last executing test programs: 8.837261564s ago: executing program 2 (id=857): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.030097868s ago: executing program 1 (id=861): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2815\x00', [0x2f00, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0xfffffffe, 0x37dc, 0x6, 0xffd, 0x9, 0x200001, 0x8001, 0x8004, 0x4, 0xfffc, 0x5, 0x8, 0x40000008, 0x3, 0xc, 0x208, 0x5, 0x800800, 0xeadb, 0xce, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x600a40, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x19, &(0x7f0000000340)=""/25}, &(0x7f00000004c0)="1518a7a093f1", 0x0, 0x84, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000280)}) write$uinput_user_dev(r6, 0x0, 0x0) 5.739636117s ago: executing program 3 (id=864): r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x294002, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xe6, 0x8, 0x4d, 0x1, 0x9, 0x2, 0x5, 0x9, 0x100000000, 0x0, 0x7, 0x7, 0x8001, 0x7fff, 0x80, 0x9], 0x4, 0xd000}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xe6, 0x8, 0x4d, 0x1, 0x9, 0x2, 0x5, 0x9, 0x100000000, 0x0, 0x7, 0x7, 0x8001, 0x7fff, 0x80, 0x9], 0x4, 0xd000}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='/dev/vsock\x00', &(0x7f00000001c0)='./file0\x00', r2) syz_open_dev$MSR(&(0x7f0000000200), 0x17, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r2, &(0x7f0000000240)=""/97, 0x61, 0x40000001, 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r4, 0x5394, &(0x7f00000002c0)) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x4, 0xb8, 0x9, 0x0, 0x5}) timer_create(0x7, &(0x7f0000000400)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000440)) (async) timer_create(0x7, &(0x7f0000000400)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f0000000480)) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000500)={{r6, r7+10000000}, {r8, r9+60000000}}, &(0x7f0000000540)) llistxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/143, 0x8f) clock_adjtime(0x1, &(0x7f0000000680)={0xffff0b77, 0x9, 0x7fff, 0x2, 0x5, 0x400, 0x3c349917, 0x200, 0x6, 0x2, 0x1, 0x478, 0x9, 0xa2e, 0x1000000, 0xffffffff, 0x5, 0x6, 0xe, 0x3, 0x3, 0x5, 0x2e, 0x7, 0x0, 0x9}) (async) clock_adjtime(0x1, &(0x7f0000000680)={0xffff0b77, 0x9, 0x7fff, 0x2, 0x5, 0x400, 0x3c349917, 0x200, 0x6, 0x2, 0x1, 0x478, 0x9, 0xa2e, 0x1000000, 0xffffffff, 0x5, 0x6, 0xe, 0x3, 0x3, 0x5, 0x2e, 0x7, 0x0, 0x9}) clock_adjtime(0x0, &(0x7f0000000700)={0x6e, 0x800, 0x7, 0x7, 0x1, 0xfffffffc, 0x6, 0x2, 0x2, 0x479bca68, 0x6, 0x7f, 0x7ff, 0x5, 0x0, 0xffffff64, 0xffffffff, 0x1ff, 0x7c6, 0x3, 0x8, 0x5, 0x7, 0x6, 0x6, 0x1}) (async) clock_adjtime(0x0, &(0x7f0000000700)={0x6e, 0x800, 0x7, 0x7, 0x1, 0xfffffffc, 0x6, 0x2, 0x2, 0x479bca68, 0x6, 0x7f, 0x7ff, 0x5, 0x0, 0xffffff64, 0xffffffff, 0x1ff, 0x7c6, 0x3, 0x8, 0x5, 0x7, 0x6, 0x6, 0x1}) openat$ptmx(0xffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) openat$ptmx(0xffffff9c, &(0x7f0000000780), 0x2, 0x0) timer_getoverrun(r5) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)) r10 = openat$vimc1(0xffffff9c, &(0x7f0000000800), 0x2, 0x0) ppoll(&(0x7f0000000840)=[{r10, 0x2}, {r2, 0x2020}], 0x2, &(0x7f0000000880)={0x77359400}, &(0x7f00000008c0)={[0x0, 0x8b]}, 0x8) (async) ppoll(&(0x7f0000000840)=[{r10, 0x2}, {r2, 0x2020}], 0x2, &(0x7f0000000880)={0x77359400}, &(0x7f00000008c0)={[0x0, 0x8b]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000900)=0xc, 0x0, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000940)={0x0, {0xed, 0x10001}}) clock_nanosleep(0x3, 0x1, &(0x7f0000000980)={0x0, 0x3938700}, &(0x7f00000009c0)) r11 = openat$vcs(0xffffff9c, &(0x7f0000000a00), 0x40, 0x0) connect$llc(r11, &(0x7f0000000a40)={0x1a, 0x5, 0xf, 0x10, 0xb7, 0x1, @broadcast}, 0x10) (async) connect$llc(r11, &(0x7f0000000a40)={0x1a, 0x5, 0xf, 0x10, 0xb7, 0x1, @broadcast}, 0x10) 5.729489506s ago: executing program 1 (id=865): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setrlimit(0x1e3d50de03aa3d1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x1, 0x5}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x64c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 5.647475108s ago: executing program 1 (id=866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}, 0xe}], 0x1, 0x40000021, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r2, r2, 0x0, 0xc3) 5.647194438s ago: executing program 3 (id=867): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mq_unlink(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.576921293s ago: executing program 3 (id=868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x0, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 5.576746364s ago: executing program 3 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000001f0000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.559362463s ago: executing program 2 (id=870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d42ffffe8000f5ffffffffffffff0000000010ff02000000000000000000000000000188"], 0x340a) 5.558975899s ago: executing program 3 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x2b}, &(0x7f0000000180)=""/86, 0x56, &(0x7f0000000280)=""/207, &(0x7f0000000380)=[0x0], 0x1}, 0x58) prlimit64(r1, 0x2, &(0x7f0000000540)={0x5, 0x6}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000001280)="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", 0x141}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18e800000000000000000000000000009500eff283fe0000c2db4f1f6107000000281f2905be923d2a245d3ef028de84ca93afbaab4cd5c79940006e43de2571e4b9f814ffe44d45ec8225b26838c8633f674b3f96f783a3a7a337ae7a94cf62b58cf7d93ab801b015f5b2b5e1702cb4d9cde1c8ec19"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x5}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) 5.399028034s ago: executing program 2 (id=872): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xd4, 0x30, 0x200, 0x70bd27, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4c, 0x6, "47df2ea145ef89415e4112ff0d202f329425b15e431b7eca6b6599cf8a98536f4781237ced6aa499e1c3a4edeed84e5da9776bc8e65504656afba12e804adc2bd6288fb6aab2a1fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x67b82783dbf3110b) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) connect$llc(0xffffffffffffffff, 0x0, 0x0) 4.766571025s ago: executing program 1 (id=878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000340)=@sco, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)="4c58e9fe2340df3ecf8ed41e56fab621da0c9d6cb1f0f6498204a2fe1871b2024b767499d6a57a725c820c7034a26a491340f4cd1c11753be83e93955c3d989a214023502c02b7a165f4eb35cd3ab4359c7a03e2bf99ae09859f", 0x5a}, {&(0x7f0000000180)="1369a3268724004887799a7d558a6731b56983a250b85eac6a518b4b5781ee5e55d8aa4472", 0x25}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000440)="01fe23061a2a535fb28f6b9f30cfe94e386417bc48d8bf0b9d6a2a400dac64add240c11a29ec164ed921984f2ac445f82ddbaf45604f8c52e773", 0x3a}, {&(0x7f0000000580)="6716919049d7a4ada75164b57202c452d9f01b8ec54887b83de8ca650dfa3e6525dae0e24b6b1366d6ed97d0a7d1b1d588c7258311575600a5682f2838bd5c42b81d12680ef98228e12ad0f6ea3e77e79feb9afc1ae15085cd38ab8d7e9396682beb01f87232e338f5b97d5db65a810cba5ad597cb53433bce75dcdb19271ec151f58ba1bc852b3d7ba7845fd03dae21ecee54bc88686bd1a27593479175286424cc6ec8dff47267b3fab84a053d13d02af0b892dd954c079d489195b5e3b41d3604a01dd0c59beff6a136f5aa0bccaa0bb534fe88c065be065f39a6ea532a600e71dd10", 0xe4}], 0x5}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000680)="a50c9662f8a7375895b2ded328a7acb69aab9a3e3f831168ac40999066c5002bfda9194fba4d9d00c111026ba13d224af9f8a8175509903a8190182a7a3ae67a3ed54585696bb68b484dccc906730ece2d165c73b1507640c53f2a68ef5c2b6f34c4f72deee5e2d0cc1658e82c44b254dd031aeb9a0f0d32de76b49ea5bf3eeeb6c3467d441a9aeabb91b88434885c5d854a299f2470833a3c5fe7cc179fbdee51134ceeaba883e0a869700a6bf07cf05788018b692d075403", 0xb9}, {&(0x7f0000000740)="fae13b", 0x3}, {&(0x7f0000000780)="cf6f54dfe523", 0x6}, {&(0x7f0000002c40)="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", 0x1000}], 0x5, &(0x7f0000000800)=[{0x1c, 0x104, 0x401, "83309f22e056b3783c1d6021f9f7d582"}, {0x28, 0x115, 0x200, "680f32d577529356fb8af8f7af3f77d9ef4f50257d410aa975e34a"}, {0x14, 0x101, 0x3, "d3baefba28771641"}], 0x58}}, {{&(0x7f0000000880)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="100000000c01000006000000fd08bf40ec0000001301000006000000abf28b7bc9319ed454b7d4b0dec9633b33e8ec5f230144937274ff933a4d118459d45a1884983dda4ccbc378543f8a4ce501a6a41a13c8707c1cd127cdb015a252a816c9b7a6d8f946b087ec9148d07770cfca30b6cbf2e8419b0078d9b324258cb298b843d5559dfcb10e7a14d7596c3f90350634ae207f6bf5d2d7b49b9e4bdb5a02af7fcdc4e3b9fd5214932ee9ec02db6b5652a55ab3458102e0364269e334bc2901d63e1b5a32f6fdc03061871476f8bac4921993378fd42c28453cf3f757a7f153fe8641236ccfb90184d2e3d7560cae4646a4427ddb1cca489fa1ed21"], 0xfc}}], 0x3, 0x4008000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6ac81, 0x19d) 3.419072713s ago: executing program 1 (id=879): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.24951166s ago: executing program 2 (id=880): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x89, 0x3, 0x8, 0x7, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fecbd680b650", 0x300}], 0x2}, 0x5) 2.249195552s ago: executing program 2 (id=881): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x237}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES16=r2], &(0x7f0000000340)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc47, 0x0, 0xfffffffffffffffd, 0xcb1, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x6a, 0x1, 0x8, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r6, 0xe, &(0x7f0000000140)={0x2, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, 0x0, 0x80) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x0) 2.009194036s ago: executing program 0 (id=885): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mq_unlink(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.008469165s ago: executing program 0 (id=886): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xbfa, 0x587281) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000002c0)={r1, r2, 0x9, 0x19b, 0x9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1f5, 0x8, 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7c, 0x3fff, 0x3ff, 0x3, 0x401, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x3, 0x12) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x6000, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) dup(0xffffffffffffffff) r6 = timerfd_create(0x8, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) clock_adjtime(0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.232938459s ago: executing program 3 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0xff) socket(0x1d, 0x2, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf250218f699f04c2a69740000ffff0f080000000108"], 0x24}}, 0x404) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket(0x1000000000000010, 0x80802, 0x0) 979.652778ms ago: executing program 0 (id=888): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x40044fd, 0xb780, 0x0, 0x0, 0xfffffe71) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbffffffff248086dd0000000010000800000086dd284d88be00000000100000000100000000000000080022eb00000100000000000200000000000000000000000800655800000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$adsp1(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) capget(&(0x7f0000001140)={0x19980330}, &(0x7f0000001180)={0x4, 0x2, 0x3, 0x3, 0x482, 0x8}) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x6) listen(r10, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000500000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x48104) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa000, 0x6814f058a14248f7, &(0x7f00006c3000/0xa000)=nil) 799.428166ms ago: executing program 2 (id=889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x60800, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000003c0)={0xa, @output={0x0, 0x0, {0x2, 0x2782}, 0x7, 0x4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xac, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x66}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0xac}}, 0x4000800) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0xffff, 0x2) sendfile(r7, r6, 0x0, 0x578410eb) 617.602616ms ago: executing program 1 (id=890): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x292e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0xac4f, 0x6, 0x1e000000, 0x5, 0xf58f, 0x87923d91}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x8000, 0x3) 28.362892ms ago: executing program 0 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000c0a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 24.766798ms ago: executing program 0 (id=892): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setrlimit(0x1e3d50de03aa3d1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x1, 0x5}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x64c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 0s ago: executing program 0 (id=893): r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x400000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) unshare(0x22020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000d40), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r3, 0x9e1faf72bc8cb865, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xbdee994c57cc380}]}, 0x1c}}, 0x4) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r7, r5, 0x0, 0x8) recvfrom$x25(r0, &(0x7f0000001340)=""/4096, 0x1000, 0x21, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x183002, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = io_uring_setup(0x1d0b, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x80000002}) statfs(0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1) kernel console output (not intermixed with test programs): T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.661549][ T54] usb 6-1: config 0 descriptor?? [ 84.675664][ T54] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 84.746288][ T6053] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.749715][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.765185][ T6053] usb 7-1: Product: syz [ 84.767019][ T6053] usb 7-1: Manufacturer: syz [ 84.769032][ T6053] usb 7-1: SerialNumber: syz [ 84.811425][ T6053] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 84.819488][ T6338] FAULT_INJECTION: forcing a failure. [ 84.819488][ T6338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.825215][ T6338] CPU: 3 UID: 0 PID: 6338 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 84.825236][ T6338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.825246][ T6338] Call Trace: [ 84.825251][ T6338] [ 84.825256][ T6338] dump_stack_lvl+0x16c/0x1f0 [ 84.825284][ T6338] should_fail_ex+0x512/0x640 [ 84.825305][ T6338] _copy_from_user+0x2e/0xd0 [ 84.825323][ T6338] get_compat_msghdr+0xa7/0x170 [ 84.825345][ T6338] ? __pfx_get_compat_msghdr+0x10/0x10 [ 84.825366][ T6338] ? __lock_acquire+0x436/0x2890 [ 84.825386][ T6338] ___sys_recvmsg+0x191/0x1a0 [ 84.825408][ T6338] ? __pfx____sys_recvmsg+0x10/0x10 [ 84.825430][ T6338] ? find_held_lock+0x2b/0x80 [ 84.825457][ T6338] ? __pfx___might_resched+0x10/0x10 [ 84.825482][ T6338] do_recvmmsg+0x55d/0x750 [ 84.825504][ T6338] ? __pfx_do_recvmmsg+0x10/0x10 [ 84.825538][ T6338] ? __fget_files+0x20e/0x3c0 [ 84.825563][ T6338] __sys_recvmmsg+0x21c/0x280 [ 84.825583][ T6338] ? __pfx___sys_recvmmsg+0x10/0x10 [ 84.825604][ T6338] ? __pfx_ksys_write+0x10/0x10 [ 84.825629][ T6338] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 84.825649][ T6338] ? __do_fast_syscall_32+0x9a/0x680 [ 84.825665][ T6338] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.825686][ T6338] __do_fast_syscall_32+0xe8/0x680 [ 84.825703][ T6338] do_fast_syscall_32+0x32/0x80 [ 84.825718][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.825736][ T6338] RIP: 0023:0xf708d579 [ 84.825750][ T6338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.825763][ T6338] RSP: 002b:00000000f545c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 84.825778][ T6338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 84.825788][ T6338] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 84.825796][ T6338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.825804][ T6338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.825812][ T6338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.825832][ T6338] [ 84.847791][ T143] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 85.020623][ T6339] loop6: detected capacity change from 0 to 2560 [ 85.024264][ T6339] buffer_io_error: 27 callbacks suppressed [ 85.024351][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.028942][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.031677][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.034263][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.036847][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.039591][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.060342][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.063198][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.065883][ T6339] ldm_validate_partition_table(): Disk read failed. [ 85.068149][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.087876][ T6325] random: crng reseeded on system resumption [ 85.095450][ T6325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.60'. [ 85.170395][ T6339] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.173575][ T6339] Dev loop6: unable to read RDB block 0 [ 85.176108][ T6339] loop6: unable to read partition table [ 85.178595][ T6339] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 85.187510][ T5333] bcm5974 6-1:0.0: could not read from device [ 85.221807][ T54] bcm5974 6-1:0.0: could not read from device [ 85.227263][ T5333] bcm5974 6-1:0.0: could not read from device [ 85.235822][ T54] input: failed to attach handler mousedev to device input7, error: -5 [ 85.246876][ T5333] bcm5974 6-1:0.0: could not read from device [ 85.256094][ T54] usb 6-1: USB disconnect, device number 2 [ 86.007221][ T143] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 86.028145][ T143] ath9k_htc: Failed to initialize the device [ 86.058613][ T143] usb 7-1: ath9k_htc: USB layer deinitialized [ 86.145052][ T6362] syzkaller0: entered promiscuous mode [ 86.146906][ T6362] syzkaller0: entered allmulticast mode [ 86.323755][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 86.327305][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 86.410298][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.421818][ T6368] erofs (device nbd0): cannot find valid erofs superblock [ 86.615286][ T54] usb 6-1: config 0 has no interfaces? [ 86.620462][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.623804][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.627180][ T54] usb 6-1: Product: syz [ 86.628853][ T54] usb 6-1: Manufacturer: syz [ 86.632279][ T54] usb 6-1: SerialNumber: syz [ 86.637021][ T54] usb 6-1: config 0 descriptor?? [ 86.739880][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 86.753495][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 86.757014][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 86.851856][ T54] usb 6-1: USB disconnect, device number 3 [ 86.855302][ T6381] syzkaller0: entered promiscuous mode [ 86.857786][ T6381] syzkaller0: entered allmulticast mode [ 86.866024][ T6382] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) [ 86.929940][ T6382] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 87.241802][ T9] cfg80211: failed to load regulatory.db [ 87.278465][ T6053] usb 7-1: USB disconnect, device number 3 [ 87.316858][ T6391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 87.319347][ T6391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.322866][ T6391] vhci_hcd vhci_hcd.0: Device attached [ 87.351943][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 87.584094][ T6406] 9pnet_fd: Insufficient options for proto=fd [ 87.595296][ T6401] kernel profiling enabled (shift: 17) [ 87.600248][ T3239] usb 38-1: SetAddress Request (2) to port 0 [ 87.603681][ T3239] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 87.678475][ T6400] Zero length message leads to an empty skb [ 87.792813][ T6410] netlink: 14 bytes leftover after parsing attributes in process `syz.3.85'. [ 87.881966][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.904463][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.951070][ T6410] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 87.958678][ T6410] bond0 (unregistering): Released all slaves [ 87.965843][ T6392] vhci_hcd: connection reset by peer [ 87.972794][ T6082] vhci_hcd vhci_hcd.0: stop threads [ 87.974882][ T6082] vhci_hcd vhci_hcd.0: release socket [ 87.980058][ T6082] vhci_hcd vhci_hcd.0: disconnect device [ 88.840807][ T6430] process 'syz.3.91' launched '/dev/fd/8' with NULL argv: empty string added [ 88.862396][ T6053] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.877934][ T6053] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.975356][ T6434] fido_id[6434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.315893][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 89.380612][ T6443] netlink: 'syz.2.94': attribute type 4 has an invalid length. [ 89.667484][ T6456] netlink: 'syz.3.102': attribute type 12 has an invalid length. [ 89.763923][ T6461] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.767797][ T6461] overlayfs: missing 'lowerdir' [ 89.794485][ T6461] program syz.1.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.692066][ T6484] netlink: 392 bytes leftover after parsing attributes in process `syz.0.112'. [ 90.964521][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 90.979154][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'. [ 90.984937][ T6492] overlayfs: failed to resolve '/001 0 0 0 00FFFFFF 0 0 0 [ 90.984937][ T6492] geneve1 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 90.984937][ T6492] wg0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 90.984937][ T6492] wg1 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 90.984937][ T6492] wg2 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 90.984937][ T6492] ': -36 [ 91.175570][ T6487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 91.177643][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.180316][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 91.183432][ T6499] vhci_hcd: connection closed [ 91.184198][ T3687] vhci_hcd vhci_hcd.3: stop threads [ 91.187441][ T3687] vhci_hcd vhci_hcd.3: release socket [ 91.189188][ T3687] vhci_hcd vhci_hcd.3: disconnect device [ 92.494238][ T6503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 92.496935][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.532918][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 92.541498][ T6503] random: crng reseeded on system resumption [ 92.557781][ T6503] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 92.574030][ T6504] vhci_hcd: connection closed [ 92.574801][ T3687] vhci_hcd vhci_hcd.1: stop threads [ 92.578282][ T3687] vhci_hcd vhci_hcd.1: release socket [ 92.581871][ T3687] vhci_hcd vhci_hcd.1: disconnect device [ 92.710230][ T3239] usb 38-1: device descriptor read/8, error -110 [ 92.802621][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 92.805398][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 92.845659][ T6530] syzkaller0: entered promiscuous mode [ 92.847942][ T6530] syzkaller0: entered allmulticast mode [ 93.112352][ T3239] usb usb38-port1: attempt power cycle [ 93.627087][ T6535] overlay: Unknown parameter '/' [ 93.686801][ T3239] usb usb38-port1: unable to enumerate USB device [ 93.936568][ T6543] macsec2: entered promiscuous mode [ 93.938339][ T6543] macsec2: entered allmulticast mode [ 94.136771][ T6546] 9pnet_fd: Insufficient options for proto=fd [ 94.178395][ T6548] bridge0: port 3(syz_tun) entered blocking state [ 94.221065][ T6548] bridge0: port 3(syz_tun) entered disabled state [ 94.223538][ T6548] syz_tun: entered allmulticast mode [ 94.226382][ T6548] syz_tun: entered promiscuous mode [ 94.228448][ T6548] bridge0: port 3(syz_tun) entered blocking state [ 94.230843][ T6548] bridge0: port 3(syz_tun) entered forwarding state [ 94.268846][ T6548] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 94.271631][ T6548] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 94.303562][ T6555] syzkaller0: entered promiscuous mode [ 94.305423][ T6555] syzkaller0: entered allmulticast mode [ 94.496533][ T6566] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 94.499992][ T6566] bridge0: port 3(syz_tun) entered disabled state [ 94.502783][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.505481][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.699806][ T6576] xfrm0: entered promiscuous mode [ 94.702281][ T6576] xfrm0: entered allmulticast mode [ 94.731836][ T40] audit: type=1326 audit(1768377738.417:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.750555][ T40] audit: type=1326 audit(1768377738.417:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.759680][ T40] audit: type=1326 audit(1768377738.427:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 94.778629][ T40] audit: type=1326 audit(1768377738.427:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.787471][ T40] audit: type=1326 audit(1768377738.427:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 94.795101][ T40] audit: type=1326 audit(1768377738.427:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.801715][ T40] audit: type=1326 audit(1768377738.427:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.808403][ T40] audit: type=1326 audit(1768377738.427:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 94.815716][ T40] audit: type=1326 audit(1768377738.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 94.822333][ T40] audit: type=1326 audit(1768377738.437:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.143" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 95.121638][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 95.152731][ T6606] netlink: 'syz.3.155': attribute type 12 has an invalid length. [ 95.218595][ T6592] capability: warning: `syz.2.147' uses 32-bit capabilities (legacy support in use) [ 95.400647][ T6618] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 95.491652][ T6625] netlink: 392 bytes leftover after parsing attributes in process `syz.1.162'. [ 95.585047][ T6629] openvswitch: netlink: IPv4 tun info is not correct [ 95.787625][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 95.790827][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 95.881796][ T6638] netlink: 'syz.1.168': attribute type 10 has an invalid length. [ 95.892042][ T6638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.895303][ T6638] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 95.958259][ T6642] mkiss: ax0: crc mode is auto. [ 95.962922][ T6644] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.965860][ T6644] overlayfs: missing 'lowerdir' [ 95.977938][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 95.991688][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 96.096706][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 96.106449][ T6649] vlan2: entered promiscuous mode [ 96.108346][ T6649] bond0: entered promiscuous mode [ 96.110917][ T6649] bond_slave_0: entered promiscuous mode [ 96.113328][ T6649] bond_slave_1: entered promiscuous mode [ 97.686889][ T6674] syzkaller0: entered promiscuous mode [ 97.689142][ T6674] syzkaller0: entered allmulticast mode [ 98.158027][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 98.162514][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 98.198797][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 100.031458][ T6722] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 100.034125][ T6722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.040160][ T6722] vhci_hcd vhci_hcd.0: Device attached [ 100.066349][ T6727] vhci_hcd: connection closed [ 100.067255][ T41] vhci_hcd vhci_hcd.0: stop threads [ 100.072003][ T41] vhci_hcd vhci_hcd.0: release socket [ 100.073793][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 100.080189][ T3239] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.232591][ T3239] usb 6-1: config 0 has no interfaces? [ 100.236477][ T3239] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.239922][ T3239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.243241][ T3239] usb 6-1: Product: syz [ 100.244994][ T3239] usb 6-1: Manufacturer: syz [ 100.246909][ T3239] usb 6-1: SerialNumber: syz [ 100.250609][ T3239] usb 6-1: config 0 descriptor?? [ 100.390186][ T3239] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.458074][ T34] usb 6-1: USB disconnect, device number 4 [ 100.545772][ T3239] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.549386][ T3239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.553657][ T3239] usb 5-1: Product: syz [ 100.555217][ T3239] usb 5-1: Manufacturer: syz [ 100.557099][ T3239] usb 5-1: SerialNumber: syz [ 100.564921][ T3239] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.578953][ T6000] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.658001][ T6735] netlink: 392 bytes leftover after parsing attributes in process `syz.2.199'. [ 100.754181][ T6739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.201'. [ 100.766782][ T6739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.771664][ T6739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.775187][ T6739] bond0 (unregistering): Released all slaves [ 100.794072][ T6731] random: crng reseeded on system resumption [ 100.803076][ T6731] netlink: 64 bytes leftover after parsing attributes in process `syz.0.197'. [ 100.863689][ T34] usb 5-1: USB disconnect, device number 3 [ 100.928644][ T54] IPVS: starting estimator thread 0... [ 100.996402][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 101.005492][ T6750] vlan2: entered promiscuous mode [ 101.007523][ T6750] bond0: entered promiscuous mode [ 101.009525][ T6750] bond_slave_0: entered promiscuous mode [ 101.012993][ T6750] bond_slave_1: entered promiscuous mode [ 101.015335][ T6750] batadv0: entered promiscuous mode [ 101.032020][ T6744] IPVS: using max 46 ests per chain, 110400 per kthread [ 101.155084][ T6751] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 101.590281][ T6000] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 101.593928][ T6000] ath9k_htc: Failed to initialize the device [ 101.597451][ T34] usb 5-1: ath9k_htc: USB layer deinitialized [ 101.921773][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.924970][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.962194][ T6772] syzkaller0: entered promiscuous mode [ 101.970148][ T6772] syzkaller0: entered allmulticast mode [ 101.973571][ T6771] tipc: Started in network mode [ 101.975792][ T6771] tipc: Node identity 86baeedc1da2, cluster identity 4711 [ 101.979123][ T6771] tipc: Enabled bearer , priority 0 [ 101.995317][ T6771] tipc: Resetting bearer [ 102.006448][ T6771] tipc: Disabling bearer [ 103.428275][ T6795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 103.430311][ T6795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.432954][ T6795] vhci_hcd vhci_hcd.0: Device attached [ 103.435925][ T6807] vhci_hcd: connection closed [ 103.436070][ T4282] vhci_hcd vhci_hcd.0: stop threads [ 103.439709][ T4282] vhci_hcd vhci_hcd.0: release socket [ 103.442179][ T4282] vhci_hcd vhci_hcd.0: disconnect device [ 103.512610][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 103.515438][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 103.732023][ T6826] FAULT_INJECTION: forcing a failure. [ 103.732023][ T6826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.736214][ T6826] CPU: 3 UID: 0 PID: 6826 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 103.736227][ T6826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.736233][ T6826] Call Trace: [ 103.736237][ T6826] [ 103.736241][ T6826] dump_stack_lvl+0x16c/0x1f0 [ 103.736261][ T6826] should_fail_ex+0x512/0x640 [ 103.736276][ T6826] _copy_from_user+0x2e/0xd0 [ 103.736288][ T6826] get_compat_msghdr+0xa7/0x170 [ 103.736304][ T6826] ? __pfx_get_compat_msghdr+0x10/0x10 [ 103.736319][ T6826] ? __lock_acquire+0x436/0x2890 [ 103.736332][ T6826] ___sys_recvmsg+0x191/0x1a0 [ 103.736346][ T6826] ? __pfx____sys_recvmsg+0x10/0x10 [ 103.736361][ T6826] ? find_held_lock+0x2b/0x80 [ 103.736378][ T6826] ? __pfx___might_resched+0x10/0x10 [ 103.736395][ T6826] do_recvmmsg+0x55d/0x750 [ 103.736411][ T6826] ? __pfx_do_recvmmsg+0x10/0x10 [ 103.736433][ T6826] ? __fget_files+0x20e/0x3c0 [ 103.736449][ T6826] __sys_recvmmsg+0x21c/0x280 [ 103.736463][ T6826] ? __pfx___sys_recvmmsg+0x10/0x10 [ 103.736478][ T6826] ? __pfx_ksys_write+0x10/0x10 [ 103.736495][ T6826] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 103.736509][ T6826] ? __do_fast_syscall_32+0x9a/0x680 [ 103.736519][ T6826] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.736535][ T6826] __do_fast_syscall_32+0xe8/0x680 [ 103.736546][ T6826] do_fast_syscall_32+0x32/0x80 [ 103.736555][ T6826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.736568][ T6826] RIP: 0023:0xf709d579 [ 103.736576][ T6826] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.736586][ T6826] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 103.736595][ T6826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 103.736601][ T6826] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 103.736607][ T6826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.736612][ T6826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.736618][ T6826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.736630][ T6826] [ 103.828929][ T6828] 9pnet_fd: Insufficient options for proto=fd [ 104.007400][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 104.039269][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 104.126371][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 104.156820][ T6847] netlink: 'syz.3.239': attribute type 12 has an invalid length. [ 104.845776][ T6882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.085984][ T6887] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 105.314469][ T6897] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 105.432880][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 105.439318][ T6900] vlan2: entered promiscuous mode [ 105.560170][ T840] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 105.721352][ T840] usb 7-1: config 0 has no interfaces? [ 105.726503][ T840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.729544][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.733503][ T840] usb 7-1: Product: syz [ 105.734975][ T840] usb 7-1: Manufacturer: syz [ 105.736478][ T840] usb 7-1: SerialNumber: syz [ 105.739218][ T840] usb 7-1: config 0 descriptor?? [ 105.945204][ T9] usb 7-1: USB disconnect, device number 4 [ 105.957286][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.961702][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.969771][ T6925] netlink: 'syz.1.265': attribute type 33 has an invalid length. [ 105.972859][ T6925] __nla_validate_parse: 4 callbacks suppressed [ 105.972867][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 106.505497][ T6942] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.275'. [ 106.857614][ T6956] syzkaller0: entered promiscuous mode [ 106.859624][ T6956] syzkaller0: entered allmulticast mode [ 107.588665][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'. [ 107.591910][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'. [ 107.622981][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'. [ 107.672688][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 107.679386][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 107.777847][ T6979] 9pnet_fd: Insufficient options for proto=fd [ 107.856066][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 107.951664][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 108.511300][ T7017] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 108.513371][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.519024][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 108.542162][ T7019] vhci_hcd: connection closed [ 108.542349][ T6082] vhci_hcd vhci_hcd.2: stop threads [ 108.545619][ T6082] vhci_hcd vhci_hcd.2: release socket [ 108.547389][ T6082] vhci_hcd vhci_hcd.2: disconnect device [ 108.651990][ T7022] bridge0: port 3(syz_tun) entered blocking state [ 108.654212][ T7022] bridge0: port 3(syz_tun) entered disabled state [ 108.656410][ T7022] syz_tun: entered allmulticast mode [ 108.659563][ T7022] syz_tun: entered promiscuous mode [ 108.661657][ T7022] bridge0: port 3(syz_tun) entered blocking state [ 108.663852][ T7022] bridge0: port 3(syz_tun) entered forwarding state [ 108.681078][ T7022] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 108.683710][ T7022] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 108.785269][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 108.902332][ T7029] FAULT_INJECTION: forcing a failure. [ 108.902332][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.907767][ T7029] CPU: 3 UID: 0 PID: 7029 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(full) [ 108.907789][ T7029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.907800][ T7029] Call Trace: [ 108.907806][ T7029] [ 108.907813][ T7029] dump_stack_lvl+0x16c/0x1f0 [ 108.907844][ T7029] should_fail_ex+0x512/0x640 [ 108.907866][ T7029] _copy_from_user+0x2e/0xd0 [ 108.907885][ T7029] get_compat_msghdr+0xa7/0x170 [ 108.907908][ T7029] ? __pfx_get_compat_msghdr+0x10/0x10 [ 108.907932][ T7029] ? ____sys_recvmsg+0x348/0x6b0 [ 108.907952][ T7029] ___sys_recvmsg+0x191/0x1a0 [ 108.907975][ T7029] ? __pfx____sys_recvmsg+0x10/0x10 [ 108.907999][ T7029] ? find_held_lock+0x2b/0x80 [ 108.908029][ T7029] ? __pfx___might_resched+0x10/0x10 [ 108.908058][ T7029] do_recvmmsg+0x55d/0x750 [ 108.908084][ T7029] ? __pfx_do_recvmmsg+0x10/0x10 [ 108.908123][ T7029] ? __fget_files+0x20e/0x3c0 [ 108.908149][ T7029] __sys_recvmmsg+0x21c/0x280 [ 108.908172][ T7029] ? __pfx___sys_recvmmsg+0x10/0x10 [ 108.908196][ T7029] ? __pfx_ksys_write+0x10/0x10 [ 108.908223][ T7029] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 108.908246][ T7029] ? __do_fast_syscall_32+0x9a/0x680 [ 108.908262][ T7029] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.908287][ T7029] __do_fast_syscall_32+0xe8/0x680 [ 108.908305][ T7029] do_fast_syscall_32+0x32/0x80 [ 108.908321][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.908342][ T7029] RIP: 0023:0xf7ff6579 [ 108.908354][ T7029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.908369][ T7029] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 108.908384][ T7029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 108.908395][ T7029] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 108.908404][ T7029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.908413][ T7029] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.908422][ T7029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.908444][ T7029] [ 108.917272][ T6998] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 110.880549][ T7069] syzkaller0: entered promiscuous mode [ 110.882795][ T7069] syzkaller0: entered allmulticast mode [ 111.155667][ T7075] FAULT_INJECTION: forcing a failure. [ 111.155667][ T7075] name failslab, interval 1, probability 0, space 0, times 1 [ 111.159921][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.1.322 Not tainted syzkaller #0 PREEMPT(full) [ 111.159935][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.159941][ T7075] Call Trace: [ 111.159945][ T7075] [ 111.159950][ T7075] dump_stack_lvl+0x16c/0x1f0 [ 111.159969][ T7075] should_fail_ex+0x512/0x640 [ 111.159981][ T7075] ? fs_reclaim_acquire+0xae/0x150 [ 111.159998][ T7075] should_failslab+0xc2/0x120 [ 111.160014][ T7075] __kmalloc_noprof+0xeb/0x910 [ 111.160025][ T7075] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 111.160042][ T7075] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 111.160056][ T7075] tomoyo_realpath_from_path+0xc2/0x6e0 [ 111.160071][ T7075] ? tomoyo_profile+0x47/0x60 [ 111.160101][ T7075] tomoyo_path_number_perm+0x245/0x580 [ 111.160112][ T7075] ? tomoyo_path_number_perm+0x237/0x580 [ 111.160125][ T7075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.160150][ T7075] ? find_held_lock+0x2b/0x80 [ 111.160164][ T7075] ? hook_file_ioctl_common+0x144/0x410 [ 111.160179][ T7075] ? __fget_files+0x20e/0x3c0 [ 111.160193][ T7075] ? __fput_deferred+0x480/0x480 [ 111.160206][ T7075] security_file_ioctl_compat+0x9b/0x240 [ 111.160220][ T7075] __ia32_compat_sys_ioctl+0xc3/0x370 [ 111.160234][ T7075] __do_fast_syscall_32+0xe8/0x680 [ 111.160246][ T7075] do_fast_syscall_32+0x32/0x80 [ 111.160256][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.160269][ T7075] RIP: 0023:0xf70ed579 [ 111.160277][ T7075] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.160286][ T7075] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 111.160296][ T7075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b2 [ 111.160302][ T7075] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.160308][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.160313][ T7075] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.160319][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.160331][ T7075] [ 111.232876][ T7075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.731457][ T7100] __nla_validate_parse: 5 callbacks suppressed [ 111.731472][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 111.737541][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 111.847597][ T7106] 9pnet_fd: Insufficient options for proto=fd [ 111.852111][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.332'. [ 112.237494][ T7119] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.402976][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.406660][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.433099][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.436281][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.480917][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.483719][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.900231][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 112.991701][ T7153] bridge0: port 3(syz_tun) entered blocking state [ 112.994486][ T7153] bridge0: port 3(syz_tun) entered disabled state [ 112.997337][ T7153] syz_tun: entered allmulticast mode [ 113.001046][ T7153] syz_tun: entered promiscuous mode [ 113.051777][ T54] usb 8-1: config 0 has no interfaces? [ 113.055889][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.059644][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.063502][ T54] usb 8-1: Product: syz [ 113.065303][ T54] usb 8-1: Manufacturer: syz [ 113.067239][ T54] usb 8-1: SerialNumber: syz [ 113.074817][ T54] usb 8-1: config 0 descriptor?? [ 113.111197][ T7153] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 113.113674][ T7153] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 113.120435][ T7153] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 113.123592][ T7153] bond0: (slave wlan1): Opening slave failed [ 113.288343][ T54] usb 8-1: USB disconnect, device number 3 [ 113.523948][ T7172] 9p: Bad value for 'rfdno' [ 114.103476][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 114.120282][ T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.400155][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 114.517137][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.519401][ T54] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.522465][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.526222][ T54] usb 5-1: config 0 descriptor?? [ 115.144037][ T7201] syzkaller0: entered promiscuous mode [ 115.145867][ T7201] syzkaller0: entered allmulticast mode [ 116.139809][ T7219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 116.141903][ T7219] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.146152][ T7219] vhci_hcd vhci_hcd.0: Device attached [ 116.149508][ T7221] vhci_hcd: connection closed [ 116.149670][ T3687] vhci_hcd vhci_hcd.3: stop threads [ 116.154013][ T3687] vhci_hcd vhci_hcd.3: release socket [ 116.155982][ T3687] vhci_hcd vhci_hcd.3: disconnect device [ 116.530031][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 116.550767][ T54] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 116.558744][ T54] usb 5-1: USB disconnect, device number 4 [ 117.963677][ T7257] __nla_validate_parse: 1 callbacks suppressed [ 117.963693][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 118.476250][ T7273] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.378'. [ 118.603454][ T7281] kvm: pic: level sensitive irq not supported [ 118.603612][ T7281] kvm: pic: level sensitive irq not supported [ 118.607043][ T7281] pic_ioport_write: 987 callbacks suppressed [ 118.607052][ T7281] kvm: pic: single mode not supported [ 118.611785][ T7281] kvm: pic: single mode not supported [ 118.613956][ T7281] kvm: pic: single mode not supported [ 118.615836][ T7281] kvm: pic: single mode not supported [ 118.618480][ T7281] kvm: pic: single mode not supported [ 118.620699][ T7281] kvm: pic: single mode not supported [ 118.623305][ T7281] kvm: pic: single mode not supported [ 118.625232][ T7281] kvm: pic: single mode not supported [ 118.628387][ T7281] kvm: pic: single mode not supported [ 118.630877][ T7281] kvm: pic: single mode not supported [ 118.881291][ T7260] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 120.558308][ T840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 120.739481][ T840] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.742371][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.744835][ T840] usb 7-1: Product: syz [ 120.746180][ T840] usb 7-1: Manufacturer: syz [ 120.747663][ T840] usb 7-1: SerialNumber: syz [ 120.757123][ T840] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.799235][ T840] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.927433][ T7300] netlink: 'syz.0.385': attribute type 13 has an invalid length. [ 120.964750][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 121.009065][ T7294] random: crng reseeded on system resumption [ 121.033603][ T7294] netlink: 64 bytes leftover after parsing attributes in process `syz.2.383'. [ 121.040527][ T7300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.111910][ T54] usb 7-1: USB disconnect, device number 5 [ 121.449201][ T7321] netlink: 14 bytes leftover after parsing attributes in process `syz.0.388'. [ 121.526637][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.529760][ T7321] bond_slave_0: left promiscuous mode [ 121.534383][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.537706][ T7321] bond_slave_1: left promiscuous mode [ 121.540288][ T7321] bond0 (unregistering): Released all slaves [ 121.830300][ T840] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 121.832652][ T840] ath9k_htc: Failed to initialize the device [ 121.834738][ T54] usb 7-1: ath9k_htc: USB layer deinitialized [ 122.144535][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.391'. [ 122.423674][ T6000] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.606972][ T6000] usb 7-1: config 0 has no interfaces? [ 122.619226][ T6000] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.626327][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.629291][ T6000] usb 7-1: Product: syz [ 122.633267][ T6000] usb 7-1: Manufacturer: syz [ 122.635235][ T6000] usb 7-1: SerialNumber: syz [ 122.664356][ T6000] usb 7-1: config 0 descriptor?? [ 122.963890][ T6000] usb 7-1: USB disconnect, device number 6 [ 123.270871][ T7348] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.396'. [ 123.592662][ T7359] bond0: entered promiscuous mode [ 123.594936][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.711260][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.714148][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.733251][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.736163][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.799919][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.803767][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 124.062981][ T7358] netlink: 'syz.2.397': attribute type 13 has an invalid length. [ 124.444374][ T7358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.737024][ T7387] bridge0: port 3(syz_tun) entered blocking state [ 124.739020][ T7387] bridge0: port 3(syz_tun) entered disabled state [ 124.744096][ T7387] syz_tun: entered allmulticast mode [ 124.747599][ T7387] syz_tun: entered promiscuous mode [ 124.749612][ T7387] bridge0: port 3(syz_tun) entered blocking state [ 124.752372][ T7387] bridge0: port 3(syz_tun) entered forwarding state [ 124.805812][ T7387] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 124.808380][ T7387] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 124.817500][ T7387] netlink: 'syz.2.404': attribute type 10 has an invalid length. [ 125.722309][ T7405] netlink: 'syz.2.409': attribute type 4 has an invalid length. [ 125.728293][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.732496][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.735736][ T7409] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.738241][ T7409] UDF-fs: Scanning with blocksize 512 failed [ 125.740952][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.744125][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.747035][ T7409] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.749429][ T7409] UDF-fs: Scanning with blocksize 1024 failed [ 125.751828][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.755074][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.758036][ T7409] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.761102][ T7409] UDF-fs: Scanning with blocksize 2048 failed [ 125.763356][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 125.766718][ T7409] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 125.769693][ T7409] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 125.771417][ T7407] bond1: entered promiscuous mode [ 125.773598][ T7409] UDF-fs: Scanning with blocksize 4096 failed [ 125.775840][ T7409] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 125.781632][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.834824][ T7409] block nbd0: NBD_DISCONNECT [ 126.189613][ T7417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 126.191713][ T7417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.194374][ T7417] vhci_hcd vhci_hcd.0: Device attached [ 126.377244][ T7432] vhci_hcd: connection closed [ 126.379081][ T3687] vhci_hcd vhci_hcd.2: stop threads [ 126.384942][ T3687] vhci_hcd vhci_hcd.2: release socket [ 126.388213][ T3687] vhci_hcd vhci_hcd.2: disconnect device [ 126.473170][ T7438] netlink: 14 bytes leftover after parsing attributes in process `syz.3.420'. [ 127.105793][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 127.109449][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 128.451147][ T6053] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 128.612550][ T6053] usb 8-1: config 0 has no interfaces? [ 128.618904][ T6053] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.622320][ T6053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.624855][ T6053] usb 8-1: Product: syz [ 128.626348][ T6053] usb 8-1: Manufacturer: syz [ 128.627839][ T6053] usb 8-1: SerialNumber: syz [ 128.636459][ T6053] usb 8-1: config 0 descriptor?? [ 128.845390][ T6000] usb 8-1: USB disconnect, device number 4 [ 128.933704][ T7516] __nla_validate_parse: 2 callbacks suppressed [ 128.933721][ T7516] netlink: 392 bytes leftover after parsing attributes in process `syz.1.438'. [ 128.969068][ T7518] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.439'. [ 129.036052][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 129.313451][ T7531] mkiss: ax0: crc mode is auto. [ 129.345199][ T7535] netlink: 9 bytes leftover after parsing attributes in process `syz.0.446'. [ 129.363915][ T7535] netlink: 9 bytes leftover after parsing attributes in process `syz.0.446'. [ 129.469721][ T7541] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.449'. [ 129.625841][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 130.014206][ T7566] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.458'. [ 130.103385][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 130.107226][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 130.120200][ T7568] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 130.123712][ T7568] UDF-fs: Scanning with blocksize 512 failed [ 130.125857][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 130.128620][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 130.134848][ T7568] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 130.136984][ T7568] UDF-fs: Scanning with blocksize 1024 failed [ 130.138969][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 130.148908][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 130.152335][ T7568] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 130.154496][ T7568] UDF-fs: Scanning with blocksize 2048 failed [ 130.156501][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 130.166262][ T7570] Bluetooth: MGMT ver 1.23 [ 130.169059][ T7568] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 130.172038][ T7568] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 130.174190][ T7568] UDF-fs: Scanning with blocksize 4096 failed [ 130.175939][ T7568] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 131.059338][ T7568] block nbd2: NBD_DISCONNECT [ 131.107730][ T7559] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 131.200034][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 131.252110][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 131.453678][ T7596] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 131.455789][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.460286][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 131.464828][ T7600] vhci_hcd: connection closed [ 131.465063][ T6082] vhci_hcd vhci_hcd.3: stop threads [ 131.468158][ T6082] vhci_hcd vhci_hcd.3: release socket [ 131.469796][ T6082] vhci_hcd vhci_hcd.3: disconnect device [ 131.972091][ T7605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.975535][ T7605] block device autoloading is deprecated and will be removed. [ 132.026034][ T7605] loop0: detected capacity change from 0 to 2560 [ 132.033728][ T5948] buffer_io_error: 11 callbacks suppressed [ 132.033742][ T5948] Buffer I/O error on dev loop0, logical block 0, async page read [ 132.050700][ T5948] Buffer I/O error on dev loop0, logical block 0, async page read [ 132.053287][ T7608] netlink: 'syz.3.470': attribute type 12 has an invalid length. [ 132.068974][ T7605] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 132.074050][ T7605] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 132.083738][ T7605] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 132.093870][ T7605] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 132.106135][ T7605] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 132.131513][ T7605] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 132.139728][ T7605] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 132.249941][ T7605] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 132.345502][ T7617] ubi31: attaching mtd0 [ 132.410862][ T7617] ubi31: scanning is finished [ 132.412964][ T7617] ubi31: empty MTD device detected [ 132.506062][ T7617] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.509243][ T7617] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.512939][ T7617] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.515879][ T7617] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 132.519913][ T7617] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.523797][ T7617] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.527132][ T7617] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4133437520 [ 132.531977][ T7617] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.536800][ T7621] ubi31: background thread "ubi_bgt31d" started, PID 7621 [ 133.112684][ T7614] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 134.165497][ T7653] mkiss: ax0: crc mode is auto. [ 134.433434][ T7655] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 134.555925][ T7655] __nla_validate_parse: 5 callbacks suppressed [ 134.555969][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 135.184724][ T7660] loop0: detected capacity change from 0 to 2560 [ 135.319314][ T7671] loop6: detected capacity change from 0 to 524279808 [ 135.431679][ T7671] loop6: detected capacity change from 524279808 to 1 [ 135.436323][ T7671] Dev loop6: unable to read RDB block 1 [ 135.438714][ T7671] loop6: unable to read partition table [ 135.453649][ T7671] loop6: partition table beyond EOD, truncated [ 135.461662][ T7671] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 136.591115][ T7689] x_tables: duplicate underflow at hook 1 [ 136.747452][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 136.751153][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 136.783758][ T7696] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 136.830204][ T6000] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 136.945153][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 136.980304][ T6000] usb 8-1: Using ep0 maxpacket: 8 [ 136.983591][ T6000] usb 8-1: config 0 has too many interfaces: 240, using maximum allowed: 32 [ 136.986988][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.995197][ T6000] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 240 [ 136.998111][ T6000] usb 8-1: New USB device found, idVendor=04d8, idProduct=40dd, bcdDevice= 0.00 [ 137.001057][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.008672][ T6000] usb 8-1: config 0 descriptor?? [ 137.013961][ T7686] usb 8-1: USB disconnect, device number 5 [ 137.029168][ T7689] hub 8-0:1.0: USB hub found [ 137.030987][ T7689] hub 8-0:1.0: 1 port detected [ 137.047338][ T7705] netlink: 'syz.0.500': attribute type 4 has an invalid length. [ 137.160646][ T980] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 137.215131][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.219941][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.316754][ T7712] 9pnet_fd: Insufficient options for proto=fd [ 137.649281][ T980] usb 8-1: device descriptor read/64, error -71 [ 137.736619][ T7724] netlink: 288 bytes leftover after parsing attributes in process `syz.2.507'. [ 137.963503][ T7728] mkiss: ax0: crc mode is auto. [ 137.987636][ T980] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 138.330929][ T980] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.334125][ T980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.336837][ T980] usb 8-1: Product: syz [ 138.338601][ T980] usb 8-1: Manufacturer: syz [ 138.340337][ T980] usb 8-1: SerialNumber: syz [ 138.356845][ T980] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.601881][ T6034] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.735874][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.739680][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.762884][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.766105][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.805069][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.808801][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 139.820589][ T7714] random: crng reseeded on system resumption [ 139.827871][ T7714] netlink: 64 bytes leftover after parsing attributes in process `syz.3.502'. [ 140.239030][ T7749] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 140.247039][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 140.351902][ T6053] usb 8-1: USB disconnect, device number 7 [ 140.494613][ T7756] mkiss: ax0: crc mode is auto. [ 140.576809][ T7758] netlink: 392 bytes leftover after parsing attributes in process `syz.1.514'. [ 140.621808][ T7760] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 140.629894][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.630280][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 140.633551][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.643549][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.646159][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.658542][ T7760] bond0: (slave batadv0): Releasing backup interface [ 140.662332][ T7760] batadv0 (unregistering): left promiscuous mode [ 140.710249][ T6034] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 140.714340][ T6034] ath9k_htc: Failed to initialize the device [ 140.845361][ T7764] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 142.209436][ T6053] usb 8-1: ath9k_htc: USB layer deinitialized [ 142.259207][ T7792] ubi: mtd0 is already attached to ubi31 [ 142.359550][ T7797] FAULT_INJECTION: forcing a failure. [ 142.359550][ T7797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.363696][ T7797] CPU: 3 UID: 0 PID: 7797 Comm: syz.0.528 Not tainted syzkaller #0 PREEMPT(full) [ 142.363710][ T7797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.363716][ T7797] Call Trace: [ 142.363720][ T7797] [ 142.363724][ T7797] dump_stack_lvl+0x16c/0x1f0 [ 142.363743][ T7797] should_fail_ex+0x512/0x640 [ 142.363758][ T7797] _copy_from_user+0x2e/0xd0 [ 142.363770][ T7797] get_compat_msghdr+0xa7/0x170 [ 142.363785][ T7797] ? __pfx_get_compat_msghdr+0x10/0x10 [ 142.363799][ T7797] ? __lock_acquire+0x436/0x2890 [ 142.363812][ T7797] ___sys_recvmsg+0x191/0x1a0 [ 142.363826][ T7797] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.363841][ T7797] ? find_held_lock+0x2b/0x80 [ 142.363859][ T7797] ? __pfx___might_resched+0x10/0x10 [ 142.363876][ T7797] do_recvmmsg+0x55d/0x750 [ 142.363891][ T7797] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.363913][ T7797] ? __fget_files+0x20e/0x3c0 [ 142.363929][ T7797] __sys_recvmmsg+0x21c/0x280 [ 142.363944][ T7797] ? __pfx___sys_recvmmsg+0x10/0x10 [ 142.363958][ T7797] ? __pfx_ksys_write+0x10/0x10 [ 142.363975][ T7797] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 142.363990][ T7797] ? __do_fast_syscall_32+0x9a/0x680 [ 142.364000][ T7797] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.364015][ T7797] __do_fast_syscall_32+0xe8/0x680 [ 142.364026][ T7797] do_fast_syscall_32+0x32/0x80 [ 142.364036][ T7797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.364049][ T7797] RIP: 0023:0xf7ff6579 [ 142.364057][ T7797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.364067][ T7797] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 142.364076][ T7797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 142.364082][ T7797] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 142.364088][ T7797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.364093][ T7797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.364099][ T7797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.364111][ T7797] [ 142.802517][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.804717][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.305654][ T7821] mkiss: ax0: crc mode is auto. [ 143.331762][ T7827] netlink: 'syz.3.537': attribute type 12 has an invalid length. [ 143.865755][ T7859] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 143.868548][ T7859] bond0: (slave wlan1): Opening slave failed [ 144.200842][ T7885] mkiss: ax0: crc mode is auto. [ 144.361449][ T7889] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 144.796070][ T7901] __nla_validate_parse: 8 callbacks suppressed [ 144.796081][ T7901] netlink: 392 bytes leftover after parsing attributes in process `syz.0.566'. [ 145.450315][ T980] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 145.610226][ T6034] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 145.616044][ T980] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.619722][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.623669][ T980] usb 6-1: Product: syz [ 145.625398][ T980] usb 6-1: Manufacturer: syz [ 145.627364][ T980] usb 6-1: SerialNumber: syz [ 145.633511][ T980] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.645803][ T6041] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.762941][ T6034] usb 8-1: unable to get BOS descriptor or descriptor too short [ 145.767434][ T6034] usb 8-1: config 4 has an invalid interface number: 246 but max is 0 [ 145.771313][ T6034] usb 8-1: config 4 has no interface number 0 [ 145.773868][ T6034] usb 8-1: config 4 interface 246 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 145.778253][ T6034] usb 8-1: config 4 interface 246 has no altsetting 0 [ 145.783955][ T6034] usb 8-1: string descriptor 0 read error: -22 [ 145.786858][ T6034] usb 8-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice=46.e9 [ 145.790776][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.804727][ T6034] snd-usb-caiaq 8-1:4.246: can't set alt interface. [ 145.808382][ T6034] usb 8-1: unable to init card! (ret=-5) [ 145.812520][ T6034] snd-usb-caiaq 8-1:4.246: probe with driver snd-usb-caiaq failed with error -5 [ 145.849952][ T7911] random: crng reseeded on system resumption [ 145.861780][ T7911] netlink: 64 bytes leftover after parsing attributes in process `syz.1.570'. [ 145.884021][ T6014] usb 6-1: USB disconnect, device number 5 [ 145.968887][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 145.972003][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 145.997209][ T6000] usb 8-1: USB disconnect, device number 8 [ 146.438714][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 146.482723][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 146.710299][ T6041] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 146.713142][ T6041] ath9k_htc: Failed to initialize the device [ 146.715525][ T6014] usb 6-1: ath9k_htc: USB layer deinitialized [ 146.866018][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 147.009933][ T7945] 9pnet_fd: Insufficient options for proto=fd [ 147.036774][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 147.040325][ T6014] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 147.193636][ T6014] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.196620][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.199255][ T6014] usb 6-1: Product: syz [ 147.200875][ T6014] usb 6-1: Manufacturer: syz [ 147.202201][ T6014] usb 6-1: SerialNumber: syz [ 147.213976][ T6014] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.231757][ T6014] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.443644][ T7938] random: crng reseeded on system resumption [ 147.450874][ T7938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.581'. [ 147.456912][ T7962] FAULT_INJECTION: forcing a failure. [ 147.456912][ T7962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.461070][ T7962] CPU: 0 UID: 0 PID: 7962 Comm: syz.0.590 Not tainted syzkaller #0 PREEMPT(full) [ 147.461085][ T7962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.461091][ T7962] Call Trace: [ 147.461095][ T7962] [ 147.461099][ T7962] dump_stack_lvl+0x16c/0x1f0 [ 147.461120][ T7962] should_fail_ex+0x512/0x640 [ 147.461135][ T7962] _copy_from_user+0x2e/0xd0 [ 147.461147][ T7962] get_compat_msghdr+0xa7/0x170 [ 147.461162][ T7962] ? __pfx_get_compat_msghdr+0x10/0x10 [ 147.461176][ T7962] ? __lock_acquire+0x436/0x2890 [ 147.461188][ T7962] ___sys_recvmsg+0x191/0x1a0 [ 147.461203][ T7962] ? __pfx____sys_recvmsg+0x10/0x10 [ 147.461218][ T7962] ? find_held_lock+0x2b/0x80 [ 147.461235][ T7962] ? __pfx___might_resched+0x10/0x10 [ 147.461252][ T7962] do_recvmmsg+0x55d/0x750 [ 147.461267][ T7962] ? __pfx_do_recvmmsg+0x10/0x10 [ 147.461289][ T7962] ? __fget_files+0x20e/0x3c0 [ 147.461310][ T7962] __sys_recvmmsg+0x21c/0x280 [ 147.461325][ T7962] ? __pfx___sys_recvmmsg+0x10/0x10 [ 147.461339][ T7962] ? __pfx_ksys_write+0x10/0x10 [ 147.461356][ T7962] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 147.461371][ T7962] ? __do_fast_syscall_32+0x9a/0x680 [ 147.461381][ T7962] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.461396][ T7962] __do_fast_syscall_32+0xe8/0x680 [ 147.461407][ T7962] do_fast_syscall_32+0x32/0x80 [ 147.461417][ T7962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.461430][ T7962] RIP: 0023:0xf7ff6579 [ 147.461439][ T7962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.461448][ T7962] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 147.461458][ T7962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 147.461464][ T7962] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 147.461470][ T7962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.461475][ T7962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 147.461481][ T7962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.461493][ T7962] [ 147.620470][ T54] usb 6-1: USB disconnect, device number 6 [ 147.626570][ T7963] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 147.629141][ T7963] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.632861][ T7963] vhci_hcd vhci_hcd.0: Device attached [ 147.921059][ T980] usb 44-1: SetAddress Request (2) to port 0 [ 147.923128][ T980] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 148.184511][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 148.201326][ T7964] vhci_hcd: connection reset by peer [ 148.203198][ T4282] vhci_hcd vhci_hcd.3: stop threads [ 148.204962][ T4282] vhci_hcd vhci_hcd.3: release socket [ 148.206742][ T4282] vhci_hcd vhci_hcd.3: disconnect device [ 148.329822][ T6014] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 148.333778][ T6014] ath9k_htc: Failed to initialize the device [ 148.336074][ T54] usb 6-1: ath9k_htc: USB layer deinitialized [ 148.353114][ T7986] FAULT_INJECTION: forcing a failure. [ 148.353114][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 148.357088][ T7986] CPU: 3 UID: 0 PID: 7986 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 148.357102][ T7986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.357108][ T7986] Call Trace: [ 148.357113][ T7986] [ 148.357118][ T7986] dump_stack_lvl+0x16c/0x1f0 [ 148.357139][ T7986] should_fail_ex+0x512/0x640 [ 148.357150][ T7986] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 148.357165][ T7986] should_failslab+0xc2/0x120 [ 148.357181][ T7986] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 148.357192][ T7986] ? __dquot_initialize+0x299/0xd50 [ 148.357204][ T7986] ? __d_alloc+0x35/0xa80 [ 148.357215][ T7986] ? __d_alloc+0x35/0xa80 [ 148.357223][ T7986] __d_alloc+0x35/0xa80 [ 148.357237][ T7986] d_alloc_pseudo+0x1c/0xc0 [ 148.357249][ T7986] alloc_file_pseudo+0xcf/0x230 [ 148.357261][ T7986] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 148.357275][ T7986] __shmem_file_setup+0x1a8/0x350 [ 148.357293][ T7986] drm_gem_object_init_with_mnt+0xbb/0xe0 [ 148.357309][ T7986] __drm_gem_shmem_create+0x114/0x410 [ 148.357324][ T7986] drm_gem_shmem_dumb_create+0x80/0x150 [ 148.357339][ T7986] drm_mode_create_dumb+0x272/0x300 [ 148.357353][ T7986] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 148.357365][ T7986] drm_ioctl_kernel+0x1f4/0x3e0 [ 148.357376][ T7986] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 148.357389][ T7986] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 148.357403][ T7986] drm_ioctl+0x5c9/0xc30 [ 148.357415][ T7986] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 148.357428][ T7986] ? __pfx_drm_ioctl+0x10/0x10 [ 148.357447][ T7986] drm_compat_ioctl+0x327/0x460 [ 148.357461][ T7986] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 148.357474][ T7986] __ia32_compat_sys_ioctl+0x242/0x370 [ 148.357489][ T7986] __do_fast_syscall_32+0xe8/0x680 [ 148.357501][ T7986] do_fast_syscall_32+0x32/0x80 [ 148.357510][ T7986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.357523][ T7986] RIP: 0023:0xf70ed579 [ 148.357532][ T7986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 148.357542][ T7986] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 148.357551][ T7986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b2 [ 148.357557][ T7986] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.357562][ T7986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.357568][ T7986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.357573][ T7986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.357585][ T7986] [ 149.001001][ T8003] netlink: 'syz.1.602': attribute type 4 has an invalid length. [ 149.147912][ T8014] netlink: 'syz.0.605': attribute type 5 has an invalid length. [ 149.860130][ T8022] __nla_validate_parse: 1 callbacks suppressed [ 149.860141][ T8022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.608'. [ 149.935175][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 149.935184][ T40] audit: type=1326 audit(1768377793.627:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.949966][ T40] audit: type=1326 audit(1768377793.637:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.961463][ T40] audit: type=1326 audit(1768377793.637:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.967780][ T40] audit: type=1326 audit(1768377793.637:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.977628][ T40] audit: type=1326 audit(1768377793.637:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.984344][ T40] audit: type=1326 audit(1768377793.637:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 149.991276][ T40] audit: type=1326 audit(1768377793.637:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 149.998623][ T40] audit: type=1326 audit(1768377793.637:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.007693][ T40] audit: type=1326 audit(1768377793.637:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 150.017123][ T40] audit: type=1326 audit(1768377793.637:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.3.609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 150.222734][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 150.289555][ T8042] netlink: 392 bytes leftover after parsing attributes in process `syz.1.614'. [ 150.299955][ T8038] syz.3.612: vmalloc error: size 1379004416, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 150.306943][ T8038] CPU: 3 UID: 0 PID: 8038 Comm: syz.3.612 Not tainted syzkaller #0 PREEMPT(full) [ 150.306979][ T8038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.306992][ T8038] Call Trace: [ 150.306998][ T8038] [ 150.307005][ T8038] dump_stack_lvl+0x16c/0x1f0 [ 150.307037][ T8038] warn_alloc+0x248/0x3a0 [ 150.307060][ T8038] ? __pfx_warn_alloc+0x10/0x10 [ 150.307080][ T8038] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 150.307105][ T8038] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.307130][ T8038] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 150.307160][ T8038] ? kasan_save_stack+0x42/0x60 [ 150.307183][ T8038] ? kasan_save_stack+0x33/0x60 [ 150.307204][ T8038] ? kasan_save_track+0x14/0x30 [ 150.307228][ T8038] ? vb2_vmalloc_alloc+0x135/0x410 [ 150.307251][ T8038] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 150.307266][ T8038] ? __do_fast_syscall_32+0xe8/0x680 [ 150.307281][ T8038] ? do_fast_syscall_32+0x32/0x80 [ 150.307296][ T8038] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.307325][ T8038] ? vb2_vmalloc_alloc+0x135/0x410 [ 150.307352][ T8038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.307380][ T8038] ? vb2_vmalloc_alloc+0x135/0x410 [ 150.307402][ T8038] vmalloc_user_noprof+0x9e/0xe0 [ 150.307418][ T8038] ? vb2_vmalloc_alloc+0x135/0x410 [ 150.307439][ T8038] vb2_vmalloc_alloc+0x135/0x410 [ 150.307461][ T8038] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 150.307481][ T8038] __vb2_queue_alloc+0x8c9/0x1280 [ 150.307520][ T8038] vb2_core_create_bufs+0x559/0xab0 [ 150.307544][ T8038] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 150.307561][ T8038] ? __pfx___might_resched+0x10/0x10 [ 150.307590][ T8038] ? __mutex_lock+0x27b/0x1ca0 [ 150.307607][ T8038] ? __pfx_get_v4l2_format32+0x10/0x10 [ 150.307632][ T8038] vb2_create_bufs+0x5e8/0x840 [ 150.307655][ T8038] ? __pfx_vb2_create_bufs+0x10/0x10 [ 150.307673][ T8038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.307699][ T8038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.307729][ T8038] v4l_create_bufs+0x151/0x260 [ 150.307754][ T8038] __video_do_ioctl+0xb77/0xf00 [ 150.307783][ T8038] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.307810][ T8038] ? video_usercopy+0x139/0x13e0 [ 150.307840][ T8038] video_usercopy+0x47f/0x13e0 [ 150.307868][ T8038] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.307893][ T8038] ? __pfx_video_usercopy+0x10/0x10 [ 150.307929][ T8038] ? hook_file_ioctl_common+0x144/0x410 [ 150.307956][ T8038] v4l2_ioctl+0x1bd/0x250 [ 150.307978][ T8038] ? __ia32_compat_sys_openat+0xa1/0x210 [ 150.308001][ T8038] v4l2_compat_ioctl32+0x217/0x2e0 [ 150.308024][ T8038] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 150.308047][ T8038] __ia32_compat_sys_ioctl+0x242/0x370 [ 150.308072][ T8038] __do_fast_syscall_32+0xe8/0x680 [ 150.308091][ T8038] do_fast_syscall_32+0x32/0x80 [ 150.308109][ T8038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.308149][ T8038] RIP: 0023:0xf708d579 [ 150.308165][ T8038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.308181][ T8038] RSP: 002b:00000000f543b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 150.308198][ T8038] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0f8565c [ 150.308210][ T8038] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.308220][ T8038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.308230][ T8038] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 150.308240][ T8038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.308263][ T8038] [ 150.308934][ T8038] Mem-Info: [ 150.432195][ T8038] active_anon:5554 inactive_anon:13088 isolated_anon:0 [ 150.432195][ T8038] active_file:1300 inactive_file:10950 isolated_file:0 [ 150.432195][ T8038] unevictable:1768 dirty:242 writeback:0 [ 150.432195][ T8038] slab_reclaimable:5867 slab_unreclaimable:75823 [ 150.432195][ T8038] mapped:27112 shmem:12233 pagetables:1167 [ 150.432195][ T8038] sec_pagetables:316 bounce:0 [ 150.432195][ T8038] kernel_misc_reclaimable:0 [ 150.432195][ T8038] free:22532 free_pcp:12680 free_cma:0 [ 150.456092][ T8038] Node 0 active_anon:20kB inactive_anon:116kB active_file:4kB inactive_file:96kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9192kB pagetables:1668kB sec_pagetables:1172kB all_unreclaimable? yes Balloon:0kB [ 150.465812][ T8038] Node 1 active_anon:22096kB inactive_anon:52236kB active_file:5196kB inactive_file:43704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:108428kB dirty:956kB writeback:0kB shmem:45396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4088kB pagetables:3000kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB [ 150.475711][ T8038] Node 0 DMA free:2036kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:4kB free_cma:0kB [ 150.486170][ T8038] lowmem_reserve[]: 0 289 289 289 289 [ 150.487901][ T8038] Node 0 DMA32 free:16528kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:116kB active_file:4kB inactive_file:96kB unevictable:3536kB writepending:12kB zspages:0kB present:1032196kB managed:296808kB mlocked:0kB bounce:0kB free_pcp:11692kB local_pcp:2908kB free_cma:0kB [ 150.497826][ T8038] lowmem_reserve[]: 0 0 0 0 0 [ 150.499369][ T8038] Node 1 DMA32 free:71564kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22464kB inactive_anon:52236kB active_file:5196kB inactive_file:43704kB unevictable:3536kB writepending:956kB zspages:3176kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37328kB local_pcp:1088kB free_cma:0kB [ 150.510813][ T8038] lowmem_reserve[]: 0 0 0 0 0 [ 150.512363][ T8038] Node 0 DMA: 1*4kB (U) 4*8kB (UM) 7*16kB (UM) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2036kB [ 150.516871][ T8038] Node 0 DMA32: 16*4kB (UME) 22*8kB (UME) 16*16kB (UME) 167*32kB (UME) 61*64kB (UME) 31*128kB (UME) 7*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 16528kB [ 150.522311][ T8038] Node 1 DMA32: 116*4kB (UE) 512*8kB (UME) 314*16kB (UME) 116*32kB (UME) 55*64kB (UME) 122*128kB (UME) 31*256kB (UME) 17*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 0*4096kB = 71600kB [ 150.527978][ T8038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.531134][ T8038] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.534033][ T8038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.537011][ T8038] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.539945][ T8038] 25289 total pagecache pages [ 150.541741][ T8038] 709 pages in swap cache [ 150.543151][ T8038] Free swap = 112564kB [ 150.544465][ T8038] Total swap = 124996kB [ 150.545828][ T8038] 524155 pages RAM [ 150.547053][ T8038] 0 pages HighMem/MovableOnly [ 150.548571][ T8038] 209060 pages reserved [ 150.549917][ T8038] 0 pages cma reserved [ 151.450283][ T54] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 151.629762][ T54] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.633929][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.637120][ T54] usb 8-1: Product: syz [ 151.641483][ T54] usb 8-1: Manufacturer: syz [ 151.644430][ T54] usb 8-1: SerialNumber: syz [ 151.661928][ T54] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.683916][ T54] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.888863][ T8053] random: crng reseeded on system resumption [ 151.893810][ T8053] netlink: 64 bytes leftover after parsing attributes in process `syz.3.618'. [ 152.664683][ T6675] usb 8-1: USB disconnect, device number 9 [ 152.710616][ T54] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 152.712792][ T54] ath9k_htc: Failed to initialize the device [ 152.720358][ T6675] usb 8-1: ath9k_htc: USB layer deinitialized [ 152.950415][ T980] usb 44-1: device descriptor read/8, error -110 [ 153.197988][ T8090] kthread_run failed with err -4 [ 153.226081][ T8098] FAULT_INJECTION: forcing a failure. [ 153.226081][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 153.230529][ T8098] CPU: 2 UID: 0 PID: 8098 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT(full) [ 153.230543][ T8098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.230550][ T8098] Call Trace: [ 153.230554][ T8098] [ 153.230558][ T8098] dump_stack_lvl+0x16c/0x1f0 [ 153.230578][ T8098] should_fail_ex+0x512/0x640 [ 153.230590][ T8098] ? kmem_cache_alloc_noprof+0x62/0x770 [ 153.230605][ T8098] should_failslab+0xc2/0x120 [ 153.230621][ T8098] kmem_cache_alloc_noprof+0x83/0x770 [ 153.230633][ T8098] ? alloc_empty_file+0x55/0x1e0 [ 153.230646][ T8098] ? alloc_empty_file+0x55/0x1e0 [ 153.230656][ T8098] alloc_empty_file+0x55/0x1e0 [ 153.230668][ T8098] alloc_file_pseudo+0x13a/0x230 [ 153.230679][ T8098] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 153.230694][ T8098] __shmem_file_setup+0x1a8/0x350 [ 153.230712][ T8098] drm_gem_object_init_with_mnt+0xbb/0xe0 [ 153.230743][ T8098] __drm_gem_shmem_create+0x114/0x410 [ 153.230758][ T8098] drm_gem_shmem_dumb_create+0x80/0x150 [ 153.230773][ T8098] drm_mode_create_dumb+0x272/0x300 [ 153.230787][ T8098] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 153.230800][ T8098] drm_ioctl_kernel+0x1f4/0x3e0 [ 153.230810][ T8098] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 153.230823][ T8098] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 153.230838][ T8098] drm_ioctl+0x5c9/0xc30 [ 153.230850][ T8098] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 153.230875][ T8098] ? __pfx_drm_ioctl+0x10/0x10 [ 153.230895][ T8098] drm_compat_ioctl+0x327/0x460 [ 153.230910][ T8098] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 153.230924][ T8098] __ia32_compat_sys_ioctl+0x242/0x370 [ 153.230938][ T8098] __do_fast_syscall_32+0xe8/0x680 [ 153.230950][ T8098] do_fast_syscall_32+0x32/0x80 [ 153.230960][ T8098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.230973][ T8098] RIP: 0023:0xf708d579 [ 153.230982][ T8098] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.230991][ T8098] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 153.231001][ T8098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b2 [ 153.231007][ T8098] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.231013][ T8098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.231019][ T8098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.231024][ T8098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.231037][ T8098] [ 153.340706][ T980] usb usb44-port1: attempt power cycle [ 153.364871][ T8102] Cannot find del_set index 3 as target [ 153.459687][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 153.901128][ T980] usb usb44-port1: unable to enumerate USB device [ 154.188798][ T8134] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.652'. [ 154.675609][ T8157] debugfs: '1ùà^!‚lü1Ü*ø$wOcÚÉ”ÎÜr$åG—•µÕh÷ƒÍÊ;{' already exists in 'ieee80211' [ 154.898077][ T8159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 154.900201][ T8159] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.903004][ T8159] vhci_hcd vhci_hcd.0: Device attached [ 154.908029][ T8165] vhci_hcd: connection closed [ 154.908515][ T41] vhci_hcd vhci_hcd.0: stop threads [ 154.914023][ T41] vhci_hcd vhci_hcd.0: release socket [ 154.915952][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 155.991141][ T8187] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 156.126620][ T8189] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 156.129164][ T8189] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.132562][ T8189] vhci_hcd vhci_hcd.0: Device attached [ 156.136329][ T8191] vhci_hcd: connection closed [ 156.137070][ T12] vhci_hcd vhci_hcd.0: stop threads [ 156.150840][ T12] vhci_hcd vhci_hcd.0: release socket [ 156.152894][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 156.929858][ T8235] netlink: 392 bytes leftover after parsing attributes in process `syz.1.672'. [ 156.952871][ T8233] debugfs: '1ùà^!‚lü1Ü*ø$wOcÚÉ”ÎÜr$åG—•µÕh÷ƒÍÊ;{' already exists in 'ieee80211' [ 157.241055][ T8243] mkiss: ax0: crc mode is auto. [ 159.161485][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 159.164844][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 159.552156][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'. [ 159.599932][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 159.690893][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 161.173344][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 161.264118][ T8322] netlink: 'syz.3.694': attribute type 12 has an invalid length. [ 161.346988][ T8325] fuse: Bad value for 'rootmode' [ 161.660177][ T6675] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.833198][ T6675] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.836142][ T6675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.838672][ T6675] usb 6-1: Product: syz [ 161.840017][ T6675] usb 6-1: Manufacturer: syz [ 161.841786][ T6675] usb 6-1: SerialNumber: syz [ 161.856951][ T8340] mkiss: ax0: crc mode is auto. [ 161.874795][ T6675] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.897164][ T6675] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.128198][ T8329] random: crng reseeded on system resumption [ 162.137606][ T8329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.697'. [ 162.397969][ T6053] usb 6-1: USB disconnect, device number 7 [ 162.964833][ T8366] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.704'. [ 163.566730][ T8393] FAULT_INJECTION: forcing a failure. [ 163.566730][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 163.570909][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 163.570923][ T8393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.570929][ T8393] Call Trace: [ 163.570934][ T8393] [ 163.570938][ T8393] dump_stack_lvl+0x16c/0x1f0 [ 163.570959][ T8393] should_fail_ex+0x512/0x640 [ 163.570972][ T8393] ? fs_reclaim_acquire+0xae/0x150 [ 163.570989][ T8393] should_failslab+0xc2/0x120 [ 163.571005][ T8393] __kmalloc_noprof+0xeb/0x910 [ 163.571017][ T8393] ? tomoyo_encode2+0x100/0x3e0 [ 163.571033][ T8393] ? tomoyo_encode2+0x100/0x3e0 [ 163.571046][ T8393] tomoyo_encode2+0x100/0x3e0 [ 163.571061][ T8393] tomoyo_encode+0x29/0x50 [ 163.571074][ T8393] tomoyo_realpath_from_path+0x18f/0x6e0 [ 163.571092][ T8393] tomoyo_path_number_perm+0x245/0x580 [ 163.571104][ T8393] ? tomoyo_path_number_perm+0x237/0x580 [ 163.571117][ T8393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.571141][ T8393] ? find_held_lock+0x2b/0x80 [ 163.571155][ T8393] ? hook_file_ioctl_common+0x144/0x410 [ 163.571170][ T8393] ? __fget_files+0x20e/0x3c0 [ 163.571184][ T8393] ? __fput_deferred+0x480/0x480 [ 163.571197][ T8393] security_file_ioctl_compat+0x9b/0x240 [ 163.571211][ T8393] __ia32_compat_sys_ioctl+0xc3/0x370 [ 163.571226][ T8393] __do_fast_syscall_32+0xe8/0x680 [ 163.571238][ T8393] do_fast_syscall_32+0x32/0x80 [ 163.571248][ T8393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.571262][ T8393] RIP: 0023:0xf70ed579 [ 163.571270][ T8393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.571280][ T8393] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 163.571289][ T8393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 163.571295][ T8393] RDX: 0000000080113800 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.571301][ T8393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.571306][ T8393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.571312][ T8393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.571325][ T8393] [ 163.571405][ T8393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.645950][ T6675] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 163.648173][ T6675] ath9k_htc: Failed to initialize the device [ 163.686227][ T6053] usb 6-1: ath9k_htc: USB layer deinitialized [ 164.395373][ T8407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 164.397903][ T8407] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.401337][ T8407] vhci_hcd vhci_hcd.0: Device attached [ 164.404321][ T8410] vhci_hcd: connection closed [ 164.404483][ T41] vhci_hcd vhci_hcd.1: stop threads [ 164.407643][ T41] vhci_hcd vhci_hcd.1: release socket [ 164.409200][ T41] vhci_hcd vhci_hcd.1: disconnect device [ 164.670412][ T8423] netem: incorrect gi model size [ 164.672548][ T8423] netem: change failed [ 164.767910][ T8427] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 164.941660][ T8439] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.057313][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.060234][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.079604][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.083504][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.125702][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.130015][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 165.220922][ T8462] netlink: 96 bytes leftover after parsing attributes in process `syz.1.734'. [ 165.379313][ T8465] mkiss: ax0: crc mode is auto. [ 167.324059][ T8479] netlink: 'syz.3.737': attribute type 10 has an invalid length. [ 167.327846][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.330902][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.334647][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.337504][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.556863][ T8495] mkiss: ax0: crc mode is auto. [ 168.811273][ T8510] handle_userfault: 63 callbacks suppressed [ 168.811284][ T8510] FAULT_FLAG_ALLOW_RETRY missing 801 [ 168.811356][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.3.744 Not tainted syzkaller #0 PREEMPT(full) [ 168.811368][ T8510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.811374][ T8510] Call Trace: [ 168.811378][ T8510] [ 168.811381][ T8510] dump_stack_lvl+0x16c/0x1f0 [ 168.811401][ T8510] handle_userfault+0x1433/0x24b0 [ 168.811417][ T8510] ? do_raw_spin_unlock+0x172/0x230 [ 168.811431][ T8510] ? _raw_spin_unlock+0x28/0x50 [ 168.811445][ T8510] ? __free_frozen_pages+0x817/0x1170 [ 168.811456][ T8510] ? __pfx_handle_userfault+0x10/0x10 [ 168.811476][ T8510] ? rcu_read_unlock+0x2d/0xb0 [ 168.811490][ T8510] do_anonymous_page+0x174e/0x2190 [ 168.811505][ T8510] __handle_mm_fault+0x1ecf/0x2bb0 [ 168.811519][ T8510] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.811530][ T8510] ? __pte_offset_map_lock+0x174/0x310 [ 168.811544][ T8510] ? find_held_lock+0x2b/0x80 [ 168.811561][ T8510] ? follow_page_pte+0x5cf/0x1390 [ 168.811578][ T8510] handle_mm_fault+0x3fe/0xad0 [ 168.811591][ T8510] __get_user_pages+0x54e/0x3590 [ 168.811611][ T8510] ? __pfx___get_user_pages+0x10/0x10 [ 168.811630][ T8510] populate_vma_page_range+0x267/0x3f0 [ 168.811646][ T8510] ? __pfx_populate_vma_page_range+0x10/0x10 [ 168.811663][ T8510] ? vma_set_page_prot+0xb1/0x120 [ 168.811678][ T8510] mprotect_fixup+0x8c3/0xb80 [ 168.811690][ T8510] ? __pfx_mprotect_fixup+0x10/0x10 [ 168.811706][ T8510] do_mprotect_pkey+0x9bc/0xd40 [ 168.811720][ T8510] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 168.811735][ T8510] ? find_held_lock+0x2b/0x80 [ 168.811757][ T8510] __ia32_sys_mprotect+0x75/0xb0 [ 168.811766][ T8510] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.811781][ T8510] __do_fast_syscall_32+0xe8/0x680 [ 168.811792][ T8510] do_fast_syscall_32+0x32/0x80 [ 168.811802][ T8510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.811814][ T8510] RIP: 0023:0xf708d579 [ 168.811822][ T8510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 168.811832][ T8510] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 000000000000007d [ 168.811841][ T8510] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 168.811848][ T8510] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 168.811853][ T8510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.811859][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.811864][ T8510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.811877][ T8510] [ 168.859636][ T8512] netlink: 'syz.3.745': attribute type 12 has an invalid length. [ 169.100160][ T6013] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 169.271584][ T6013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.274973][ T6013] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.280313][ T6013] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.283310][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.285744][ T6013] usb 6-1: Product: syz [ 169.287094][ T6013] usb 6-1: Manufacturer: syz [ 169.288543][ T6013] usb 6-1: SerialNumber: syz [ 169.296315][ T6013] cdc_mbim 6-1:1.0: skipping garbage [ 169.502776][ T8507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.558808][ T8518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 170.108168][ T8507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.115694][ T6013] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 170.122775][ T6013] wwan wwan0: port wwan0mbim0 attached [ 170.130969][ T6013] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, aa:a3:8e:c2:56:27 [ 170.315814][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.318014][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.320471][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.322650][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.324773][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.327145][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.329252][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.331923][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.334594][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.336967][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.339536][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.341996][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.344489][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.346674][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.349145][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.351251][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.353832][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.356212][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.359125][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 170.361966][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 170.445806][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 170.449651][ T6675] usb 6-1: USB disconnect, device number 8 [ 170.452751][ T6675] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 170.453586][ T8531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 170.457667][ T8531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.471274][ T8531] vhci_hcd vhci_hcd.0: Device attached [ 170.552458][ T6675] wwan wwan0: port wwan0mbim0 disconnected [ 170.617988][ T8532] vhci_hcd: connection closed [ 170.619161][ T3905] vhci_hcd vhci_hcd.3: stop threads [ 170.622654][ T3905] vhci_hcd vhci_hcd.3: release socket [ 170.624578][ T3905] vhci_hcd vhci_hcd.3: disconnect device [ 170.661099][ T6013] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 171.025811][ T8541] ip6t_srh: unknown srh invflags 7160 [ 173.239728][ T8556] FAULT_FLAG_ALLOW_RETRY missing 801 [ 173.241671][ T8556] CPU: 3 UID: 0 PID: 8556 Comm: syz.0.754 Not tainted syzkaller #0 PREEMPT(full) [ 173.241685][ T8556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.241691][ T8556] Call Trace: [ 173.241695][ T8556] [ 173.241699][ T8556] dump_stack_lvl+0x16c/0x1f0 [ 173.241718][ T8556] handle_userfault+0x1433/0x24b0 [ 173.241736][ T8556] ? do_raw_spin_unlock+0x172/0x230 [ 173.241750][ T8556] ? _raw_spin_unlock+0x28/0x50 [ 173.241764][ T8556] ? __free_frozen_pages+0x817/0x1170 [ 173.241774][ T8556] ? __pfx_handle_userfault+0x10/0x10 [ 173.241794][ T8556] ? rcu_read_unlock+0x2d/0xb0 [ 173.241809][ T8556] do_anonymous_page+0x174e/0x2190 [ 173.241825][ T8556] __handle_mm_fault+0x1ecf/0x2bb0 [ 173.241839][ T8556] ? __pfx___handle_mm_fault+0x10/0x10 [ 173.241851][ T8556] ? __pte_offset_map_lock+0x174/0x310 [ 173.241876][ T8556] ? find_held_lock+0x2b/0x80 [ 173.241894][ T8556] ? follow_page_pte+0x5cf/0x1390 [ 173.241912][ T8556] handle_mm_fault+0x3fe/0xad0 [ 173.241924][ T8556] __get_user_pages+0x54e/0x3590 [ 173.241944][ T8556] ? __pfx___get_user_pages+0x10/0x10 [ 173.241965][ T8556] populate_vma_page_range+0x267/0x3f0 [ 173.241982][ T8556] ? __pfx_populate_vma_page_range+0x10/0x10 [ 173.242000][ T8556] ? vma_set_page_prot+0xb1/0x120 [ 173.242033][ T8556] mprotect_fixup+0x8c3/0xb80 [ 173.242049][ T8556] ? __pfx_mprotect_fixup+0x10/0x10 [ 173.242066][ T8556] do_mprotect_pkey+0x9bc/0xd40 [ 173.242081][ T8556] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 173.242097][ T8556] ? find_held_lock+0x2b/0x80 [ 173.242119][ T8556] __ia32_sys_mprotect+0x75/0xb0 [ 173.242130][ T8556] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.242147][ T8556] __do_fast_syscall_32+0xe8/0x680 [ 173.242158][ T8556] do_fast_syscall_32+0x32/0x80 [ 173.242169][ T8556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.242181][ T8556] RIP: 0023:0xf7ff6579 [ 173.242190][ T8556] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.242199][ T8556] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 000000000000007d [ 173.242209][ T8556] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 173.242216][ T8556] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 173.242221][ T8556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.242226][ T8556] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 173.242232][ T8556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.242249][ T8556] [ 173.603135][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 173.606224][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 173.634077][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 173.637687][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 174.176112][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 174.178965][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 174.520265][ T6675] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.586824][ T8591] 9pnet_fd: Insufficient options for proto=fd [ 174.750158][ T6675] usb 5-1: Using ep0 maxpacket: 8 [ 176.233889][ T6675] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.236669][ T6675] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.239852][ T6675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.243186][ T6675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.246514][ T6675] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.250829][ T6675] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.253805][ T6675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.457811][ T8605] FAULT_FLAG_ALLOW_RETRY missing 801 [ 176.459623][ T8605] CPU: 3 UID: 0 PID: 8605 Comm: syz.1.765 Not tainted syzkaller #0 PREEMPT(full) [ 176.459636][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.459642][ T8605] Call Trace: [ 176.459646][ T8605] [ 176.459650][ T8605] dump_stack_lvl+0x16c/0x1f0 [ 176.459670][ T8605] handle_userfault+0x1433/0x24b0 [ 176.459689][ T8605] ? do_raw_spin_unlock+0x172/0x230 [ 176.459702][ T8605] ? _raw_spin_unlock+0x28/0x50 [ 176.459715][ T8605] ? __free_frozen_pages+0x817/0x1170 [ 176.459726][ T8605] ? __pfx_handle_userfault+0x10/0x10 [ 176.459760][ T8605] ? rcu_read_unlock+0x2d/0xb0 [ 176.459773][ T8605] do_anonymous_page+0x174e/0x2190 [ 176.459789][ T8605] __handle_mm_fault+0x1ecf/0x2bb0 [ 176.459803][ T8605] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.459814][ T8605] ? __pte_offset_map_lock+0x174/0x310 [ 176.459828][ T8605] ? find_held_lock+0x2b/0x80 [ 176.459845][ T8605] ? follow_page_pte+0x5cf/0x1390 [ 176.459862][ T8605] handle_mm_fault+0x3fe/0xad0 [ 176.459875][ T8605] __get_user_pages+0x54e/0x3590 [ 176.459895][ T8605] ? __pfx___get_user_pages+0x10/0x10 [ 176.459912][ T8605] populate_vma_page_range+0x267/0x3f0 [ 176.459929][ T8605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 176.459946][ T8605] ? vma_set_page_prot+0xb1/0x120 [ 176.459961][ T8605] mprotect_fixup+0x8c3/0xb80 [ 176.459974][ T8605] ? __pfx_mprotect_fixup+0x10/0x10 [ 176.459990][ T8605] do_mprotect_pkey+0x9bc/0xd40 [ 176.460005][ T8605] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 176.460020][ T8605] ? find_held_lock+0x2b/0x80 [ 176.460042][ T8605] __ia32_sys_mprotect+0x75/0xb0 [ 176.460052][ T8605] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.460067][ T8605] __do_fast_syscall_32+0xe8/0x680 [ 176.460078][ T8605] do_fast_syscall_32+0x32/0x80 [ 176.460087][ T8605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.460100][ T8605] RIP: 0023:0xf70ed579 [ 176.460108][ T8605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.460118][ T8605] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 000000000000007d [ 176.460128][ T8605] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 176.460134][ T8605] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 176.460139][ T8605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.460145][ T8605] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 176.460150][ T8605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.460163][ T8605] [ 176.938701][ T6675] usb 5-1: usb_control_msg returned -71 [ 176.943049][ T6675] usbtmc 5-1:16.0: can't read capabilities [ 176.948732][ T6675] usb 5-1: USB disconnect, device number 5 [ 177.329005][ T8621] netlink: 'syz.0.772': attribute type 12 has an invalid length. [ 178.086076][ T8642] mkiss: ax0: crc mode is auto. [ 179.795342][ T8663] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.798297][ T8663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.800801][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 179.803120][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 180.800166][ T6053] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 180.950157][ T6053] usb 7-1: Using ep0 maxpacket: 8 [ 180.953559][ T6053] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 180.956980][ T6053] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.961133][ T6053] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.964752][ T6053] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.968730][ T6053] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.973885][ T6053] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.977235][ T6053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.518995][ T8667] netlink: 'syz.3.783': attribute type 4 has an invalid length. [ 181.527774][ T6053] usb 7-1: GET_CAPABILITIES returned 0 [ 181.566470][ T6053] usbtmc 7-1:16.0: can't read capabilities [ 181.643154][ T8677] FAULT_INJECTION: forcing a failure. [ 181.643154][ T8677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.647374][ T8677] CPU: 3 UID: 0 PID: 8677 Comm: syz.3.793 Not tainted syzkaller #0 PREEMPT(full) [ 181.647388][ T8677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.647395][ T8677] Call Trace: [ 181.647399][ T8677] [ 181.647403][ T8677] dump_stack_lvl+0x16c/0x1f0 [ 181.647423][ T8677] should_fail_ex+0x512/0x640 [ 181.647437][ T8677] _copy_from_user+0x2e/0xd0 [ 181.647450][ T8677] get_compat_insn+0x97/0x230 [ 181.647467][ T8677] ? __pfx_get_compat_insn+0x10/0x10 [ 181.647483][ T8677] ? comedi_compat_ioctl+0x3ec/0xda0 [ 181.647495][ T8677] comedi_compat_ioctl+0x45c/0xda0 [ 181.647506][ T8677] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 181.647517][ T8677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.647534][ T8677] ? do_vfs_ioctl+0x128/0x14f0 [ 181.647547][ T8677] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.647562][ T8677] ? find_held_lock+0x2b/0x80 [ 181.647576][ T8677] ? hook_file_ioctl_common+0x144/0x410 [ 181.647591][ T8677] ? __fget_files+0x20e/0x3c0 [ 181.647605][ T8677] ? __fput_deferred+0x480/0x480 [ 181.647618][ T8677] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 181.647629][ T8677] __ia32_compat_sys_ioctl+0x242/0x370 [ 181.647643][ T8677] __do_fast_syscall_32+0xe8/0x680 [ 181.647654][ T8677] do_fast_syscall_32+0x32/0x80 [ 181.647664][ T8677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.647678][ T8677] RIP: 0023:0xf708d579 [ 181.647686][ T8677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.647697][ T8677] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 181.647706][ T8677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 181.647713][ T8677] RDX: 0000000080113800 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.647718][ T8677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.647724][ T8677] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.647730][ T8677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.647742][ T8677] [ 181.672997][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 181.897770][ T6000] usb 7-1: USB disconnect, device number 7 [ 181.898481][ T8665] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 182.198397][ T8695] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.791'. [ 182.568569][ T8701] netlink: 14 bytes leftover after parsing attributes in process `syz.1.795'. [ 182.583418][ T8701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.586407][ T8701] bond_slave_0: left promiscuous mode [ 182.591107][ T8701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.594222][ T8701] bond_slave_1: left promiscuous mode [ 182.597016][ T8701] bond0 (unregistering): Released all slaves [ 182.810960][ T8704] FAULT_INJECTION: forcing a failure. [ 182.810960][ T8704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.816475][ T8704] CPU: 2 UID: 0 PID: 8704 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT(full) [ 182.816497][ T8704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.816508][ T8704] Call Trace: [ 182.816514][ T8704] [ 182.816522][ T8704] dump_stack_lvl+0x16c/0x1f0 [ 182.816551][ T8704] should_fail_ex+0x512/0x640 [ 182.816572][ T8704] _copy_from_user+0x2e/0xd0 [ 182.816594][ T8704] get_compat_msghdr+0xa7/0x170 [ 182.816617][ T8704] ? __pfx_get_compat_msghdr+0x10/0x10 [ 182.816641][ T8704] ? __lock_acquire+0x436/0x2890 [ 182.816662][ T8704] ___sys_recvmsg+0x191/0x1a0 [ 182.816685][ T8704] ? __pfx____sys_recvmsg+0x10/0x10 [ 182.816711][ T8704] ? find_held_lock+0x2b/0x80 [ 182.816741][ T8704] ? __pfx___might_resched+0x10/0x10 [ 182.816769][ T8704] do_recvmmsg+0x55d/0x750 [ 182.816795][ T8704] ? __pfx_do_recvmmsg+0x10/0x10 [ 182.816833][ T8704] ? __fget_files+0x20e/0x3c0 [ 182.816861][ T8704] __sys_recvmmsg+0x21c/0x280 [ 182.816884][ T8704] ? __pfx___sys_recvmmsg+0x10/0x10 [ 182.816909][ T8704] ? __pfx_ksys_write+0x10/0x10 [ 182.816935][ T8704] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 182.816965][ T8704] ? __do_fast_syscall_32+0x9a/0x680 [ 182.816983][ T8704] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.817009][ T8704] __do_fast_syscall_32+0xe8/0x680 [ 182.817027][ T8704] do_fast_syscall_32+0x32/0x80 [ 182.817045][ T8704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.817066][ T8704] RIP: 0023:0xf7ff6579 [ 182.817081][ T8704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.817096][ T8704] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 182.817113][ T8704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 182.817123][ T8704] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 182.817133][ T8704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.817144][ T8704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.817153][ T8704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.817176][ T8704] [ 184.275182][ T8716] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 184.351289][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 184.357845][ T8726] netlink: 'syz.2.803': attribute type 5 has an invalid length. [ 184.436475][ T8728] netlink: 14 bytes leftover after parsing attributes in process `syz.2.806'. [ 184.495336][ T8738] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 184.655638][ T8746] Bluetooth: MGMT ver 1.23 [ 185.360325][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 185.368019][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 185.572478][ T8758] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 185.574671][ T8758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.577363][ T8758] vhci_hcd vhci_hcd.0: Device attached [ 185.585802][ T8767] vhci_hcd: connection closed [ 185.586040][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 185.589969][ T1141] vhci_hcd vhci_hcd.2: release socket [ 185.593722][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 185.686810][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 185.714697][ T8769] bridge0: port 3(syz_tun) entered blocking state [ 185.716813][ T8769] bridge0: port 3(syz_tun) entered forwarding state [ 185.719948][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.722327][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.724694][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.726972][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.020826][ T8769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.700171][ T6000] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.784691][ T40] audit: type=1326 audit(1768377830.477:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.1.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 186.791635][ T40] audit: type=1326 audit(1768377830.477:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.1.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 186.799547][ T40] audit: type=1326 audit(1768377830.477:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.1.830" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 186.807936][ T8795] netlink: 14 bytes leftover after parsing attributes in process `syz.2.829'. [ 186.808387][ T40] audit: type=1326 audit(1768377830.477:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.1.830" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 186.853711][ T6000] usb 5-1: config 0 has no interfaces? [ 186.858049][ T6000] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.862024][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.865271][ T6000] usb 5-1: Product: syz [ 186.866611][ T6000] usb 5-1: Manufacturer: syz [ 186.868044][ T6000] usb 5-1: SerialNumber: syz [ 186.870999][ T6000] usb 5-1: config 0 descriptor?? [ 187.077062][ T6000] usb 5-1: USB disconnect, device number 6 [ 187.279844][ T8813] mkiss: ax0: crc mode is auto. [ 187.633800][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.836'. [ 187.637462][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.836'. [ 187.640152][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 187.676567][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 187.769465][ T8830] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 187.770318][ T54] usb 7-1: device descriptor read/64, error -71 [ 187.797277][ T8830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.862921][ T8832] gretap1: entered promiscuous mode [ 187.867699][ T8832] bond1: (slave gretap1): making interface the new active one [ 187.871644][ T8832] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.020283][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 188.150446][ T54] usb 7-1: device descriptor read/64, error -71 [ 188.260538][ T54] usb usb7-port1: attempt power cycle [ 188.324664][ T8838] FAULT_INJECTION: forcing a failure. [ 188.324664][ T8838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.332920][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.3.841 Not tainted syzkaller #0 PREEMPT(full) [ 188.332935][ T8838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.332941][ T8838] Call Trace: [ 188.332945][ T8838] [ 188.332949][ T8838] dump_stack_lvl+0x16c/0x1f0 [ 188.332970][ T8838] should_fail_ex+0x512/0x640 [ 188.332984][ T8838] _copy_from_user+0x2e/0xd0 [ 188.332997][ T8838] kstrtouint_from_user+0xd6/0x1d0 [ 188.333011][ T8838] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 188.333025][ T8838] ? __lock_acquire+0x436/0x2890 [ 188.333041][ T8838] proc_fail_nth_write+0x83/0x220 [ 188.333052][ T8838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.333065][ T8838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.333074][ T8838] vfs_write+0x2a0/0x11d0 [ 188.333091][ T8838] ? __pfx___mutex_lock+0x10/0x10 [ 188.333102][ T8838] ? __pfx_vfs_write+0x10/0x10 [ 188.333115][ T8838] ? find_held_lock+0x2b/0x80 [ 188.333133][ T8838] ? __fget_files+0x20e/0x3c0 [ 188.333152][ T8838] ksys_write+0x12a/0x250 [ 188.333166][ T8838] ? __pfx_ksys_write+0x10/0x10 [ 188.333180][ T8838] ? fput+0x70/0xf0 [ 188.333192][ T8838] __do_fast_syscall_32+0xe8/0x680 [ 188.333204][ T8838] do_fast_syscall_32+0x32/0x80 [ 188.333214][ T8838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.333227][ T8838] RIP: 0023:0xf708d579 [ 188.333235][ T8838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.333245][ T8838] RSP: 002b:00000000f547d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 188.333255][ T8838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f547d620 [ 188.333261][ T8838] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 188.333267][ T8838] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 188.333272][ T8838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.333278][ T8838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.333290][ T8838] [ 188.610218][ T54] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 188.650973][ T54] usb 7-1: device descriptor read/8, error -71 [ 188.890176][ T54] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 188.910898][ T54] usb 7-1: device descriptor read/8, error -71 [ 188.916528][ T8846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 188.918639][ T8846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.922293][ T8846] vhci_hcd vhci_hcd.0: Device attached [ 189.020400][ T54] usb usb7-port1: unable to enumerate USB device [ 189.190676][ T9] usb 44-1: SetAddress Request (6) to port 0 [ 189.192710][ T9] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 189.300225][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.441692][ T8847] vhci_hcd: connection reset by peer [ 189.444458][ T6082] vhci_hcd vhci_hcd.3: stop threads [ 189.446610][ T6082] vhci_hcd vhci_hcd.3: release socket [ 189.448909][ T6082] vhci_hcd vhci_hcd.3: disconnect device [ 189.460179][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 189.463118][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.466304][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 189.468961][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.472616][ T34] usb 5-1: config 0 descriptor?? [ 189.480403][ T34] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 189.728814][ T5333] bcm5974 5-1:0.0: could not read from device [ 189.732963][ T5333] bcm5974 5-1:0.0: could not read from device [ 189.734583][ T34] usb 5-1: USB disconnect, device number 7 [ 190.277275][ T8854] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 190.361238][ T8861] 9pnet_fd: Insufficient options for proto=fd [ 190.690808][ T6053] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.860154][ T6053] usb 6-1: Using ep0 maxpacket: 8 [ 190.864924][ T6053] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.868400][ T6053] usb 6-1: config 0 has no interface number 0 [ 190.871003][ T6053] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.875304][ T6053] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.879905][ T6053] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.884375][ T6053] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.891124][ T6053] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.894777][ T6053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.946122][ T6053] usb 6-1: config 0 descriptor?? [ 190.954838][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 190.954845][ T5959] Bluetooth: hci2: command 0x0406 tx timeout [ 190.963764][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 191.009649][ T6053] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.183176][ T8867] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 192.413281][ T8888] FAULT_INJECTION: forcing a failure. [ 192.413281][ T8888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.417448][ T8888] CPU: 3 UID: 0 PID: 8888 Comm: syz.3.856 Not tainted syzkaller #0 PREEMPT(full) [ 192.417462][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.417468][ T8888] Call Trace: [ 192.417471][ T8888] [ 192.417475][ T8888] dump_stack_lvl+0x16c/0x1f0 [ 192.417495][ T8888] should_fail_ex+0x512/0x640 [ 192.417510][ T8888] _copy_from_user+0x2e/0xd0 [ 192.417535][ T8888] get_compat_msghdr+0xa7/0x170 [ 192.417550][ T8888] ? __pfx_get_compat_msghdr+0x10/0x10 [ 192.417565][ T8888] ? __lock_acquire+0x436/0x2890 [ 192.417578][ T8888] ___sys_recvmsg+0x191/0x1a0 [ 192.417592][ T8888] ? __pfx____sys_recvmsg+0x10/0x10 [ 192.417607][ T8888] ? find_held_lock+0x2b/0x80 [ 192.417625][ T8888] ? __pfx___might_resched+0x10/0x10 [ 192.417642][ T8888] do_recvmmsg+0x55d/0x750 [ 192.417657][ T8888] ? __pfx_do_recvmmsg+0x10/0x10 [ 192.417680][ T8888] ? __fget_files+0x20e/0x3c0 [ 192.417696][ T8888] __sys_recvmmsg+0x21c/0x280 [ 192.417711][ T8888] ? __pfx___sys_recvmmsg+0x10/0x10 [ 192.417725][ T8888] ? __pfx_ksys_write+0x10/0x10 [ 192.417742][ T8888] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 192.417756][ T8888] ? __do_fast_syscall_32+0x9a/0x680 [ 192.417767][ T8888] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.417782][ T8888] __do_fast_syscall_32+0xe8/0x680 [ 192.417793][ T8888] do_fast_syscall_32+0x32/0x80 [ 192.417803][ T8888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.417816][ T8888] RIP: 0023:0xf708d579 [ 192.417825][ T8888] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.417835][ T8888] RSP: 002b:00000000f545c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 192.417862][ T8888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 192.417869][ T8888] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 192.417875][ T8888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.417880][ T8888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 192.417886][ T8888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.417899][ T8888] [ 192.660761][ T8885] mkiss: ax0: crc mode is auto. [ 194.230371][ T9] usb 44-1: device descriptor read/8, error -110 [ 194.326197][ T6034] usb 6-1: USB disconnect, device number 9 [ 194.349149][ T6034] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 194.540667][ T8899] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 194.544676][ T8909] netlink: 'syz.3.863': attribute type 10 has an invalid length. [ 194.632654][ T9] usb usb44-port1: attempt power cycle [ 195.140288][ T6053] libceph: connect (1)[c::]:6789 error -101 [ 195.142735][ T6053] libceph: mon0 (1)[c::]:6789 connect error [ 195.148910][ T6053] libceph: connect (1)[c::]:6789 error -101 [ 195.151356][ T6053] libceph: mon0 (1)[c::]:6789 connect error [ 195.160188][ T3239] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 195.183166][ T8932] ceph: No mds server is up or the cluster is laggy [ 195.191049][ T9] usb usb44-port1: unable to enumerate USB device [ 195.310585][ T3239] usb 8-1: Using ep0 maxpacket: 8 [ 195.314511][ T3239] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 195.317950][ T3239] usb 8-1: config 0 has no interface number 0 [ 195.320722][ T3239] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.325357][ T3239] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 195.330451][ T3239] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.335055][ T3239] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.340677][ T3239] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.344448][ T3239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.355417][ T3239] usb 8-1: config 0 descriptor?? [ 195.363523][ T3239] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 195.566083][ T8927] ldusb 8-1:0.55: Write buffer overflow, 1 bytes dropped [ 197.481900][ T8956] mkiss: ax0: crc mode is auto. [ 197.872526][ T8944] Process accounting resumed [ 199.113099][ T980] usb 8-1: USB disconnect, device number 10 [ 199.155366][ T980] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 199.604934][ T8984] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 199.607104][ T8984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.609709][ T8984] vhci_hcd vhci_hcd.0: Device attached [ 199.729304][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 199.748191][ T8984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.850151][ T34] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 200.117407][ T8985] vhci_hcd: connection reset by peer [ 200.120174][ T3687] vhci_hcd vhci_hcd.3: stop threads [ 200.122249][ T3687] vhci_hcd vhci_hcd.3: release socket [ 200.124479][ T3687] vhci_hcd vhci_hcd.3: disconnect device [ 200.399982][ T9002] [ 200.401068][ T9002] ====================================================== [ 200.403894][ T9002] WARNING: possible circular locking dependency detected [ 200.406187][ T9002] syzkaller #0 Not tainted [ 200.408121][ T9002] ------------------------------------------------------ [ 200.410403][ T9002] syz.0.893/9002 is trying to acquire lock: [ 200.412202][ T9002] ffff888012a8cfa8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 200.414930][ T9002] [ 200.414930][ T9002] but task is already holding lock: [ 200.417273][ T9002] ffff8880266fd068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 200.419939][ T9002] [ 200.419939][ T9002] which lock already depends on the new lock. [ 200.419939][ T9002] [ 200.423448][ T9002] [ 200.423448][ T9002] the existing dependency chain (in reverse order) is: [ 200.426334][ T9002] [ 200.426334][ T9002] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 200.428705][ T9002] __mutex_lock+0x1aa/0x1ca0 [ 200.430385][ T9002] anon_pipe_write+0x15d/0x1bd0 [ 200.432139][ T9002] __kernel_write_iter+0x720/0xb10 [ 200.433931][ T9002] __kernel_write+0xf5/0x140 [ 200.435568][ T9002] autofs_notify_daemon+0x4db/0xd60 [ 200.437411][ T9002] autofs_wait+0x10f3/0x1ac0 [ 200.439010][ T9002] autofs_mount_wait+0x132/0x3c0 [ 200.440764][ T9002] autofs_d_automount+0x4b2/0x960 [ 200.442592][ T9002] __traverse_mounts+0x1b9/0x830 [ 200.444471][ T9002] step_into_slowpath+0x772/0xf50 [ 200.446281][ T9002] path_lookupat+0x627/0xc40 [ 200.447929][ T9002] filename_lookup+0x224/0x5f0 [ 200.449644][ T9002] kern_path+0x35/0x50 [ 200.451172][ T9002] lookup_bdev+0xd8/0x280 [ 200.452742][ T9002] resume_store+0x1d6/0x490 [ 200.454390][ T9002] kobj_attr_store+0x58/0x80 [ 200.456406][ T9002] sysfs_kf_write+0xf2/0x150 [ 200.458383][ T9002] kernfs_fop_write_iter+0x3af/0x570 [ 200.460313][ T9002] vfs_write+0x7d3/0x11d0 [ 200.461917][ T9002] ksys_write+0x12a/0x250 [ 200.463514][ T9002] __do_fast_syscall_32+0xe8/0x680 [ 200.465423][ T9002] do_fast_syscall_32+0x32/0x80 [ 200.467124][ T9002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.469321][ T9002] [ 200.469321][ T9002] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 200.471826][ T9002] __mutex_lock+0x1aa/0x1ca0 [ 200.473578][ T9002] autofs_notify_daemon+0x4a6/0xd60 [ 200.475536][ T9002] autofs_wait+0x10f3/0x1ac0 [ 200.477216][ T9002] autofs_mount_wait+0x132/0x3c0 [ 200.479000][ T9002] autofs_d_automount+0x4b2/0x960 [ 200.480843][ T9002] __traverse_mounts+0x1b9/0x830 [ 200.482622][ T9002] step_into_slowpath+0x772/0xf50 [ 200.484404][ T9002] path_lookupat+0x627/0xc40 [ 200.486302][ T9002] filename_lookup+0x224/0x5f0 [ 200.488521][ T9002] kern_path+0x35/0x50 [ 200.490153][ T9002] lookup_bdev+0xd8/0x280 [ 200.491738][ T9002] resume_store+0x1d6/0x490 [ 200.493863][ T9002] kobj_attr_store+0x58/0x80 [ 200.496049][ T9002] sysfs_kf_write+0xf2/0x150 [ 200.498230][ T9002] kernfs_fop_write_iter+0x3af/0x570 [ 200.500696][ T9002] vfs_write+0x7d3/0x11d0 [ 200.502804][ T9002] ksys_write+0x12a/0x250 [ 200.504915][ T9002] __do_fast_syscall_32+0xe8/0x680 [ 200.506926][ T9002] do_fast_syscall_32+0x32/0x80 [ 200.508847][ T9002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.511052][ T9002] [ 200.511052][ T9002] -> #1 (&of->mutex){+.+.}-{4:4}: [ 200.513356][ T9002] __mutex_lock+0x1aa/0x1ca0 [ 200.515045][ T9002] kernfs_seq_start+0x4f/0x2a0 [ 200.516753][ T9002] seq_read_iter+0x2c1/0x12d0 [ 200.518526][ T9002] kernfs_fop_read_iter+0x46c/0x610 [ 200.520406][ T9002] copy_splice_read+0x618/0xc20 [ 200.522206][ T9002] do_splice_read+0x285/0x370 [ 200.523886][ T9002] splice_direct_to_actor+0x2a1/0xa30 [ 200.526264][ T9002] do_splice_direct+0x174/0x240 [ 200.528525][ T9002] do_sendfile+0xb06/0xe50 [ 200.530546][ T9002] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 200.532618][ T9002] __do_fast_syscall_32+0xe8/0x680 [ 200.534431][ T9002] do_fast_syscall_32+0x32/0x80 [ 200.536150][ T9002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.538341][ T9002] [ 200.538341][ T9002] -> #0 (&p->lock){+.+.}-{4:4}: [ 200.540575][ T9002] __lock_acquire+0x1669/0x2890 [ 200.542391][ T9002] lock_acquire+0x179/0x330 [ 200.544011][ T9002] __mutex_lock+0x1aa/0x1ca0 [ 200.545670][ T9002] seq_read_iter+0xe1/0x12d0 [ 200.547341][ T9002] kernfs_fop_read_iter+0x46c/0x610 [ 200.549188][ T9002] copy_splice_read+0x618/0xc20 [ 200.550932][ T9002] do_splice_read+0x285/0x370 [ 200.552634][ T9002] splice_file_to_pipe+0x109/0x120 [ 200.554642][ T9002] do_sendfile+0x400/0xe50 [ 200.556553][ T9002] __ia32_sys_sendfile64+0x1d7/0x220 [ 200.558596][ T9002] __do_fast_syscall_32+0xe8/0x680 [ 200.560404][ T9002] do_fast_syscall_32+0x32/0x80 [ 200.562180][ T9002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.564448][ T9002] [ 200.564448][ T9002] other info that might help us debug this: [ 200.564448][ T9002] [ 200.567659][ T9002] Chain exists of: [ 200.567659][ T9002] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 200.567659][ T9002] [ 200.571557][ T9002] Possible unsafe locking scenario: [ 200.571557][ T9002] [ 200.574001][ T9002] CPU0 CPU1 [ 200.575751][ T9002] ---- ---- [ 200.577461][ T9002] lock(&pipe->mutex); [ 200.578832][ T9002] lock(&sbi->pipe_mutex); [ 200.581060][ T9002] lock(&pipe->mutex); [ 200.583206][ T9002] lock(&p->lock); [ 200.584555][ T9002] [ 200.584555][ T9002] *** DEADLOCK *** [ 200.584555][ T9002] [ 200.587095][ T9002] 1 lock held by syz.0.893/9002: [ 200.588688][ T9002] #0: ffff8880266fd068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 200.591436][ T9002] [ 200.591436][ T9002] stack backtrace: [ 200.593303][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT(full) [ 200.593315][ T9002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.593322][ T9002] Call Trace: [ 200.593328][ T9002] [ 200.593332][ T9002] dump_stack_lvl+0x116/0x1f0 [ 200.593352][ T9002] print_circular_bug+0x275/0x340 [ 200.593369][ T9002] check_noncircular+0x146/0x160 [ 200.593387][ T9002] __lock_acquire+0x1669/0x2890 [ 200.593400][ T9002] lock_acquire+0x179/0x330 [ 200.593409][ T9002] ? seq_read_iter+0xe1/0x12d0 [ 200.593422][ T9002] ? __pfx___might_resched+0x10/0x10 [ 200.593437][ T9002] __mutex_lock+0x1aa/0x1ca0 [ 200.593447][ T9002] ? seq_read_iter+0xe1/0x12d0 [ 200.593459][ T9002] ? do_sendfile+0x400/0xe50 [ 200.593471][ T9002] ? __do_fast_syscall_32+0xe8/0x680 [ 200.593480][ T9002] ? do_fast_syscall_32+0x32/0x80 [ 200.593489][ T9002] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.593502][ T9002] ? seq_read_iter+0xe1/0x12d0 [ 200.593514][ T9002] ? __pfx___mutex_lock+0x10/0x10 [ 200.593526][ T9002] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 200.593539][ T9002] ? seq_read_iter+0xe1/0x12d0 [ 200.593551][ T9002] seq_read_iter+0xe1/0x12d0 [ 200.593563][ T9002] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 200.593577][ T9002] kernfs_fop_read_iter+0x46c/0x610 [ 200.593594][ T9002] copy_splice_read+0x618/0xc20 [ 200.593608][ T9002] ? __pfx_aa_file_perm+0x10/0x10 [ 200.593623][ T9002] ? __pfx_copy_splice_read+0x10/0x10 [ 200.593637][ T9002] ? futex_private_hash_put+0x160/0x1b0 [ 200.593649][ T9002] ? __pfx_copy_splice_read+0x10/0x10 [ 200.593662][ T9002] do_splice_read+0x285/0x370 [ 200.593676][ T9002] splice_file_to_pipe+0x109/0x120 [ 200.593691][ T9002] do_sendfile+0x400/0xe50 [ 200.593704][ T9002] ? __pfx_do_sendfile+0x10/0x10 [ 200.593718][ T9002] ? do_seccomp+0x333/0x2640 [ 200.593730][ T9002] ? __pfx___seccomp_filter+0x10/0x10 [ 200.593743][ T9002] __ia32_sys_sendfile64+0x1d7/0x220 [ 200.593752][ T9002] ? xfd_validate_state+0x61/0x180 [ 200.593761][ T9002] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 200.593799][ T9002] ? __secure_computing+0x21c/0x320 [ 200.593818][ T9002] __do_fast_syscall_32+0xe8/0x680 [ 200.593832][ T9002] do_fast_syscall_32+0x32/0x80 [ 200.593842][ T9002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.593855][ T9002] RIP: 0023:0xf7ff6579 [ 200.593864][ T9002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 200.593874][ T9002] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 200.593884][ T9002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000006 [ 200.593890][ T9002] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 200.593896][ T9002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.593902][ T9002] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 200.593907][ T9002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.593916][ T9002] [ 204.236229][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.238858][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.940232][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set