last executing test programs: 4m59.655150225s ago: executing program 0 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) times(0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) syz_io_uring_setup(0x6b27, 0x0, 0x0, &(0x7f0000000340), 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) times(&(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x64) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x54) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000340)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f3868", 0x53}], 0x1) 4m59.125258039s ago: executing program 0 (id=269): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) unshare(0x22020400) (async) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@arm64={0xff, 0x5, 0x3, '\x00', 0xd7}) (async) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) io_uring_setup(0x6ff1, &(0x7f0000000280)={0x0, 0xf050, 0x8, 0x3, 0x1c1}) 4m59.065557425s ago: executing program 0 (id=270): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) write(r0, &(0x7f0000000000)="98677a3f42ceb7cc8f76410cb82db51803a52aa5666c49564665fd387a7b33b8cc98cd772e9d0085b47400b70b654254c2ab9dff6c6e378b37788c45c3794524d698bb69119bc3bf5b2a7a75b76703ef17c9ff72ed68241b8ae71560d20a489f35d068a84fb208366b6b91520368bf960b57aff1184cb12739440983d484ab32", 0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 4m58.984357151s ago: executing program 0 (id=271): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) write(r0, &(0x7f0000000340)="000000000902440000000000000000002040000000001000000000011fc7f3", 0x1f) 4m58.744886335s ago: executing program 0 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb8}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe6, @remote, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @local, 0xbe3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7948c512}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5f59}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 4m58.485509353s ago: executing program 0 (id=275): io_uring_setup(0x4823, &(0x7f00000004c0)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x5, &(0x7f0000000100)={0x1c, "3ac071ffbc8cd0d684737d99bb8bd238954c9a216d398df0f558125211b40c65fd"}}) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x472700, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%pS \x00'}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)='%-5lx \x00'}, 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) 4m58.413856673s ago: executing program 32 (id=275): io_uring_setup(0x4823, &(0x7f00000004c0)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x5, &(0x7f0000000100)={0x1c, "3ac071ffbc8cd0d684737d99bb8bd238954c9a216d398df0f558125211b40c65fd"}}) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x472700, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%pS \x00'}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)='%-5lx \x00'}, 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) 43.161147655s ago: executing program 2 (id=1991): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 42.941606837s ago: executing program 2 (id=1993): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa5", 0xce) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r7, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x130, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa0}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24b7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x60}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10000042}, 0x98) 41.954745844s ago: executing program 2 (id=1999): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, 0x0) 41.784217828s ago: executing program 2 (id=2001): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='QEMU0002:00', 0xb) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 40.585755931s ago: executing program 2 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffc000), &(0x7f0000ffc000), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000006740)=[0xffffffffffffffff], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x200047, &(0x7f0000000300)={0x0, 0xf211, 0x800, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000011851bd7000f9dbdf2500060000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000", @ANYRESOCT=r3, @ANYBLOB="3b66b2c25cb59206e4838a88f0aa687659fb8334e252a2be93c833e6fea82297196245d1b978eeab8426887e8d685aa3ee08d4a9ac70e4235af186258214225e2526b7d16e9de653fcd407e1aa6ee296f30d96da60b0a77d2621a8906f5c496e8bbd8a1035171b2348e1574f20d576263c715f6810a84a2510bd1066f707933f5dfe31ff6b5cfbb6cd7a365ba56edd48dc5b10a395c33ad75570dd8cff695364c8f85cbe1145fbabc8f4aa38c961ff93cfa6011e"], 0x30}, 0x1, 0x0, 0x0, 0x20044c80}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) 39.903778701s ago: executing program 2 (id=2007): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x6, 'cpuacct'}, {0x6, 'freezer'}]}, 0x1a) open(&(0x7f0000000040)='./bus\x00', 0x1e97c3, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') mkdir(&(0x7f0000000000)='./file0\x00', 0x80) 39.757326382s ago: executing program 33 (id=2007): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x6, 'cpuacct'}, {0x6, 'freezer'}]}, 0x1a) open(&(0x7f0000000040)='./bus\x00', 0x1e97c3, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') mkdir(&(0x7f0000000000)='./file0\x00', 0x80) 3.483945378s ago: executing program 1 (id=2261): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000280)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800", 0x19}, {&(0x7f0000000040)="00000000000000a0c8d492507b", 0xd}], 0x2}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 2.883406725s ago: executing program 4 (id=2266): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="9a0cf363f18e0d777b9551603a20e7efa30ab1f9a056feafed984d48a44593551b1d6e760ecffed511a49d3caba7973535dc706054e342da043fc02d22ef1fdff1d89902a5b53bb4c18a5281412ed111c94beb06a7f6d1ae94839af9d241f793fe70384844d2dd4f3138c0ca4cd77c53dcde8ec3837513f14d0efb2af213233ebe9bcfcddabfefcd8b17a94b7d2376a6edc74a9a3d31370002bb8bce6b96c2e38a0850915c586e1057bc0ed4b2a4b1c5b6", 0xb1}, {&(0x7f0000000580)="b7c53a81b62ff158811f025412f72c19fe4ba8226bd7e2031bc26106c276afa4f4ea7dd23a18f645a980c9dae8e42a909fd437c262882ef6472dc60cca9c5b4550826764ff", 0x45}, {&(0x7f0000000600)="ca7a05c3f0c23344d37536688256426848a229429583", 0x16}, {0x0}], 0x4, &(0x7f0000000700)=[@cred={{0x18}}, @rights={{0xc}}], 0x24, 0x4}}], 0x1, 0x40004) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088}, 0x800) syz_clone3(&(0x7f000000c340)={0x2a822000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 2.533676841s ago: executing program 1 (id=2270): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x207, 0x402) r1 = dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x410103, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243, 0x349}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) 2.447255908s ago: executing program 5 (id=2271): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{0xfb}, {0x20, 0xc9}}}}, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999f0dde3, 0xdcf, 0x4004, 0xa, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xc, {0x8, 0xfffffffd, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x1, 0x1, 0x9e9, 0x800009, 0xb877, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4c241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="53ea0ca200778ef87261ee733d6602", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.27337294s ago: executing program 5 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xb16, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xa87db000) (async) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x400) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getrandom(0x0, 0x0, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0x15}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.931755146s ago: executing program 4 (id=2273): r0 = syz_io_uring_setup(0x80000f00, &(0x7f0000000400)={0x0, 0x595f, 0x80000, 0x0, 0x54}, &(0x7f0000000680)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xf, 0x4004, @fd_index=0xb, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1, 0x0, 0xa0, '\x00', &(0x7f0000000200)={0xfff, 0x0, 0x0, 0x0, 0x7}, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000380)='gretap0\x00', 0x40, 0x6, &(0x7f00000003c0)={0xe7, 0x6, 0x3}) mq_timedsend(r5, &(0x7f0000000500)="20ca8ed96b88a6f32b371ed8a76e8f6028fd9d87db9c1345ab04c63bc497d14b01bd1fe7f8dd822c95d959363d8fb8b2983584e977cfc306c38dfde704dd6d87ca7098", 0x43, 0x2, &(0x7f00000005c0)={0x0, 0x3938700}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000feffffff0000008008000300", @ANYRES32=r8, @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x90, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "dcd4f1ec648d9377a1b74510b92d47d2e8b6e6b2554adcffefd657569096f4e81eed87b2e00edc8e9aa1dc70394ed86b7c29cf21be61c8dc6e293bfebda4c4d1d137c1b0c9160da4154d3fbaa61605f2f3def92f80f2b47181d2ebce6193cb7a302687887d7579e1"}]}, 0x90}}, 0x10) mkdir(0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x2, 0x39, {{0xc, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x45, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0xaa}, {@remote, 0x5a2b}]}]}}}}}) sendto$packet(r11, &(0x7f0000000140)="61234f900e890fdaaef7e8fccd83be0ae5e8636e17d8a058fccbf789d6b19b2979ec06ac217e427fdb4bf2f6e4ff8e01ff13c6f6595ffaf35d6dd59c50e4ee65a1be92b6ca76aca92d51312e9cd5f0275d2d6b331fbbb7217df179", 0x5b, 0x20008010, &(0x7f0000000300)={0x11, 0xd, r12, 0x1, 0xfd, 0x6, @broadcast}, 0x14) write(r11, 0x0, 0x0) 1.815349489s ago: executing program 5 (id=2275): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x44181000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) mbind(&(0x7f000052e000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x5, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_io_uring_setup(0x5f38, &(0x7f0000000640)={0x0, 0x2, 0x800, 0x3, 0x395}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}}) r5 = mmap$IORING_OFF_CQ_RING(0x0, 0x81, 0x300001f, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x9, {0x120}, 0x1}) openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x414403, 0x0) 1.778173592s ago: executing program 4 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x2, 0x9}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x60, 0x2, r6}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100736974001400028008000c00010000000600090008"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) clock_gettime(0x5, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r4, r8, 0xf, 0x0, 0xffffffffffffffff, @void, @value=r3}, 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 1.653399035s ago: executing program 3 (id=2278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000001}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x7000, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.562135345s ago: executing program 3 (id=2279): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012500000000000000000000000aca972c47ef657c8d0014007770616e", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) mprotect(&(0x7f000016e000/0x3000)=nil, 0x3000, 0xb) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x4, 'dh\x00', 0x24, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ffffffff0000000003800000850000007b000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x4c) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 1.454144929s ago: executing program 3 (id=2280): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x1, [@generic="00101e57"]}]}, 0x18}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640), 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.299660828s ago: executing program 3 (id=2281): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0xf0ffffff, 0x0, 0x8000}, 0x20000080) 916.385483ms ago: executing program 1 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a4c0000000c0a010100000000000000000a0000060900020073797a3100001a000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000002df31ab3140000001100010000000000000000000100000a97a73b8951cf3f71ffa1702ca9c8867cf6a2f90dde468a6f6b1d1ddc4af70e1355afd23a791d8000d16045c8bde6c005c1bb700782b457846dcdb03e69baf590901128257a9b6fa727fe99b3fb7d0a954e2ae5c44360f5145cac842a5a5c42c27258d4a9b61a8d1be976f3ef09f50b6f9ca3fc37bcfc3676425889bfc9b7ba67af7004365f2d9d05f9f97d89d194ad5cad001363d1637ef3d93558b92204"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 842.781361ms ago: executing program 1 (id=2283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000070000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000490000009500000000000000a72ace"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x50) 797.413261ms ago: executing program 4 (id=2284): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30000000"], 0x94}}, 0x0) 797.159598ms ago: executing program 1 (id=2285): r0 = syz_io_uring_setup(0x80000f00, &(0x7f0000000400)={0x0, 0x595f, 0x80000, 0x0, 0x54}, &(0x7f0000000680)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xf, 0x4004, @fd_index=0xb, 0x8, 0x0, 0x0, 0x0, 0x1, {0x1, 0x0, 0xa0, '\x00', &(0x7f0000000200)={0xfff, 0x0, 0x0, 0x0, 0x7}, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000380)='gretap0\x00', 0x40, 0x6, &(0x7f00000003c0)={0xe7, 0x6, 0x3}) mq_timedsend(r5, &(0x7f0000000500)="20ca8ed96b88a6f32b371ed8a76e8f6028fd9d87db9c1345ab04c63bc497d14b01bd1fe7f8dd822c95d959363d8fb8b2983584e977cfc306c38dfde704dd6d87ca7098", 0x43, 0x2, &(0x7f00000005c0)={0x0, 0x3938700}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000feffffff0000008008000300", @ANYRES32=r8, @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x90, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "dcd4f1ec648d9377a1b74510b92d47d2e8b6e6b2554adcffefd657569096f4e81eed87b2e00edc8e9aa1dc70394ed86b7c29cf21be61c8dc6e293bfebda4c4d1d137c1b0c9160da4154d3fbaa61605f2f3def92f80f2b47181d2ebce6193cb7a302687887d7579e1"}]}, 0x90}}, 0x10) mkdir(0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x2, 0x39, {{0xc, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x45, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0xaa}, {@remote, 0x5a2b}]}]}}}}}) sendto$packet(r11, &(0x7f0000000140)="61234f900e890fdaaef7e8fccd83be0ae5e8636e17d8a058fccbf789d6b19b2979ec06ac217e427fdb4bf2f6e4ff8e01ff13c6f6595ffaf35d6dd59c50e4ee65a1be92b6ca76aca92d51312e9cd5f0275d2d6b331fbbb7217df179", 0x5b, 0x20008010, &(0x7f0000000300)={0x11, 0xd, r12, 0x1, 0xfd, 0x6, @broadcast}, 0x14) write(r11, 0x0, 0x0) 661.336196ms ago: executing program 4 (id=2286): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6, 0xff0f0000}]}, 0x8) 660.84404ms ago: executing program 1 (id=2287): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000340)='f2fs\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000440)}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000001480)={0x0, 0x2, &(0x7f0000000480)="97ec"}) 533.853656ms ago: executing program 4 (id=2288): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r3, 0x25, 0x14, @val=@kprobe_multi=@addrs={0x1, 0x5, 0x0, &(0x7f0000000140)=[0x1, 0x80000001, 0x7, 0x4, 0x9], 0x81}}, 0x30) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r5 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$flags(r6, r7, 0x68, 0x1) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x8) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x125, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0x29}}}, 0x0) r9 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000200)=r9, 0x1) io_uring_enter(r5, 0x6516, 0x6d93, 0x8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000001c0)=0x3, 0x2, 0x2) 360.60589ms ago: executing program 5 (id=2289): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44090) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000940)=""/4088, 0xff8}, {&(0x7f0000001980)=""/4085, 0xff5}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/128, 0x80}, {&(0x7f0000003a00)=""/96, 0x60}, {&(0x7f0000003a80)=""/130, 0x82}, {&(0x7f0000003b40)=""/69, 0x45}, {&(0x7f0000003bc0)=""/156, 0x9c}], 0xe}, 0x20) socket$kcm(0x29, 0x7, 0x0) 360.365368ms ago: executing program 3 (id=2290): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) 202.426054ms ago: executing program 5 (id=2291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000f270b6b618eb8dd10000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x3ece, 0x8, 0x61, 0x170, 0x4, 0x400, 0x0, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x100, 0x9, 0x5}}, &(0x7f0000000480)=0xb0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x0, 0x2, 0x21}, 0x7, 0x8, 0x0, 0x0, 0x0, 0x5}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x9, 0x0, 0xfaa7, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r4, 0x0, 0x25, 0x8, @val=@tcx={@void, @value=r4, @void, @void, r5}}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=r1, r0, 0x1b, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f00000000c0)) getsockopt$bt_BT_VOICE(r3, 0x11, 0x13, 0x0, &(0x7f0000000280)=0x2f) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$ndctl0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004801}, 0x44014) 202.035274ms ago: executing program 3 (id=2292): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa5", 0xce) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r7, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x138, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa0}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24b7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x60}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10000042}, 0x98) 0s ago: executing program 5 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close(0x3) kernel console output (not intermixed with test programs): ace 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.091603][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.096477][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 247.103276][ T34] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 247.107315][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.108360][T10651] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1315'. [ 247.112103][ T34] usb 7-1: Product: syz [ 247.117112][ T34] usb 7-1: Manufacturer: syz [ 247.118571][ T34] usb 7-1: SerialNumber: syz [ 247.122446][ T34] usb 7-1: config 0 descriptor?? [ 247.127058][T10636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.263606][T10658] trusted_key: encrypted_key: insufficient parameters specified [ 247.334138][T10636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.339851][ T34] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input65 [ 247.751868][ T34] usb 7-1: USB disconnect, device number 15 [ 248.285016][T10690] FAULT_INJECTION: forcing a failure. [ 248.285016][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 248.290883][T10690] CPU: 3 UID: 0 PID: 10690 Comm: syz.1.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.290910][T10690] Tainted: [L]=SOFTLOCKUP [ 248.290916][T10690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.290926][T10690] Call Trace: [ 248.290932][T10690] [ 248.290939][T10690] dump_stack_lvl+0x100/0x190 [ 248.290979][T10690] should_fail_ex.cold+0x5/0xa [ 248.290998][T10690] should_failslab+0xc2/0x120 [ 248.291021][T10690] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 248.291042][T10690] ? __alloc_skb+0x5b7/0x710 [ 248.291064][T10690] ? __alloc_skb+0x140/0x710 [ 248.291089][T10690] __alloc_skb+0x140/0x710 [ 248.291107][T10690] ? __alloc_skb+0x5b7/0x710 [ 248.291125][T10690] ? __pfx___alloc_skb+0x10/0x10 [ 248.291152][T10690] alloc_skb_with_frags+0xdd/0x760 [ 248.291180][T10690] ? __lock_acquire+0x49f/0x1a40 [ 248.291208][T10690] sock_alloc_send_pskb+0x801/0x980 [ 248.291234][T10690] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 248.291252][T10690] ? find_held_lock+0x2b/0x80 [ 248.291272][T10690] ? is_bpf_text_address+0x8a/0x1a0 [ 248.291294][T10690] ? is_bpf_text_address+0x8a/0x1a0 [ 248.291318][T10690] ? bpf_ksym_find+0x124/0x1c0 [ 248.291336][T10690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.291359][T10690] ? is_bpf_text_address+0x94/0x1a0 [ 248.291385][T10690] unix_dgram_sendmsg+0x3c7/0x1810 [ 248.291409][T10690] ? __lock_acquire+0x49f/0x1a40 [ 248.291433][T10690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.291459][T10690] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 248.291484][T10690] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 248.291505][T10690] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 248.291537][T10690] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 248.291559][T10690] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 248.291580][T10690] ____sys_sendmsg+0xa4d/0xbe0 [ 248.291596][T10690] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 248.291620][T10690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.291649][T10690] ___sys_sendmsg+0x190/0x1e0 [ 248.291668][T10690] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.291696][T10690] ? find_held_lock+0x2b/0x80 [ 248.291732][T10690] __sys_sendmsg+0x160/0x210 [ 248.291755][T10690] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.291784][T10690] ? __pfx_ksys_write+0x10/0x10 [ 248.291809][T10690] __do_fast_syscall_32+0xe7/0x970 [ 248.291830][T10690] ? lockdep_hardirqs_on+0x78/0x100 [ 248.291852][T10690] do_fast_syscall_32+0x32/0x70 [ 248.291873][T10690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.291894][T10690] RIP: 0023:0xf70aefec [ 248.291912][T10690] Code: Unable to access opcode bytes at 0xf70aefc2. [ 248.291920][T10690] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 248.291937][T10690] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800006c0 [ 248.291948][T10690] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.291957][T10690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.291967][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.291977][T10690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.292000][T10690] [ 248.496514][T10687] lapbether: lapb_data_request error - 4 [ 248.818193][T10710] block device autoloading is deprecated and will be removed. [ 248.870372][T10710] lo speed is unknown, defaulting to 1000 [ 248.882494][T10710] lo speed is unknown, defaulting to 1000 [ 248.893722][T10710] lo speed is unknown, defaulting to 1000 [ 248.972954][T10714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.058411][T10710] infiniband syz1: set active [ 249.061512][ T5835] lo speed is unknown, defaulting to 1000 [ 249.063424][T10710] infiniband syz1: added lo [ 249.072410][T10710] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 249.077235][T10710] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 249.082441][T10710] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 249.107117][T10710] RDS/IB: syz1: added [ 249.108453][T10710] smc: adding ib device syz1 with port count 1 [ 249.110714][T10710] smc: ib device syz1 port 1 has no pnetid [ 249.112655][ T5835] lo speed is unknown, defaulting to 1000 [ 249.116609][T10710] lo speed is unknown, defaulting to 1000 [ 249.165660][T10717] input: syz1 as /devices/virtual/input/input66 [ 249.263267][T10710] lo speed is unknown, defaulting to 1000 [ 249.419357][T10723] input: syz1 as /devices/virtual/input/input67 [ 249.453376][T10710] lo speed is unknown, defaulting to 1000 [ 249.604711][T10731] input: syz0 as /devices/virtual/input/input68 [ 249.660657][T10710] lo speed is unknown, defaulting to 1000 [ 250.029835][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 250.471338][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 250.471358][ T42] audit: type=1800 audit(1785048757.314:6524): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1351" name="file0" dev="overlay" ino=1543 res=0 errno=0 [ 251.064001][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 251.072105][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 251.172401][T10767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.179582][ T34] lo speed is unknown, defaulting to 1000 [ 251.675654][T10795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1359'. [ 251.819322][T10797] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.838148][T10797] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 252.514542][ T50] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 252.674655][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 252.678437][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 252.685304][ T50] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 252.689294][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.692575][ T50] usb 9-1: Product: syz [ 252.695037][ T50] usb 9-1: Manufacturer: syz [ 252.697481][ T50] usb 9-1: SerialNumber: syz [ 252.705121][ T50] usb 9-1: config 0 descriptor?? [ 252.709262][ T50] hub 9-1:0.0: bad descriptor, ignoring hub [ 252.711713][ T50] hub 9-1:0.0: probe with driver hub failed with error -5 [ 252.716794][ T50] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.095529][ T1356] usb 9-1: USB disconnect, device number 27 [ 253.317245][T10844] cgroup: release_agent respecified [ 253.321465][T10844] random: crng reseeded on system resumption [ 253.333683][T10844] input: syz0 as /devices/virtual/input/input71 [ 253.367501][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1367'. [ 254.894547][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 255.044417][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 255.047293][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.050782][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.055513][T10889] Invalid ELF header magic: != ELF [ 255.057028][ T24] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.062760][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 255.065957][ T24] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 255.068875][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.074005][ T24] usb 6-1: config 0 descriptor?? [ 255.094599][ T846] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 255.148667][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.171929][T10891] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 255.244328][ T846] usb 9-1: Using ep0 maxpacket: 8 [ 255.248777][ T846] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 255.251420][ T846] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 255.256609][ T846] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.259840][ T846] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.262855][ T846] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.267755][ T846] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.270678][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.285437][ T846] usbtmc 9-1:16.0: bulk endpoints not found [ 255.840626][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 255.846281][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 255.856099][T10901] ip6erspan0: entered allmulticast mode [ 255.862383][ T24] usb 6-1: USB disconnect, device number 30 [ 256.636660][ T1356] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 256.787057][ T1356] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 256.793926][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.802085][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.814377][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.818542][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.826351][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.831544][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.835737][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.839614][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.844076][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.847980][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.851758][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.856670][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.860500][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.864417][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.868905][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.872827][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.876925][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.881553][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.885395][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.889192][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.893707][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.898076][ T1356] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.901871][ T1356] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.906757][ T1356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.911393][ T1356] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 256.915400][ T1356] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 256.919255][ T1356] usb 6-1: Product: syz [ 256.921021][ T1356] usb 6-1: Manufacturer: syz [ 256.923006][ T1356] usb 6-1: SerialNumber: syz [ 256.932675][ T1356] usb 6-1: config 0 descriptor?? [ 256.943947][ T1356] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 257.152610][ T24] usb 6-1: USB disconnect, device number 31 [ 257.169154][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 257.348911][T10933] netlink: 'syz.3.1395': attribute type 2 has an invalid length. [ 257.352256][T10933] netlink: 'syz.3.1395': attribute type 2 has an invalid length. [ 257.849792][ T29] hid_parser_main: 68 callbacks suppressed [ 257.849813][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.857336][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.860552][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.863714][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.867678][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.870889][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.874081][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.877898][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.882753][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.887270][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.896462][ T29] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.03 Device [syz1] on syz1 [ 257.953020][ T5835] usb 9-1: USB disconnect, device number 28 [ 258.430078][T10950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 258.430122][T10950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.431694][T10950] vhci_hcd vhci_hcd.0: Device attached [ 258.704526][ T29] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 258.760695][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 258.992525][T10971] No control pipe specified [ 259.064384][ T24] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 259.103084][T10952] vhci_hcd: connection reset by peer [ 259.105464][ T8882] vhci_hcd vhci_hcd.4: stop threads [ 259.107193][ T8882] vhci_hcd vhci_hcd.4: release socket [ 259.109047][ T8882] vhci_hcd vhci_hcd.4: disconnect device [ 259.224784][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 259.228558][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.231814][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.238165][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.241437][ T24] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.243821][ T24] usb 8-1: Manufacturer: syz [ 259.248594][ T24] usb 8-1: config 0 descriptor?? [ 259.317172][T10979] ntfs3(nullb0): Primary boot signature is not NTFS. [ 259.321715][T10979] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 259.466945][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 259.493473][T10985] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 259.497591][T10985] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1414'. [ 259.601407][T10990] FAULT_INJECTION: forcing a failure. [ 259.601407][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 259.605944][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.2.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.605981][T10990] Tainted: [L]=SOFTLOCKUP [ 259.605984][T10990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.605991][T10990] Call Trace: [ 259.605995][T10990] [ 259.605999][T10990] dump_stack_lvl+0x100/0x190 [ 259.606016][T10990] should_fail_ex.cold+0x5/0xa [ 259.606029][T10990] should_failslab+0xc2/0x120 [ 259.606045][T10990] __kmalloc_cache_noprof+0x91/0x6c0 [ 259.606057][T10990] ? __inet_diag_dump_start+0x8e/0x8f0 [ 259.606071][T10990] __inet_diag_dump_start+0x8e/0x8f0 [ 259.606085][T10990] __netlink_dump_start+0x60e/0x990 [ 259.606098][T10990] inet_diag_handler_cmd+0x282/0x2e0 [ 259.606110][T10990] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 259.606121][T10990] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 259.606132][T10990] ? __pfx_inet_diag_dump+0x10/0x10 [ 259.606141][T10990] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 259.606153][T10990] ? sock_diag_lock_handler+0x10f/0x2e0 [ 259.606171][T10990] sock_diag_rcv_msg+0x431/0x7a0 [ 259.606187][T10990] netlink_rcv_skb+0x159/0x420 [ 259.606198][T10990] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 259.606213][T10990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.606232][T10990] ? netlink_deliver_tap+0x1ae/0xcc0 [ 259.606253][T10990] netlink_unicast+0x585/0x850 [ 259.606266][T10990] ? __pfx_netlink_unicast+0x10/0x10 [ 259.606282][T10990] netlink_sendmsg+0x8b0/0xda0 [ 259.606296][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.606309][T10990] ? apparmor_socket_sendmsg+0x15b/0x270 [ 259.606324][T10990] sock_write_iter+0x53a/0x5b0 [ 259.606334][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.606345][T10990] ? __pfx_sock_write_iter+0x10/0x10 [ 259.606363][T10990] do_iter_readv_writev+0x6f7/0x930 [ 259.606382][T10990] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 259.606401][T10990] ? bpf_lsm_file_permission+0x9/0x10 [ 259.606412][T10990] ? security_file_permission+0x76/0x210 [ 259.606428][T10990] ? rw_verify_area+0xce/0x6d0 [ 259.606445][T10990] vfs_writev+0x360/0xdd0 [ 259.606465][T10990] ? __pfx_vfs_writev+0x10/0x10 [ 259.606491][T10990] ? __fget_files+0x21f/0x3d0 [ 259.606505][T10990] ? do_writev+0x28a/0x340 [ 259.606521][T10990] do_writev+0x28a/0x340 [ 259.606537][T10990] ? __pfx_do_writev+0x10/0x10 [ 259.606553][T10990] ? ksys_write+0x1ac/0x250 [ 259.606563][T10990] ? __pfx_ksys_write+0x10/0x10 [ 259.606575][T10990] __do_fast_syscall_32+0xe7/0x970 [ 259.606589][T10990] ? lockdep_hardirqs_on+0x78/0x100 [ 259.606603][T10990] do_fast_syscall_32+0x32/0x70 [ 259.606617][T10990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.606631][T10990] RIP: 0023:0xf7f95fec [ 259.606645][T10990] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 259.606649][T10990] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 259.606660][T10990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 259.606667][T10990] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.606672][T10990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.606679][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.606685][T10990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.606698][T10990] [ 259.802370][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 260.235221][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 260.240073][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 260.674394][ T1356] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 260.834379][ T1356] usb 7-1: Using ep0 maxpacket: 8 [ 260.838384][ T1356] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.841158][ T1356] usb 7-1: config 0 has no interface number 0 [ 260.843077][ T1356] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.847292][ T1356] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.851790][ T1356] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.856472][ T1356] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 260.861732][ T1356] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.866053][ T1356] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.869077][ T1356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.903201][ T1356] usb 7-1: config 0 descriptor?? [ 260.914471][ T1356] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 260.934394][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1425'. [ 261.001993][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 261.078559][T11020] overlayfs: upper fs does not support file handles, falling back to index=off. [ 261.112489][T11010] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 261.116686][ T1356] usb 7-1: USB disconnect, device number 16 [ 261.123803][ T1356] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 261.136410][T11025] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.365301][T11031] autofs: Unknown parameter 'fd0x0000000000000000' [ 261.657297][ T1356] usb 8-1: USB disconnect, device number 28 [ 262.122419][T11046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 262.331025][T11058] fuse: Bad value for 'group_id' [ 262.332604][T11058] fuse: Bad value for 'group_id' [ 263.413795][T11086] netlink: 'syz.2.1447': attribute type 13 has an invalid length. [ 263.508768][T11086] bridge0: port 3(erspan0) entered disabled state [ 263.620755][T11086] bridge0: port 2(öD) entered disabled state [ 263.623048][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.744085][T11086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.748634][ T6159] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 263.759863][T11086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.855066][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 263.905610][ T6159] usb 9-1: Using ep0 maxpacket: 8 [ 263.911886][ T6159] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 263.917334][ T6159] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 263.920470][ T6159] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.926383][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 264.071616][T11086] dummy0: left allmulticast mode [ 264.112721][T10212] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.127150][T11102] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.182673][T10212] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.191980][T10212] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.199935][T10212] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.244372][T11102] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.328594][T11102] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.893856][ T5835] usb 9-1: USB disconnect, device number 29 [ 266.519055][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 266.611523][T11125] input: syz1 as /devices/virtual/input/input73 [ 268.167339][T11102] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.344548][T10216] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.356656][T10216] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.364559][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 268.370735][ T8882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.440065][ T8882] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.487062][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 268.648327][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 269.416173][T11195] syzkaller0: entered promiscuous mode [ 269.417995][T11195] syzkaller0: entered allmulticast mode [ 269.721854][T11200] usb usb8: usbfs: process 11200 (syz.3.1477) did not claim interface 0 before use [ 270.408266][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 270.411880][T11222] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1485'. [ 270.484432][ T6468] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 270.644391][ T6468] usb 9-1: Using ep0 maxpacket: 16 [ 270.647605][ T6468] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 270.652723][ T6468] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 270.656367][ T6468] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.663377][ T6468] usb 9-1: Product: syz [ 270.665771][ T6468] usb 9-1: Manufacturer: syz [ 270.667229][ T6468] usb 9-1: SerialNumber: syz [ 270.670254][ T6468] usb 9-1: config 0 descriptor?? [ 270.673280][ T6468] hub 9-1:0.0: bad descriptor, ignoring hub [ 270.675595][ T6468] hub 9-1:0.0: probe with driver hub failed with error -5 [ 270.679609][ T6468] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.889228][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 270.996047][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 271.004701][ T1356] usb 9-1: USB disconnect, device number 30 [ 271.203558][T11260] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 271.273634][T11270] netlink: 'syz.2.1502': attribute type 14 has an invalid length. [ 271.727210][T11298] input: syz1 as /devices/virtual/input/input74 [ 271.752638][T11297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 271.755302][T11297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.762051][T11297] vhci_hcd vhci_hcd.0: Device attached [ 271.895169][ T1356] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 272.024949][ T29] usb 46-1: SetAddress Request (10) to port 0 [ 272.026909][ T29] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 272.075885][ T1356] usb 7-1: Using ep0 maxpacket: 8 [ 272.136895][ T1356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 272.140022][ T1356] usb 7-1: no configurations [ 272.145144][ T1356] usb 7-1: can't read configurations, error -22 [ 272.175442][T11305] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 272.420312][T11300] vhci_hcd: connection reset by peer [ 272.422363][T10212] vhci_hcd vhci_hcd.4: stop threads [ 272.424053][T10212] vhci_hcd vhci_hcd.4: release socket [ 272.426405][T10212] vhci_hcd vhci_hcd.4: disconnect device [ 272.787392][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 272.849424][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1520'. [ 273.156301][T11332] FAULT_INJECTION: forcing a failure. [ 273.156301][T11332] name failslab, interval 1, probability 0, space 0, times 0 [ 273.161741][T11332] CPU: 2 UID: 0 PID: 11332 Comm: syz.2.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.161767][T11332] Tainted: [L]=SOFTLOCKUP [ 273.161773][T11332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.161782][T11332] Call Trace: [ 273.161789][T11332] [ 273.161796][T11332] dump_stack_lvl+0x100/0x190 [ 273.161820][T11332] should_fail_ex.cold+0x5/0xa [ 273.161839][T11332] should_failslab+0xc2/0x120 [ 273.161862][T11332] __kmalloc_noprof+0xfc/0x820 [ 273.161906][T11332] ? rcu_is_watching+0x12/0xc0 [ 273.161929][T11332] ? tomoyo_realpath_from_path+0xb6/0x690 [ 273.161958][T11332] tomoyo_realpath_from_path+0xb6/0x690 [ 273.161981][T11332] tomoyo_path_number_perm+0x23c/0x580 [ 273.161995][T11332] ? tomoyo_path_number_perm+0x22e/0x580 [ 273.162010][T11332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.162024][T11332] ? get_pid_task+0x106/0x250 [ 273.162051][T11332] ? find_held_lock+0x2b/0x80 [ 273.162066][T11332] ? __fget_files+0x215/0x3d0 [ 273.162076][T11332] ? hook_file_ioctl_common+0x140/0x440 [ 273.162090][T11332] ? __fget_files+0x215/0x3d0 [ 273.162102][T11332] ? __fget_files+0x21f/0x3d0 [ 273.162114][T11332] security_file_ioctl_compat+0xd3/0x230 [ 273.162130][T11332] __ia32_compat_sys_ioctl+0xc2/0x360 [ 273.162148][T11332] __do_fast_syscall_32+0xe7/0x970 [ 273.162163][T11332] ? lockdep_hardirqs_on+0x78/0x100 [ 273.162176][T11332] do_fast_syscall_32+0x32/0x70 [ 273.162191][T11332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.162205][T11332] RIP: 0023:0xf7f95fec [ 273.162219][T11332] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 273.162225][T11332] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 273.162235][T11332] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 273.162243][T11332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.162249][T11332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.162255][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.162262][T11332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.162283][T11332] [ 273.162290][T11332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.314381][ T5740] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 273.384632][ T6159] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 273.474727][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 273.477761][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.481228][ T5740] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.484134][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.490555][ T5740] usb 6-1: config 0 descriptor?? [ 273.574575][ T6159] usb 9-1: Using ep0 maxpacket: 32 [ 273.577994][ T6159] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.583726][ T6159] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.589202][ T6159] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.595230][ T6159] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 273.598661][ T6159] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.602771][ T6159] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.609516][ T6159] usb 9-1: config 0 descriptor?? [ 273.643128][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1526'. [ 273.701130][ T5740] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 274.375460][ T10] usb 6-1: USB disconnect, device number 32 [ 275.397453][T11403] syzkaller0: entered promiscuous mode [ 275.399589][T11403] syzkaller0: entered allmulticast mode [ 275.796337][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 275.825900][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 276.059926][T11420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.065444][T11420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.068136][ T5740] usb 9-1: USB disconnect, device number 31 [ 276.069810][T11420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.065284][ T29] usb 46-1: device descriptor read/8, error -110 [ 277.226445][ T42] audit: type=1804 audit(1785048785.074:6525): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1557" name="/newroot/382/cgroup.controllers" dev="tmpfs" ino=2074 res=1 errno=0 [ 277.267935][ T42] audit: type=1800 audit(1785048785.074:6526): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1557" name="cgroup.controllers" dev="tmpfs" ino=2074 res=0 errno=0 [ 277.317312][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1559'. [ 277.414378][ T6159] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 277.537521][ T29] usb usb46-port1: attempt power cycle [ 277.574467][ T6159] usb 6-1: Using ep0 maxpacket: 32 [ 277.577703][ T6159] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.584461][ T6159] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.589746][ T6159] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.593794][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 277.596891][ T6159] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 277.600112][ T6159] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 277.606045][ T6159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.610296][ T6159] usb 6-1: config 0 descriptor?? [ 277.741934][T11473] bridge_slave_0: default FDB implementation only supports local addresses [ 277.907760][T11476] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 277.973217][T11477] netlink: 'syz.3.1565': attribute type 10 has an invalid length. [ 277.976849][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1565'. [ 278.106209][ T29] usb usb46-port1: unable to enumerate USB device [ 280.200181][ T29] usb 6-1: USB disconnect, device number 33 [ 280.234551][ T1356] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 280.374399][ T1356] usb 8-1: device descriptor read/64, error -71 [ 280.614469][ T1356] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 280.713878][T11519] bond0: entered promiscuous mode [ 280.715734][T11519] bond_slave_0: entered promiscuous mode [ 280.718297][T11519] bond_slave_1: entered promiscuous mode [ 280.726810][T11519] batadv0: entered promiscuous mode [ 280.737156][T11519] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 280.745550][ T1356] usb 8-1: device descriptor read/64, error -71 [ 280.747762][T11519] bond0: left promiscuous mode [ 280.749444][T11519] bond_slave_0: left promiscuous mode [ 280.752108][T11519] bond_slave_1: left promiscuous mode [ 280.755814][T11519] batadv0: left promiscuous mode [ 280.782123][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.784631][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.854596][ T1356] usb usb8-port1: attempt power cycle [ 281.194363][ T1356] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 281.215127][ T1356] usb 8-1: device descriptor read/8, error -71 [ 281.464822][ T1356] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 281.485324][ T1356] usb 8-1: device descriptor read/8, error -71 [ 281.594725][ T1356] usb usb8-port1: unable to enumerate USB device [ 281.952233][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 282.881922][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 283.145131][ T6159] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 283.187635][T11586] lo speed is unknown, defaulting to 1000 [ 283.200737][T11586] lo speed is unknown, defaulting to 1000 [ 283.204781][T11586] lo speed is unknown, defaulting to 1000 [ 283.287062][ T6159] usb 6-1: device descriptor read/64, error -71 [ 283.555075][ T6159] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 283.684377][ T6159] usb 6-1: device descriptor read/64, error -71 [ 283.794707][ T6159] usb usb6-port1: attempt power cycle [ 284.072067][T11604] input: syz1 as /devices/virtual/input/input75 [ 284.134502][ T6159] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 284.155063][ T6159] usb 6-1: device descriptor read/8, error -71 [ 284.624600][ T6159] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 284.657882][ T6159] usb 6-1: device descriptor read/8, error -71 [ 284.774778][ T6159] usb usb6-port1: unable to enumerate USB device [ 284.820330][T11624] tipc: Enabled bearer , priority 10 [ 284.865526][T11626] binder_alloc: binder_alloc_mmap_handler: 11620 80ffc000-81000000 already mapped failed -16 [ 284.883194][T11627] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 285.179346][T11626] lo speed is unknown, defaulting to 1000 [ 285.182571][T11626] lo speed is unknown, defaulting to 1000 [ 285.185728][T11626] lo speed is unknown, defaulting to 1000 [ 286.654494][ T5835] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 286.814410][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 286.816200][ T5835] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.816223][ T5835] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.816240][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.816257][ T5835] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.816295][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.816314][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 286.816346][ T5835] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.816366][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.827529][ T5835] usb 6-1: config 0 descriptor?? [ 286.980072][T11670] syzkaller0: entered promiscuous mode [ 286.981803][T11670] syzkaller0: entered allmulticast mode [ 288.211468][T11698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1625'. [ 288.256847][T11698] 9p: Bad value for 'rfdno' [ 288.501310][T11642] syz.2.1609 (11642) used greatest stack depth: 19536 bytes left [ 288.757708][T11723] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 289.396139][T11729] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 289.562665][ T5835] usb 6-1: USB disconnect, device number 38 [ 290.286457][T11725] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 290.933892][ T6159] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 290.953776][ T6159] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 290.981557][ T6159] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 291.011530][ T6159] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 291.025998][ T6159] rtc rtc0: __rtc_set_alarm: err=-22 [ 291.242116][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 291.426084][ T5855] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 291.576495][ T5855] usb 7-1: Using ep0 maxpacket: 32 [ 291.601147][ T5855] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.605789][ T5855] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.608634][ T5855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.611826][ T5855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.617751][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.621842][ T5855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 291.629539][ T5855] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.632646][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.645301][ T5855] usb 7-1: config 0 descriptor?? [ 291.917198][T11783] lo speed is unknown, defaulting to 1000 [ 291.922589][T11783] lo speed is unknown, defaulting to 1000 [ 291.928999][T11783] lo speed is unknown, defaulting to 1000 [ 291.936034][T11790] binder: BINDER_SET_CONTEXT_MGR already set [ 291.938008][T11790] binder: 11789:11790 ioctl 4018620d 80000180 returned -16 [ 292.935466][T11820] netlink: 'syz.1.1657': attribute type 25 has an invalid length. [ 292.938206][T11820] netlink: 'syz.1.1657': attribute type 25 has an invalid length. [ 293.207267][T11830] xt_connbytes: Forcing CT accounting to be enabled [ 293.209415][T11830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.267767][ T117] libceph: connect (1)[c::]:6789 error -101 [ 293.270936][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 293.527838][ T117] libceph: connect (1)[c::]:6789 error -101 [ 293.530371][ T117] libceph: mon0 (1)[c::]:6789 connect error [ 293.898968][T11830] ceph: No mds server is up or the cluster is laggy [ 294.150624][ T117] usb 7-1: USB disconnect, device number 19 [ 294.221231][T11859] input: syz0 as /devices/virtual/input/input76 [ 294.312705][T11866] veth1_to_batadv: mtu less than device minimum [ 294.688827][T11881] nfs4: Bad value for 'source' [ 295.304392][ T6159] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 295.309843][T11862] Set syz1 is full, maxelem 65536 reached [ 295.465738][ T6159] usb 9-1: Using ep0 maxpacket: 32 [ 295.470066][ T6159] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.473557][ T6159] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.477907][ T6159] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.481140][ T6159] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.484508][ T6159] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.487844][ T6159] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 295.491818][ T6159] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.496132][ T6159] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.499994][ T6159] usb 9-1: config 0 descriptor?? [ 295.505068][ T29] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 295.624559][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 295.674976][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 295.679073][ T29] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.684934][ T29] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.690171][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.697959][ T29] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 295.705954][ T29] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.711485][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.719912][ T29] usb 8-1: config 0 descriptor?? [ 296.879501][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 297.162088][T11915] efs: device does not support 512 byte blocks [ 297.167529][T11915] device does not support 512 byte blocks [ 297.167529][T11915] [ 297.931422][T11926] netlink: 544 bytes leftover after parsing attributes in process `syz.1.1690'. [ 298.056864][ T9] usb 9-1: USB disconnect, device number 32 [ 298.301504][ T117] usb 8-1: USB disconnect, device number 33 [ 298.414445][T11940] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 6 out of range (51000000..2150000000) [ 298.433069][T11940] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1693'. [ 298.694886][ T5855] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 298.864747][ T5855] usb 9-1: Using ep0 maxpacket: 8 [ 298.867658][ T5855] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.870334][ T5855] usb 9-1: config 179 has no interface number 0 [ 298.872297][ T5855] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 298.876156][ T5855] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 298.879629][ T5855] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.883003][ T5855] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 298.886948][ T5855] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.890987][ T5855] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 298.894029][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.898683][T11944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.566876][ T6159] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 299.714419][ T6159] usb 8-1: Using ep0 maxpacket: 32 [ 299.727349][ T6159] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 299.750558][ T6159] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 299.773203][ T6159] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.799782][ T6159] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 299.819338][ T6159] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.825600][ T6159] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.829521][ T6159] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 299.835264][ T6159] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 299.836669][ T42] audit: type=1800 audit(1785048807.684:6527): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1702" name="p_chmask" dev="configfs" ino=40710 res=0 errno=0 [ 299.838726][ T6159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.850343][ T6159] usb 8-1: config 0 descriptor?? [ 299.930081][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 299.932667][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 299.936981][ T117] usb 9-1: USB disconnect, device number 33 [ 300.363987][T11984] syzkaller0: entered promiscuous mode [ 300.366364][T11984] syzkaller0: entered allmulticast mode [ 300.878172][T11990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.884117][T12000] siw: device registration error -23 [ 301.134620][ T5835] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 301.276101][T12002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 301.278318][T12002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 301.281951][T12002] vhci_hcd vhci_hcd.0: Device attached [ 301.304825][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 301.309437][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 301.318043][ T5835] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 301.322072][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.325724][ T5835] usb 6-1: Product: syz [ 301.327727][ T5835] usb 6-1: Manufacturer: syz [ 301.329793][ T5835] usb 6-1: SerialNumber: syz [ 301.333697][ T5835] usb 6-1: config 0 descriptor?? [ 301.338280][ T5835] hub 6-1:0.0: bad descriptor, ignoring hub [ 301.341081][ T5835] hub 6-1:0.0: probe with driver hub failed with error -5 [ 301.346011][ T5835] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.544841][ T5855] usb 46-1: SetAddress Request (14) to port 0 [ 301.546829][ T5855] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 301.597546][ T10] usb 6-1: USB disconnect, device number 39 [ 301.817450][T12005] vhci_hcd: connection reset by peer [ 301.819448][T10212] vhci_hcd vhci_hcd.4: stop threads [ 301.821135][T10212] vhci_hcd vhci_hcd.4: release socket [ 301.823024][T10212] vhci_hcd vhci_hcd.4: disconnect device [ 302.049311][T12009] ISOFS: Unable to identify CD-ROM format. [ 302.243530][ T6468] usb 8-1: USB disconnect, device number 34 [ 302.305229][ T5835] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 302.465822][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.470765][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.474869][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.478933][ T5835] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.481826][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.485866][ T5835] usb 7-1: config 0 descriptor?? [ 302.577947][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 302.898601][ T5835] hid_parser_main: 73 callbacks suppressed [ 302.898616][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 302.905267][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 302.907709][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 302.912391][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 302.914844][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 302.930389][ T5835] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 303.545355][T12052] Invalid ELF header magic: != ELF [ 303.634374][ T5835] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 303.785008][ T5835] usb 8-1: Using ep0 maxpacket: 32 [ 303.788460][ T5835] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.791370][ T5835] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.794190][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.797850][ T5835] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.800843][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.804094][ T5835] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.807785][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 303.812027][ T5835] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 303.815404][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.819792][ T5835] usb 8-1: config 0 descriptor?? [ 304.245179][ T6468] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 305.701597][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1738'. [ 306.015890][ T50] usb 7-1: USB disconnect, device number 20 [ 306.062217][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 306.395840][ T5835] usb 8-1: USB disconnect, device number 35 [ 306.455840][T12104] syzkaller0: entered promiscuous mode [ 306.458276][T12104] syzkaller0: entered allmulticast mode [ 306.475486][T12108] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 306.584956][ T5855] usb 46-1: device descriptor read/8, error -110 [ 306.824443][ T5835] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 306.975539][ T5855] usb usb46-port1: attempt power cycle [ 306.984612][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 306.988615][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.993640][ T5835] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 306.997985][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.004413][ T5835] usb 8-1: config 0 descriptor?? [ 307.214171][ T5835] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 307.259364][ T9] usb 8-1: USB disconnect, device number 36 [ 307.617160][ T5855] usb usb46-port1: unable to enumerate USB device [ 307.844353][ T6159] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 308.004462][ T6159] usb 6-1: Using ep0 maxpacket: 8 [ 308.012352][ T6159] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 308.020228][ T6159] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.028132][ T6159] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.036936][ T6159] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.041305][ T6159] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.045544][ T6159] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.048418][ T6159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.314385][ T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 308.479004][T12137] overlay: ./file0 is not a directory [ 308.495649][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 308.815314][T12142] usbtmc 6-1:16.0: simple usb_control_msg returned 0 [ 309.014470][ T5740] usb 6-1: USB disconnect, device number 40 [ 309.045084][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 309.277702][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 309.280858][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.283957][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 309.287135][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.290552][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 309.293855][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 309.298527][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 309.301488][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.305535][ T10] usb 8-1: config 0 descriptor?? [ 309.597051][T12159] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 309.908547][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 310.058850][T12174] lo speed is unknown, defaulting to 1000 [ 310.061619][T12174] lo speed is unknown, defaulting to 1000 [ 310.064148][T12174] lo speed is unknown, defaulting to 1000 [ 311.054637][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 311.153011][ T50] usb 8-1: USB disconnect, device number 37 [ 311.214756][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 311.217676][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.223836][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.230895][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.242209][ T9] usb 6-1: config 0 descriptor?? [ 311.452164][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 311.853880][T12184] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1768'. [ 311.857550][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 311.860951][T12184] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1768'. [ 311.870514][ T5838] usb 6-1: USB disconnect, device number 41 [ 312.778638][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1779'. [ 312.933554][T12222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.034418][ T846] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 313.204351][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 313.207475][ T846] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 313.210096][ T846] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.212751][ T846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.215806][ T846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.218815][ T846] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.221786][ T846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.228280][ T846] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.232808][ T846] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.235634][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.275794][ T846] usb 6-1: config 0 descriptor?? [ 314.159422][T12254] input: syz1 as /devices/virtual/input/input77 [ 315.439875][T12303] netlink: 'syz.3.1806': attribute type 3 has an invalid length. [ 315.561752][ T9] usb 6-1: USB disconnect, device number 42 [ 315.710263][T12312] input: syz1 as /devices/virtual/input/input78 [ 316.045258][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1811'. [ 316.048680][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 316.431916][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1813'. [ 316.514412][ T6159] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 316.596162][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.675568][ T6159] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.679071][ T6159] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.682466][ T6159] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.685741][ T6159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.690756][T12325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.695164][ T6159] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.789677][T12340] ptrace attach of "/syz-executor exec"[6944] was attempted by "/syz-executor exec"[12340] [ 316.898091][ T117] usb 7-1: USB disconnect, device number 21 [ 317.064531][ T5838] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 317.149865][ T42] audit: type=1800 audit(1785048824.994:6528): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1812" name="p_mute_present" dev="configfs" ino=42826 res=0 errno=0 [ 317.215866][ T5838] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 317.220582][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.224980][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.229230][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.232582][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.236805][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.240342][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.243023][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.246101][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.249198][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.251857][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.254981][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.258212][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.260927][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.263548][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.267086][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.269748][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.272387][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.275880][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.278454][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.281000][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.284103][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.287281][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.289752][ T5838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.292789][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.298209][ T5838] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 317.301345][ T5838] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 317.304832][ T5838] usb 8-1: Product: syz [ 317.306135][ T5838] usb 8-1: Manufacturer: syz [ 317.307549][ T5838] usb 8-1: SerialNumber: syz [ 317.311283][ T5838] usb 8-1: config 0 descriptor?? [ 317.317007][ T5838] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 317.580675][T12343] tmpfs: Unknown parameter 'usrquota000000000000000008' [ 317.587236][ T6159] usb 8-1: USB disconnect, device number 38 [ 317.598466][ T6159] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 318.220611][T12364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 318.222697][T12364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.225885][T12365] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 318.227965][T12365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.230441][T12364] vhci_hcd vhci_hcd.0: Device attached [ 318.231063][T12365] vhci_hcd vhci_hcd.0: Device attached [ 318.477188][T12366] vhci_hcd: connection closed [ 318.477488][T12368] vhci_hcd: connection closed [ 318.479697][ T8882] vhci_hcd vhci_hcd.3: stop threads [ 318.487488][ T8882] vhci_hcd vhci_hcd.3: release socket [ 318.491951][ T8882] vhci_hcd vhci_hcd.3: disconnect device [ 318.494592][ T8882] vhci_hcd vhci_hcd.3: stop threads [ 318.496199][ T8882] vhci_hcd vhci_hcd.3: release socket [ 318.500145][ T8882] vhci_hcd vhci_hcd.3: disconnect device [ 318.544390][ T6468] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 318.550043][ T6468] usb 43-1: enqueue for inactive port 0 [ 318.624862][ T6468] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 318.691252][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1831'. [ 318.935635][T12397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1835'. [ 318.937523][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 318.943885][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1835'. [ 318.947318][T12398] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1836'. [ 318.957563][T12397] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1835'. [ 319.117402][T12403] geneve3: entered promiscuous mode [ 319.121976][ T8882] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 38385 - 0 [ 319.129017][ T8882] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 38385 - 0 [ 319.134722][T12403] siw: device registration error -23 [ 319.138958][ T8882] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 38385 - 0 [ 319.150392][ T8882] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 38385 - 0 [ 319.158395][T12405] netlink: 'syz.4.1838': attribute type 8 has an invalid length. [ 319.734990][ T117] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 319.886134][ T117] usb 7-1: Using ep0 maxpacket: 32 [ 319.892582][ T117] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.905107][ T117] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.913279][ T117] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.925143][ T117] usb 7-1: config 0 interface 0 has no altsetting 0 [ 319.930099][ T117] usb 7-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 319.939562][ T117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.950549][ T117] usb 7-1: config 0 descriptor?? [ 320.402221][ T117] wacom 0003:056A:0002.0007: unexpected long global item [ 320.406397][ T117] wacom 0003:056A:0002.0007: parse failed [ 320.409893][ T117] wacom 0003:056A:0002.0007: probe with driver wacom failed with error -22 [ 320.599151][ T117] usb 7-1: USB disconnect, device number 22 [ 320.813584][T12432] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 320.884488][T12433] netlink: 'syz.1.1847': attribute type 10 has an invalid length. [ 320.888908][T12433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1847'. [ 320.904698][T12433] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 321.298440][T12440] binder: 12439:12440 ioctl c00c6211 0 returned -14 [ 321.928807][T12446] lo speed is unknown, defaulting to 1000 [ 321.932588][T12446] lo speed is unknown, defaulting to 1000 [ 321.936803][T12446] lo speed is unknown, defaulting to 1000 [ 322.176156][T12451] syzkaller0: entered promiscuous mode [ 322.178199][T12451] syzkaller0: entered allmulticast mode [ 322.676078][T12460] bridge_slave_0: left allmulticast mode [ 322.678156][T12460] bridge_slave_0: left promiscuous mode [ 322.679996][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.684757][T12460] bridge_slave_1: left allmulticast mode [ 322.686593][T12460] bridge_slave_1: left promiscuous mode [ 322.688482][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.705529][T12460] bond0: (slave bond_slave_0): Releasing backup interface [ 322.710908][T12460] bond0: (slave bond_slave_1): Releasing backup interface [ 322.729729][T12460] team0: Port device team_slave_0 removed [ 322.735450][T12460] team0: Port device team_slave_1 removed [ 322.737725][T12460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.740191][T12460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.743595][T12460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.746819][T12460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.750629][T12460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.766749][ T117] lo speed is unknown, defaulting to 1000 [ 322.901546][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 323.020820][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1858'. [ 323.181956][T12483] syzkaller0: entered promiscuous mode [ 323.187040][T12483] syzkaller0: entered allmulticast mode [ 323.665637][T10826] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 323.844547][T10826] usb 9-1: Using ep0 maxpacket: 32 [ 323.873022][T10826] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.893066][T10826] usb 9-1: config 0 has no interfaces? [ 323.898999][T10826] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.902723][T10826] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.906724][T10826] usb 9-1: Product: syz [ 323.912892][T10826] usb 9-1: Manufacturer: syz [ 323.917540][T10826] usb 9-1: SerialNumber: syz [ 323.942317][T10826] usb 9-1: config 0 descriptor?? [ 324.704123][ T9] usb 9-1: USB disconnect, device number 34 [ 325.851994][T12533] input: syz1 as /devices/virtual/input/input80 [ 326.879460][T12583] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 326.882868][T12583] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1890'. [ 327.081654][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 327.535260][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 327.766852][T12610] syzkaller0: entered promiscuous mode [ 327.768675][T12610] syzkaller0: entered allmulticast mode [ 328.834913][ T5855] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 328.996137][ T5855] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 328.999134][ T5855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.002264][ T5855] usb 7-1: config 1 has no interface number 0 [ 329.004740][ T5855] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 329.007453][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.229934][ T5855] usb 7-1: USB disconnect, device number 23 [ 330.337561][T12666] pci 0000:00:04.0: PCI bridge to [bus 01] [ 330.341510][T12666] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 330.347080][T12666] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 330.351456][T12666] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 330.648766][T12675] FAULT_INJECTION: forcing a failure. [ 330.648766][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.652806][T12675] CPU: 3 UID: 0 PID: 12675 Comm: syz.1.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.652824][T12675] Tainted: [L]=SOFTLOCKUP [ 330.652828][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.652834][T12675] Call Trace: [ 330.652838][T12675] [ 330.652843][T12675] dump_stack_lvl+0x100/0x190 [ 330.652859][T12675] should_fail_ex.cold+0x5/0xa [ 330.652873][T12675] _copy_from_user+0x2e/0xd0 [ 330.652891][T12675] get_compat_msghdr+0xb3/0x480 [ 330.652909][T12675] ? __pfx_get_compat_msghdr+0x10/0x10 [ 330.652930][T12675] ___sys_sendmsg+0x1b6/0x1e0 [ 330.652943][T12675] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.652960][T12675] ? find_held_lock+0x2b/0x80 [ 330.652982][T12675] __sys_sendmsg+0x160/0x210 [ 330.652998][T12675] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.653016][T12675] ? __pfx_ksys_write+0x10/0x10 [ 330.653029][T12675] __do_fast_syscall_32+0xe7/0x970 [ 330.653043][T12675] ? lockdep_hardirqs_on+0x78/0x100 [ 330.653057][T12675] do_fast_syscall_32+0x32/0x70 [ 330.653071][T12675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.653085][T12675] RIP: 0023:0xf70aefec [ 330.653099][T12675] Code: Unable to access opcode bytes at 0xf70aefc2. [ 330.653104][T12675] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 330.653114][T12675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 330.653121][T12675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.653127][T12675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.653133][T12675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 330.653139][T12675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.653152][T12675] [ 331.619108][T12692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 331.655452][T12697] binder: BINDER_SET_CONTEXT_MGR already set [ 331.670371][T12697] binder: 12694:12697 ioctl 4018620d 80000180 returned -16 [ 331.723326][T12701] : renamed from dummy0 [ 331.988197][T12711] syzkaller0: entered promiscuous mode [ 331.990137][T12711] syzkaller0: entered allmulticast mode [ 332.223390][ C0] process 12688 (syz.4.1923) no longer affine to cpu1 [ 332.287032][T12720] loop5: detected capacity change from 0 to 7 [ 332.287431][T12713] smpboot: CPU 1 is now offline [ 332.294898][T12720] Dev loop5: unable to read RDB block 7 [ 332.296736][T12720] loop5: unable to read partition table [ 332.308191][T12720] loop5: partition table beyond EOD, truncated [ 332.313752][T12720] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 332.399824][T12713] smpboot: CPU 3 is now offline [ 333.391558][T12740] openvswitch: netlink: Flow actions attr not present in new flow. [ 333.922763][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.946506][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.174597][ T5740] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 334.354535][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 334.360991][ T5740] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 334.367061][ T5740] usb 6-1: config 0 has no interface number 0 [ 334.372430][ T5740] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.382512][ T5740] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 334.392259][ T5740] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.405004][ T5740] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 334.416828][ T5740] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.430284][ T5740] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 334.440676][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.468179][T12762] overlayfs: workdir and upperdir must reside under the same mount [ 334.526155][ T5740] usb 6-1: config 0 descriptor?? [ 334.554825][ T5740] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 334.736884][ T5740] usb 6-1: USB disconnect, device number 43 [ 334.756969][ T5740] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 335.206811][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 335.594378][ T5740] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 335.804639][ T5740] usb 6-1: Using ep0 maxpacket: 16 [ 335.808471][ T5740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.812695][ T5740] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.821464][ T5740] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.824791][ T5740] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.827919][ T5740] usb 6-1: Manufacturer: syz [ 335.836120][ T5740] usb 6-1: config 0 descriptor?? [ 336.053460][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.059531][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.565852][ T5835] usb 6-1: USB disconnect, device number 44 [ 337.538403][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 338.183722][T12835] input: syz0 as /devices/virtual/input/input82 [ 339.889514][T12872] Cannot find set identified by id 2 to match [ 339.915178][ T9] libceph: connect (1)[c::]:6789 error -101 [ 339.917216][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 340.073337][ T42] audit: type=1326 audit(1785048847.914:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.092525][ T42] audit: type=1326 audit(1785048847.914:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.118656][T12855] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 340.125788][ T42] audit: type=1326 audit(1785048847.964:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.146562][ T42] audit: type=1326 audit(1785048847.964:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.169102][ T42] audit: type=1326 audit(1785048847.964:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.186001][ T42] audit: type=1326 audit(1785048847.964:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.195135][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 340.197832][T12855] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 340.201632][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 340.209163][T12855] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 340.211278][ T42] audit: type=1326 audit(1785048847.964:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.225594][T12855] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 340.229937][T12855] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 340.234128][ T42] audit: type=1326 audit(1785048847.964:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.4.1974" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 340.244517][T12855] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14362 usecs [ 340.316705][T12855] pci 0000:00:01.0: Adding to iommu group 1 [ 340.356371][T12855] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 340.358514][T12855] pci 0000:00:01.0: vgaarb: bridge control possible [ 340.360433][T12855] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 340.389482][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 340.397273][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 340.420637][T12855] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 340.440437][T12855] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 340.452561][T12855] pci 0000:00:04.0: PCI bridge to [bus 01] [ 340.463088][T12872] ceph: No mds server is up or the cluster is laggy [ 340.467594][T12855] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 340.472692][T12855] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 340.488269][T12855] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 340.497897][T12855] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 340.518860][T12855] [drm] Found bochs VGA, ID 0xb0c5. [ 340.521502][T12855] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 340.537183][T12855] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 342.464821][ T5835] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 342.646337][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 342.728291][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 342.736450][T12957] binder: 12950:12957 ioctl c0306201 80000640 returned -22 [ 342.740782][ T5835] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 342.743775][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.747814][ T5835] usb 8-1: Product: syz [ 342.749247][ T5835] usb 8-1: Manufacturer: syz [ 342.750862][ T5835] usb 8-1: SerialNumber: syz [ 342.758933][ T5835] usb 8-1: config 0 descriptor?? [ 342.763584][ T5835] hub 8-1:0.0: bad descriptor, ignoring hub [ 342.766586][ T5835] hub 8-1:0.0: probe with driver hub failed with error -5 [ 342.770967][ T5835] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input84 [ 343.222548][T12972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.894977][T12986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 343.896961][T12986] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.919453][T12986] vhci_hcd vhci_hcd.0: Device attached [ 344.184822][ T10] usb 40-1: SetAddress Request (10) to port 0 [ 344.189045][ T10] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 344.431373][T12995] netlink: 'syz.4.2005': attribute type 11 has an invalid length. [ 344.595229][T12987] vhci_hcd: connection reset by peer [ 344.601812][T10216] vhci_hcd vhci_hcd.1: stop threads [ 344.608701][T10216] vhci_hcd vhci_hcd.1: release socket [ 344.616058][T10216] vhci_hcd vhci_hcd.1: disconnect device [ 344.641943][T12996] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 345.480185][ T995] usb 8-1: USB disconnect, device number 39 [ 345.499915][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.502108][T13003] FAULT_INJECTION: forcing a failure. [ 345.502108][T13003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.515957][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.521699][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.525932][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.528553][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.554128][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.560881][T13003] CPU: 0 UID: 0 PID: 13003 Comm: syz.3.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.560899][T13003] Tainted: [L]=SOFTLOCKUP [ 345.560903][T13003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.560909][T13003] Call Trace: [ 345.560913][T13003] [ 345.560917][T13003] dump_stack_lvl+0x100/0x190 [ 345.560988][T13003] should_fail_ex.cold+0x5/0xa [ 345.561001][T13003] _copy_to_user+0x32/0xd0 [ 345.561039][T13003] simple_read_from_buffer+0xcb/0x170 [ 345.561058][T13003] proc_fail_nth_read+0x1af/0x230 [ 345.561074][T13003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.561090][T13003] ? rw_verify_area+0xce/0x6d0 [ 345.561105][T13003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.561120][T13003] vfs_read+0x1e4/0xb40 [ 345.561139][T13003] ? __pfx_vfs_read+0x10/0x10 [ 345.561155][T13003] ? find_held_lock+0x2b/0x80 [ 345.561170][T13003] ? __fget_files+0x215/0x3d0 [ 345.561182][T13003] ? __fget_files+0x21f/0x3d0 [ 345.561195][T13003] ksys_read+0x12a/0x250 [ 345.561205][T13003] ? __pfx_ksys_read+0x10/0x10 [ 345.561218][T13003] do_int80_emulation+0x14b/0x720 [ 345.561264][T13003] asm_int80_emulation+0x1a/0x20 [ 345.561276][T13003] RIP: 0023:0xf71472eb [ 345.561285][T13003] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 345.561295][T13003] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 345.561306][T13003] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f53fd5d0 [ 345.561313][T13003] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 345.561318][T13003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.561324][T13003] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.561330][T13003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.561344][T13003] [ 345.561519][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.631576][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.657806][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.670469][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.956202][T13029] input: syz0 as /devices/virtual/input/input85 [ 346.040884][T13005] lo speed is unknown, defaulting to 1000 [ 346.073131][T13040] netlink: 'syz.1.2020': attribute type 12 has an invalid length. [ 346.091073][T13005] lo speed is unknown, defaulting to 1000 [ 346.132945][T13005] lo speed is unknown, defaulting to 1000 [ 346.412450][T13047] tipc: Started in network mode [ 346.419706][T13047] tipc: Node identity dafcc716b6c5, cluster identity 4711 [ 346.425035][T13047] tipc: Enabled bearer , priority 0 [ 346.438705][T13047] syzkaller0: entered promiscuous mode [ 346.446440][T13047] syzkaller0: entered allmulticast mode [ 346.554216][ T8882] erspan0: left allmulticast mode [ 346.564917][ T8882] erspan0: left promiscuous mode [ 346.566701][ T8882] bridge0: port 3(erspan0) entered disabled state [ 346.571905][ T8882] öD: left allmulticast mode [ 346.590069][ T8882] öD: left promiscuous mode [ 346.593566][ T8882] bridge0: port 2(öD) entered disabled state [ 346.605059][ T8882] bridge_slave_0: left allmulticast mode [ 346.608179][ T8882] bridge_slave_0: left promiscuous mode [ 346.610271][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.633998][T13055] FAULT_INJECTION: forcing a failure. [ 346.633998][T13055] name failslab, interval 1, probability 0, space 0, times 0 [ 346.643561][T13055] CPU: 2 UID: 0 PID: 13055 Comm: syz.3.2022 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.643581][T13055] Tainted: [L]=SOFTLOCKUP [ 346.643585][T13055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.643591][T13055] Call Trace: [ 346.643595][T13055] [ 346.643599][T13055] dump_stack_lvl+0x100/0x190 [ 346.643616][T13055] should_fail_ex.cold+0x5/0xa [ 346.643629][T13055] should_failslab+0xc2/0x120 [ 346.643644][T13055] kmem_cache_alloc_noprof+0x91/0x6a0 [ 346.643659][T13055] ? skb_clone+0x190/0x400 [ 346.643676][T13055] skb_clone+0x190/0x400 [ 346.643691][T13055] nfnetlink_rcv_batch+0x1c8/0x2880 [ 346.643709][T13055] ? kmem_cache_free+0x127/0x6b0 [ 346.643723][T13055] ? kfree_skbmem+0x19f/0x210 [ 346.643734][T13055] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 346.643749][T13055] ? find_held_lock+0x2b/0x80 [ 346.643763][T13055] ? __dev_queue_xmit+0xa12/0x4970 [ 346.643775][T13055] ? __local_bh_enable_ip+0x9e/0x120 [ 346.643788][T13055] ? lockdep_hardirqs_on+0x78/0x100 [ 346.643809][T13055] ? __dev_queue_xmit+0xa12/0x4970 [ 346.643826][T13055] ? __asan_memset+0x23/0x50 [ 346.643838][T13055] ? __nla_validate_parse+0x1e7/0x28b0 [ 346.643854][T13055] ? __pfx___nla_validate_parse+0x10/0x10 [ 346.643867][T13055] ? rcu_is_watching+0x12/0xc0 [ 346.643880][T13055] ? apparmor_capable+0x1d7/0x4d0 [ 346.643896][T13055] ? __nla_parse+0x40/0x60 [ 346.643910][T13055] nfnetlink_rcv+0x3bd/0x440 [ 346.643925][T13055] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 346.643942][T13055] netlink_unicast+0x585/0x850 [ 346.643956][T13055] ? __pfx_netlink_unicast+0x10/0x10 [ 346.643971][T13055] netlink_sendmsg+0x8b0/0xda0 [ 346.643985][T13055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.643998][T13055] ? apparmor_socket_sendmsg+0x15b/0x270 [ 346.644011][T13055] ____sys_sendmsg+0xa4d/0xbe0 [ 346.644021][T13055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.644033][T13055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.644050][T13055] ___sys_sendmsg+0x190/0x1e0 [ 346.644062][T13055] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.644079][T13055] ? find_held_lock+0x2b/0x80 [ 346.644100][T13055] __sys_sendmsg+0x160/0x210 [ 346.644115][T13055] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.644133][T13055] ? __pfx_ksys_write+0x10/0x10 [ 346.644147][T13055] __do_fast_syscall_32+0xe7/0x970 [ 346.644160][T13055] ? lockdep_hardirqs_on+0x78/0x100 [ 346.644174][T13055] do_fast_syscall_32+0x32/0x70 [ 346.644188][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.644202][T13055] RIP: 0023:0xf700efec [ 346.644215][T13055] Code: Unable to access opcode bytes at 0xf700efc2. [ 346.644220][T13055] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 346.644231][T13055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 346.644238][T13055] RDX: 0000000000008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.644244][T13055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.644250][T13055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.644269][T13055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.644283][T13055] [ 346.879731][T13062] FAULT_INJECTION: forcing a failure. [ 346.879731][T13062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.888193][T13062] CPU: 2 UID: 0 PID: 13062 Comm: syz.3.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.888211][T13062] Tainted: [L]=SOFTLOCKUP [ 346.888215][T13062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.888222][T13062] Call Trace: [ 346.888226][T13062] [ 346.888230][T13062] dump_stack_lvl+0x100/0x190 [ 346.888246][T13062] should_fail_ex.cold+0x5/0xa [ 346.888259][T13062] _copy_to_iter+0x5a4/0x1720 [ 346.888278][T13062] ? __pfx__copy_to_iter+0x10/0x10 [ 346.888301][T13062] simple_copy_to_iter+0x46/0x90 [ 346.888313][T13062] __skb_datagram_iter+0x5c8/0x900 [ 346.888324][T13062] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 346.888340][T13062] skb_copy_datagram_iter+0xa1/0x250 [ 346.888354][T13062] unix_stream_read_actor+0x7b/0xc0 [ 346.888373][T13062] unix_stream_read_generic+0xd6c/0x2c00 [ 346.888395][T13062] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 346.888411][T13062] ? __lock_acquire+0x49f/0x1a40 [ 346.888430][T13062] ? __pfx_autoremove_wake_function+0x10/0x10 [ 346.888450][T13062] unix_stream_recvmsg+0x18d/0x1c0 [ 346.888464][T13062] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 346.888478][T13062] ? is_bpf_text_address+0x8a/0x1a0 [ 346.888493][T13062] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 346.888512][T13062] ? copy_compat_iovec_from_user+0x13a/0x180 [ 346.888528][T13062] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 346.888541][T13062] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 346.888555][T13062] sock_recvmsg+0x1d5/0x220 [ 346.888566][T13062] ____sys_recvmsg+0x21e/0x670 [ 346.888579][T13062] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.888595][T13062] ? __lock_acquire+0x49f/0x1a40 [ 346.888614][T13062] ___sys_recvmsg+0x16a/0x1a0 [ 346.888625][T13062] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.888648][T13062] do_recvmmsg+0x54d/0x740 [ 346.888661][T13062] ? __pfx_do_recvmmsg+0x10/0x10 [ 346.888673][T13062] ? find_held_lock+0x2b/0x80 [ 346.888687][T13062] ? ksys_write+0x190/0x250 [ 346.888696][T13062] ? ksys_write+0x190/0x250 [ 346.888711][T13062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.888727][T13062] __sys_recvmmsg+0x21f/0x270 [ 346.888743][T13062] ? __pfx___sys_recvmmsg+0x10/0x10 [ 346.888759][T13062] ? ksys_write+0x1ac/0x250 [ 346.888771][T13062] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 346.888790][T13062] ? __do_fast_syscall_32+0x98/0x970 [ 346.888804][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 346.888816][T13062] __do_fast_syscall_32+0xe7/0x970 [ 346.888830][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 346.888843][T13062] do_fast_syscall_32+0x32/0x70 [ 346.888857][T13062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.888876][T13062] RIP: 0023:0xf700efec [ 346.888889][T13062] Code: Unable to access opcode bytes at 0xf700efc2. [ 346.888894][T13062] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 346.888905][T13062] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800034c0 [ 346.888912][T13062] RDX: 000000000000013c RSI: 0000000000000700 RDI: 0000000000000000 [ 346.888918][T13062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.888924][T13062] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.888930][T13062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.888943][T13062] [ 347.141571][ T8882] bond1 (unregistering): (slave gretap1): Releasing active interface [ 347.199231][ T8882] bond0 (unregistering): Released all slaves [ 347.207147][ T8882] bond1 (unregistering): Released all slaves [ 347.216989][ T8882] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 347.219765][ T8882] veth0_to_bond: left promiscuous mode [ 347.221824][ T8882] veth0_to_bond: left allmulticast mode [ 347.224931][ T8882] bond2 (unregistering): Released all slaves [ 347.241002][ T8882] bond3 (unregistering): Released all slaves [ 347.250803][ T8882] bond4 (unregistering): Released all slaves [ 347.267161][T13047] tipc: Resetting bearer [ 347.269994][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 347.273796][T13046] tipc: Resetting bearer [ 347.313478][T13046] tipc: Disabling bearer [ 347.545331][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 347.705264][ T5104] Bluetooth: hci2: command tx timeout [ 347.852236][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.873508][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.897088][T13005] bridge_slave_0: entered allmulticast mode [ 347.927820][T13005] bridge_slave_0: entered promiscuous mode [ 348.040754][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.055594][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.063055][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.068842][T13005] bridge_slave_1: entered allmulticast mode [ 348.079598][T13005] bridge_slave_1: entered promiscuous mode [ 348.099548][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 348.113991][ T8882] hsr_slave_0: left promiscuous mode [ 348.122314][ T8882] hsr_slave_1: left promiscuous mode [ 348.127117][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.135219][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.443197][ T8882] team0 (unregistering): Port device team_slave_1 removed [ 348.452712][ T8882] team0 (unregistering): Port device team_slave_0 removed [ 348.567088][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.575689][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.651522][T13005] team0: Port device team_slave_0 added [ 348.668764][T13005] team0: Port device team_slave_1 added [ 348.708988][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.714167][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.747029][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.770550][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.777092][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.797659][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.860929][T13005] hsr_slave_0: entered promiscuous mode [ 348.863251][T13005] hsr_slave_1: entered promiscuous mode [ 348.866765][T13005] debugfs: 'hsr0' already exists in 'hsr' [ 348.868822][T13005] Cannot create hsr debugfs directory [ 349.031405][ T8882] IPVS: stop unused estimator thread 0... [ 349.127190][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 349.227472][ T10] usb 40-1: device descriptor read/8, error -110 [ 349.311133][T13005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.421427][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.426066][T13005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.430417][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.433940][T13005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.459750][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.733487][T13005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.756607][T13005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.784937][ T5104] Bluetooth: hci2: command tx timeout [ 349.838169][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.850361][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.856897][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.859227][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.868092][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.870388][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.935923][ T10] usb usb40-port1: attempt power cycle [ 350.255828][T13179] Invalid ELF header magic: != ELF [ 350.383019][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.495826][ T10] usb usb40-port1: unable to enumerate USB device [ 350.534529][ T5740] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 350.571470][T13005] veth0_vlan: entered promiscuous mode [ 350.577857][T13005] veth1_vlan: entered promiscuous mode [ 350.608307][T13005] veth0_macvtap: entered promiscuous mode [ 350.614185][T13005] veth1_macvtap: entered promiscuous mode [ 350.628314][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.639566][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.647912][ T9702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.655044][ T9702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.662495][ T9702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.675026][ T9702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.686347][ T5740] usb 9-1: Using ep0 maxpacket: 16 [ 350.709921][ T5740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 350.731194][ T5740] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 350.748716][ T5740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.765165][ T5740] usb 9-1: Product: syz [ 350.770311][ T5740] usb 9-1: Manufacturer: syz [ 350.773903][ T5740] usb 9-1: SerialNumber: syz [ 350.795787][ T5740] usb 9-1: config 0 descriptor?? [ 350.801613][ T5740] hub 9-1:0.0: bad descriptor, ignoring hub [ 350.804091][ T5740] hub 9-1:0.0: probe with driver hub failed with error -5 [ 350.813151][ T5740] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.882818][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.895842][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.949195][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.959082][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.082871][ T24] usb 9-1: USB disconnect, device number 35 [ 351.865199][ T5104] Bluetooth: hci2: command tx timeout [ 352.390315][T13241] fuse: Bad value for 'fd' [ 353.069694][T13276] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 353.084939][T13276] udc dummy_udc.0: failed to start g1: -19 [ 353.111655][T13276] UDC core: g1: couldn't find an available UDC or it's busy [ 353.216986][ T5740] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 353.384719][ T5740] usb 8-1: Using ep0 maxpacket: 8 [ 353.395135][ T5740] usb 8-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 353.399596][ T5740] usb 8-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 353.412909][ T5740] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 353.444357][ T5740] usb 8-1: config 0 interface 0 has no altsetting 0 [ 353.466594][ T5740] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 353.476872][ T5740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.508684][ T5740] usb 8-1: config 0 descriptor?? [ 353.768441][ T42] audit: type=1800 audit(1785048861.614:6537): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2066" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 353.768519][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 353.805589][ T5740] usbhid 8-1:0.0: can't add hid device: -71 [ 353.809575][ T5740] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 353.817315][ T5740] usb 8-1: USB disconnect, device number 40 [ 353.834470][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 353.945597][ T5104] Bluetooth: hci2: command tx timeout [ 353.985346][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 353.990260][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.993158][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.003074][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.008411][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.012531][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.025472][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.028962][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.032627][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.046261][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.055358][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.062145][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.079933][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.083102][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.088809][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.100148][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.103560][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.107819][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.114757][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.119979][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.124224][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.136360][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.157954][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.160974][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.164538][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.174241][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 354.177978][ T9] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 354.180646][ T9] usb 10-1: Product: syz [ 354.181986][ T9] usb 10-1: Manufacturer: syz [ 354.183505][ T9] usb 10-1: SerialNumber: syz [ 354.189020][ T9] usb 10-1: config 0 descriptor?? [ 354.193739][ T9] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 354.395283][ T9] usb 10-1: USB disconnect, device number 2 [ 354.398978][ T9] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 355.253480][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 355.401366][T13333] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 355.441613][T13333] bond2: entered promiscuous mode [ 355.448733][T13333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.471226][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 355.479198][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 355.522383][T13333] bond2: (slave bridge2): making interface the new active one [ 355.528239][T13333] bridge2: entered promiscuous mode [ 355.532610][T13333] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 355.820330][T13354] No source specified [ 358.260126][T13407] xt_hashlimit: size too large, truncated to 1048576 [ 358.262425][T13407] xt_hashlimit: max too large, truncated to 1048576 [ 358.707729][T13419] netlink: 16142 bytes leftover after parsing attributes in process `syz.5.2110'. [ 359.729246][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.748165][T13435] usb usb8: usbfs: process 13435 (syz.4.2115) did not claim interface 0 before use [ 359.748770][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 359.768476][T13434] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 359.771183][T13434] UDF-fs: Scanning with blocksize 512 failed [ 359.774106][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.781188][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 359.788260][T13434] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 359.797698][T13434] UDF-fs: Scanning with blocksize 1024 failed [ 359.800171][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.803236][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 359.806667][T13434] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 359.809120][T13434] UDF-fs: Scanning with blocksize 2048 failed [ 359.812112][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.815239][T13434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 359.818228][T13434] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 359.820692][T13434] UDF-fs: Scanning with blocksize 4096 failed [ 359.822649][T13434] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 359.951450][T13448] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2121'. [ 359.956100][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2121'. [ 359.958942][T13448] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2121'. [ 360.198104][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 360.226714][T13465] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 360.235417][T13465] udc dummy_udc.0: failed to start g1: -19 [ 360.243724][T13465] UDC core: g1: couldn't find an available UDC or it's busy [ 360.345270][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 360.349465][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 360.352248][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 360.362695][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 360.378181][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.387819][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.397817][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.408478][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 360.417929][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.430653][ T9] usb 6-1: config 0 descriptor?? [ 360.643578][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 360.693665][T13490] syzkaller0: entered promiscuous mode [ 360.702407][T13490] syzkaller0: entered allmulticast mode [ 360.803745][T13498] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 360.875202][T13498] netlink: 'syz.4.2132': attribute type 10 has an invalid length. [ 360.879520][T13498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2132'. [ 360.883432][T13498] dummy0: entered promiscuous mode [ 361.003327][T13508] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2136'. [ 362.186980][T13544] sock: sock_timestamping_bind_phc: sock not bind to device [ 362.199735][T13544] securityfs: Unknown parameter 'fd' [ 362.209598][T13544] batadv_slave_1: entered promiscuous mode [ 362.302934][T13549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.695041][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 362.847871][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.869589][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 362.875551][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.888677][ T9] usb 8-1: Product: syz [ 362.890388][ T9] usb 8-1: Manufacturer: syz [ 362.892261][ T9] usb 8-1: SerialNumber: syz [ 362.974881][ T846] usb 6-1: USB disconnect, device number 45 [ 363.033156][T13564] CIFS mount error: No usable UNC path provided in device string! [ 363.033156][T13564] [ 363.046656][ T846] usblp0: removed [ 363.047940][T13564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 363.055969][T13563] tmpfs: Bad value for 'mpol' [ 363.154951][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.248272][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 363.372029][T13575] batadv1: entered promiscuous mode [ 363.383435][ T24] kernel read not supported for file /newroot/508 (pid: 24 comm: kworker/2:0) [ 364.866737][T13601] FAULT_INJECTION: forcing a failure. [ 364.866737][T13601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.876344][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.1.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.876370][T13601] Tainted: [L]=SOFTLOCKUP [ 364.876376][T13601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.876386][T13601] Call Trace: [ 364.876392][T13601] [ 364.876398][T13601] dump_stack_lvl+0x100/0x190 [ 364.876422][T13601] should_fail_ex.cold+0x5/0xa [ 364.876441][T13601] __kvm_read_guest_page+0x186/0x250 [ 364.876470][T13601] kvm_fetch_guest_virt+0x128/0x1a0 [ 364.876498][T13601] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 364.876521][T13601] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 364.876543][T13601] ? __lock_acquire+0x49f/0x1a40 [ 364.876573][T13601] x86_decode_insn+0x3ca/0x6da0 [ 364.876598][T13601] ? __lock_acquire+0x49f/0x1a40 [ 364.876631][T13601] ? __pfx_x86_decode_insn+0x10/0x10 [ 364.876655][T13601] ? vmx_cache_reg+0x54f/0x7b0 [ 364.876673][T13601] ? init_decode_cache+0xd/0x2b0 [ 364.876696][T13601] ? init_emulate_ctxt+0x43c/0x700 [ 364.876720][T13601] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 364.876749][T13601] ? vmx_read_guest_seg_ar+0x87/0x1b0 [ 364.876773][T13601] x86_emulate_instruction+0x1052/0x1df0 [ 364.876797][T13601] ? __pfx_emulator_get_segment+0x10/0x10 [ 364.876817][T13601] handle_ud+0x100/0x5b0 [ 364.876837][T13601] ? __pfx_handle_ud+0x10/0x10 [ 364.876855][T13601] ? rcu_qs+0x2a/0xe0 [ 364.876872][T13601] ? rcu_note_context_switch+0x174/0x19c0 [ 364.876893][T13601] ? __lock_acquire+0x49f/0x1a40 [ 364.876918][T13601] ? __vmx_complete_interrupts+0x129/0x570 [ 364.876940][T13601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.876967][T13601] handle_exception_nmi+0xd0c/0x1af0 [ 364.876988][T13601] ? __pfx_handle_exception_nmi+0x10/0x10 [ 364.877015][T13601] vmx_handle_exit+0x4d6/0x1ef0 [ 364.877041][T13601] vcpu_run+0x35ab/0x5de0 [ 364.877059][T13601] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 364.877091][T13601] ? __pfx_vcpu_run+0x10/0x10 [ 364.877110][T13601] ? complete_emulated_mmio+0x102/0x710 [ 364.877128][T13601] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 364.877143][T13601] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 364.877163][T13601] kvm_vcpu_ioctl+0x730/0x1700 [ 364.877175][T13601] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.877186][T13601] ? tomoyo_path_number_perm+0x188/0x580 [ 364.877202][T13601] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 364.877221][T13601] ? get_pid_task+0x106/0x250 [ 364.877239][T13601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.877255][T13601] ? do_vfs_ioctl+0x226/0x13e0 [ 364.877272][T13601] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.877293][T13601] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 364.877305][T13601] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 364.877317][T13601] ? __fget_files+0x21f/0x3d0 [ 364.877329][T13601] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 364.877341][T13601] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 364.877359][T13601] __do_fast_syscall_32+0xe7/0x970 [ 364.877374][T13601] ? lockdep_hardirqs_on+0x78/0x100 [ 364.877387][T13601] do_fast_syscall_32+0x32/0x70 [ 364.877402][T13601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.877432][T13601] RIP: 0023:0xf70aefec [ 364.877446][T13601] Code: Unable to access opcode bytes at 0xf70aefc2. [ 364.877451][T13601] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 364.877479][T13601] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 364.877486][T13601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.877492][T13601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.877498][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.877504][T13601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.877518][T13601] [ 366.279967][T13619] netlink: 'syz.5.2169': attribute type 11 has an invalid length. [ 366.286721][T13619] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2169'. [ 366.323052][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 366.327647][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2172'. [ 366.332648][T13623] 9pnet: Found fid 0 not clunked [ 366.559438][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 366.779771][T13636] cgroup: release_agent respecified [ 366.799387][T13636] random: crng reseeded on system resumption [ 366.811380][T13636] input: syz0 as /devices/virtual/input/input86 [ 367.108585][T13643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.113006][T13643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38385 - 0 [ 367.244775][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 367.250263][T13643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.268372][T13643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38385 - 0 [ 367.477014][T13643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.494184][T13643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38385 - 0 [ 367.710907][T13643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.757731][T13643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38385 - 0 [ 368.195696][ T9702] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 38385 - 0 [ 368.206647][ T9702] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.236063][ T9702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 38385 - 0 [ 368.246022][ T9702] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.280536][ T9702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 38385 - 0 [ 368.290381][ T9702] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.323403][ T9702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 38385 - 0 [ 368.336678][ T9702] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.667537][T13656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.683252][T13656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.887588][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.930573][T13665] Invalid logical block size (1454112767) [ 369.163728][T13674] lo speed is unknown, defaulting to 1000 [ 369.176116][T13674] lo speed is unknown, defaulting to 1000 [ 369.181967][T13674] lo speed is unknown, defaulting to 1000 [ 369.973600][ T5835] usb 8-1: USB disconnect, device number 41 [ 369.986251][ T5835] usblp0: removed [ 370.083545][T13687] comedi comedi3: pcl818: I/O base address or length out of range [ 370.130270][T13689] syzkaller0: entered promiscuous mode [ 370.132147][T13689] syzkaller0: entered allmulticast mode [ 370.279870][ T42] audit: type=1804 audit(1785048877.125:6538): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2194" name="/newroot/537/cgroup.controllers" dev="tmpfs" ino=2905 res=1 errno=0 [ 370.287275][ T42] audit: type=1800 audit(1785048877.125:6539): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2194" name="cgroup.controllers" dev="tmpfs" ino=2905 res=0 errno=0 [ 370.452072][T13697] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 371.766077][T13715] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.337637][ T42] audit: type=1326 audit(1785048879.185:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.3.2202" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x0 [ 372.714366][ T5740] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 372.864462][ T5740] usb 9-1: Using ep0 maxpacket: 8 [ 372.869676][ T5740] usb 9-1: unable to get BOS descriptor or descriptor too short [ 372.874533][ T5740] usb 9-1: config 42 has an invalid interface number: 170 but max is 0 [ 372.878550][ T5740] usb 9-1: config 42 has no interface number 0 [ 372.882069][ T5740] usb 9-1: config 42 interface 170 has no altsetting 0 [ 372.889155][ T5740] usb 9-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=8b.61 [ 372.893479][ T5740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.898326][ T5740] usb 9-1: Product: syz [ 372.899670][ T5740] usb 9-1: Manufacturer: syz [ 372.904421][ T5740] usb 9-1: SerialNumber: syz [ 372.912784][ T5740] r8152-cfgselector 9-1: Unknown version 0x0000 [ 373.239375][ T5740] r8152-cfgselector 9-1: USB disconnect, device number 36 [ 374.004120][T13766] syzkaller0: entered promiscuous mode [ 374.010259][T13766] syzkaller0: entered allmulticast mode [ 374.570500][T13786] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2222'. [ 374.602774][T13783] could not allocate digest TFM handle ghash [ 374.791810][T13795] syzkaller0: entered promiscuous mode [ 374.798974][T13795] syzkaller0: entered allmulticast mode [ 375.730757][T13814] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2230'. [ 376.586285][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 376.835791][T13829] sd 0:0:0:0: PR command failed: 1026 [ 376.840566][T13829] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 376.844588][T13829] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 377.017697][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 377.632169][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 377.636026][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.648295][ T9] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 377.659513][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.668180][ T9] usb 9-1: Product: syz [ 377.669570][ T9] usb 9-1: Manufacturer: syz [ 377.678575][ T9] usb 9-1: SerialNumber: syz [ 377.707490][T13821] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.713462][T13821] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.725761][ T9] oti6858 9-1:1.0: oti6858 converter detected [ 377.740307][ T9] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 378.064200][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.421081][ T5835] usb 9-1: USB disconnect, device number 37 [ 378.431705][ T5835] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 378.438820][ T5835] oti6858 9-1:1.0: device disconnected [ 379.465893][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2249'. [ 379.476081][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2249'. [ 379.489896][T13877] kAFS: unparsable volume name [ 379.582590][T13877] IPVS: Error connecting to the multicast addr [ 379.708590][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.776177][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.796621][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.813220][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.012688][T13883] lo speed is unknown, defaulting to 1000 [ 380.015660][T13883] lo speed is unknown, defaulting to 1000 [ 380.018161][T13883] lo speed is unknown, defaulting to 1000 [ 380.212695][T13886] input: syz0 as /devices/virtual/input/input88 [ 380.537030][ T5835] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 380.662193][T13905] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 380.664135][T13905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.669378][T13905] vhci_hcd vhci_hcd.0: Device attached [ 380.678462][T13905] macvlan2: entered promiscuous mode [ 380.680231][T13905] bridge0: entered promiscuous mode [ 380.695468][ T5835] usb 9-1: Using ep0 maxpacket: 16 [ 380.699199][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.702635][ T5835] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.708782][ T5835] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.711758][ T5835] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.715537][ T5835] usb 9-1: Manufacturer: syz [ 380.720371][ T5835] usb 9-1: config 0 descriptor?? [ 380.934734][ T9] usb 48-1: SetAddress Request (2) to port 0 [ 380.937287][ T9] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 381.016885][ T846] usb 9-1: USB disconnect, device number 38 [ 381.068201][T13913] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 381.093940][T13911] Bluetooth: MGMT ver 1.23 [ 381.303456][T13906] vhci_hcd: connection reset by peer [ 381.313499][ T9702] vhci_hcd vhci_hcd.5: stop threads [ 381.317703][ T9702] vhci_hcd vhci_hcd.5: release socket [ 381.321528][ T9702] vhci_hcd vhci_hcd.5: disconnect device [ 381.796183][T13919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.890177][T13925] input: syz1 as /devices/virtual/input/input89 [ 382.467007][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2268'. [ 382.616513][T13945] input: syz0 as /devices/virtual/input/input90 [ 383.417793][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 383.424793][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 383.442443][T13969] batadv_slave_1: entered promiscuous mode [ 383.469238][T13969] netlink: 'syz.4.2277': attribute type 9 has an invalid length. [ 383.628630][T13965] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 383.639218][T13965] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 383.644186][T13965] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 383.651356][T13973] nft_compat: unsupported protocol 0 [ 384.296071][T13968] batadv_slave_1: left promiscuous mode [ 384.882642][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2289'. [ 384.903991][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2289'. [ 385.550437][T14010] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 385.554164][T14010] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 385.556863][T14010] CPU: 0 UID: 0 PID: 14010 Comm: syz.4.2288 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.560194][T14010] Tainted: [L]=SOFTLOCKUP [ 385.561534][T14010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.564602][T14010] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 385.566490][T14010] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 385.572343][T14010] RSP: 0018:ffffc90007cef9a0 EFLAGS: 00010202 [ 385.574240][T14010] RAX: dffffc0000000000 RBX: ffff8880719c8158 RCX: ffffc9003090e000 [ 385.576654][T14010] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff8880719c8128 [ 385.579094][T14010] RBP: ffff8880719c8150 R08: 0000000000000001 R09: 0000000000000000 [ 385.581526][T14010] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 385.583950][T14010] R13: ffff8880719c8128 R14: ffff88806c0e8920 R15: ffff8880719c8000 [ 385.586386][T14010] FS: 0000000000000000(0000) GS:ffff888096be5000(0063) knlGS:00000000f53bcb40 [ 385.589111][T14010] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 385.591065][T14010] CR2: 00000000f73b9a54 CR3: 0000000075f7a000 CR4: 0000000000352ef0 [ 385.593328][T14010] Call Trace: [ 385.594366][T14010] [ 385.595288][T14010] ? f_midi2_unbind+0x146/0x800 [ 385.596792][T14010] f_midi2_unbind+0x265/0x800 [ 385.598246][T14010] ? kasan_quarantine_put+0x104/0x240 [ 385.599900][T14010] ? __pfx_f_midi2_unbind+0x10/0x10 [ 385.601516][T14010] purge_configs_funcs+0x285/0x510 [ 385.603026][T14010] configfs_composite_unbind+0xae/0x210 [ 385.604661][T14010] gadget_unbind_driver+0x20c/0x4f0 [ 385.606271][T14010] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 385.607976][T14010] device_remove+0xcb/0x180 [ 385.609401][T14010] device_release_driver_internal+0x44e/0x620 [ 385.611198][T14010] driver_detach+0xd8/0x1b0 [ 385.612607][T14010] bus_remove_driver+0x13b/0x2e0 [ 385.614167][T14010] driver_unregister+0x76/0xb0 [ 385.615648][T14010] usb_gadget_unregister_driver+0x49/0x70 [ 385.617424][T14010] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 385.619149][T14010] configfs_write_iter+0x302/0x4e0 [ 385.620720][T14010] vfs_write+0x6ac/0x1050 [ 385.622065][T14010] ? __pfx_configfs_write_iter+0x10/0x10 [ 385.623803][T14010] ? __pfx_vfs_write+0x10/0x10 [ 385.625278][T14010] ? find_held_lock+0x2b/0x80 [ 385.626741][T14010] ksys_write+0x12a/0x250 [ 385.628069][T14010] ? __pfx_ksys_write+0x10/0x10 [ 385.629589][T14010] __do_fast_syscall_32+0xe7/0x970 [ 385.631187][T14010] do_fast_syscall_32+0x32/0x70 [ 385.632697][T14010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.634649][T14010] RIP: 0023:0xf6feefec [ 385.635911][T14010] Code: Unable to access opcode bytes at 0xf6feefc2. [ 385.637842][T14010] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 385.640248][T14010] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800004c0 [ 385.642555][T14010] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.644951][T14010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.647401][T14010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 385.649837][T14010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.652253][T14010] [ 385.653217][T14010] Modules linked in: [ 385.655312][T14010] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.750272][T14010] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 385.786654][T14010] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 385.855891][T14010] RSP: 0018:ffffc90007cef9a0 EFLAGS: 00010202 [ 385.877703][T14010] RAX: dffffc0000000000 RBX: ffff8880719c8158 RCX: ffffc9003090e000 [ 385.895794][T14010] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff8880719c8128 [ 385.901118][T14010] RBP: ffff8880719c8150 R08: 0000000000000001 R09: 0000000000000000 [ 385.907466][T14010] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 385.913946][T14010] R13: ffff8880719c8128 R14: ffff88806c0e8920 R15: ffff8880719c8000 [ 385.917297][T14010] FS: 0000000000000000(0000) GS:ffff888096be5000(0063) knlGS:00000000f53bcb40 [ 385.920068][T14010] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 385.921992][T14010] CR2: 000055cbf2649060 CR3: 0000000075f7a000 CR4: 0000000000352ef0 [ 385.939479][T14010] Kernel panic - not syncing: Fatal exception [ 385.941945][T14010] Kernel Offset: disabled [ 385.943245][T14010] Rebooting in 86400 seconds..