last executing test programs: 52.864474666s ago: executing program 1 (id=750): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000280)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x122) renameat2(r1, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x8000000000000000, 0x4, 0x0, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write(r0, &(0x7f00000006c0)=';\x00\x00', 0x3) 52.807211994s ago: executing program 1 (id=754): r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/rt_acct\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r6 = creat(0x0, 0x118) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}, {@index_off}, {@uuid_auto}]}) r8 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000440)=ANY=[]) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f00000005c0)={0x9, 0xb81, &(0x7f00000003c0)="91a78a62eba58c256c696e81fa4be761f5b2388f76004cf1ddd5355186d66c5863f65a4c3b985962fbc5bc3a870a1fd87c9547dda5923143c9615e872a9a45190d30515b4fadde360140f87293f7829a022cc277e026ef1253aced1efbf88ff959b29006d7a4d254aa19ca7d276d6f25295e7b4ac08f1fab6ad82a6ea263ab1dfb94aa7e9eda0122aa35a78e64b27c07482616b2e01d931803ad22928f8e709fb621dbd760d9de024795583557ca503cecf808d7d10e934e007cf9367fe96bb2171c0a37679883397fb77d75f70dbd9a", &(0x7f00000004c0)="5dda813e021b93434fc44f7953101212db961bd54c127bd67c3a7831a1f205aac3f4a519834452236f924df3afbf7b2c293f59f3307fcaa11ecba7b4923f1658b5695cc99ccb44482c6b1550b6179b2033d0c0935105619aa74029d4406afa956b9f44f2f73f7524dd0652ccd21a886767bdfdd3512426c45594695043d31aaf94a979673108c41b283fecae2a0fc1767de53d44b7a669df9f1c4106673716e10e9952fed9c887a2b11fd40dc22c316b1c384f592cdc98c25a8fc882149021552eeb5fda4fe29c413a2bc705cd3d76997ee9f82f9a772e72c62d3e5c961ac93f03e1462a16", 0xd0, 0xe5}) r9 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x3}}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, './file0/../file0\x00'}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0xff00, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) 52.409560409s ago: executing program 1 (id=755): r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', r1, 0x40, 0x7, 0x9, 0x5, {{0x40, 0x4, 0x3, 0x6, 0x100, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0x1, [{@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x54, 0xd6, 0x3, 0x4, [{@private=0xa010100, 0x2}, {@remote, 0x357}, {@remote, 0x8c}, {@private=0xa010101, 0xf}, {@rand_addr=0x64010100, 0x3}, {@empty, 0x4}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0xc7f}, {@rand_addr=0x64010100, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x40, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf68}, {@empty, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xd}, {@multicast2, 0xfe06}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x51, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x7fff}, {@broadcast, 0x4}, {@empty, 0xfffffff4}, {@rand_addr=0x64010101, 0xe}]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x6, [{@multicast1, 0xfffffff4}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7fff, 0x0}, 0x8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x3}) rt_sigtimedwait(&(0x7f0000002ac0)={[0x686]}, 0x0, 0x0, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7fff, 0x54, &(0x7f00000007c0)=""/84, 0x0, 0x64, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xa, 0xaac0000, 0x507}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x3, 0x10, 0x5}, {0x0, 0x3, 0x6, 0x6}, {0x5, 0x1, 0xa, 0xa}, {0x2, 0x1, 0xf, 0x6}, {0x5, 0x3, 0x6, 0xe}, {0x4, 0x1, 0xc, 0xb}, {0x2, 0x2, 0x3, 0x5}, {0x4, 0x5, 0x4}], 0x10, 0xb5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x20, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@exit, @jmp={0x5, 0x1, 0x7, 0x9, 0x1, 0x40, 0x4}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x8f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x2, 0x1, 0x6, 0xc, 0xa, 0xfffffffffffffff8}]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x3e, &(0x7f0000000280)=""/62, 0x41000, 0x1, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0x2, 0x2}, 0x10, r4, r7, 0x2, 0x0, &(0x7f0000000a40)=[{0x3, 0x2, 0xf, 0xa}, {0x2, 0x1, 0xc, 0x3}], 0x10, 0xffffff12}, 0x94) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 52.197110476s ago: executing program 1 (id=757): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010100, @broadcast, @broadcast}}}}, &(0x7f0000000040)={0x0, 0x2, [0x7a3, 0x8a6, 0xcfa, 0xecc]}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x1, 0x2, 0x503, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x1, 0x2, 0x503, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x401, 0x4) openat$nullb(0xffffff9c, &(0x7f0000000240), 0x105000, 0x0) (async) openat$nullb(0xffffff9c, &(0x7f0000000240), 0x105000, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x4, @remote, 'macsec0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x4, @remote, 'macsec0\x00'}}, 0x1e) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1cc, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc02}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}\xab:*\'[&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-#++-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':%@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')^!\'*\b(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8874cfd}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/nullb0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "361b6a6708aabfd59f92e4457a97d5ffe4b12fe5773187236219489d287829a525d5e9c631bab0eebf9c73a43cd11fef11ece2bceeb4edd1149a0716291f6a07a7575d3236d2e3cc0d02d4fa78f09044be96847a84ebf9e79cd90baf1f8b2731eb602e3d5e"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1cc, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc02}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}\xab:*\'[&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-#++-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':%@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')^!\'*\b(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8874cfd}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/nullb0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "361b6a6708aabfd59f92e4457a97d5ffe4b12fe5773187236219489d287829a525d5e9c631bab0eebf9c73a43cd11fef11ece2bceeb4edd1149a0716291f6a07a7575d3236d2e3cc0d02d4fa78f09044be96847a84ebf9e79cd90baf1f8b2731eb602e3d5e"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x801}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x8c3, @private1, 0xfffffff9}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x5}, @in6={0xa, 0x4e23, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0x80000000, @private2, 0xab}], 0xa0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000680)=0x8, 0x4) r4 = openat$vimc2(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000700)={0x31, "aa937df90c83d147be458bbb0a34fd250fa0fa1307e32c015091bd8b1429bbb9", 0x8ea3718c41af9797, 0x2, 0x2, 0x1000000, 0x2}) (async) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000700)={0x31, "aa937df90c83d147be458bbb0a34fd250fa0fa1307e32c015091bd8b1429bbb9", 0x8ea3718c41af9797, 0x2, 0x2, 0x1000000, 0x2}) openat$null(0xffffff9c, &(0x7f0000000780), 0x20a00, 0x0) (async) r5 = openat$null(0xffffff9c, &(0x7f0000000780), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f00000007c0)={0xfffffffa, 0x4}) (async) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f00000007c0)={0xfffffffa, 0x4}) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000800)={{0xa, 0x4e22, 0x3, @local, 0x5}, {0xa, 0x4e20, 0x3, @local, 0x1}, 0x1, {[0x6, 0x7, 0xd, 0x6, 0x2, 0x6, 0x1, 0xb86]}}, 0x5c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000880)=@gcm_128={{0x303}, "9caedf4220cb4725", "3f52374a06936d12705740aafcd0f64b", "441cca5a", "8a356285cc7cf74e"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000008c0)=[@timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000900)={0x4, 0x7, 0x2, 0x24d, 0x7}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000940)={0x3, 0x1, 0x2, 0xffff7fff, 'syz1\x00', 0x10000}) r7 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f00000009c0)={0x3, 0x100, 0xffffffab}) (async) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f00000009c0)={0x3, 0x100, 0xffffffab}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{0x3ff, 0x2, 0x0, 0xc}, {0x7, 0x1, 0xde, 0xadcc}, {0x6, 0x8, 0x9, 0x2}, {0x7, 0x6, 0x7f, 0x3}, {0x8, 0xa, 0x0, 0x6}]}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000a80)={0x0, 0xbc, "c5879936977b29cd9ea7c06d7b32c0f128f1bd5f5a268eff9b735cb84b0428e3667ff40597effde8801761f62200278205c8fe54ae289b60554b6b3e127a107f4243dc192709b9ced3282b7a91a2c9e32c648361aaabc6ab4ab4c1983f3f3b8979579377d486de93049ea6a560f0ebbd0141badc6ec82205127d602e5cadcef29098eb1b0e08d056beb69895c467ac2ef3f1864b924db2ff46f9eb05a5c5336be6231e18a0315574cb5c76c91429e1213103cc12ebfbe3b115ad86f7"}, &(0x7f0000000b80)=0xc4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000bc0)={r9, 0x1ae2}, &(0x7f0000000c00)=0x8) 52.12840624s ago: executing program 1 (id=758): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) read$FUSE(r1, &(0x7f0000005140)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @local, '\x00'}}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0300", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x7ffffffd) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x511082) splice(r7, &(0x7f00000000c0), r3, &(0x7f0000000100)=0x80, 0x3, 0x1) splice(r7, 0x0, r4, 0x0, 0x8007c22, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/210, 0xd2}]}, &(0x7f0000000240)="128d7acf08ff", 0x0, 0x0, 0x10000, 0xffffffff, 0x0}) 52.067944243s ago: executing program 1 (id=759): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000480)=""/87) socket(0x2a, 0x1, 0x0) 36.619418505s ago: executing program 32 (id=759): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000480)=""/87) socket(0x2a, 0x1, 0x0) 5.026909449s ago: executing program 3 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a", 0x39, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt(r6, 0x0, 0x5, &(0x7f0000000540)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r7 = fcntl$dupfd(r5, 0x406, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x20, 0x13, 0x1, 0x400000}, 0x20}}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000001, 0x40800) mmap$usbmon(&(0x7f0000880000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x9) 4.217076355s ago: executing program 4 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0xfffffdef}], 0x4000095, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4.135469214s ago: executing program 4 (id=968): modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4101, 0xffffffffffffffd6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0xfa, "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"}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 4.134722962s ago: executing program 4 (id=969): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000076, 0x5, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x8001, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.037571736s ago: executing program 3 (id=970): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8001) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x5e24, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000003c0)=""/1, 0x1}], 0x3}, 0x123) shutdown(r2, 0x1) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffa000/0x2000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x2000, 0x1}) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) close_range(r1, r6, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r11, 0x0, 0x0, 0x12020, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, 0x0) 3.177515255s ago: executing program 3 (id=971): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x2c020400) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000500) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.767390181s ago: executing program 4 (id=972): set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.621346978s ago: executing program 0 (id=975): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="0100b65789aa2b915808464210a86c00000100"]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x14) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/102400, 0x19000}], 0x2000000000000078, 0x0, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, &(0x7f0000000000)={0x26, &(0x7f0000000080)=[{0xd, '\x00', @buffer={"9bdbf8b69ec4c18e1c03adc6e28416aeac1a5334068018a0923bbee5010e2370", 0x20}, 0x1}]}) setrlimit(0xb, &(0x7f00000001c0)={0x0, 0x62}) 2.557268982s ago: executing program 2 (id=976): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x8201) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0xfffffffd, 0x80) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000001a40)={0x8c, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000, 0x2c, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd40", 0x0, 0x0, 0x3}, 0x4c) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, r6, 0x10d, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20010004) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) truncate(0x0, 0x8fff5) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r10, 0xffffffffffffffff, 0x4}, 0x10) r11 = syz_open_pts(r9, 0x141601) write(r11, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xe) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r12, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x8, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xd, 0x1d, "cd218b3132a4d4ae906ce16bdba23ec34356ef960143942fd48b868aeed5780feb4c5d8df7a0480155f5e5ec4600b09743f77e7db3e15d38762baf2969c0eed8", "27202f4e8495c391f89003f6da5cdf09b24610d2caeb4751575376a1fe4db4ea01027560bd30d0b7b5bb16610056bdeb5f91064b0b8f5e58ad60e5f4920f770c", "e5c5ff20ea69cb79a04070464e59ee98d887b65307afe1d944bbf3f713dbf5dc", [0x2, 0x56dcb862]}}) 2.557072525s ago: executing program 0 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="2400fdff2e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.445901638s ago: executing program 0 (id=978): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x1, 0xc5}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000100)={0x2}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x12, 0xa01, 0x70bd27, 0x40000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.44535798s ago: executing program 0 (id=979): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8001) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x5e24, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000200)=""/184, 0xb8}, {0x0}, {&(0x7f00000003c0)=""/1, 0x1}], 0x4}, 0x123) shutdown(r2, 0x1) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffa000/0x2000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x2000, 0x1}) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) close_range(r1, r6, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r11, 0x0, 0x0, 0x12020, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, 0x0) 2.353180266s ago: executing program 4 (id=980): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="fdf3fe2cb7d980008b1cbd12e46b2c9b3f01c239c6434bba3f2a572460aa3e9776a97908a413c6856e73a764e3ea7ccb4b10fba99d0e2cefa03bc131d67b9a45ac169c232579c29bed3f0d9bffdcb7fb61707fac8d4f911ed1eb55a46b9eaead52faa47145e62cadc7e0f27a0d2770", 0x6f}, {0x0}, {&(0x7f0000000140)="59c24c64bdd27da32a6eab739062a4df73dd952eb640c1537d2241ce6b676b69f3dc2bd19aba5781ce8a4985eeda450327c801b044c5080fe4bbb937c403e668a33af4056d742a1c3f599c18cf6d0634c546e38298990100000000000000f20ca0913f3226a5e37d63f0e2d4001f863ce8686adc65357a30c22b0fb9", 0x7c}], 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000300)={'wg0\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) read(r3, &(0x7f0000000080)=""/193, 0xc1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x40) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r6}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 2.150143852s ago: executing program 3 (id=981): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000100000000004f00000002182000ff03fd000001000008000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0x64000080}, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0xa0, 0x0, [{0x400000b5, 0x0, 0x7}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 1.417821962s ago: executing program 0 (id=982): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f00000004c0)=""/105, 0x69}, {0x0}], 0x9, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14}}], 0x1, 0x121, 0x0) 1.357587355s ago: executing program 4 (id=983): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0xe, 0xd9, {0xd9, 0x2, "dc6bec8d728850897e7bc3c224ab2d1046cda3d2e690b9e60625e808ea169017d421691aaf988d4447cf026030b4e19c473f1e311473f10689169c3c066d26aecc24cde6683c2838b245e5ae61c30b1ae814c031c243a31292cd346df51dbfce433f99e96763f04c9f391c67c060950c9d538519ed43a7d3031901415014f4e69296f72d788909af24ce5ca26ad999569a808694b63caca4f9c8d28e3d1bfddea489d1f18a5bde552a368e78f0b9982362c4afc494f540cb841fa835715e093b55091e09104902c71dbffb017ac04e14b2b36a94579ab2"}}, &(0x7f0000000100)={0x0, 0x3, 0x25, @string={0x25, 0x3, "3ee1ab7b6716eec2e8d65fa755969269b4a2f2d2f7448f80fa2da1cc23d61d8d3533d1"}}}, &(0x7f0000000380)={0x18, &(0x7f0000000180)={0x40, 0x16, 0xf2, "02c2b048f97c4b426dad97d4859adfd2d98f2147b1302cb73b160ca5b19257f847ebdb6ed5cd50e35eaba9a1046c8e347e1997fa0d84676454b0d81c757dbc34fb557e4b147578238bb005df7aada48d5dc2088c8a34a45a2d4595150fac8adff438d71422f04b1a2f696b478d8a67f1f1374d1d537c1582ee1a9c8fd0591bbedd41e022b870a02b10b08dcef215ab76a06fc3427982cd6249085821218bda29bd1cf64c676edcb77ca3f5a000342d5ffd95b2d2447996cdc18ab789ecad370fb1528624a9e2ad049f276d44c4f5c46ad4b2eef3fd973b6f2aab100c82518753d9d00923901579c823605ac0ba42aa14894a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0xc0, 0x5, 0x2, "e417"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "013d366e"}}) r3 = dup(r1) r4 = syz_open_dev$vbi(&(0x7f0000009340), 0x1, 0x2) pwrite64(r4, &(0x7f0000009380), 0x0, 0x10000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000009540)=0x10000) write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) 1.176059553s ago: executing program 0 (id=984): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff, 0x5}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="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", 0x409}], 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10100000200800001c0012800e00010069703665727370616e0000000800028004001200080003"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0xd0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 1.175841566s ago: executing program 2 (id=985): modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0xfa, "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"}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 1.120524157s ago: executing program 2 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000b"], 0x3c}}, 0x0) (fail_nth: 10) 784.731462ms ago: executing program 2 (id=987): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) close(0xffffffffffffffff) (async) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x200002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sdr={0x3032344d, 0x806}}) (async, rerun: 32) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) (rerun: 32) shmctl$IPC_RMID(0x0, 0xfffffffffffff) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000004c0)="aefdda9d24031f005a90f57f07703aefd0f64ebbee07962c22772e11b44e65d76641cb011a52f436dd2a0f36888665384265089552c9db9d47cfe5b62828413a254bcaffffdf1b7d547b2b82feca877fe9038edd6182980200000000000000576e8cb3917a8ab262ff98c7052729a0efdb5807c6c1ba5802c3aa", 0x7a}], 0x1) 669.606892ms ago: executing program 2 (id=988): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x10783, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000380)={0x0, 0x7, 0x0, 0x0, 0x8b, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x364, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x401, 0x8000000, 0x0, 0x1, 0x7ff, 0xf, 0x9, 0x6db]}}}, {{@ip={@multicast2, @multicast2, 0x0, 0xffffff00, 'syz_tun\x00', 'pimreg0\x00', {}, {}, 0x4, 0x1}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x2, 0x3, 0x1, 0x4], 0x5, 0x1}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xec, 0x14c, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xa, 0x1, 0x2}}, @common=@ah={{0x2c}, {[0xffffff81, 0x3]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x1, 0x2, 0x4], 0x4, 0x6}, {0x3, [0x0, 0x2, 0x7, 0x5, 0x1, 0x8], 0x3, 0xe}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) io_setup(0x200008, &(0x7f0000000340)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r8, 0x40047451, &(0x7f0000000180)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xd) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000000940)=""/106, 0x6a}, {&(0x7f00000009c0)=""/108, 0x6c}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/105, 0x69}, {&(0x7f0000000140)=""/8, 0x8}], 0x8) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000440)=0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 377.684159ms ago: executing program 2 (id=989): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x2c020400) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000500) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 303.111811ms ago: executing program 3 (id=990): unshare(0x2a020480) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181b, 0x6000000, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x502, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x8001, 0x48a, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=991): socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0xfffe}}], 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): 82] cmsghdr_from_user_compat_to_kern+0x4eb/0x7d0 [ 207.531753][ T8082] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 207.531766][ T8082] ? __import_iovec+0x1d2/0x640 [ 207.531785][ T8082] ____sys_sendmsg+0x607/0xb70 [ 207.531802][ T8082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.531822][ T8082] ___sys_sendmsg+0x190/0x1e0 [ 207.531838][ T8082] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.531859][ T8082] ? find_held_lock+0x2b/0x80 [ 207.531882][ T8082] __sys_sendmsg+0x170/0x220 [ 207.531893][ T8082] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.531903][ T8082] ? __fget_files+0x21f/0x3d0 [ 207.531920][ T8082] ? ksys_write+0x1ac/0x250 [ 207.531933][ T8082] ? rcu_is_watching+0x12/0xc0 [ 207.531947][ T8082] __do_fast_syscall_32+0xe7/0x970 [ 207.531964][ T8082] ? lockdep_hardirqs_on+0x78/0x100 [ 207.531980][ T8082] do_fast_syscall_32+0x32/0x70 [ 207.531997][ T8082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.532011][ T8082] RIP: 0023:0xf7f66f7c [ 207.532020][ T8082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 207.532030][ T8082] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 207.532041][ T8082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 207.532048][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.532054][ T8082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.532060][ T8082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.532066][ T8082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.532079][ T8082] [ 207.975894][ T8093] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 208.797362][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 208.797375][ T40] audit: type=1326 audit(1780431772.385:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.924542][ T40] audit: type=1326 audit(1780431772.395:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.931578][ T40] audit: type=1326 audit(1780431772.395:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.938464][ T40] audit: type=1326 audit(1780431772.405:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.945753][ T40] audit: type=1326 audit(1780431772.405:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.970277][ T40] audit: type=1326 audit(1780431772.405:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.978208][ T40] audit: type=1326 audit(1780431772.415:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.984802][ T40] audit: type=1326 audit(1780431772.435:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 208.996087][ T40] audit: type=1326 audit(1780431772.445:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 209.006178][ T40] audit: type=1326 audit(1780431772.445:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.544" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 209.320829][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'. [ 209.605670][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 209.740605][ T8134] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 211.256330][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 211.417091][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 211.451275][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 211.464274][ T39] usb 7-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 211.475518][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.490943][ T39] usb 7-1: Product: syz [ 211.492528][ T39] usb 7-1: Manufacturer: syz [ 211.499038][ T39] usb 7-1: SerialNumber: syz [ 211.537310][ T5856] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.840756][ T39] usbhid 7-1:1.0: can't add hid device: -71 [ 211.844247][ T39] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 211.898684][ T39] usb 7-1: USB disconnect, device number 4 [ 211.923252][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 211.927202][ T8175] netlink: 'syz.1.564': attribute type 61 has an invalid length. [ 211.953727][ T8175] tmpfs: Bad value for 'mpol' [ 212.366643][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 213.849939][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 213.849954][ T40] audit: type=1326 audit(1780431777.435:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.866227][ T40] audit: type=1326 audit(1780431777.435:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886177][ T40] audit: type=1326 audit(1780431777.435:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886219][ T40] audit: type=1326 audit(1780431777.435:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886253][ T40] audit: type=1326 audit(1780431777.455:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886288][ T40] audit: type=1326 audit(1780431777.455:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886323][ T40] audit: type=1326 audit(1780431777.455:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886356][ T40] audit: type=1326 audit(1780431777.455:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886387][ T40] audit: type=1326 audit(1780431777.455:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.886420][ T40] audit: type=1326 audit(1780431777.455:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.1.564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 213.933822][ T8192] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.962118][ T8199] FAULT_INJECTION: forcing a failure. [ 213.962118][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 213.962140][ T8199] CPU: 3 UID: 0 PID: 8199 Comm: syz.0.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.962156][ T8199] Tainted: [L]=SOFTLOCKUP [ 213.962160][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.962166][ T8199] Call Trace: [ 213.962170][ T8199] [ 213.962174][ T8199] dump_stack_lvl+0x100/0x190 [ 213.962189][ T8199] should_fail_ex.cold+0x5/0xa [ 213.962204][ T8199] should_failslab+0xc2/0x120 [ 213.962217][ T8199] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 213.962235][ T8199] ? security_inode_alloc+0x3b/0x2c0 [ 213.962247][ T8199] ? lockdep_init_map_type+0x5c/0x250 [ 213.962267][ T8199] security_inode_alloc+0x3b/0x2c0 [ 213.962280][ T8199] inode_init_always_gfp+0xc77/0xfb0 [ 213.962296][ T8199] alloc_inode+0x8e/0x250 [ 213.962313][ T8199] sock_alloc+0x44/0x280 [ 213.962327][ T8199] do_accept+0xf9/0x530 [ 213.962342][ T8199] ? do_raw_spin_lock+0x128/0x260 [ 213.962355][ T8199] ? __pfx_do_accept+0x10/0x10 [ 213.962381][ T8199] __sys_accept4+0x108/0x200 [ 213.962399][ T8199] ? __pfx___sys_accept4+0x10/0x10 [ 213.962416][ T8199] ? ksys_write+0x1ac/0x250 [ 213.962430][ T8199] __ia32_sys_accept4+0x94/0x100 [ 213.962447][ T8199] ? lockdep_hardirqs_on+0x78/0x100 [ 213.962463][ T8199] __do_fast_syscall_32+0xe7/0x970 [ 213.962479][ T8199] ? lockdep_hardirqs_on+0x78/0x100 [ 213.962495][ T8199] do_fast_syscall_32+0x32/0x70 [ 213.962511][ T8199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.962526][ T8199] RIP: 0023:0xf7fd4f7c [ 213.962535][ T8199] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 213.962545][ T8199] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 213.962556][ T8199] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 213.962563][ T8199] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 213.962569][ T8199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.962575][ T8199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.962581][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.962594][ T8199] [ 214.263832][ T5752] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 214.263860][ T5752] Bluetooth: Wrong link type (-22) [ 214.263881][ T5752] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 214.263889][ T5752] Bluetooth: Wrong link type (-22) [ 214.305356][ T8223] bridge0: port 2(bridge_slave_1) entered listening state [ 214.358664][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.280239][ T5856] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 215.906656][ T8241] binder: 8235:8241 ioctl c0306201 80000640 returned -22 [ 224.774588][ T8264] netlink: 'syz.0.576': attribute type 21 has an invalid length. [ 224.780078][ T8264] netlink: 152 bytes leftover after parsing attributes in process `syz.0.576'. [ 225.337005][ T5903] libceph: connect (1)[c::]:6789 error -22 [ 225.339536][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 225.358927][ T8277] ceph: No mds server is up or the cluster is laggy [ 226.517201][ T8283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 226.519361][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.531518][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 226.550475][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 226.738773][ T8294] vhci_hcd: connection closed [ 226.756916][ T216] vhci_hcd vhci_hcd.0: stop threads [ 226.772110][ T216] vhci_hcd vhci_hcd.0: release socket [ 226.777689][ T216] vhci_hcd vhci_hcd.0: disconnect device [ 226.826573][ T29] usb 38-1: enqueue for inactive port 0 [ 226.883063][ T8302] netlink: 'syz.3.585': attribute type 61 has an invalid length. [ 226.914832][ T8302] tmpfs: Bad value for 'mpol' [ 226.935604][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 226.935620][ T40] audit: type=1326 audit(1780431790.515:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 226.948948][ T40] audit: type=1326 audit(1780431790.535:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 226.958771][ T40] audit: type=1326 audit(1780431790.535:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 226.970624][ T40] audit: type=1326 audit(1780431790.555:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 226.984721][ T40] audit: type=1326 audit(1780431790.555:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 226.993917][ T40] audit: type=1326 audit(1780431790.555:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 227.002634][ T40] audit: type=1326 audit(1780431790.555:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 227.011359][ T40] audit: type=1326 audit(1780431790.555:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 227.020054][ T40] audit: type=1326 audit(1780431790.555:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 227.029944][ T40] audit: type=1326 audit(1780431790.575:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.3.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 227.358518][ T8323] /dev/sr0: Can't open blockdev [ 227.366731][ T29] usb usb38-port1: attempt power cycle [ 227.402522][ T8323] fuse: Unknown parameter '0x0000000000000006' [ 227.959210][ T29] usb usb38-port1: unable to enumerate USB device [ 228.288712][ T8341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 228.290838][ T8341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.299848][ T8341] vhci_hcd vhci_hcd.0: Device attached [ 228.586456][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 228.592238][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 228.607999][ T8345] wg2 speed is unknown, defaulting to 1000 [ 228.648733][ T8345] wg2 speed is unknown, defaulting to 1000 [ 228.732533][ T8345] wg2 speed is unknown, defaulting to 1000 [ 228.849168][ T8342] vhci_hcd: connection reset by peer [ 228.856302][ T216] vhci_hcd vhci_hcd.3: stop threads [ 228.858862][ T216] vhci_hcd vhci_hcd.3: release socket [ 228.861229][ T216] vhci_hcd vhci_hcd.3: disconnect device [ 228.923129][ T5903] wg2 speed is unknown, defaulting to 1000 [ 228.927627][ T8345] infiniband syz2: set active [ 228.931901][ T8345] infiniband syz2: added wg2 [ 228.958552][ T8350] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 228.961182][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.973435][ T8345] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 228.980010][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 228.987794][ T8345] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 229.002782][ T8345] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 229.046237][ T8345] RDS/IB: syz2: added [ 229.053836][ T8345] smc: adding ib device syz2 with port count 1 [ 229.058920][ T8345] smc: ib device syz2 port 1 has no pnetid [ 229.062029][ T844] wg2 speed is unknown, defaulting to 1000 [ 229.067866][ T8345] wg2 speed is unknown, defaulting to 1000 [ 229.075168][ T8350] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 229.240001][ T8345] wg2 speed is unknown, defaulting to 1000 [ 229.246157][ T5903] usb 38-1: SetAddress Request (10) to port 0 [ 229.250427][ T5903] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 229.347918][ T8351] vhci_hcd: connection reset by peer [ 229.350539][ T216] vhci_hcd vhci_hcd.0: stop threads [ 229.352238][ T216] vhci_hcd vhci_hcd.0: release socket [ 229.354013][ T216] vhci_hcd vhci_hcd.0: disconnect device [ 229.404250][ T8345] wg2 speed is unknown, defaulting to 1000 [ 229.511893][ T8345] wg2 speed is unknown, defaulting to 1000 [ 233.696332][ T29] usb 44-1: device descriptor read/8, error -110 [ 234.087169][ T29] usb usb44-port1: attempt power cycle [ 234.346225][ T5903] usb 38-1: device descriptor read/8, error -110 [ 234.667095][ T29] usb usb44-port1: unable to enumerate USB device [ 234.757162][ T5903] usb usb38-port1: attempt power cycle [ 235.397137][ T5903] usb usb38-port1: unable to enumerate USB device [ 235.605936][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 235.636406][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 235.847307][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 237.107134][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 237.522591][ T8422] netlink: 'syz.0.599': attribute type 61 has an invalid length. [ 237.526298][ T8422] tmpfs: Bad value for 'mpol' [ 237.530887][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 237.530896][ T40] audit: type=1326 audit(1780431801.115:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545680][ T40] audit: type=1326 audit(1780431801.115:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545707][ T40] audit: type=1326 audit(1780431801.115:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545729][ T40] audit: type=1326 audit(1780431801.115:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545751][ T40] audit: type=1326 audit(1780431801.115:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545772][ T40] audit: type=1326 audit(1780431801.115:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545793][ T40] audit: type=1326 audit(1780431801.115:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545813][ T40] audit: type=1326 audit(1780431801.115:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545834][ T40] audit: type=1326 audit(1780431801.115:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 237.545853][ T40] audit: type=1326 audit(1780431801.115:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 238.425129][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 238.706932][ T8444] netlink: 56 bytes leftover after parsing attributes in process `syz.0.606'. [ 246.188293][ T8477] 0x0000fffffffd-0x00010000fffd : "" [ 246.190833][ T8477] mtd: partition "" is out of reach -- disabled [ 246.201121][ T8481] binder: 8473:8481 ioctl c0306201 80000640 returned -22 [ 246.377516][ T8477] ftl_cs: FTL header not found. [ 247.424875][ T8479] wg2 speed is unknown, defaulting to 1000 [ 247.428129][ T8490] binder: 8485:8490 ioctl c0306201 80000640 returned -22 [ 248.348556][ T8497] binder: 8493:8497 ioctl c0306201 80000640 returned -22 [ 248.427449][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 248.431016][ T50] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 248.434210][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.439127][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.443353][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.445865][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.449241][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.452973][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.455394][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.459250][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.461649][ T50] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.486492][ T50] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 248.754141][ T8503] fido_id[8503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.971518][ T8516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.992466][ T8516] team0: Mode changed to "broadcast" [ 248.994952][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 249.021044][ T8516] vlan0: entered promiscuous mode [ 249.038727][ T8516] team0: Port device vlan0 added [ 249.065835][ T8516] tipc: Enabled bearer , priority 0 [ 249.114510][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 251.223000][ T8555] binder: 8545:8555 ioctl c0306201 80000640 returned -22 [ 251.462964][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.618027][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.622176][ T50] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.626587][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.630254][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 251.634587][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 251.641986][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.645717][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.649608][ T50] usb 5-1: Product: syz [ 251.651326][ T50] usb 5-1: Manufacturer: syz [ 251.657489][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 251.660119][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 251.663894][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 251.665861][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 252.515105][ T8572] binder: 8566:8572 ioctl c0306201 80000640 returned -22 [ 252.920536][ T8570] tmpfs: Bad value for 'mpol' [ 252.975778][ T8570] 9p: Bad value for 'rfdno' [ 254.253711][ T39] usb 5-1: USB disconnect, device number 10 [ 257.957395][ T8600] x_tables: duplicate underflow at hook 1 [ 258.072607][ T8605] netlink: 'syz.1.633': attribute type 61 has an invalid length. [ 258.086999][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 258.141351][ T8605] tmpfs: Bad value for 'mpol' [ 258.192137][ T40] kauditd_printk_skb: 421 callbacks suppressed [ 258.192150][ T40] audit: type=1326 audit(1780431821.775:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.223319][ T40] audit: type=1326 audit(1780431821.795:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.247798][ T40] audit: type=1326 audit(1780431821.795:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.265370][ T40] audit: type=1326 audit(1780431821.795:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.280199][ T40] audit: type=1326 audit(1780431821.795:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.294553][ T40] audit: type=1326 audit(1780431821.805:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.311816][ T40] audit: type=1326 audit(1780431821.805:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.325763][ T40] audit: type=1326 audit(1780431821.805:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.341556][ T40] audit: type=1326 audit(1780431821.815:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.359800][ T40] audit: type=1326 audit(1780431821.825:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 258.792075][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 260.270155][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.274620][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.290098][ T1435] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 260.308904][ T8625] wg2 speed is unknown, defaulting to 1000 [ 260.941828][ T8594] kexec: Could not allocate control_code_buffer [ 261.996982][ T8645] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 262.416124][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 262.566289][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 262.569961][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 262.573733][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.591143][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 262.593423][ T24] pvrusb2: ********** [ 262.594789][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 262.599379][ T24] pvrusb2: Important functionality might not be entirely working. [ 262.601827][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 262.605399][ T24] pvrusb2: ********** [ 262.794818][ T2509] pvrusb2: Invalid write control endpoint [ 262.830097][ T2509] pvrusb2: Invalid write control endpoint [ 262.832118][ T2509] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 262.845954][ T2509] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 262.855395][ T2509] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 262.861743][ T2509] pvrusb2: Device being rendered inoperable [ 262.868271][ T2509] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 262.875790][ T2509] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 262.888159][ T2509] pvrusb2: Attached sub-driver cx25840 [ 262.890000][ T2509] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 262.893093][ T2509] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 262.992478][ T8649] pvrusb2: Attempted to execute control transfer when device not ok [ 262.999801][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 263.005019][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 263.015386][ T5856] usb 7-1: USB disconnect, device number 5 [ 268.407453][ T8675] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 268.435978][ T8675] bond2: entered promiscuous mode [ 268.438428][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.454165][ T8676] Cannot find del_set index 0 as target [ 268.461257][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 268.481697][ T8675] bond2: entered allmulticast mode [ 268.519645][ T8676] bond1: entered promiscuous mode [ 268.542630][ T8675] wg2 speed is unknown, defaulting to 1000 [ 268.726859][ T8676] i2c i2c-1: dtv_property_process_set: SET cmd 0x00040008 undefined [ 268.733341][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 268.786853][ T8675] bond2: (slave bridge1): making interface the new active one [ 268.790228][ T8675] bridge1: entered promiscuous mode [ 268.792726][ T8675] bridge1: entered allmulticast mode [ 268.798881][ T8675] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 269.151749][ T8700] netlink: 'syz.3.650': attribute type 61 has an invalid length. [ 269.177304][ T8700] tmpfs: Bad value for 'mpol' [ 269.182926][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 269.182937][ T40] audit: type=1326 audit(1780431832.765:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.193743][ T40] audit: type=1326 audit(1780431832.775:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.202465][ T40] audit: type=1326 audit(1780431832.775:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.219500][ T40] audit: type=1326 audit(1780431832.775:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.234272][ T40] audit: type=1326 audit(1780431832.785:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.296296][ T40] audit: type=1326 audit(1780431832.785:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.296324][ T40] audit: type=1326 audit(1780431832.785:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.296345][ T40] audit: type=1326 audit(1780431832.785:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.296365][ T40] audit: type=1326 audit(1780431832.785:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.296386][ T40] audit: type=1326 audit(1780431832.785:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 269.369442][ T8702] netlink: 'syz.1.651': attribute type 61 has an invalid length. [ 269.371595][ T8702] tmpfs: Bad value for 'mpol' [ 269.842554][ T8720] netlink: 'syz.0.654': attribute type 61 has an invalid length. [ 269.844448][ T8720] tmpfs: Bad value for 'mpol' [ 270.360251][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 270.382140][ T8731] comedi comedi3: pcl818: I/O base address or length out of range [ 271.142251][ T8735] Cannot find del_set index 0 as target [ 271.161968][ T8735] bond4: entered promiscuous mode [ 271.183942][ T8735] i2c i2c-1: dtv_property_process_set: SET cmd 0x00040008 undefined [ 271.184326][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.658'. [ 271.528979][ T8742] binder: 8739:8742 ioctl c0306201 80000640 returned -22 [ 272.257490][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'. [ 272.268080][ T8745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.660'. [ 272.268214][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.660'. [ 272.655157][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 272.705221][ T8726] syz.2.656 (8726) used greatest stack depth: 19768 bytes left [ 273.458732][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 273.922064][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 275.285104][ T8784] FAULT_INJECTION: forcing a failure. [ 275.285104][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.300752][ T8784] CPU: 3 UID: 0 PID: 8784 Comm: syz.3.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.300773][ T8784] Tainted: [L]=SOFTLOCKUP [ 275.300777][ T8784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.300784][ T8784] Call Trace: [ 275.300788][ T8784] [ 275.300792][ T8784] dump_stack_lvl+0x100/0x190 [ 275.300807][ T8784] should_fail_ex.cold+0x5/0xa [ 275.300822][ T8784] _copy_to_user+0x32/0xd0 [ 275.300840][ T8784] vivid_radio_rx_read+0x7c1/0xb90 [ 275.300859][ T8784] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 275.300878][ T8784] vivid_radio_read+0x86/0xc0 [ 275.300891][ T8784] v4l2_read+0x229/0x2c0 [ 275.300908][ T8784] ? __pfx_v4l2_read+0x10/0x10 [ 275.300925][ T8784] vfs_read+0x1e4/0xb30 [ 275.300940][ T8784] ? __pfx_vfs_read+0x10/0x10 [ 275.300951][ T8784] ? find_held_lock+0x2b/0x80 [ 275.300965][ T8784] ? __fget_files+0x215/0x3d0 [ 275.300977][ T8784] ? __fget_files+0x215/0x3d0 [ 275.300992][ T8784] ? __fget_files+0x21f/0x3d0 [ 275.301009][ T8784] ksys_read+0x12a/0x250 [ 275.301021][ T8784] ? __pfx_ksys_read+0x10/0x10 [ 275.301033][ T8784] ? ksys_write+0x1ac/0x250 [ 275.301046][ T8784] ? rcu_is_watching+0x12/0xc0 [ 275.301060][ T8784] __do_fast_syscall_32+0xe7/0x970 [ 275.301077][ T8784] ? lockdep_hardirqs_on+0x78/0x100 [ 275.301093][ T8784] do_fast_syscall_32+0x32/0x70 [ 275.301110][ T8784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.301125][ T8784] RIP: 0023:0xf7fe2f7c [ 275.301135][ T8784] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 275.301145][ T8784] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 275.301156][ T8784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 275.301163][ T8784] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.301169][ T8784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.301175][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.301181][ T8784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.301195][ T8784] [ 276.352513][ T8801] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 276.355079][ T8801] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 276.576731][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 276.598336][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 278.504282][ T8836] FAULT_INJECTION: forcing a failure. [ 278.504282][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 278.508958][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.2.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.508978][ T8836] Tainted: [L]=SOFTLOCKUP [ 278.508982][ T8836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.508988][ T8836] Call Trace: [ 278.508992][ T8836] [ 278.508996][ T8836] dump_stack_lvl+0x100/0x190 [ 278.509012][ T8836] should_fail_ex.cold+0x5/0xa [ 278.509026][ T8836] should_failslab+0xc2/0x120 [ 278.509039][ T8836] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 278.509057][ T8836] ? do_getname+0x35/0x390 [ 278.509076][ T8836] do_getname+0x35/0x390 [ 278.509093][ T8836] user_path_at+0x26/0x60 [ 278.509105][ T8836] __ia32_sys_mount+0x1fb/0x310 [ 278.509122][ T8836] ? __pfx___ia32_sys_mount+0x10/0x10 [ 278.509137][ T8836] ? ksys_write+0x1ac/0x250 [ 278.509150][ T8836] ? rcu_is_watching+0x12/0xc0 [ 278.509165][ T8836] __do_fast_syscall_32+0xe7/0x970 [ 278.509182][ T8836] ? lockdep_hardirqs_on+0x78/0x100 [ 278.509198][ T8836] do_fast_syscall_32+0x32/0x70 [ 278.509216][ T8836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.509233][ T8836] RIP: 0023:0xf6feef7c [ 278.509243][ T8836] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 278.509253][ T8836] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 278.509265][ T8836] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800001c0 [ 278.509272][ T8836] RDX: 0000000080000080 RSI: 0000000000000004 RDI: 00000000800000c0 [ 278.509278][ T8836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.509284][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.509290][ T8836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.509303][ T8836] [ 278.836105][ T5903] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 279.016129][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 279.020422][ T5903] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.024432][ T5903] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 279.028351][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 279.033196][ T5903] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 279.037274][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.040520][ T5903] usb 5-1: Product: 闓㷡蓪뇧៽㢄㞨顊㴝匘襤܅銆薲䤟⛃ⷯ긝㭠໸땩꩖꽆秺ⳗ耧嬡獬ၦꨑꫀ鎷ռ瑬Ⲇ珖䫾飆놎뺽쪧彊嚔恍剞ߛ圀؂ユꠀ쟙폩㦸ꑳ⺧ᮏ㧭ቶ⊈꿼辵쭜꯰棜㴩ࣹ☝籐෪䩹䊵ᜮ㟻㹵晉ᜬ㼨আ磊吧ꁘ䥙፡ا㢖嶺⯤䆭熷 [ 279.051749][ T5903] usb 5-1: Manufacturer: Ⰱ [ 279.053544][ T5903] usb 5-1: SerialNumber: 虮〪쁍毬﫽蟦䂃⇞﷎쓥⭦踑鬈᥈Lj核뢭隲૕橧桤キ巜왂摇뷝銳ᘉ㣛仇튟㲎咚䠽଒鼰逿끯䰶觿뤖坶鋛Ợ瀰绾軼饀껨޶癭鄷聅淳箆㪕◍⨒跺ꋮ᥉崭ง퐉틀㜑巡㔄䚨銜탙륶f胼剖 [ 279.064198][ T8838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.069218][ T8838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.278070][ T5903] usblp0: Disabling reads from problematic bidirectional printer [ 279.479142][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.486287][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.499165][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.504788][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.513982][ T5903] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 8 proto 1 vid 0x03F0 pid 0x0004 [ 279.533600][ T5903] usb 5-1: USB disconnect, device number 11 [ 279.559981][ T5903] usblp0: removed [ 279.574337][ T8852] xt_l2tp: missing protocol rule (udp|l2tpip) [ 279.768206][ T40] kauditd_printk_skb: 984 callbacks suppressed [ 279.768219][ T40] audit: type=1326 audit(1780431843.355:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.777352][ T40] audit: type=1326 audit(1780431843.355:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.785307][ T40] audit: type=1326 audit(1780431843.355:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.794652][ T40] audit: type=1326 audit(1780431843.365:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.802987][ T40] audit: type=1326 audit(1780431843.365:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.811055][ T40] audit: type=1326 audit(1780431843.365:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.824741][ T40] audit: type=1326 audit(1780431843.365:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.833011][ T40] audit: type=1326 audit(1780431843.365:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.843242][ T40] audit: type=1326 audit(1780431843.365:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 279.852174][ T40] audit: type=1326 audit(1780431843.365:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.1.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7fc00000 [ 280.181815][ T8871] netlink: 'syz.0.700': attribute type 61 has an invalid length. [ 280.185665][ T8871] tmpfs: Bad value for 'mpol' [ 280.232736][ T8865] wg2 speed is unknown, defaulting to 1000 [ 282.628993][ T8858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.818485][ T8906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 282.820508][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.823581][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 282.829851][ T8905] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 282.832037][ T8905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.834717][ T8905] vhci_hcd vhci_hcd.0: Device attached [ 282.842229][ T8908] wg2 speed is unknown, defaulting to 1000 [ 282.845641][ T8912] vhci_hcd: connection closed [ 282.845854][ T13] vhci_hcd vhci_hcd.0: stop threads [ 282.849520][ T13] vhci_hcd vhci_hcd.0: release socket [ 282.851230][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 282.853851][ T8909] vhci_hcd: connection closed [ 282.855959][ T13] vhci_hcd vhci_hcd.0: stop threads [ 282.865754][ T13] vhci_hcd vhci_hcd.0: release socket [ 282.868385][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 282.937665][ T8922] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 282.946252][ T8922] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 282.949768][ T8922] netlink: 224 bytes leftover after parsing attributes in process `syz.2.710'. [ 282.952457][ T8922] NCSI netlink: No device for ifindex 0 [ 283.043029][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 284.004219][ T8950] netlink: 'syz.3.715': attribute type 61 has an invalid length. [ 284.008699][ T8950] tmpfs: Bad value for 'mpol' [ 285.116163][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 285.277758][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.281535][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.285729][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.289837][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.296353][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.300302][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.303621][ T24] usb 6-1: Product: syz [ 285.305340][ T24] usb 6-1: Manufacturer: syz [ 285.316759][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 285.320786][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 285.324689][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 285.328511][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 286.034619][ T10] usb 6-1: USB disconnect, device number 9 [ 286.230100][ T8998] netlink: 'syz.1.732': attribute type 61 has an invalid length. [ 286.278046][ T8998] tmpfs: Bad value for 'mpol' [ 286.294780][ T40] kauditd_printk_skb: 946 callbacks suppressed [ 286.294792][ T40] audit: type=1326 audit(1780431849.875:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.309935][ T40] audit: type=1326 audit(1780431849.875:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.309965][ T40] audit: type=1326 audit(1780431849.875:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.309987][ T40] audit: type=1326 audit(1780431849.875:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310008][ T40] audit: type=1326 audit(1780431849.875:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310030][ T40] audit: type=1326 audit(1780431849.875:10587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310056][ T40] audit: type=1326 audit(1780431849.875:10588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310078][ T40] audit: type=1326 audit(1780431849.875:10589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310100][ T40] audit: type=1326 audit(1780431849.875:10590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.310121][ T40] audit: type=1326 audit(1780431849.875:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66f7c code=0x7ffc0000 [ 286.708343][ T9014] FAULT_INJECTION: forcing a failure. [ 286.708343][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.708365][ T9014] CPU: 3 UID: 0 PID: 9014 Comm: syz.2.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.708380][ T9014] Tainted: [L]=SOFTLOCKUP [ 286.708384][ T9014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.708391][ T9014] Call Trace: [ 286.708394][ T9014] [ 286.708399][ T9014] dump_stack_lvl+0x100/0x190 [ 286.708413][ T9014] should_fail_ex.cold+0x5/0xa [ 286.708428][ T9014] _copy_from_user+0x2e/0xd0 [ 286.708444][ T9014] get_compat_msghdr+0xb3/0x4b0 [ 286.708458][ T9014] ? __pfx_get_compat_msghdr+0x10/0x10 [ 286.708475][ T9014] ___sys_sendmsg+0x1b6/0x1e0 [ 286.708492][ T9014] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.708513][ T9014] ? find_held_lock+0x2b/0x80 [ 286.708536][ T9014] __sys_sendmsg+0x170/0x220 [ 286.708547][ T9014] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.708558][ T9014] ? __fget_files+0x21f/0x3d0 [ 286.708574][ T9014] ? ksys_write+0x1ac/0x250 [ 286.708588][ T9014] ? rcu_is_watching+0x12/0xc0 [ 286.708602][ T9014] __do_fast_syscall_32+0xe7/0x970 [ 286.708619][ T9014] ? lockdep_hardirqs_on+0x78/0x100 [ 286.708644][ T9014] do_fast_syscall_32+0x32/0x70 [ 286.708661][ T9014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.708675][ T9014] RIP: 0023:0xf6feef7c [ 286.708684][ T9014] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 286.708695][ T9014] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 286.708706][ T9014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 286.708713][ T9014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.708719][ T9014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.708725][ T9014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 286.708731][ T9014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.708745][ T9014] [ 286.783822][ T9016] FAULT_INJECTION: forcing a failure. [ 286.783822][ T9016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.783845][ T9016] CPU: 3 UID: 0 PID: 9016 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.783860][ T9016] Tainted: [L]=SOFTLOCKUP [ 286.783864][ T9016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.783871][ T9016] Call Trace: [ 286.783874][ T9016] [ 286.783879][ T9016] dump_stack_lvl+0x100/0x190 [ 286.783894][ T9016] should_fail_ex.cold+0x5/0xa [ 286.783906][ T9016] ? prepare_alloc_pages+0x16d/0x5f0 [ 286.783921][ T9016] should_fail_alloc_page+0xeb/0x140 [ 286.783935][ T9016] prepare_alloc_pages+0x1f0/0x5f0 [ 286.783952][ T9016] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 286.783973][ T9016] ? rcu_is_watching+0x12/0xc0 [ 286.783986][ T9016] ? trace_mm_page_alloc+0x163/0x1d0 [ 286.784001][ T9016] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 286.784020][ T9016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.784040][ T9016] ? __pfx_stack_trace_save+0x10/0x10 [ 286.784055][ T9016] ? stack_depot_save_flags+0x27/0x9d0 [ 286.784074][ T9016] ? is_bpf_text_address+0x8a/0x1a0 [ 286.784089][ T9016] ? is_bpf_text_address+0x8a/0x1a0 [ 286.784104][ T9016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.784122][ T9016] ? kasan_save_stack+0x3f/0x50 [ 286.784132][ T9016] ? kasan_save_stack+0x30/0x50 [ 286.784142][ T9016] ? kasan_save_track+0x14/0x30 [ 286.784153][ T9016] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 286.784171][ T9016] ? __get_vm_area_node+0x1ca/0x330 [ 286.784184][ T9016] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 286.784198][ T9016] ? __vmalloc_node_noprof+0xad/0xf0 [ 286.784212][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.784226][ T9016] ? do_ebt_set_ctl+0x2f5/0x3f0 [ 286.784240][ T9016] ? nf_setsockopt+0x8d/0xf0 [ 286.784258][ T9016] ? ip_setsockopt+0xcb/0xf0 [ 286.784267][ T9016] ? raw_setsockopt+0x60/0x1b0 [ 286.784276][ T9016] ? do_sock_setsockopt+0xf3/0x1d0 [ 286.784292][ T9016] alloc_pages_bulk_noprof+0x649/0x1360 [ 286.784314][ T9016] ? policy_nodemask+0xed/0x4f0 [ 286.784328][ T9016] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 286.784366][ T9016] __kasan_populate_vmalloc+0xf0/0x210 [ 286.784390][ T9016] alloc_vmap_area+0x95d/0x2b70 [ 286.784409][ T9016] ? __pfx_alloc_vmap_area+0x10/0x10 [ 286.784425][ T9016] __get_vm_area_node+0x1ca/0x330 [ 286.784442][ T9016] __vmalloc_node_range_noprof+0x228/0x1630 [ 286.784457][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.784473][ T9016] ? find_held_lock+0x2b/0x80 [ 286.784487][ T9016] ? __might_fault+0xc5/0x140 [ 286.784504][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.784523][ T9016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.784538][ T9016] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 286.784554][ T9016] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 286.784573][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.784587][ T9016] __vmalloc_node_noprof+0xad/0xf0 [ 286.784602][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.784617][ T9016] compat_do_replace+0x1b1/0x7a0 [ 286.784633][ T9016] ? __pfx_compat_do_replace+0x10/0x10 [ 286.784649][ T9016] ? rcu_is_watching+0x12/0xc0 [ 286.784667][ T9016] ? bpf_lsm_capable+0x9/0x10 [ 286.784678][ T9016] ? security_capable+0x80/0x260 [ 286.784690][ T9016] do_ebt_set_ctl+0x2f5/0x3f0 [ 286.784706][ T9016] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 286.784722][ T9016] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 286.784735][ T9016] ? nf_sockopt_find.isra.0+0x222/0x290 [ 286.784757][ T9016] nf_setsockopt+0x8d/0xf0 [ 286.784775][ T9016] ip_setsockopt+0xcb/0xf0 [ 286.784786][ T9016] raw_setsockopt+0x60/0x1b0 [ 286.784796][ T9016] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 286.784811][ T9016] do_sock_setsockopt+0xf3/0x1d0 [ 286.784826][ T9016] __sys_setsockopt+0x119/0x190 [ 286.784839][ T9016] __ia32_sys_setsockopt+0xbc/0x160 [ 286.784849][ T9016] ? __do_fast_syscall_32+0x98/0x970 [ 286.784866][ T9016] ? lockdep_hardirqs_on+0x78/0x100 [ 286.784881][ T9016] __do_fast_syscall_32+0xe7/0x970 [ 286.784897][ T9016] ? lockdep_hardirqs_on+0x78/0x100 [ 286.784914][ T9016] do_fast_syscall_32+0x32/0x70 [ 286.784930][ T9016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.784945][ T9016] RIP: 0023:0xf6feef7c [ 286.784957][ T9016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 286.784970][ T9016] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 286.784981][ T9016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 286.784987][ T9016] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0 [ 286.784994][ T9016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.785000][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.785006][ T9016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.785020][ T9016] [ 286.785118][ T9016] syz.2.738: vmalloc error: size 8355968, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.785168][ T9016] CPU: 3 UID: 0 PID: 9016 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.785183][ T9016] Tainted: [L]=SOFTLOCKUP [ 286.785187][ T9016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.785193][ T9016] Call Trace: [ 286.785196][ T9016] [ 286.785200][ T9016] dump_stack_lvl+0x100/0x190 [ 286.785212][ T9016] warn_alloc.cold+0x95/0x1c1 [ 286.785224][ T9016] ? __pfx_warn_alloc+0x10/0x10 [ 286.785241][ T9016] ? lockdep_hardirqs_on+0x78/0x100 [ 286.785259][ T9016] ? __get_vm_area_node+0x2cd/0x330 [ 286.785276][ T9016] ? __get_vm_area_node+0x208/0x330 [ 286.785292][ T9016] __vmalloc_node_range_noprof+0xccd/0x1630 [ 286.785309][ T9016] ? find_held_lock+0x2b/0x80 [ 286.785322][ T9016] ? __might_fault+0xc5/0x140 [ 286.785339][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.785357][ T9016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.785372][ T9016] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 286.785388][ T9016] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 286.785407][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.785420][ T9016] __vmalloc_node_noprof+0xad/0xf0 [ 286.785435][ T9016] ? compat_do_replace+0x1b1/0x7a0 [ 286.785450][ T9016] compat_do_replace+0x1b1/0x7a0 [ 286.785466][ T9016] ? __pfx_compat_do_replace+0x10/0x10 [ 286.785482][ T9016] ? rcu_is_watching+0x12/0xc0 [ 286.785499][ T9016] ? bpf_lsm_capable+0x9/0x10 [ 286.785510][ T9016] ? security_capable+0x80/0x260 [ 286.785522][ T9016] do_ebt_set_ctl+0x2f5/0x3f0 [ 286.785538][ T9016] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 286.785553][ T9016] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 286.785566][ T9016] ? nf_sockopt_find.isra.0+0x222/0x290 [ 286.785584][ T9016] nf_setsockopt+0x8d/0xf0 [ 286.785601][ T9016] ip_setsockopt+0xcb/0xf0 [ 286.785612][ T9016] raw_setsockopt+0x60/0x1b0 [ 286.785622][ T9016] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 286.785637][ T9016] do_sock_setsockopt+0xf3/0x1d0 [ 286.785651][ T9016] __sys_setsockopt+0x119/0x190 [ 286.785664][ T9016] __ia32_sys_setsockopt+0xbc/0x160 [ 286.785674][ T9016] ? __do_fast_syscall_32+0x98/0x970 [ 286.785690][ T9016] ? lockdep_hardirqs_on+0x78/0x100 [ 286.785705][ T9016] __do_fast_syscall_32+0xe7/0x970 [ 286.785721][ T9016] ? lockdep_hardirqs_on+0x78/0x100 [ 286.785737][ T9016] do_fast_syscall_32+0x32/0x70 [ 286.785758][ T9016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.785772][ T9016] RIP: 0023:0xf6feef7c [ 286.785780][ T9016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 286.785790][ T9016] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 286.785800][ T9016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 286.785806][ T9016] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0 [ 286.785812][ T9016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.785840][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.785847][ T9016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.785861][ T9016] [ 286.785865][ T9016] Mem-Info: [ 286.785870][ T9016] active_anon:5578 inactive_anon:7586 isolated_anon:0 [ 286.785870][ T9016] active_file:8829 inactive_file:14037 isolated_file:0 [ 286.785870][ T9016] unevictable:1768 dirty:389 writeback:4 [ 286.785870][ T9016] slab_reclaimable:6072 slab_unreclaimable:59294 [ 286.785870][ T9016] mapped:27754 shmem:6379 pagetables:1270 [ 286.785870][ T9016] sec_pagetables:308 bounce:0 [ 286.785870][ T9016] kernel_misc_reclaimable:0 [ 286.785870][ T9016] free:54797 free_pcp:16560 free_cma:0 [ 286.785897][ T9016] Node 0 active_anon:148kB inactive_anon:92kB active_file:16kB inactive_file:172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8092kB pagetables:1472kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 286.785926][ T9016] Node 1 active_anon:22164kB inactive_anon:30252kB active_file:35300kB inactive_file:55976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110988kB dirty:1552kB writeback:16kB shmem:21980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5548kB pagetables:3608kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 286.785954][ T9016] Node 0 DMA free:1900kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:24kB active_file:12kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:736kB local_pcp:188kB free_cma:0kB [ 286.785985][ T9016] lowmem_reserve[]: 0 285 285 285 285 [ 286.786119][ T9016] Node 0 DMA32 free:16188kB boost:0kB min:13096kB low:16368kB high:19640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148kB inactive_anon:68kB active_file:4kB inactive_file:40kB unevictable:3536kB writepending:4kB zspages:44kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:13560kB local_pcp:3032kB free_cma:0kB [ 286.786190][ T9016] lowmem_reserve[]: 0 0 0 0 0 [ 286.786212][ T9016] Node 1 DMA32 free:201100kB boost:20480kB min:67624kB low:79408kB high:91192kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22164kB inactive_anon:30252kB active_file:35300kB inactive_file:55976kB unevictable:3536kB writepending:1568kB zspages:2400kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:51944kB local_pcp:15420kB free_cma:0kB [ 286.786246][ T9016] lowmem_reserve[]: 0 0 0 0 0 [ 286.786266][ T9016] Node 0 DMA: 141*4kB (U) 19*8kB (U) 8*16kB (UM) 13*32kB (UM) 4*64kB (M) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1900kB [ 286.786342][ T9016] Node 0 DMA32: 233*4kB (UME) 109*8kB (UME) 57*16kB (UME) 115*32kB (UME) 45*64kB (UME) 6*128kB (UME) 6*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 0*2048kB 0*4096kB = 16188kB [ 286.786427][ T9016] Node 1 DMA32: 620*4kB (UE) 1386*8kB (UME) 786*16kB (UE) 15*32kB (UE) 79*64kB (UME) 120*128kB (UME) 87*256kB (UME) 61*512kB (UME) 44*1024kB (U) 15*2048kB (U) 6*4096kB (UM) = 200896kB [ 286.786518][ T9016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.786527][ T9016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.786536][ T9016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.786544][ T9016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.786552][ T9016] 29515 total pagecache pages [ 286.786556][ T9016] 274 pages in swap cache [ 286.786560][ T9016] Free swap = 118812kB [ 286.786564][ T9016] Total swap = 124996kB [ 286.786569][ T9016] 524155 pages RAM [ 286.786572][ T9016] 0 pages HighMem/MovableOnly [ 286.786576][ T9016] 210075 pages reserved [ 286.786580][ T9016] 0 pages cma reserved [ 286.895190][ T9020] tmpfs: Unknown parameter 'rpquota_inod%_hardlimit' [ 287.156927][ T9010] syz.3.733 (9010) used greatest stack depth: 18936 bytes left [ 287.258435][ T9023] XFS (nullb0): Invalid superblock magic number [ 287.902658][ T9046] tmpfs: Unknown parameter 'rpquota_inod%_hardlimit' [ 288.005857][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.013139][ T9051] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.055802][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.748'. [ 288.177255][ T9064] 9pnet_fd: p9_fd_create_tcp (9064): problem connecting socket to 127.0.0.1 [ 288.280206][ T9069] overlayfs: failed to resolve './file0/file1': -2 [ 289.120862][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 289.333863][ T9101] FAULT_INJECTION: forcing a failure. [ 289.333863][ T9101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.341252][ T9101] CPU: 3 UID: 0 PID: 9101 Comm: syz.2.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.341272][ T9101] Tainted: [L]=SOFTLOCKUP [ 289.341277][ T9101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.341283][ T9101] Call Trace: [ 289.341287][ T9101] [ 289.341292][ T9101] dump_stack_lvl+0x100/0x190 [ 289.341308][ T9101] should_fail_ex.cold+0x5/0xa [ 289.341322][ T9101] _copy_from_user+0x2e/0xd0 [ 289.341339][ T9101] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 289.341357][ T9101] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 289.341370][ T9101] ? __import_iovec+0x1d2/0x640 [ 289.341389][ T9101] ____sys_sendmsg+0x607/0xb70 [ 289.341405][ T9101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.341422][ T9101] ? _kstrtoull+0x13c/0x1f0 [ 289.341433][ T9101] ? __pfx__kstrtoull+0x10/0x10 [ 289.341445][ T9101] ___sys_sendmsg+0x190/0x1e0 [ 289.341461][ T9101] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.341476][ T9101] ? __lock_acquire+0x4a5/0x2630 [ 289.341508][ T9101] __sys_sendmmsg+0x2ff/0x430 [ 289.341521][ T9101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 289.341537][ T9101] ? __fget_files+0x215/0x3d0 [ 289.341556][ T9101] ? fput+0x79/0x100 [ 289.341571][ T9101] ? ksys_write+0x1ac/0x250 [ 289.341585][ T9101] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 289.341599][ T9101] ? lockdep_hardirqs_on+0x78/0x100 [ 289.341615][ T9101] __do_fast_syscall_32+0xe7/0x970 [ 289.341632][ T9101] ? lockdep_hardirqs_on+0x78/0x100 [ 289.341648][ T9101] do_fast_syscall_32+0x32/0x70 [ 289.341665][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.341679][ T9101] RIP: 0023:0xf6feef7c [ 289.341689][ T9101] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 289.341699][ T9101] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 289.341710][ T9101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800013c0 [ 289.341717][ T9101] RDX: 0000000000000001 RSI: 0000000020008010 RDI: 0000000000000000 [ 289.341723][ T9101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.341730][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.341736][ T9101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.341749][ T9101] [ 289.522646][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.768'. [ 290.783368][ T9146] wg2 speed is unknown, defaulting to 1000 [ 291.651094][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 291.651107][ T40] audit: type=1326 audit(1780431855.235:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.166390][ T40] audit: type=1326 audit(1780431855.755:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.213340][ T40] audit: type=1326 audit(1780431855.795:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.222593][ T40] audit: type=1326 audit(1780431855.805:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.229993][ T40] audit: type=1326 audit(1780431855.815:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.236749][ T40] audit: type=1326 audit(1780431855.815:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.442073][ T40] audit: type=1326 audit(1780431856.025:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.450999][ T40] audit: type=1326 audit(1780431856.025:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7ffc0000 [ 292.548930][ T9165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'. [ 292.551818][ T9165] FAULT_INJECTION: forcing a failure. [ 292.551818][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 292.555593][ T9165] CPU: 2 UID: 0 PID: 9165 Comm: syz.3.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.555609][ T9165] Tainted: [L]=SOFTLOCKUP [ 292.555613][ T9165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.555619][ T9165] Call Trace: [ 292.555623][ T9165] [ 292.555627][ T9165] dump_stack_lvl+0x100/0x190 [ 292.555642][ T9165] should_fail_ex.cold+0x5/0xa [ 292.555657][ T9165] should_failslab+0xc2/0x120 [ 292.555671][ T9165] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 292.555689][ T9165] ? __alloc_skb+0x140/0x710 [ 292.555702][ T9165] __alloc_skb+0x140/0x710 [ 292.555711][ T9165] ? __alloc_skb+0x5b7/0x710 [ 292.555720][ T9165] ? __pfx___alloc_skb+0x10/0x10 [ 292.555730][ T9165] ? do_raw_spin_unlock+0x145/0x1e0 [ 292.555745][ T9165] ndisc_alloc_skb+0xd8/0x530 [ 292.555763][ T9165] ndisc_ns_create+0x155/0x7a0 [ 292.555778][ T9165] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 292.555793][ T9165] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 292.555809][ T9165] ? __pfx_ndisc_ns_create+0x10/0x10 [ 292.555826][ T9165] ? ipv6_get_lladdr+0x2d3/0x4f0 [ 292.555843][ T9165] ndisc_send_ns+0xa9/0x140 [ 292.555861][ T9165] ? __pfx_ndisc_send_ns+0x10/0x10 [ 292.555878][ T9165] ? __lock_acquire+0x4a5/0x2630 [ 292.555895][ T9165] ? __pfx___mod_timer+0x10/0x10 [ 292.555915][ T9165] ndisc_solicit+0x30c/0x520 [ 292.555933][ T9165] ? __pfx_ndisc_solicit+0x10/0x10 [ 292.555950][ T9165] ? neigh_probe+0x72/0x110 [ 292.555962][ T9165] ? __pfx_ndisc_solicit+0x10/0x10 [ 292.555980][ T9165] neigh_probe+0xce/0x110 [ 292.555990][ T9165] __neigh_event_send+0xacf/0x13f0 [ 292.556016][ T9165] ? __pfx_ndisc_allow_add+0x10/0x10 [ 292.556036][ T9165] neigh_add+0xc41/0x1210 [ 292.556053][ T9165] ? __pfx_neigh_add+0x10/0x10 [ 292.556077][ T9165] ? __pfx_neigh_add+0x10/0x10 [ 292.556091][ T9165] rtnetlink_rcv_msg+0x3c9/0xe90 [ 292.556105][ T9165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.556120][ T9165] ? ref_tracker_free+0x37e/0x6c0 [ 292.556133][ T9165] netlink_rcv_skb+0x159/0x420 [ 292.556148][ T9165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.556161][ T9165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.556180][ T9165] ? netlink_deliver_tap+0x1ae/0xcc0 [ 292.556200][ T9165] netlink_unicast+0x585/0x850 [ 292.556217][ T9165] ? __pfx_netlink_unicast+0x10/0x10 [ 292.556235][ T9165] netlink_sendmsg+0x8b0/0xda0 [ 292.556251][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.556267][ T9165] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 292.556281][ T9165] ____sys_sendmsg+0x9e1/0xb70 [ 292.556295][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.556310][ T9165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.556331][ T9165] ___sys_sendmsg+0x190/0x1e0 [ 292.556347][ T9165] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.556368][ T9165] ? find_held_lock+0x2b/0x80 [ 292.556390][ T9165] __sys_sendmsg+0x170/0x220 [ 292.556401][ T9165] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.556411][ T9165] ? __fget_files+0x21f/0x3d0 [ 292.556428][ T9165] ? ksys_write+0x1ac/0x250 [ 292.556441][ T9165] ? rcu_is_watching+0x12/0xc0 [ 292.556456][ T9165] __do_fast_syscall_32+0xe7/0x970 [ 292.556473][ T9165] ? lockdep_hardirqs_on+0x78/0x100 [ 292.556490][ T9165] do_fast_syscall_32+0x32/0x70 [ 292.556506][ T9165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.556521][ T9165] RIP: 0023:0xf7fe2f7c [ 292.556530][ T9165] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 292.556540][ T9165] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 292.556559][ T9165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000940 [ 292.556570][ T9165] RDX: 0000000008000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.556578][ T9165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.556587][ T9165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 292.556595][ T9165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.556614][ T9165] [ 292.737550][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 292.741987][ T9171] netlink: 25 bytes leftover after parsing attributes in process `syz.0.784'. [ 292.746783][ T9171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.784'. [ 293.805257][ T9190] binder: 9188:9190 unknown command 0 [ 293.807674][ T9190] binder: 9188:9190 ioctl c0306201 80000480 returned -22 [ 293.977840][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 294.777689][ T40] audit: type=1326 audit(1780431858.365:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.3.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 294.787898][ T40] audit: type=1326 audit(1780431858.365:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.3.799" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f7c code=0x7ffc0000 [ 295.499463][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 295.504007][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 295.561249][ T9233] ceph: No mds server is up or the cluster is laggy [ 295.766582][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 295.883135][ T9245] FAULT_INJECTION: forcing a failure. [ 295.883135][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 295.888177][ T9245] CPU: 2 UID: 0 PID: 9245 Comm: syz.3.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.888208][ T9245] Tainted: [L]=SOFTLOCKUP [ 295.888212][ T9245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.888219][ T9245] Call Trace: [ 295.888223][ T9245] [ 295.888227][ T9245] dump_stack_lvl+0x100/0x190 [ 295.888247][ T9245] should_fail_ex.cold+0x5/0xa [ 295.888262][ T9245] should_failslab+0xc2/0x120 [ 295.888277][ T9245] __kmalloc_cache_noprof+0x7a/0x6f0 [ 295.888293][ T9245] ? create_io_worker+0xc6/0x5b0 [ 295.888308][ T9245] ? find_held_lock+0x2b/0x80 [ 295.888322][ T9245] ? create_io_worker+0x17/0x5b0 [ 295.888339][ T9245] create_io_worker+0xc6/0x5b0 [ 295.888356][ T9245] io_wq_enqueue+0x4d8/0x970 [ 295.888373][ T9245] ? __pfx_io_wq_enqueue+0x10/0x10 [ 295.888389][ T9245] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 295.888404][ T9245] ? io_prep_async_work+0x3ab/0x720 [ 295.888422][ T9245] io_queue_iowq+0x232/0x5c0 [ 295.888438][ T9245] io_queue_async+0x22e/0x290 [ 295.888454][ T9245] io_req_task_submit+0x266/0x290 [ 295.888471][ T9245] ? __pfx_io_req_task_submit+0x10/0x10 [ 295.888488][ T9245] ? find_held_lock+0x2b/0x80 [ 295.888501][ T9245] ? io_handle_tw_list+0x80/0x580 [ 295.888520][ T9245] ? __pfx_io_req_task_submit+0x10/0x10 [ 295.888537][ T9245] io_handle_tw_list+0x4d8/0x580 [ 295.888559][ T9245] tctx_task_work_run+0x59/0x330 [ 295.888577][ T9245] tctx_task_work+0x7a/0xd0 [ 295.888587][ T9245] ? __pfx_tctx_task_work+0x10/0x10 [ 295.888604][ T9245] ? rcu_is_watching+0x12/0xc0 [ 295.888617][ T9245] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.888631][ T9245] ? lockdep_hardirqs_on+0x78/0x100 [ 295.888647][ T9245] task_work_run+0x150/0x240 [ 295.888659][ T9245] ? __pfx_task_work_run+0x10/0x10 [ 295.888669][ T9245] ? __pfx_try_to_wake_up+0x10/0x10 [ 295.888686][ T9245] io_run_task_work+0x19f/0x630 [ 295.888697][ T9245] ? __pfx_io_run_task_work+0x10/0x10 [ 295.888706][ T9245] ? task_work_add+0x201/0x3b0 [ 295.888717][ T9245] ? __pfx_task_work_add+0x10/0x10 [ 295.888728][ T9245] io_cqring_wait+0x174/0x2a70 [ 295.888743][ T9245] ? find_held_lock+0x2b/0x80 [ 295.888756][ T9245] ? __pfx_io_cqring_wait+0x10/0x10 [ 295.888780][ T9245] __do_sys_io_uring_enter+0x1089/0x1b50 [ 295.888810][ T9245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.888830][ T9245] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 295.888847][ T9245] ? __fget_files+0x21f/0x3d0 [ 295.888866][ T9245] ? rcu_is_watching+0x12/0xc0 [ 295.888880][ T9245] __do_fast_syscall_32+0xe7/0x970 [ 295.888897][ T9245] ? lockdep_hardirqs_on+0x78/0x100 [ 295.888913][ T9245] do_fast_syscall_32+0x32/0x70 [ 295.888930][ T9245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.888944][ T9245] RIP: 0023:0xf7fe2f7c [ 295.888954][ T9245] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 295.888964][ T9245] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 295.888975][ T9245] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 295.888982][ T9245] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 295.888988][ T9245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.888994][ T9245] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 295.889000][ T9245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.889014][ T9245] [ 296.616147][ T5903] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 296.766173][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 296.770073][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.775011][ T5903] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.778868][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.784994][ T5903] usb 7-1: config 0 descriptor?? [ 296.997016][ T5903] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 297.455549][ T9270] netlink: 260 bytes leftover after parsing attributes in process `syz.2.811'. [ 297.557299][ T10] usb 7-1: USB disconnect, device number 6 [ 304.359682][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.375019][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.378987][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.388804][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.392100][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.566268][ T1349] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 304.624310][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 304.668681][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.700706][ T9297] wg2 speed is unknown, defaulting to 1000 [ 304.718423][ T1349] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.725900][ T1349] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.737184][ T1349] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.742614][ T1349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.751533][ T9294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.776181][ T1349] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.788497][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.887626][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.984083][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.060086][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.088362][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.258489][ T1349] usb 8-1: USB disconnect, device number 4 [ 305.589014][ T13] bridge_slave_1: left allmulticast mode [ 305.592463][ T13] bridge_slave_1: left promiscuous mode [ 305.595500][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.604628][ T13] bridge_slave_0: left allmulticast mode [ 305.610129][ T13] bridge_slave_0: left promiscuous mode [ 305.613012][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.866475][ T13] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 305.869102][ T13] bridge1 (unregistering): left promiscuous mode [ 305.921754][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.930048][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.934862][ T13] bond0 (unregistering): Released all slaves [ 305.940770][ T13] bond1 (unregistering): Released all slaves [ 305.947997][ T13] bond2 (unregistering): Released all slaves [ 305.956437][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'. [ 305.957874][ T13] bond3 (unregistering): Released all slaves [ 305.971927][ T13] bond4 (unregistering): Released all slaves [ 306.119053][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 306.231892][ T9344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.260245][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.263009][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.267561][ T9297] bridge_slave_0: entered allmulticast mode [ 306.278075][ T9297] bridge_slave_0: entered promiscuous mode [ 306.383242][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.387387][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.390797][ T9297] bridge_slave_1: entered allmulticast mode [ 306.402003][ T9297] bridge_slave_1: entered promiscuous mode [ 306.428880][ T5752] Bluetooth: hci0: command tx timeout [ 306.555909][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.597804][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.798551][ T9344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.104894][ T9297] team0: Port device team_slave_0 added [ 307.233410][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 307.233425][ T40] audit: type=1326 audit(1780431870.815:10713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.245396][ T40] audit: type=1326 audit(1780431870.815:10714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.253963][ T40] audit: type=1326 audit(1780431870.815:10715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.262737][ T40] audit: type=1326 audit(1780431870.815:10716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.274579][ T40] audit: type=1326 audit(1780431870.815:10717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.284404][ T40] audit: type=1326 audit(1780431870.815:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.0.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4f7c code=0x7fc00000 [ 307.285250][ T9344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.329033][ T9297] team0: Port device team_slave_1 added [ 307.332574][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.356954][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.359521][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.368924][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.375328][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.383797][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.392726][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.413004][ T9344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.472203][ T9297] hsr_slave_0: entered promiscuous mode [ 307.477276][ T9297] hsr_slave_1: entered promiscuous mode [ 307.482962][ T9297] debugfs: 'hsr0' already exists in 'hsr' [ 307.487166][ T9297] Cannot create hsr debugfs directory [ 307.563016][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 307.735764][ T216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.768781][ T5456] 8021q: adding VLAN 0 to HW filter on device eth4 [ 307.789400][ T216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.798189][ T13] hsr_slave_0: left promiscuous mode [ 307.800959][ T13] hsr_slave_1: left promiscuous mode [ 307.803096][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.805409][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.813292][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.815750][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.831758][ T13] veth1_macvtap: left promiscuous mode [ 307.834199][ T13] veth0_macvtap: left promiscuous mode [ 307.836552][ T13] veth1_vlan: left promiscuous mode [ 307.838450][ T13] veth0_vlan: left promiscuous mode [ 308.016768][ T13] team0 (unregistering): Port device team_slave_1 removed [ 308.033991][ T13] team0 (unregistering): Port device team_slave_0 removed [ 308.215755][ T216] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.304337][ T216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.370647][ T9297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.384915][ T9297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.394919][ T9297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.413698][ T9297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.420838][ T9297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.445055][ T9297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.449372][ T9297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.455200][ T9297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.496922][ T5752] Bluetooth: hci0: command tx timeout [ 308.507463][ T13] IPVS: stop unused estimator thread 0... [ 308.542551][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.552501][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.564657][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.567600][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.581003][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.584112][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.597857][ T5456] 8021q: adding VLAN 0 to HW filter on device eth5 [ 308.683930][ T9405] syzkaller0: entered promiscuous mode [ 308.686087][ T9405] syzkaller0: entered allmulticast mode [ 308.914755][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.955468][ T9393] tipc: Started in network mode [ 308.957153][ T9393] tipc: Node identity 0296698ddf78, cluster identity 4711 [ 308.959575][ T9393] tipc: Enabled bearer , priority 0 [ 308.993789][ T9393] syzkaller0: entered promiscuous mode [ 308.995523][ T9393] syzkaller0: entered allmulticast mode [ 309.012282][ T9393] tipc: Resetting bearer [ 309.043750][ T9392] tipc: Resetting bearer [ 309.053839][ T9392] tipc: Disabling bearer [ 309.076965][ T9297] veth0_vlan: entered promiscuous mode [ 309.083583][ T9297] veth1_vlan: entered promiscuous mode [ 309.102125][ T9297] veth0_macvtap: entered promiscuous mode [ 309.107637][ T9297] veth1_macvtap: entered promiscuous mode [ 309.118140][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.138118][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.165792][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.168939][ T1349] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 309.171454][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.177429][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.180267][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.223572][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.227794][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.250570][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.261621][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.331895][ T1349] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.335412][ T1349] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 309.340598][ T1349] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.344176][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.369110][ T9421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.406882][ T1349] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.590916][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 309.647859][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.655865][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.283421][ T1349] usb 7-1: USB disconnect, device number 7 [ 310.576298][ T5752] Bluetooth: hci0: command tx timeout [ 310.888278][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 310.924593][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 310.930220][ T9457] netlink: 56 bytes leftover after parsing attributes in process `syz.4.841'. [ 312.514242][ T9495] wg2 speed is unknown, defaulting to 1000 [ 313.126208][ T5752] Bluetooth: hci0: command tx timeout [ 313.143789][ T9496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 313.893825][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 314.634879][ T9530] netlink: 'syz.3.859': attribute type 12 has an invalid length. [ 314.654171][ T9532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 314.656260][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.686896][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 314.697826][ T50] kernel write not supported for file bpf-map (pid: 50 comm: kworker/3:1) [ 314.948440][ T9544] binder: 9540:9544 ioctl c0306201 80000640 returned -22 [ 314.966729][ T1349] usb 44-1: SetAddress Request (6) to port 0 [ 314.969584][ T1349] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 315.309379][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 315.523775][ T9533] vhci_hcd: connection reset by peer [ 315.530910][ T13] vhci_hcd vhci_hcd.3: stop threads [ 315.534904][ T13] vhci_hcd vhci_hcd.3: release socket [ 315.540405][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 315.589286][ T9563] FAULT_INJECTION: forcing a failure. [ 315.589286][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.605214][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.2.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.605244][ T9563] Tainted: [L]=SOFTLOCKUP [ 315.605248][ T9563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.605255][ T9563] Call Trace: [ 315.605259][ T9563] [ 315.605263][ T9563] dump_stack_lvl+0x100/0x190 [ 315.605279][ T9563] should_fail_ex.cold+0x5/0xa [ 315.605294][ T9563] _copy_from_user+0x2e/0xd0 [ 315.605310][ T9563] ia32_restore_sigcontext+0xc5/0x620 [ 315.605322][ T9563] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 315.605338][ T9563] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.605352][ T9563] ? lockdep_hardirqs_on+0x78/0x100 [ 315.605369][ T9563] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 315.605382][ T9563] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 315.605395][ T9563] ? rcu_is_watching+0x12/0xc0 [ 315.605427][ T9563] do_int80_emulation+0x14b/0x720 [ 315.605448][ T9563] asm_int80_emulation+0x1a/0x20 [ 315.605459][ T9563] RIP: 0023:0xf6feefa7 [ 315.605468][ T9563] Code: 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 0f 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 <0f> 0b 64 e8 ff ff 68 01 00 00 82 02 00 00 05 05 56 e8 ff ff 5f 01 [ 315.605478][ T9563] RSP: 002b:00000000f53dc900 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 315.605489][ T9563] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dc98c [ 315.605496][ T9563] RDX: 00000000f53dc90c RSI: 0000000000000000 RDI: 0000000000000000 [ 315.605502][ T9563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.605508][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.605514][ T9563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.605528][ T9563] [ 315.727209][ T9573] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.731571][ T9573] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.741740][ T9573] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.756442][ T9573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.771038][ T9573] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.780568][ T9574] netlink: 14 bytes leftover after parsing attributes in process `syz.2.869'. [ 315.798854][ T9574] bond0 (unregistering): Released all slaves [ 315.844982][ T12] smbdirect: ib_dev[syz1] removed [ 316.283309][ T9576] netlink: 48 bytes leftover after parsing attributes in process `syz.4.870'. [ 316.467212][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 317.248489][ T9613] syz.3.876: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 317.258891][ T9613] CPU: 3 UID: 0 PID: 9613 Comm: syz.3.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.258912][ T9613] Tainted: [L]=SOFTLOCKUP [ 317.258916][ T9613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.258923][ T9613] Call Trace: [ 317.258927][ T9613] [ 317.258932][ T9613] dump_stack_lvl+0x100/0x190 [ 317.258947][ T9613] warn_alloc.cold+0x95/0x1c1 [ 317.258959][ T9613] ? __pfx_warn_alloc+0x10/0x10 [ 317.258982][ T9613] ? reacquire_held_locks+0xce/0x1e0 [ 317.259007][ T9613] __vmalloc_node_range_noprof+0x136c/0x1630 [ 317.259026][ T9613] ? lock_acquire+0x1b1/0x370 [ 317.259043][ T9613] ? ip_set_sockfn_get+0x18e/0xd20 [ 317.259055][ T9613] ? __lock_acquire+0x4a5/0x2630 [ 317.259072][ T9613] ? trace_contention_end+0x122/0x170 [ 317.259084][ T9613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.259098][ T9613] ? find_held_lock+0x2b/0x80 [ 317.259111][ T9613] ? nf_sockopt_find.isra.0+0x222/0x290 [ 317.259130][ T9613] ? rcu_is_watching+0x12/0xc0 [ 317.259144][ T9613] ? ip_set_sockfn_get+0x18e/0xd20 [ 317.259155][ T9613] __vmalloc_node_noprof+0xad/0xf0 [ 317.259170][ T9613] ? ip_set_sockfn_get+0x18e/0xd20 [ 317.259182][ T9613] ip_set_sockfn_get+0x18e/0xd20 [ 317.259195][ T9613] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 317.259208][ T9613] ? nf_sockopt_find.isra.0+0x222/0x290 [ 317.259225][ T9613] nf_getsockopt+0x7c/0xe0 [ 317.259242][ T9613] ip_getsockopt+0x192/0x1e0 [ 317.259254][ T9613] ? __pfx_ip_getsockopt+0x10/0x10 [ 317.259268][ T9613] tcp_getsockopt+0xa1/0x110 [ 317.259283][ T9613] smc_getsockopt+0x165/0x390 [ 317.259295][ T9613] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 317.259309][ T9613] ? __pfx_smc_getsockopt+0x10/0x10 [ 317.259320][ T9613] ? aa_sock_opt_perm+0xfe/0x1b0 [ 317.259339][ T9613] ? __pfx_smc_getsockopt+0x10/0x10 [ 317.259352][ T9613] do_sock_getsockopt+0x50a/0x6e0 [ 317.259365][ T9613] ? __lock_acquire+0x4a5/0x2630 [ 317.259383][ T9613] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 317.259401][ T9613] ? find_held_lock+0x2b/0x80 [ 317.259418][ T9613] ? __fget_files+0x21f/0x3d0 [ 317.259434][ T9613] __sys_getsockopt+0x133/0x1d0 [ 317.259449][ T9613] ? __ia32_sys_getsockopt+0xbc/0x160 [ 317.259460][ T9613] __ia32_sys_getsockopt+0xbc/0x160 [ 317.259472][ T9613] ? __do_fast_syscall_32+0x98/0x970 [ 317.259489][ T9613] ? lockdep_hardirqs_on+0x78/0x100 [ 317.259504][ T9613] __do_fast_syscall_32+0xe7/0x970 [ 317.259522][ T9613] do_fast_syscall_32+0x32/0x70 [ 317.259545][ T9613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.259561][ T9613] RIP: 0023:0xf7fe2f7c [ 317.259572][ T9613] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 317.259583][ T9613] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 317.259594][ T9613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 317.259601][ T9613] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000040 [ 317.259608][ T9613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.259615][ T9613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.259622][ T9613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.259636][ T9613] [ 317.259641][ T9613] Mem-Info: [ 317.386086][ T9613] active_anon:5187 inactive_anon:5112 isolated_anon:189 [ 317.386086][ T9613] active_file:9437 inactive_file:13812 isolated_file:154 [ 317.386086][ T9613] unevictable:1768 dirty:346 writeback:0 [ 317.386086][ T9613] slab_reclaimable:6167 slab_unreclaimable:59198 [ 317.386086][ T9613] mapped:28038 shmem:6125 pagetables:1346 [ 317.386086][ T9613] sec_pagetables:309 bounce:0 [ 317.386086][ T9613] kernel_misc_reclaimable:0 [ 317.386086][ T9613] free:55838 free_pcp:94 free_cma:0 [ 317.416176][ T9613] Node 0 active_anon:8048kB inactive_anon:92kB active_file:16kB inactive_file:184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7272kB dirty:4kB writeback:0kB shmem:10780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8660kB pagetables:1824kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 317.436093][ T9613] Node 1 active_anon:13400kB inactive_anon:20056kB active_file:37932kB inactive_file:55264kB unevictable:3536kB isolated(anon):56kB isolated(file):16kB mapped:104880kB dirty:1380kB writeback:0kB shmem:13720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5312kB pagetables:3560kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 317.470330][ T9613] Node 0 DMA free:2176kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92kB inactive_anon:24kB active_file:12kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:84kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 317.489555][ T9613] lowmem_reserve[]: 0 285 285 285 285 [ 317.504088][ T9613] Node 0 DMA32 free:16360kB boost:0kB min:13096kB low:16368kB high:19640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7964kB inactive_anon:68kB active_file:4kB inactive_file:52kB unevictable:3536kB writepending:4kB zspages:620kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.526205][ T9613] lowmem_reserve[]: 0 0 0 0 0 [ 317.528174][ T9613] Node 1 DMA32 free:231564kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14008kB inactive_anon:18832kB active_file:37632kB inactive_file:54864kB unevictable:3536kB writepending:1380kB zspages:2404kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.554230][ T9613] lowmem_reserve[]: 0 0 0 0 0 [ 317.556682][ T9613] Node 0 DMA: 238*4kB (U) 25*8kB (U) 6*16kB (U) 12*32kB (U) 4*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2272kB [ 317.573699][ T9613] Node 0 DMA32: 565*4kB (UME) 195*8kB (UME) 54*16kB (UME) 25*32kB (UE) 52*64kB (UE) 7*128kB (UE) 4*256kB (UE) 5*512kB (UM) 3*1024kB (UME) 0*2048kB 0*4096kB = 16364kB [ 317.584711][ T9613] Node 1 DMA32: 2661*4kB (UME) 1934*8kB (UME) 1099*16kB (UME) 463*32kB (UME) 186*64kB (UME) 116*128kB (UME) 93*256kB (UME) 77*512kB (UME) 51*1024kB (UM) 8*2048kB (U) 7*4096kB (U) = 245780kB [ 317.597578][ T9613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.602319][ T9613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.609746][ T9613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.613731][ T9613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.620946][ T9613] 29790 total pagecache pages [ 317.624525][ T9613] 280 pages in swap cache [ 317.628489][ T9613] Free swap = 114008kB [ 317.632311][ T9613] Total swap = 124996kB [ 317.634591][ T9613] 524155 pages RAM [ 317.639921][ T9613] 0 pages HighMem/MovableOnly [ 317.644198][ T9608] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 317.650018][ T9613] 210075 pages reserved [ 317.651870][ T9613] 0 pages cma reserved [ 317.747674][ T9618] binder: 9617:9618 ioctl c018620c 80002600 returned -1 [ 317.749765][ T9619] binder: 9617:9619 ioctl c018620c 80002600 returned -1 [ 318.077724][ T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 318.108451][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 318.236610][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 318.242007][ T50] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.246397][ T50] usb 9-1: config 179 has no interface number 0 [ 318.248469][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 318.254559][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 318.262011][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.269452][ T50] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 318.274813][ T50] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.279879][ T50] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.282733][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.287092][ T9632] bridge0: port 3(5) entered disabled state [ 318.289863][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.291182][ T9622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.294763][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.368422][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 318.427292][ T9639] bond0: entered promiscuous mode [ 318.435208][ T9639] bond0: left promiscuous mode [ 318.794925][ T9622] syzkaller1: entered promiscuous mode [ 318.804500][ T9622] syzkaller1: entered allmulticast mode [ 318.843980][ T9622] wg2 speed is unknown, defaulting to 1000 [ 319.001019][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 319.228314][ T5903] usb 9-1: USB disconnect, device number 2 [ 319.228402][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 319.232675][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 320.026404][ T1349] usb 44-1: device descriptor read/8, error -110 [ 320.132560][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 320.282596][ T9690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'. [ 320.460974][ T1349] usb usb44-port1: attempt power cycle [ 320.498946][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 320.883169][ T9708] binder: 9702:9708 ioctl c0306201 80000640 returned -22 [ 321.046650][ T1349] usb usb44-port1: unable to enumerate USB device [ 321.402235][ T9717] tc action pedit offset must be on 32 bit boundaries [ 321.711410][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.713867][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.720659][ T1435] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 321.816090][ T9729] macvlan2: entered promiscuous mode [ 321.824431][ T9729] macvlan2: entered allmulticast mode [ 322.687240][ T9742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 322.937145][ T9744] syz.2.908 (9744): drop_caches: 2 [ 323.776128][ T5752] Bluetooth: hci3: command 0x0406 tx timeout [ 324.798051][ T9755] binder: 9749:9755 ioctl c0306201 80000640 returned -22 [ 325.182639][ T9759] overlayfs: failed to clone lowerpath [ 325.200552][ T9757] loop2: detected capacity change from 0 to 7 [ 325.216170][ T9757] Dev loop2: unable to read RDB block 7 [ 325.219141][ T9757] loop2: unable to read partition table [ 325.223563][ T9757] loop2: partition table beyond EOD, truncated [ 325.225497][ T9757] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 325.556428][ T9774] FAULT_INJECTION: forcing a failure. [ 325.556428][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.561515][ T9774] CPU: 3 UID: 0 PID: 9774 Comm: syz.3.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.561540][ T9774] Tainted: [L]=SOFTLOCKUP [ 325.561545][ T9774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.561554][ T9774] Call Trace: [ 325.561562][ T9774] [ 325.561569][ T9774] dump_stack_lvl+0x100/0x190 [ 325.561589][ T9774] should_fail_ex.cold+0x5/0xa [ 325.561612][ T9774] strncpy_from_user+0x3b/0x2d0 [ 325.561637][ T9774] strncpy_from_user_nofault+0x81/0x180 [ 325.561659][ T9774] bpf_probe_read_user_str+0x26/0x70 [ 325.561681][ T9774] bpf_prog_8f682f9b13dc690e+0x46/0x4c [ 325.561696][ T9774] bpf_test_run+0x23e/0xa40 [ 325.561716][ T9774] ? bpf_test_run+0x1c6/0xa40 [ 325.561737][ T9774] ? __pfx_bpf_test_run+0x10/0x10 [ 325.561755][ T9774] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 325.561796][ T9774] ? bpf_dispatcher_xdp+0x800/0x1000 [ 325.561809][ T9774] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 325.561834][ T9774] bpf_prog_test_run_xdp+0x8ab/0x1670 [ 325.561863][ T9774] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.561890][ T9774] ? fput+0x79/0x100 [ 325.561912][ T9774] ? __bpf_prog_get+0x97/0x2a0 [ 325.561931][ T9774] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.561954][ T9774] __sys_bpf+0x1725/0x4b90 [ 325.561971][ T9774] ? __pfx___sys_bpf+0x10/0x10 [ 325.561986][ T9774] ? get_pid_task+0x106/0x250 [ 325.562009][ T9774] ? proc_fail_nth_write+0x9f/0x220 [ 325.562033][ T9774] ? find_held_lock+0x2b/0x80 [ 325.562057][ T9774] ? find_held_lock+0x2b/0x80 [ 325.562077][ T9774] ? ksys_write+0x190/0x250 [ 325.562098][ T9774] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 325.562118][ T9774] ? kernel_write+0x683/0x6c0 [ 325.562147][ T9774] ? fput+0x79/0x100 [ 325.562168][ T9774] ? ksys_write+0x1ac/0x250 [ 325.562192][ T9774] __ia32_sys_bpf+0x79/0xf0 [ 325.562211][ T9774] ? lockdep_hardirqs_on+0x78/0x100 [ 325.562235][ T9774] __do_fast_syscall_32+0xe7/0x970 [ 325.562260][ T9774] ? lockdep_hardirqs_on+0x78/0x100 [ 325.562282][ T9774] do_fast_syscall_32+0x32/0x70 [ 325.562307][ T9774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.562332][ T9774] RIP: 0023:0xf7fe2f7c [ 325.562344][ T9774] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 325.562361][ T9774] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 325.562377][ T9774] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 325.562387][ T9774] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.562395][ T9774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.562402][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.562412][ T9774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.562434][ T9774] [ 325.740657][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 325.866326][ T50] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 326.028397][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 326.031800][ T50] usb 8-1: config 4 has an invalid interface number: 71 but max is 0 [ 326.034415][ T50] usb 8-1: config 4 has no interface number 0 [ 326.036689][ T50] usb 8-1: config 4 interface 71 altsetting 186 endpoint 0xA has invalid maxpacket 1015, setting to 64 [ 326.040302][ T50] usb 8-1: config 4 interface 71 altsetting 186 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 326.043734][ T50] usb 8-1: config 4 interface 71 altsetting 186 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 326.047613][ T50] usb 8-1: config 4 interface 71 altsetting 186 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 326.051169][ T50] usb 8-1: config 4 interface 71 altsetting 186 has a duplicate endpoint with address 0x8, skipping [ 326.054731][ T50] usb 8-1: config 4 interface 71 altsetting 186 has a duplicate endpoint with address 0x9, skipping [ 326.059431][ T50] usb 8-1: config 4 interface 71 altsetting 186 has a duplicate endpoint with address 0x2, skipping [ 326.062834][ T50] usb 8-1: config 4 interface 71 altsetting 186 has a duplicate endpoint with address 0x7, skipping [ 326.068108][ T50] usb 8-1: config 4 interface 71 has no altsetting 0 [ 326.072561][ T50] usb 8-1: New USB device found, idVendor=19d2, idProduct=1148, bcdDevice=74.e6 [ 326.076306][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.079515][ T50] usb 8-1: Product: у [ 326.081022][ T50] usb 8-1: Manufacturer: ꯞ厓䐲ﳨ땠榜䢂蔂쩯钔悫摒ꃟ첝롛씈ᶤ㨵鲓譯´ꐭ뇌ৰ⟞䖺『䑉쥞鱽ћ睒뙍꘹뵊Юﮢ [ 326.085925][ T50] usb 8-1: SerialNumber: syz [ 326.090258][ T9778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.094547][ T50] option 8-1:4.71: GSM modem (1-port) converter detected [ 326.302497][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.306222][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.394907][ T9784] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 326.399137][ T9784] dummy0: left promiscuous mode [ 326.490002][ T9785] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 326.512606][ T9784] team0: Port device dummy0 added [ 326.587531][ T9785] team0: Port device dummy0 removed [ 327.015576][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 327.026174][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 327.041508][ T9789] binder: 9786:9789 ioctl c0306201 80000640 returned -22 [ 327.046473][ T9793] sg_read: process 729 (syz.2.922) changed security contexts after opening file descriptor, this is not allowed. [ 328.064847][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 328.623192][ T1042] usb 8-1: USB disconnect, device number 5 [ 328.641299][ T1042] option 8-1:4.71: device disconnected [ 328.731447][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 329.879244][ T9827] : renamed from bond_slave_0 (while UP) [ 329.893823][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'. [ 329.945894][ T9823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.930'. [ 330.212866][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 330.531859][ T9843] random: crng reseeded on system resumption [ 331.880887][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 333.040738][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 333.787782][ T9882] dlm: no local IP address has been set [ 333.790229][ T9882] dlm: cannot start dlm midcomms -107 [ 334.075759][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 334.235384][ T40] audit: type=1326 audit(1780431897.815:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.245349][ T40] audit: type=1326 audit(1780431897.825:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.255723][ T40] audit: type=1326 audit(1780431897.825:10721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.265931][ T40] audit: type=1326 audit(1780431897.825:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.275374][ T40] audit: type=1326 audit(1780431897.825:10723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.285813][ T40] audit: type=1326 audit(1780431897.835:10724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.297208][ T40] audit: type=1326 audit(1780431897.835:10725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.305315][ T40] audit: type=1326 audit(1780431897.835:10726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 334.785103][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 335.062738][ T40] audit: type=1326 audit(1780431897.845:10727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 335.094048][ T40] audit: type=1326 audit(1780431897.845:10728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.950" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 335.125369][ T9912] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.952'. [ 335.879950][ T9936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.960'. [ 336.444675][ T9943] syzkaller0: entered promiscuous mode [ 336.446757][ T9943] syzkaller0: entered allmulticast mode [ 336.729741][ T9952] netlink: 'syz.4.966': attribute type 4 has an invalid length. [ 336.955683][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 338.402951][ T50] hid_parser_main: 12 callbacks suppressed [ 338.402964][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.416667][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.419795][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.422488][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.425440][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.429382][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.435707][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.443964][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.449685][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.456272][ T50] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 338.469017][ T50] hid-generic 0004:FFFFFFFF:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 338.517922][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 338.666194][ T1349] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 338.817919][ T1349] usb 7-1: config 0 has no interfaces? [ 338.819684][ T1349] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 338.822644][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.827540][ T1349] usb 7-1: config 0 descriptor?? [ 338.944358][ T9995] binder: 9988:9995 ioctl c0306201 80000640 returned -22 [ 339.128411][ T9996] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 339.132918][ T9996] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 339.138217][ T9996] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 339.172709][ T9996] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 339.244820][ T1349] usb 7-1: USB disconnect, device number 8 [ 339.808687][T10009] FAULT_INJECTION: forcing a failure. [ 339.808687][T10009] name failslab, interval 1, probability 0, space 0, times 0 [ 339.816170][ T1041] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 339.816303][T10009] CPU: 3 UID: 0 PID: 10009 Comm: syz.2.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.816330][T10009] Tainted: [L]=SOFTLOCKUP [ 339.816336][T10009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.816346][T10009] Call Trace: [ 339.816353][T10009] [ 339.816359][T10009] dump_stack_lvl+0x100/0x190 [ 339.816384][T10009] should_fail_ex.cold+0x5/0xa [ 339.816408][T10009] should_failslab+0xc2/0x120 [ 339.816431][T10009] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 339.816456][T10009] ? security_inode_alloc+0x3b/0x2c0 [ 339.816477][T10009] ? lockdep_init_map_type+0x5c/0x250 [ 339.816511][T10009] security_inode_alloc+0x3b/0x2c0 [ 339.816531][T10009] inode_init_always_gfp+0xc77/0xfb0 [ 339.816559][T10009] alloc_inode+0x8e/0x250 [ 339.816587][T10009] new_inode+0x22/0x1c0 [ 339.816625][T10009] __debugfs_create_file+0x105/0x4f0 [ 339.816650][T10009] debugfs_create_file_full+0x41/0x60 [ 339.816672][T10009] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 339.816689][T10009] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 339.816728][T10009] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 339.816747][T10009] ? alloc_netdev_mqs+0xd7/0x1560 [ 339.816769][T10009] ? lockdep_init_map_type+0x5c/0x250 [ 339.816799][T10009] ? __pfx_geneve_setup+0x10/0x10 [ 339.816825][T10009] alloc_netdev_mqs+0x314/0x1560 [ 339.816851][T10009] rtnl_create_link+0xc13/0xf80 [ 339.816873][T10009] rtnl_newlink+0x13bd/0x2380 [ 339.816902][T10009] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.816919][T10009] ? rcu_is_watching+0x12/0xc0 [ 339.816942][T10009] ? kasan_quarantine_put+0x104/0x240 [ 339.816961][T10009] ? lockdep_hardirqs_on+0x78/0x100 [ 339.816990][T10009] ? kfree_skbmem+0x19a/0x210 [ 339.817014][T10009] ? kmem_cache_free+0x127/0x6c0 [ 339.817054][T10009] ? __dev_queue_xmit+0x9ef/0x4950 [ 339.817108][T10009] ? find_held_lock+0x2b/0x80 [ 339.817129][T10009] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 339.817149][T10009] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 339.817171][T10009] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.817190][T10009] rtnetlink_rcv_msg+0x95e/0xe90 [ 339.817214][T10009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.817242][T10009] ? ref_tracker_free+0x37e/0x6c0 [ 339.817264][T10009] netlink_rcv_skb+0x159/0x420 [ 339.817287][T10009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.817309][T10009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.817344][T10009] ? netlink_deliver_tap+0x1ae/0xcc0 [ 339.817373][T10009] netlink_unicast+0x585/0x850 [ 339.817400][T10009] ? __pfx_netlink_unicast+0x10/0x10 [ 339.817431][T10009] netlink_sendmsg+0x8b0/0xda0 [ 339.817460][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.817486][T10009] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 339.817511][T10009] ____sys_sendmsg+0x9e1/0xb70 [ 339.817532][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.817559][T10009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.817594][T10009] ___sys_sendmsg+0x190/0x1e0 [ 339.817625][T10009] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.817664][T10009] ? find_held_lock+0x2b/0x80 [ 339.817703][T10009] __sys_sendmsg+0x170/0x220 [ 339.817723][T10009] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.817740][T10009] ? __fget_files+0x21f/0x3d0 [ 339.817770][T10009] ? ksys_write+0x1ac/0x250 [ 339.817793][T10009] ? rcu_is_watching+0x12/0xc0 [ 339.817820][T10009] __do_fast_syscall_32+0xe7/0x970 [ 339.817846][T10009] ? lockdep_hardirqs_on+0x78/0x100 [ 339.817875][T10009] do_fast_syscall_32+0x32/0x70 [ 339.817902][T10009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.817924][T10009] RIP: 0023:0xf6feef7c [ 339.817940][T10009] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 339.817957][T10009] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 339.817975][T10009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 339.817985][T10009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.817995][T10009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.818005][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.818014][T10009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.818039][T10009] [ 339.818117][T10009] debugfs: out of free dentries, can not create file 'netdev@ffff888000d40658' [ 339.994708][ T1041] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 339.997403][ T1041] usb 9-1: config 0 has no interface number 0 [ 339.999537][ T1041] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 340.006601][ T1041] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 340.017350][ T1041] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.022262][ T1041] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.026479][ T1041] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.120146][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 340.219447][ T1041] usb 9-1: Product: syz [ 340.221090][ T1041] usb 9-1: SerialNumber: syz [ 340.235747][ T1041] usb 9-1: config 0 descriptor?? [ 340.239191][ T1041] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 340.243630][ T1041] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input11 [ 340.245399][T10013] sg_write: data in/out 2032384/80 bytes for SCSI command 0x1a-- guessing data in; [ 340.245399][T10013] program syz.2.987 not setting count and/or reply_len properly [ 340.797750][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.800888][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.811122][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 341.008372][ T1041] ------------[ cut here ]------------ [ 341.008414][ T1041] URB ffff88802a947e00 submitted while active [ 341.008422][ T1041] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#0: kworker/0:2/1041 [ 341.008451][ T1041] Modules linked in: [ 341.008485][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.008501][ T1041] Tainted: [L]=SOFTLOCKUP [ 341.008506][ T1041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.008514][ T1041] Workqueue: usb_hub_wq hub_event [ 341.008529][ T1041] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 341.008547][ T1041] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 61 b2 fa 48 8d 3d 66 a4 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 341.008559][ T1041] RSP: 0018:ffffc90006716e50 EFLAGS: 00010293 [ 341.008569][ T1041] RAX: 0000000000000000 RBX: ffff88802a947e00 RCX: fffff52000ce2db6 [ 341.008576][ T1041] RDX: ffff888028930000 RSI: ffff88802a947e00 RDI: ffffffff90e43f60 [ 341.008584][ T1041] RBP: ffff888013844480 R08: 0000000000000000 R09: fffffbfff21ae78a [ 341.008591][ T1041] R10: ffffc90006716ed8 R11: 0000000000000000 R12: ffff88806a3560a0 [ 341.008598][ T1041] R13: ffff88806a356010 R14: ffff88806a356050 R15: ffff8880277f42e0 [ 341.008606][ T1041] FS: 0000000000000000(0000) GS:ffff88809718a000(0000) knlGS:0000000000000000 [ 341.008629][ T1041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.008639][ T1041] CR2: 0000000080bcc018 CR3: 000000006b7ab000 CR4: 0000000000352ef0 [ 341.008646][ T1041] Call Trace: [ 341.008651][ T1041] [ 341.008655][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.008674][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.008690][ T1041] ? __pm_runtime_resume+0xc3/0x170 [ 341.008704][ T1041] cm109_input_open+0x273/0x420 [ 341.008722][ T1041] ? __pfx_cm109_input_open+0x10/0x10 [ 341.008739][ T1041] input_open_device+0x24c/0x3d0 [ 341.008756][ T1041] kbd_connect+0x124/0x180 [ 341.008771][ T1041] input_attach_handler.isra.0+0x177/0x1e0 [ 341.008791][ T1041] input_register_device.cold+0x139/0x375 [ 341.008809][ T1041] cm109_usb_probe+0x128d/0x17f0 [ 341.008832][ T1041] usb_probe_interface+0x303/0x8f0 [ 341.008849][ T1041] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.008865][ T1041] really_probe+0x241/0xa60 [ 341.008884][ T1041] __driver_probe_device+0x22e/0x480 [ 341.008904][ T1041] driver_probe_device+0x4c/0x1b0 [ 341.008923][ T1041] __device_attach_driver+0x1df/0x340 [ 341.008942][ T1041] ? __pfx___device_attach_driver+0x10/0x10 [ 341.008960][ T1041] bus_for_each_drv+0x159/0x1e0 [ 341.008976][ T1041] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.008992][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.009008][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.009025][ T1041] __device_attach+0x1e4/0x4d0 [ 341.009043][ T1041] ? __pfx___device_attach+0x10/0x10 [ 341.009169][ T1041] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.009188][ T1041] device_initial_probe+0xaf/0xd0 [ 341.009201][ T1041] bus_probe_device+0x64/0x160 [ 341.009222][ T1041] device_add+0x1210/0x1950 [ 341.009237][ T1041] ? __pfx_device_add+0x10/0x10 [ 341.009250][ T1041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.009270][ T1041] usb_set_configuration+0xd97/0x1c60 [ 341.009292][ T1041] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 341.009312][ T1041] usb_generic_driver_probe+0xa1/0xe0 [ 341.009331][ T1041] usb_probe_device+0xef/0x400 [ 341.009345][ T1041] ? __pfx_usb_probe_device+0x10/0x10 [ 341.009359][ T1041] really_probe+0x241/0xa60 [ 341.009378][ T1041] __driver_probe_device+0x22e/0x480 [ 341.009396][ T1041] ? usb_driver_applicable+0x1c7/0x220 [ 341.009412][ T1041] driver_probe_device+0x4c/0x1b0 [ 341.009431][ T1041] __device_attach_driver+0x1df/0x340 [ 341.009450][ T1041] ? __pfx___device_attach_driver+0x10/0x10 [ 341.009468][ T1041] bus_for_each_drv+0x159/0x1e0 [ 341.009484][ T1041] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.009500][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.009519][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.009536][ T1041] __device_attach+0x1e4/0x4d0 [ 341.009554][ T1041] ? __pfx___device_attach+0x10/0x10 [ 341.009574][ T1041] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.009590][ T1041] device_initial_probe+0xaf/0xd0 [ 341.009602][ T1041] bus_probe_device+0x64/0x160 [ 341.009620][ T1041] device_add+0x1210/0x1950 [ 341.009635][ T1041] ? __pfx_device_add+0x10/0x10 [ 341.009647][ T1041] ? add_device_randomness+0xb7/0xf0 [ 341.009670][ T1041] usb_new_device.cold+0x685/0x115c [ 341.009688][ T1041] ? do_raw_spin_lock+0x128/0x260 [ 341.009703][ T1041] ? __pfx_usb_new_device+0x10/0x10 [ 341.009719][ T1041] ? mark_held_locks+0x40/0x70 [ 341.009739][ T1041] hub_event+0x314d/0x4af0 [ 341.009766][ T1041] ? __pfx_hub_event+0x10/0x10 [ 341.009779][ T1041] ? debug_objects_fill_pool+0x260/0x5a0 [ 341.009800][ T1041] ? rcu_is_watching+0x12/0xc0 [ 341.009817][ T1041] process_one_work+0xa0e/0x1980 [ 341.009835][ T1041] ? __pfx_process_one_work+0x10/0x10 [ 341.009949][ T1041] ? __pfx_hub_event+0x10/0x10 [ 341.009967][ T1041] worker_thread+0x5ef/0xe50 [ 341.009984][ T1041] ? kthread+0x13a/0x450 [ 341.010001][ T1041] ? __pfx_worker_thread+0x10/0x10 [ 341.010016][ T1041] kthread+0x370/0x450 [ 341.010034][ T1041] ? __pfx_kthread+0x10/0x10 [ 341.010052][ T1041] ret_from_fork+0x72b/0xd50 [ 341.010067][ T1041] ? __pfx_ret_from_fork+0x10/0x10 [ 341.010080][ T1041] ? __switch_to+0x800/0x1100 [ 341.010096][ T1041] ? __pfx_kthread+0x10/0x10 [ 341.010115][ T1041] ret_from_fork_asm+0x1a/0x30 [ 341.010138][ T1041] [ 341.010145][ T1041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.010155][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.010171][ T1041] Tainted: [L]=SOFTLOCKUP [ 341.010175][ T1041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.010183][ T1041] Workqueue: usb_hub_wq hub_event [ 341.010196][ T1041] Call Trace: [ 341.010201][ T1041] [ 341.010205][ T1041] dump_stack_lvl+0x100/0x190 [ 341.010217][ T1041] vpanic+0x552/0x970 [ 341.010229][ T1041] ? __pfx_vpanic+0x10/0x10 [ 341.010245][ T1041] panic+0xd1/0xe0 [ 341.010255][ T1041] ? __pfx_panic+0x10/0x10 [ 341.010271][ T1041] ? check_panic_on_warn+0x1f/0x90 [ 341.010291][ T1041] check_panic_on_warn.cold+0x19/0x34 [ 341.010303][ T1041] ? usb_submit_urb+0x15fa/0x1910 [ 341.010320][ T1041] __warn.cold+0x191/0x328 [ 341.010333][ T1041] __report_bug+0x296/0x3d0 [ 341.010348][ T1041] ? usb_submit_urb+0x15fa/0x1910 [ 341.010366][ T1041] ? __pfx___report_bug+0x10/0x10 [ 341.010385][ T1041] ? preempt_schedule_common+0x42/0xc0 [ 341.010401][ T1041] ? preempt_schedule_thunk+0x16/0x30 [ 341.010420][ T1041] report_bug_entry+0xe1/0x290 [ 341.010435][ T1041] ? usb_submit_urb+0x15fd/0x1910 [ 341.010452][ T1041] handle_bug+0x1cd/0x2a0 [ 341.010463][ T1041] exc_invalid_op+0x17/0x50 [ 341.010474][ T1041] asm_exc_invalid_op+0x1a/0x20 [ 341.010486][ T1041] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 341.010504][ T1041] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 61 b2 fa 48 8d 3d 66 a4 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 341.010517][ T1041] RSP: 0018:ffffc90006716e50 EFLAGS: 00010293 [ 341.010526][ T1041] RAX: 0000000000000000 RBX: ffff88802a947e00 RCX: fffff52000ce2db6 [ 341.010534][ T1041] RDX: ffff888028930000 RSI: ffff88802a947e00 RDI: ffffffff90e43f60 [ 341.010541][ T1041] RBP: ffff888013844480 R08: 0000000000000000 R09: fffffbfff21ae78a [ 341.010548][ T1041] R10: ffffc90006716ed8 R11: 0000000000000000 R12: ffff88806a3560a0 [ 341.010555][ T1041] R13: ffff88806a356010 R14: ffff88806a356050 R15: ffff8880277f42e0 [ 341.010569][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.010586][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.010601][ T1041] ? __pm_runtime_resume+0xc3/0x170 [ 341.010615][ T1041] cm109_input_open+0x273/0x420 [ 341.010633][ T1041] ? __pfx_cm109_input_open+0x10/0x10 [ 341.010649][ T1041] input_open_device+0x24c/0x3d0 [ 341.010667][ T1041] kbd_connect+0x124/0x180 [ 341.010681][ T1041] input_attach_handler.isra.0+0x177/0x1e0 [ 341.010701][ T1041] input_register_device.cold+0x139/0x375 [ 341.010718][ T1041] cm109_usb_probe+0x128d/0x17f0 [ 341.010741][ T1041] usb_probe_interface+0x303/0x8f0 [ 341.010758][ T1041] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.010774][ T1041] really_probe+0x241/0xa60 [ 341.010793][ T1041] __driver_probe_device+0x22e/0x480 [ 341.010812][ T1041] driver_probe_device+0x4c/0x1b0 [ 341.010831][ T1041] __device_attach_driver+0x1df/0x340 [ 341.010850][ T1041] ? __pfx___device_attach_driver+0x10/0x10 [ 341.010867][ T1041] bus_for_each_drv+0x159/0x1e0 [ 341.010883][ T1041] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.010899][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.010914][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.010931][ T1041] __device_attach+0x1e4/0x4d0 [ 341.010950][ T1041] ? __pfx___device_attach+0x10/0x10 [ 341.010968][ T1041] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.010984][ T1041] device_initial_probe+0xaf/0xd0 [ 341.011036][ T1041] bus_probe_device+0x64/0x160 [ 341.011054][ T1041] device_add+0x1210/0x1950 [ 341.011068][ T1041] ? __pfx_device_add+0x10/0x10 [ 341.011082][ T1041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.011102][ T1041] usb_set_configuration+0xd97/0x1c60 [ 341.011124][ T1041] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 341.011142][ T1041] usb_generic_driver_probe+0xa1/0xe0 [ 341.011160][ T1041] usb_probe_device+0xef/0x400 [ 341.011173][ T1041] ? __pfx_usb_probe_device+0x10/0x10 [ 341.011187][ T1041] really_probe+0x241/0xa60 [ 341.011206][ T1041] __driver_probe_device+0x22e/0x480 [ 341.011223][ T1041] ? usb_driver_applicable+0x1c7/0x220 [ 341.011239][ T1041] driver_probe_device+0x4c/0x1b0 [ 341.011349][ T1041] __device_attach_driver+0x1df/0x340 [ 341.011368][ T1041] ? __pfx___device_attach_driver+0x10/0x10 [ 341.011386][ T1041] bus_for_each_drv+0x159/0x1e0 [ 341.011402][ T1041] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.011419][ T1041] ? lockdep_hardirqs_on+0x78/0x100 [ 341.011436][ T1041] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.011453][ T1041] __device_attach+0x1e4/0x4d0 [ 341.011473][ T1041] ? __pfx___device_attach+0x10/0x10 [ 341.011491][ T1041] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.011507][ T1041] device_initial_probe+0xaf/0xd0 [ 341.011518][ T1041] bus_probe_device+0x64/0x160 [ 341.011536][ T1041] device_add+0x1210/0x1950 [ 341.011549][ T1041] ? __pfx_device_add+0x10/0x10 [ 341.011561][ T1041] ? add_device_randomness+0xb7/0xf0 [ 341.011588][ T1041] usb_new_device.cold+0x685/0x115c [ 341.011605][ T1041] ? do_raw_spin_lock+0x128/0x260 [ 341.011618][ T1041] ? __pfx_usb_new_device+0x10/0x10 [ 341.011631][ T1041] ? mark_held_locks+0x40/0x70 [ 341.011651][ T1041] hub_event+0x314d/0x4af0 [ 341.011676][ T1041] ? __pfx_hub_event+0x10/0x10 [ 341.011689][ T1041] ? debug_objects_fill_pool+0x260/0x5a0 [ 341.011709][ T1041] ? rcu_is_watching+0x12/0xc0 [ 341.011724][ T1041] process_one_work+0xa0e/0x1980 [ 341.011741][ T1041] ? __pfx_process_one_work+0x10/0x10 [ 341.011757][ T1041] ? __pfx_hub_event+0x10/0x10 [ 341.011771][ T1041] worker_thread+0x5ef/0xe50 [ 341.011787][ T1041] ? kthread+0x13a/0x450 [ 341.011803][ T1041] ? __pfx_worker_thread+0x10/0x10 [ 341.011813][ T1041] kthread+0x370/0x450 [ 341.011829][ T1041] ? __pfx_kthread+0x10/0x10 [ 341.011847][ T1041] ret_from_fork+0x72b/0xd50 [ 341.011860][ T1041] ? __pfx_ret_from_fork+0x10/0x10 [ 341.011872][ T1041] ? __switch_to+0x800/0x1100 [ 341.011888][ T1041] ? __pfx_kthread+0x10/0x10 [ 341.011906][ T1041] ret_from_fork_asm+0x1a/0x30 [ 341.011928][ T1041] [ 341.012821][ T1041] Kernel Offset: disabled