T7969] bond_slave_1: entered promiscuous mode [ 196.234859][ T7969] batadv0: entered promiscuous mode [ 196.239046][ T7969] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 196.242496][ T7969] bond0: left promiscuous mode [ 196.244490][ T7969] bond_slave_0: left promiscuous mode [ 196.247065][ T7969] bond_slave_1: left promiscuous mode [ 196.250282][ T7969] batadv0: left promiscuous mode [ 196.283436][ T7970] netlink: 80 bytes leftover after parsing attributes in process `syz.2.586'. [ 196.821495][ T7979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.589'. [ 196.949941][ T7978] binder: BINDER_SET_CONTEXT_MGR already set [ 196.953070][ T7978] binder: 7977:7978 ioctl 4018620d 80000100 returned -16 [ 196.969933][ T7978] binder: BINDER_SET_CONTEXT_MGR already set [ 196.972017][ T7978] binder: 7977:7978 ioctl 4018620d 80000140 returned -16 [ 197.016720][ T5753] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 197.189797][ T5753] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.193669][ T5753] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.199215][ T5753] usb 8-1: config 0 has no interface number 0 [ 197.201993][ T5753] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.206969][ T5753] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 197.211769][ T5753] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 197.216983][ T5753] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.220831][ T5753] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.230629][ T5753] usb 8-1: config 0 descriptor?? [ 197.234746][ T7974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.240525][ T5753] ldusb 8-1:0.55: Interrupt in endpoint not found [ 197.462469][ T5753] usb 8-1: USB disconnect, device number 8 [ 197.784790][ T7984] Bluetooth: MGMT ver 1.23 [ 197.793063][ T7984] FAULT_INJECTION: forcing a failure. [ 197.793063][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 197.798680][ T7984] CPU: 3 UID: 0 PID: 7984 Comm: syz.0.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.798708][ T7984] Tainted: [L]=SOFTLOCKUP [ 197.798715][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.798726][ T7984] Call Trace: [ 197.798740][ T7984] [ 197.798747][ T7984] dump_stack_lvl+0x100/0x190 [ 197.798775][ T7984] should_fail_ex.cold+0x5/0xa [ 197.798798][ T7984] should_failslab+0xc2/0x120 [ 197.798824][ T7984] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 197.798851][ T7984] ? __alloc_skb+0x140/0x710 [ 197.798878][ T7984] __alloc_skb+0x140/0x710 [ 197.798900][ T7984] ? __alloc_skb+0x5b7/0x710 [ 197.798922][ T7984] ? __pfx___alloc_skb+0x10/0x10 [ 197.798941][ T7984] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.798967][ T7984] create_monitor_ctrl_close+0xc2/0x500 [ 197.798993][ T7984] hci_sock_release+0xc5/0x590 [ 197.799017][ T7984] __sock_release+0xb3/0x260 [ 197.799041][ T7984] ? __pfx_sock_close+0x10/0x10 [ 197.799063][ T7984] sock_close+0x1c/0x30 [ 197.799085][ T7984] __fput+0x3ff/0xb50 [ 197.799109][ T7984] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.799132][ T7984] task_work_run+0x150/0x240 [ 197.799159][ T7984] ? __pfx_task_work_run+0x10/0x10 [ 197.799191][ T7984] exit_to_user_mode_loop+0x1d8/0x6f0 [ 197.799210][ T7984] ? rcu_is_watching+0x12/0xc0 [ 197.799235][ T7984] __do_fast_syscall_32+0x701/0x970 [ 197.799259][ T7984] ? lockdep_hardirqs_on+0x78/0x100 [ 197.799282][ T7984] do_fast_syscall_32+0x32/0x70 [ 197.799306][ T7984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.799328][ T7984] RIP: 0023:0xf70aefec [ 197.799350][ T7984] Code: Unable to access opcode bytes at 0xf70aefc2. [ 197.799358][ T7984] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 197.799376][ T7984] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffffff [ 197.799387][ T7984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.799399][ T7984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.799409][ T7984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.799418][ T7984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.799444][ T7984] [ 199.874666][ T5761] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 199.881792][ T8040] input: syz0 as /devices/virtual/input/input6 [ 199.885249][ T8042] Invalid ELF header magic: != ELF [ 199.888366][ T8042] overlayfs: overlapping lowerdir path [ 199.900582][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.952534][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.989310][ T8046] ip6_vti0: entered promiscuous mode [ 200.001552][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 201.284651][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.603'. [ 201.712895][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 202.755708][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 203.060624][ T8091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.131623][ T8091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.224448][ T8091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.239068][ T8084] binder: BINDER_SET_CONTEXT_MGR already set [ 203.241842][ T8084] binder: 8083:8084 ioctl 4018620d 80000100 returned -16 [ 203.259199][ T8084] binder: BINDER_SET_CONTEXT_MGR already set [ 203.262550][ T8084] binder: 8083:8084 ioctl 4018620d 80000140 returned -16 [ 203.313859][ T8091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.398662][ T7460] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.421549][ T7460] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.426679][ T7460] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.456773][ T7460] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.655429][ T8101] syzkaller0: entered promiscuous mode [ 203.657873][ T8101] syzkaller0: entered allmulticast mode [ 203.670502][ T8099] program syz.2.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.700962][ T8103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.801774][ T8104] Invalid ELF header magic: != ELF [ 203.807173][ T8104] overlayfs: overlapping lowerdir path [ 203.936997][ T5833] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 204.095061][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 204.099693][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.103495][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 204.110863][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 204.129721][ T5833] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 204.133563][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.137179][ T5833] usb 8-1: Product: syz [ 204.138957][ T5833] usb 8-1: Manufacturer: syz [ 204.145209][ T5833] usb 8-1: SerialNumber: syz [ 204.202021][ T5833] usb 8-1: config 0 descriptor?? [ 204.375761][ T8114] Invalid ELF header magic: != ELF [ 204.379011][ T8114] overlayfs: overlapping lowerdir path [ 204.452645][ T5833] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 204.867901][ T5833] usb 8-1: USB disconnect, device number 9 [ 205.029227][ T8128] netlink: 64 bytes leftover after parsing attributes in process `syz.4.620'. [ 206.596573][ T5761] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.831668][ T8138] program syz.2.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.266581][ T1482] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 207.617875][ T1482] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.620649][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.623908][ T1482] usb 7-1: config 0 has no interface number 0 [ 207.625972][ T1482] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 207.629713][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.634200][ T1482] usb 7-1: config 0 descriptor?? [ 207.639864][ T1482] ldusb 7-1:0.55: Interrupt in endpoint not found [ 207.737282][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 207.854211][ T5753] usb 7-1: USB disconnect, device number 13 [ 208.504772][ T8158] binder: BINDER_SET_CONTEXT_MGR already set [ 208.507476][ T8158] binder: 8157:8158 ioctl 4018620d 80000100 returned -16 [ 208.514827][ T8158] binder: BINDER_SET_CONTEXT_MGR already set [ 208.517204][ T8158] binder: 8157:8158 ioctl 4018620d 80000140 returned -16 [ 208.616205][ T8166] program syz.2.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.453922][ T8172] Invalid ELF header magic: != ELF [ 209.457051][ T8172] overlayfs: overlapping lowerdir path [ 210.427302][ T8179] program syz.2.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.695162][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 212.123969][ T8237] program syz.0.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.356638][ T5940] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 212.548157][ T5940] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.550880][ T5940] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.554122][ T5940] usb 8-1: config 0 has no interface number 0 [ 212.556207][ T5940] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.559822][ T5940] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 212.564362][ T5940] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.567388][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.574096][ T5940] usb 8-1: config 0 descriptor?? [ 212.578276][ T8221] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.585872][ T5940] ldusb 8-1:0.55: Interrupt in endpoint not found [ 212.870837][ T5940] usb 8-1: USB disconnect, device number 10 [ 213.895215][ T8267] FAULT_INJECTION: forcing a failure. [ 213.895215][ T8267] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 213.905565][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.656'. [ 213.905587][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.4.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.905627][ T8267] Tainted: [L]=SOFTLOCKUP [ 213.905633][ T8267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.905640][ T8267] Call Trace: [ 213.905644][ T8267] [ 213.905648][ T8267] dump_stack_lvl+0x100/0x190 [ 213.905667][ T8267] should_fail_ex.cold+0x5/0xa [ 213.905686][ T8267] strncpy_from_user+0x3b/0x2d0 [ 213.905713][ T8267] do_getname+0x78/0x390 [ 213.905737][ T8267] user_path_at+0x26/0x60 [ 213.905759][ T8267] __ia32_sys_mount+0x1fb/0x310 [ 213.905773][ T8267] ? __pfx___ia32_sys_mount+0x10/0x10 [ 213.905785][ T8267] ? ksys_write+0x1ac/0x250 [ 213.905799][ T8267] ? __pfx_ksys_write+0x10/0x10 [ 213.905819][ T8267] __do_fast_syscall_32+0xe7/0x970 [ 213.905841][ T8267] ? lockdep_hardirqs_on+0x78/0x100 [ 213.905863][ T8267] do_fast_syscall_32+0x32/0x70 [ 213.905879][ T8267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.905895][ T8267] RIP: 0023:0xf70befec [ 213.905915][ T8267] Code: Unable to access opcode bytes at 0xf70befc2. [ 213.905922][ T8267] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 213.905939][ T8267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000700 [ 213.905950][ T8267] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 213.905960][ T8267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.905969][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.905975][ T8267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.905996][ T8267] [ 214.251750][ T8275] syzkaller0: entered promiscuous mode [ 214.254552][ T8275] syzkaller0: entered allmulticast mode [ 215.406571][ T845] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 215.592205][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.601294][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.605396][ T845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.610977][ T845] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.615085][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.621326][ T845] usb 8-1: config 0 descriptor?? [ 215.875135][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 216.075502][ T845] usbhid 8-1:0.0: can't add hid device: -71 [ 216.078025][ T845] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 216.084281][ T845] usb 8-1: USB disconnect, device number 11 [ 216.086755][ T6067] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 216.276699][ T6067] usb 7-1: Using ep0 maxpacket: 16 [ 216.280681][ T6067] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.285046][ T6067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.291598][ T6067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.295902][ T6067] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.301244][ T6067] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.310416][ T6067] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.314498][ T6067] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.318174][ T6067] usb 7-1: Manufacturer: syz [ 216.324716][ T6067] usb 7-1: config 0 descriptor?? [ 216.586869][ T6067] rc_core: IR keymap rc-hauppauge not found [ 216.588813][ T6067] Registered IR keymap rc-empty [ 216.594781][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.626584][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.658704][ T6067] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 216.667848][ T6067] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 216.691365][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.714809][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.718065][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.747954][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.768500][ T41] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 216.771640][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.796943][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.816888][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.853613][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.886986][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.916929][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.948362][ T6067] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 216.954216][ T41] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 216.958430][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.962696][ T41] usb 5-1: config 0 has no interface number 0 [ 216.965448][ T41] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.970523][ T41] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 216.976419][ T41] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 216.988043][ T6067] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.992170][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.998005][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 217.001314][ T6067] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.038450][ T41] usb 5-1: config 0 descriptor?? [ 217.040842][ T6067] usb 7-1: USB disconnect, device number 14 [ 217.048421][ T8314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.103735][ T41] ldusb 5-1:0.55: Interrupt in endpoint not found [ 217.184741][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 217.197463][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.205115][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 217.211500][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 217.230156][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 217.239095][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.243220][ T24] usb 9-1: Product: syz [ 217.245193][ T24] usb 9-1: Manufacturer: syz [ 217.253081][ T24] usb 9-1: SerialNumber: syz [ 217.277358][ T24] usb 9-1: config 0 descriptor?? [ 217.284559][ T5894] usb 5-1: USB disconnect, device number 17 [ 217.535750][ T24] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 217.827499][ T5940] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 217.861535][ T29] usb 9-1: USB disconnect, device number 4 [ 217.978246][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.982868][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.987218][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.992510][ T5940] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.996179][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.001708][ T5940] usb 7-1: config 0 descriptor?? [ 218.456525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.460445][ T5940] usbhid 7-1:0.0: can't add hid device: -71 [ 218.467155][ T5940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 218.496351][ T5940] usb 7-1: USB disconnect, device number 15 [ 219.668853][ T8366] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.690'. [ 219.672698][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 219.676069][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 219.680247][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 219.685606][ T8366] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.816688][ T42] audit: type=1804 audit(1785474599.197:5): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.692" name="bus" dev="ramfs" ino=19994 res=1 errno=0 [ 220.842739][ T42] audit: type=1804 audit(1785474599.207:6): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.692" name="bus" dev="ramfs" ino=19994 res=1 errno=0 [ 221.094882][ T8382] FAULT_INJECTION: forcing a failure. [ 221.094882][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.108699][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.0.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.108732][ T8382] Tainted: [L]=SOFTLOCKUP [ 221.108737][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.108745][ T8382] Call Trace: [ 221.108749][ T8382] [ 221.108754][ T8382] dump_stack_lvl+0x100/0x190 [ 221.108772][ T8382] should_fail_ex.cold+0x5/0xa [ 221.108786][ T8382] _copy_from_user+0x2e/0xd0 [ 221.108803][ T8382] memdup_user+0x6b/0xe0 [ 221.108818][ T8382] strndup_user+0x78/0xe0 [ 221.108832][ T8382] __ia32_sys_mount+0x136/0x310 [ 221.108847][ T8382] ? __pfx___ia32_sys_mount+0x10/0x10 [ 221.108860][ T8382] ? ksys_write+0x1ac/0x250 [ 221.108871][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 221.108884][ T8382] __do_fast_syscall_32+0xe7/0x970 [ 221.108899][ T8382] ? lockdep_hardirqs_on+0x78/0x100 [ 221.108914][ T8382] do_fast_syscall_32+0x32/0x70 [ 221.108929][ T8382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.108944][ T8382] RIP: 0023:0xf70aefec [ 221.108959][ T8382] Code: Unable to access opcode bytes at 0xf70aefc2. [ 221.108964][ T8382] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 221.108975][ T8382] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 221.108982][ T8382] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 00000000800004c0 [ 221.108988][ T8382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.108994][ T8382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.109000][ T8382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.109014][ T8382] [ 221.290018][ T8377] tipc: Started in network mode [ 221.299092][ T8377] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 221.304230][ T8377] tipc: Enabled bearer , priority 0 [ 221.555565][ T42] audit: type=1804 audit(1785474600.767:7): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.695" name="/newroot/185/file0" dev="tmpfs" ino=1075 res=1 errno=0 [ 221.656920][ T845] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 221.823047][ T845] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 221.827895][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.831423][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.834846][ T845] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.836733][ T1482] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 221.842762][ T845] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 221.846208][ T845] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 221.849057][ T845] usb 9-1: Manufacturer: syz [ 221.864078][ T845] usb 9-1: config 0 descriptor?? [ 222.009722][ T1482] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.016378][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.025968][ T1482] usb 7-1: config 0 has no interface number 0 [ 222.031339][ T1482] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.040699][ T1482] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 222.049454][ T1482] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.056950][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.067498][ T1482] usb 7-1: config 0 descriptor?? [ 222.075733][ T8388] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 222.081908][ T1482] ldusb 7-1:0.55: Interrupt in endpoint not found [ 222.356945][ T1482] usb 7-1: USB disconnect, device number 16 [ 222.419228][ T5605] tipc: Node number set to 43690 [ 222.527434][ T845] hid_parser_main: 32 callbacks suppressed [ 222.527479][ T845] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 222.591880][ T845] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 222.685358][ T8397] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.700'. [ 222.695442][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 222.711659][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 222.718869][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 222.728610][ T8397] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.760830][ T8394] binder: BINDER_SET_CONTEXT_MGR already set [ 222.764620][ T8394] binder: 8393:8394 ioctl 4018620d 80000100 returned -16 [ 222.770405][ T8394] binder: BINDER_SET_CONTEXT_MGR already set [ 222.772482][ T8394] binder: 8393:8394 ioctl 4018620d 80000140 returned -16 [ 222.775429][ T8394] binder: 8393:8394 ioctl c0306201 0 returned -14 [ 222.810686][ T845] usb 9-1: USB disconnect, device number 5 [ 222.862942][ T8400] bridge_slave_0: left allmulticast mode [ 222.864835][ T8400] bridge_slave_0: left promiscuous mode [ 222.868862][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.875545][ T8400] bridge_slave_1: left allmulticast mode [ 222.878661][ T8400] bridge_slave_1: left promiscuous mode [ 222.880808][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.889459][ T8400] bond0: (slave bond_slave_0): Releasing backup interface [ 222.893917][ T8400] bond0: (slave bond_slave_1): Releasing backup interface [ 222.904644][ T8400] team0: Port device team_slave_0 removed [ 222.912111][ T8400] team0: Port device team_slave_1 removed [ 222.914396][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.918011][ T8400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.921210][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.923601][ T8400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.926898][ T8400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.947081][ T8403] team0: Port device xfrm0 added [ 222.956754][ T8400] tipc: Enabled bearer , priority 0 [ 223.356807][ T8411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.596603][ T845] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.768483][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.772967][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.776853][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 223.780328][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 223.786148][ T845] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 223.789846][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.792403][ T845] usb 5-1: Product: syz [ 223.793737][ T845] usb 5-1: Manufacturer: syz [ 223.795855][ T845] usb 5-1: SerialNumber: syz [ 223.801382][ T845] usb 5-1: config 0 descriptor?? [ 224.302258][ T845] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 224.669072][ T845] usb 5-1: USB disconnect, device number 18 [ 224.695949][ T8427] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.774743][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.026631][ T41] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 225.378502][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 225.988544][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.127773][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 226.131307][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 226.137383][ T41] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 226.152867][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.163008][ T41] usb 8-1: Product: syz [ 226.165901][ T41] usb 8-1: Manufacturer: syz [ 226.168921][ T41] usb 8-1: SerialNumber: syz [ 226.171837][ T41] usb 8-1: config 0 descriptor?? [ 226.320523][ T8444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.715'. [ 226.380693][ T41] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 226.698429][ T41] usb 8-1: USB disconnect, device number 12 [ 228.574052][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 228.644018][ T8474] warning: `syz.3.724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.526894][ T8478] Invalid ELF header magic: != ELF [ 229.556847][ T8478] overlayfs: overlapping lowerdir path [ 229.612623][ T8483] FAULT_INJECTION: forcing a failure. [ 229.612623][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.620388][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.0.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.620407][ T8483] Tainted: [L]=SOFTLOCKUP [ 229.620411][ T8483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.620418][ T8483] Call Trace: [ 229.620422][ T8483] [ 229.620427][ T8483] dump_stack_lvl+0x100/0x190 [ 229.620444][ T8483] should_fail_ex.cold+0x5/0xa [ 229.620457][ T8483] _copy_from_user+0x2e/0xd0 [ 229.620474][ T8483] rfcomm_dev_ioctl+0x968/0x1db0 [ 229.620486][ T8483] ? bt_sock_ioctl+0x1df/0x580 [ 229.620498][ T8483] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 229.620510][ T8483] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 229.620522][ T8483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.620539][ T8483] ? do_vfs_ioctl+0x226/0x13e0 [ 229.620556][ T8483] rfcomm_sock_ioctl+0xcc/0xf0 [ 229.620571][ T8483] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 229.620592][ T8483] compat_sock_ioctl+0x179/0x760 [ 229.620606][ T8483] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 229.620617][ T8483] ? hook_file_ioctl_common+0x140/0x440 [ 229.620634][ T8483] ? __fget_files+0x21f/0x3d0 [ 229.620647][ T8483] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 229.620660][ T8483] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 229.620677][ T8483] __do_fast_syscall_32+0xe7/0x970 [ 229.620691][ T8483] ? lockdep_hardirqs_on+0x78/0x100 [ 229.620705][ T8483] do_fast_syscall_32+0x32/0x70 [ 229.620720][ T8483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.620734][ T8483] RIP: 0023:0xf70aefec [ 229.620748][ T8483] Code: Unable to access opcode bytes at 0xf70aefc2. [ 229.620754][ T8483] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 229.620765][ T8483] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400452c8 [ 229.620771][ T8483] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.620778][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.620784][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.620790][ T8483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.620803][ T8483] [ 232.221108][ T42] audit: type=1326 audit(1785474611.437:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.235082][ T42] audit: type=1326 audit(1785474611.447:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.246618][ T42] audit: type=1326 audit(1785474611.447:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.253179][ T42] audit: type=1326 audit(1785474611.447:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.260866][ T42] audit: type=1326 audit(1785474611.447:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.267517][ T42] audit: type=1326 audit(1785474611.447:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.274006][ T42] audit: type=1326 audit(1785474611.447:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.280906][ T42] audit: type=1326 audit(1785474611.447:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.287604][ T42] audit: type=1326 audit(1785474611.457:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.294230][ T42] audit: type=1326 audit(1785474611.457:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.2.735" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 232.722437][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 233.551802][ T8530] Invalid ELF header magic: != ELF [ 233.557363][ T8530] overlayfs: overlapping lowerdir path [ 234.595595][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.903119][ T8546] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.746'. [ 234.907876][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 234.911742][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 234.914908][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 234.921771][ T8546] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 235.018412][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.025186][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.031346][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.046631][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.047653][ T8553] syzkaller0: entered promiscuous mode [ 235.049510][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.051232][ T8553] syzkaller0: entered allmulticast mode [ 235.055184][ T29] usb 5-1: config 0 descriptor?? [ 235.185286][ T8557] e1000e 0000:00:02.0 eth1: removed PHC [ 235.195696][ T8560] netlink: 'syz.4.751': attribute type 8 has an invalid length. [ 235.196339][ T8561] netlink: 'syz.4.751': attribute type 8 has an invalid length. [ 235.199260][ T8562] netlink: 'syz.4.751': attribute type 8 has an invalid length. [ 235.200973][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 235.201001][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 235.216780][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 235.309294][ T8557] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 235.387493][ T7460] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.393089][ T7460] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.397341][ T7460] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.401238][ T7460] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.502488][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 235.504398][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 235.519785][ T29] usb 5-1: USB disconnect, device number 19 [ 235.602414][ T8564] goku_udc 0000:00:02.0: TC86C001 USB Device Controller [ 235.604577][ T8564] goku_udc 0000:00:02.0: version: 30-Oct 2003 (dma IN) [ 235.608344][ T8564] goku_udc 0000:00:02.0: irq 22, pci mem ffffc90006900000 [ 236.129821][ T6067] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 236.189313][ T8603] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.756'. [ 236.195319][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 236.276530][ T6067] usb 7-1: Using ep0 maxpacket: 32 [ 236.279611][ T6067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.283120][ T6067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.286352][ T6067] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.291540][ T6067] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 236.294483][ T6067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.301150][ T6067] usb 7-1: config 0 descriptor?? [ 236.740154][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.745098][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.750932][ T6067] usbhid 7-1:0.0: can't add hid device: -71 [ 236.752936][ T6067] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 236.757528][ T6067] usb 7-1: USB disconnect, device number 17 [ 237.279132][ T8638] FAULT_INJECTION: forcing a failure. [ 237.279132][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 237.282992][ T8638] CPU: 2 UID: 0 PID: 8638 Comm: syz.2.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.283012][ T8638] Tainted: [L]=SOFTLOCKUP [ 237.283017][ T8638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.283027][ T8638] Call Trace: [ 237.283034][ T8638] [ 237.283041][ T8638] dump_stack_lvl+0x100/0x190 [ 237.283066][ T8638] should_fail_ex.cold+0x5/0xa [ 237.283088][ T8638] should_failslab+0xc2/0x120 [ 237.283115][ T8638] __kmalloc_noprof+0xfc/0x820 [ 237.283135][ T8638] ? rcu_is_watching+0x12/0xc0 [ 237.283158][ T8638] ? tomoyo_realpath_from_path+0xb6/0x690 [ 237.283186][ T8638] tomoyo_realpath_from_path+0xb6/0x690 [ 237.283217][ T8638] tomoyo_path_number_perm+0x23c/0x580 [ 237.283240][ T8638] ? tomoyo_path_number_perm+0x22e/0x580 [ 237.283263][ T8638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.283284][ T8638] ? get_pid_task+0x106/0x250 [ 237.283330][ T8638] ? find_held_lock+0x2b/0x80 [ 237.283354][ T8638] ? __fget_files+0x215/0x3d0 [ 237.283368][ T8638] ? hook_file_ioctl_common+0x140/0x440 [ 237.283385][ T8638] ? __fget_files+0x215/0x3d0 [ 237.283397][ T8638] ? __fget_files+0x21f/0x3d0 [ 237.283409][ T8638] security_file_ioctl_compat+0xd3/0x230 [ 237.283424][ T8638] __ia32_compat_sys_ioctl+0xc2/0x360 [ 237.283443][ T8638] __do_fast_syscall_32+0xe7/0x970 [ 237.283457][ T8638] ? lockdep_hardirqs_on+0x78/0x100 [ 237.283472][ T8638] do_fast_syscall_32+0x32/0x70 [ 237.283486][ T8638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.283500][ T8638] RIP: 0023:0xf7f27fec [ 237.283525][ T8638] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 237.283530][ T8638] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 237.283542][ T8638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 237.283549][ T8638] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.283555][ T8638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.283561][ T8638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 237.283568][ T8638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.283581][ T8638] [ 237.283586][ T8638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.368285][ T6067] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 237.518560][ T6067] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.523219][ T6067] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.527849][ T6067] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.533303][ T6067] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.538719][ T6067] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.547177][ T6067] usb 8-1: config 0 descriptor?? [ 237.791780][ T8646] netlink: 'syz.4.765': attribute type 2 has an invalid length. [ 237.794507][ T8646] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 238.090673][ T6067] usbhid 8-1:0.0: can't add hid device: -71 [ 238.093012][ T6067] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 238.116209][ T6067] usb 8-1: USB disconnect, device number 13 [ 238.213101][ T8655] __nla_validate_parse: 3 callbacks suppressed [ 238.213157][ T8655] netlink: 108 bytes leftover after parsing attributes in process `syz.2.768'. [ 238.538402][ T8646] Process accounting resumed [ 239.071108][ T8662] program syz.3.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.168769][ T8668] FAULT_INJECTION: forcing a failure. [ 239.168769][ T8668] name failslab, interval 1, probability 0, space 0, times 0 [ 239.176654][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.2.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.176674][ T8668] Tainted: [L]=SOFTLOCKUP [ 239.176678][ T8668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.176685][ T8668] Call Trace: [ 239.176689][ T8668] [ 239.176694][ T8668] dump_stack_lvl+0x100/0x190 [ 239.176711][ T8668] should_fail_ex.cold+0x5/0xa [ 239.176724][ T8668] should_failslab+0xc2/0x120 [ 239.176741][ T8668] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 239.176755][ T8668] ? __alloc_skb+0x5b7/0x710 [ 239.176768][ T8668] ? __alloc_skb+0x140/0x710 [ 239.176784][ T8668] __alloc_skb+0x140/0x710 [ 239.176796][ T8668] ? __alloc_skb+0x5b7/0x710 [ 239.176809][ T8668] ? __pfx___alloc_skb+0x10/0x10 [ 239.176837][ T8668] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 239.176852][ T8668] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.176870][ T8668] alloc_skb_with_frags+0xdd/0x760 [ 239.176886][ T8668] ? __kernel_text_address+0xd/0x30 [ 239.176902][ T8668] ? unwind_get_return_address+0x59/0xa0 [ 239.176922][ T8668] sock_alloc_send_pskb+0x801/0x980 [ 239.176940][ T8668] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 239.176955][ T8668] ? aa_sk_perm+0x309/0xaa0 [ 239.176972][ T8668] hci_sock_sendmsg+0x1c7/0x2620 [ 239.176989][ T8668] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 239.177009][ T8668] ? apparmor_socket_sendmsg+0x15b/0x270 [ 239.177023][ T8668] sock_write_iter+0x53a/0x5b0 [ 239.177033][ T8668] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 239.177047][ T8668] ? __pfx_sock_write_iter+0x10/0x10 [ 239.177060][ T8668] ? bpf_lsm_file_permission+0x9/0x10 [ 239.177071][ T8668] ? security_file_permission+0x76/0x210 [ 239.177087][ T8668] ? rw_verify_area+0xce/0x6d0 [ 239.177104][ T8668] vfs_write+0x6ac/0x1050 [ 239.177115][ T8668] ? __pfx_sock_write_iter+0x10/0x10 [ 239.177126][ T8668] ? __pfx_vfs_write+0x10/0x10 [ 239.177135][ T8668] ? find_held_lock+0x2b/0x80 [ 239.177157][ T8668] ksys_write+0x1f8/0x250 [ 239.177166][ T8668] ? __pfx_ksys_write+0x10/0x10 [ 239.177176][ T8668] ? ksys_write+0x1ac/0x250 [ 239.177185][ T8668] ? __pfx_ksys_write+0x10/0x10 [ 239.177198][ T8668] __do_fast_syscall_32+0xe7/0x970 [ 239.177212][ T8668] ? lockdep_hardirqs_on+0x78/0x100 [ 239.177226][ T8668] do_fast_syscall_32+0x32/0x70 [ 239.177240][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.177255][ T8668] RIP: 0023:0xf7f27fec [ 239.177269][ T8668] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 239.177274][ T8668] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 239.177284][ T8668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 239.177291][ T8668] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.177297][ T8668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.177303][ T8668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 239.177309][ T8668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.177322][ T8668] [ 239.289687][ T8671] xt_hashlimit: size too large, truncated to 1048576 [ 239.292582][ T8671] xt_hashlimit: max too large, truncated to 1048576 [ 239.546581][ T1482] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 239.706656][ T1482] usb 5-1: Using ep0 maxpacket: 32 [ 239.712822][ T1482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.717466][ T1482] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.721820][ T1482] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.724642][ T1482] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.727288][ T1482] usb 5-1: Product: syz [ 239.728618][ T1482] usb 5-1: Manufacturer: syz [ 239.730471][ T1482] usb 5-1: SerialNumber: syz [ 239.733285][ T1482] usb 5-1: config 0 descriptor?? [ 239.760799][ T8680] pim6reg: entered allmulticast mode [ 239.769476][ T8680] pim6reg: left allmulticast mode [ 239.793024][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 239.793037][ T42] audit: type=1326 audit(1785474619.007:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.778" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7fec code=0x0 [ 239.877188][ T8686] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.880846][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.884110][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.887580][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.891917][ T8686] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.942721][ T8672] syz.0.773 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 240.125757][ T5605] usb 5-1: USB disconnect, device number 20 [ 241.299440][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 241.467737][ T8704] tc_dump_action: action bad kind [ 241.550541][ T1482] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 241.568008][ T8710] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.788'. [ 241.573531][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 241.577843][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 241.582756][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 241.708699][ T1482] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 241.712185][ T1482] usb 7-1: config 0 has no interface number 0 [ 241.714187][ T1482] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.718381][ T1482] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 241.721729][ T1482] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 241.725272][ T1482] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 241.729294][ T1482] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 241.732719][ T1482] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.737430][ T1482] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 241.740528][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.745077][ T1482] usb 7-1: config 0 descriptor?? [ 241.747538][ T8703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.749918][ T8703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.754606][ T1482] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 241.834570][ T42] audit: type=1326 audit(1786261053.085:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.841506][ T42] audit: type=1326 audit(1786261053.085:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.871487][ T5894] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 241.929825][ T42] audit: type=1326 audit(1786261053.178:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.937979][ T42] audit: type=1326 audit(1786261053.178:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.944659][ T42] audit: type=1326 audit(1786261053.178:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.951435][ T42] audit: type=1326 audit(1786261053.188:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.957975][ T42] audit: type=1326 audit(1786261053.188:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.964773][ T42] audit: type=1326 audit(1786261053.188:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 241.972839][ T42] audit: type=1326 audit(1786261053.188:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.4.789" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 242.035448][ T8719] ldusb 7-1:0.55: Write buffer overflow, 1 bytes dropped [ 242.176140][ T5894] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.178833][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.182486][ T5894] usb 5-1: config 0 has no interface number 0 [ 242.187453][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.192698][ T5894] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 242.197045][ T5894] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 242.200224][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.207199][ T5894] usb 5-1: config 0 descriptor?? [ 242.212742][ T8709] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.221516][ T5894] ldusb 5-1:0.55: Interrupt in endpoint not found [ 242.290779][ T6067] usb 7-1: USB disconnect, device number 18 [ 242.298427][ T6067] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 242.424256][ T29] usb 5-1: USB disconnect, device number 21 [ 242.892739][ T8733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.282346][ T61] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 243.429860][ T61] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 243.433314][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.436672][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.439942][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 243.444659][ T61] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 243.447586][ T61] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 243.450313][ T61] usb 7-1: Manufacturer: syz [ 243.453604][ T61] usb 7-1: config 0 descriptor?? [ 244.257420][ T8750] overlayfs: empty lowerdir [ 244.509487][ T8752] __nla_validate_parse: 4 callbacks suppressed [ 244.509505][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 244.574703][ T8755] ceph: Path missing in source [ 244.959720][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'. [ 245.498703][ T29] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 245.643907][ T29] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 245.646964][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.650219][ T29] usb 9-1: config 0 has no interface number 0 [ 245.652739][ T29] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.656189][ T29] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 245.659632][ T29] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.663205][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.668449][ T29] usb 9-1: config 0 descriptor?? [ 245.670716][ T8775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.675145][ T29] ldusb 9-1:0.55: Interrupt in endpoint not found [ 245.907681][ T1482] usb 9-1: USB disconnect, device number 6 [ 245.962774][ T8783] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 246.008075][ T61] usbhid 7-1:0.0: can't add hid device: -71 [ 246.013957][ T61] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 246.024742][ T61] usb 7-1: USB disconnect, device number 19 [ 246.550432][ T8787] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 246.553028][ T8787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.556359][ T8787] vhci_hcd vhci_hcd.0: Device attached [ 246.567637][ T8787] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 246.661585][ T1482] kernel read not supported for file /bluetooth/6lowpan_control (pid: 1482 comm: kworker/0:3) [ 246.723858][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 246.832142][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 246.845713][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 246.931155][ T8810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.935527][ T8801] vhci_hcd: connection reset by peer [ 246.941444][ T12] vhci_hcd vhci_hcd.2: stop threads [ 246.944208][ T12] vhci_hcd vhci_hcd.2: release socket [ 246.947752][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 247.616439][ T8819] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.823'. [ 247.622064][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 247.626603][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 247.630474][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 247.640584][ T8820] netlink: 108 bytes leftover after parsing attributes in process `syz.2.821'. [ 247.641455][ T8819] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.599838][ T8825] smpboot: CPU 1 is now offline [ 248.644422][ T8813] select_fallback_rq: 18 callbacks suppressed [ 248.644447][ T8813] process 8814 (syz.2.821) no longer affine to cpu1 [ 248.861564][ T8836] Attempt to restore checkpoint with obsolete wellknown handles [ 249.298170][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 249.353253][ T8840] netlink: 144 bytes leftover after parsing attributes in process `syz.3.828'. [ 250.454703][ T5459] veth0_vlan: left promiscuous mode [ 250.464222][ T1482] veth0_vlan: entered promiscuous mode [ 251.187076][ T8890] Line length is too long: Should be less than 4094 [ 251.246770][ T8893] CUSE: DEVNAME unspecified [ 251.831016][ T8906] Invalid ELF header magic: != ELF [ 251.835144][ T8906] overlayfs: overlapping lowerdir path [ 251.863380][ T29] usb 42-1: device descriptor read/8, error -110 [ 252.072615][ T8912] netlink: 108 bytes leftover after parsing attributes in process `syz.4.848'. [ 252.278016][ T29] usb usb42-port1: attempt power cycle [ 252.592085][ T6067] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 252.739849][ T6067] usb 7-1: Using ep0 maxpacket: 8 [ 252.744460][ T6067] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 252.747187][ T6067] usb 7-1: config 0 has no interface number 0 [ 252.749474][ T6067] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.756059][ T6067] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 252.760528][ T6067] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.771485][ T6067] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.782016][ T6067] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 252.789935][ T6067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.806073][ T6067] usb 7-1: config 0 descriptor?? [ 252.845748][ T29] usb usb42-port1: unable to enumerate USB device [ 252.863127][ T8922] Set syz1 is full, maxelem 2076 reached [ 252.866023][ T6067] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.245629][ T8934] program syz.4.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.311611][ T6067] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 253.461482][ T6067] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.465209][ T6067] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.468357][ T6067] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.474762][ T6067] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.479018][ T6067] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.513233][ T6067] usb 8-1: config 0 descriptor?? [ 253.725922][ T6067] usbhid 8-1:0.0: can't add hid device: -71 [ 253.727944][ T6067] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 253.745333][ T6067] usb 8-1: USB disconnect, device number 14 [ 254.933667][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.935744][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.131907][ T8958] Invalid ELF header magic: != ELF [ 255.137181][ T8958] overlayfs: overlapping lowerdir path [ 255.283831][ T5894] usb 7-1: USB disconnect, device number 20 [ 255.290737][ T5894] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 255.447588][ T8966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.809265][ T5894] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 255.912735][ T8972] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.867'. [ 255.920699][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 255.925405][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.867'. [ 255.929729][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.867'. [ 255.959404][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 255.963016][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 255.966091][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 255.969866][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 255.975487][ T5894] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 255.978652][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.981270][ T5894] usb 7-1: Product: syz [ 255.982598][ T5894] usb 7-1: Manufacturer: syz [ 255.984250][ T5894] usb 7-1: SerialNumber: syz [ 255.988848][ T5894] usb 7-1: config 0 descriptor?? [ 256.199607][ T5894] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 256.437460][ T8980] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.869'. [ 256.453772][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 256.467525][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'. [ 256.477100][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'. [ 256.587430][ T5894] usb 7-1: USB disconnect, device number 21 [ 257.014226][ T8990] vivid-000: ================= START STATUS ================= [ 257.018480][ T8990] vivid-000: Test Pattern: 75% Colorbar [ 257.029282][ T8990] vivid-000: Fill Percentage of Frame: 100 [ 257.032542][ T8990] vivid-000: Horizontal Movement: No Movement [ 257.034595][ T8990] vivid-000: Vertical Movement: No Movement [ 257.045094][ T8990] vivid-000: OSD Text Mode: All [ 257.046743][ T8990] vivid-000: Show Border: false [ 257.048416][ T8990] vivid-000: Show Square: false [ 257.049986][ T8990] vivid-000: Sensor Flipped Horizontally: false [ 257.051987][ T8990] vivid-000: Sensor Flipped Vertically: false [ 257.054038][ T8990] vivid-000: Insert SAV Code in Image: false [ 257.056540][ T8990] vivid-000: Insert EAV Code in Image: false [ 257.058557][ T8990] vivid-000: Insert Video Guard Band: false [ 257.061523][ T8990] vivid-000: Reduced Framerate: false [ 257.063272][ T8990] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 257.069107][ T8990] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 257.071632][ T8990] vivid-000: Enable Capture Cropping: true [ 257.073483][ T8990] vivid-000: Enable Capture Composing: true [ 257.075661][ T8990] vivid-000: Enable Capture Scaler: true [ 257.077542][ T8990] vivid-000: Timestamp Source: End of Frame [ 257.083901][ T8990] vivid-000: Colorspace: sRGB [ 257.091995][ T8990] vivid-000: Transfer Function: Default [ 257.097146][ T8990] vivid-000: Y'CbCr Encoding: Default [ 257.098868][ T8990] vivid-000: HSV Encoding: Hue 0-179 [ 257.103701][ T8990] vivid-000: Quantization: Default [ 257.106478][ T8990] vivid-000: Apply Alpha To Red Only: false [ 257.108591][ T8990] vivid-000: Standard Aspect Ratio: 4x3 [ 257.110372][ T8990] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 257.112885][ T8990] vivid-000: DV Timings: 640x480p59 inactive [ 257.115110][ T8990] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 257.117442][ T8990] vivid-000: Maximum EDID Blocks: 2 [ 257.119088][ T8990] vivid-000: Limited RGB Range (16-235): false [ 257.121023][ T8990] vivid-000: Rx RGB Quantization Range: Automatic [ 257.123136][ T8990] vivid-000: Power Present: 0x00000001 [ 257.125719][ T8990] tpg source WxH: 320x240 (Y'CbCr) [ 257.127378][ T8990] tpg field: 1 [ 257.128511][ T8990] tpg crop: (0,0)/320x240 [ 257.129879][ T8990] tpg compose: (0,0)/320x240 [ 257.131335][ T8990] tpg colorspace: 8 [ 257.132557][ T8990] tpg transfer function: 0/0 [ 257.134518][ T8990] tpg Y'CbCr encoding: 0/0 [ 257.136102][ T8990] tpg quantization: 0/0 [ 257.137747][ T8990] tpg RGB range: 0/2 [ 257.139011][ T8990] vivid-000: ================== END STATUS ================== [ 257.350082][ T9004] overlay: Bad value for 'uuid' [ 257.434706][ T9008] ./file0: Can't lookup blockdev [ 257.550069][ T9015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.666001][ T9001] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 257.674198][ T0] Disabled fast string operations [ 257.675972][ T0] ------------[ cut here ]------------ [ 257.677792][ T0] alternatives_patched [ 257.677800][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 257.684039][ T0] Modules linked in: [ 257.685579][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 257.688894][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 257.690892][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.694158][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 257.696050][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 57 72 0f 31 ff 89 ee e8 28 6a 59 00 85 ed 0f 84 7d fd ff ff e8 ab 6f 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 95 6f 59 00 8b [ 257.702284][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 257.704256][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 257.706846][ T0] RDX: ffff88801c34a540 RSI: ffffffff81b03d75 RDI: ffff88801c34a540 [ 257.707909][ T9019] fuse: Bad value for 'fd' [ 257.709443][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 257.709453][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 257.709460][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 257.709467][ T0] FS: 0000000000000000(0000) GS:ffff888096ce1000(0000) knlGS:0000000000000000 [ 257.709491][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.723722][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 257.726309][ T0] Call Trace: [ 257.727427][ T0] [ 257.728436][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 257.730203][ T0] ? _printk+0xcf/0x110 [ 257.731584][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 257.733410][ T0] ? early_init_intel.cold+0x129/0x1eb [ 257.735198][ T0] early_init_intel.cold+0x13f/0x1eb [ 257.736985][ T0] init_intel+0x1c/0x7b0 [ 257.738402][ T0] identify_cpu+0x8b0/0x1c30 [ 257.739921][ T0] ? __pfx_cpu_init+0x10/0x10 [ 257.741481][ T0] identify_secondary_cpu+0x178/0x270 [ 257.743246][ T0] start_secondary+0xcf/0x2d0 [ 257.744803][ T0] ? __pfx_start_secondary+0x10/0x10 [ 257.746575][ T0] common_startup_64+0x13e/0x158 [ 257.748228][ T0] [ 257.749263][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.751643][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 257.755013][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 257.757066][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.760225][ T0] Call Trace: [ 257.761330][ T0] [ 257.762321][ T0] dump_stack_lvl+0x100/0x190 [ 257.763806][ T0] vpanic+0x552/0x970 [ 257.765064][ T0] ? __pfx_vpanic+0x10/0x10 [ 257.766574][ T0] panic+0xd1/0xe0 [ 257.767858][ T0] ? __pfx_panic+0x10/0x10 [ 257.769349][ T0] ? check_panic_on_warn+0x1f/0x90 [ 257.771040][ T0] check_panic_on_warn.cold+0x19/0x34 [ 257.772802][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 257.774471][ T0] __warn.cold+0x191/0x318 [ 257.775980][ T0] __report_bug+0x30f/0x440 [ 257.777531][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 257.779198][ T0] ? __pfx___report_bug+0x10/0x10 [ 257.780860][ T0] ? prb_read_valid+0x78/0xa0 [ 257.782423][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 257.784127][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 257.785942][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 257.787611][ T0] report_bug+0xb2/0x220 [ 257.789030][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 257.790688][ T0] handle_bug+0x16a/0x2a0 [ 257.792119][ T0] exc_invalid_op+0x17/0x50 [ 257.793644][ T0] asm_exc_invalid_op+0x1a/0x20 [ 257.795245][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 257.797127][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 57 72 0f 31 ff 89 ee e8 28 6a 59 00 85 ed 0f 84 7d fd ff ff e8 ab 6f 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 95 6f 59 00 8b [ 257.803382][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 257.805371][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 257.807992][ T0] RDX: ffff88801c34a540 RSI: ffffffff81b03d75 RDI: ffff88801c34a540 [ 257.810571][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 257.813149][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 257.815734][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 257.818325][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 257.819973][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 257.821628][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 257.823283][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 257.825036][ T0] ? _printk+0xcf/0x110 [ 257.826500][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 257.828335][ T0] ? early_init_intel.cold+0x129/0x1eb [ 257.830126][ T0] early_init_intel.cold+0x13f/0x1eb [ 257.831860][ T0] init_intel+0x1c/0x7b0 [ 257.833234][ T0] identify_cpu+0x8b0/0x1c30 [ 257.834758][ T0] ? __pfx_cpu_init+0x10/0x10 [ 257.836371][ T0] identify_secondary_cpu+0x178/0x270 [ 257.838143][ T0] start_secondary+0xcf/0x2d0 [ 257.839696][ T0] ? __pfx_start_secondary+0x10/0x10 [ 257.841439][ T0] common_startup_64+0x13e/0x158 [ 257.843091][ T0] [ 257.844810][ T0] Kernel Offset: disabled [ 257.846246][ T0] Rebooting in 86400 seconds..