last executing test programs: 1m49.550419709s ago: executing program 3 (id=307): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(0x0, 0xb) 1m48.543350474s ago: executing program 3 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c02, 0x955d817884a8436e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x14, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x800, 0x130) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x6, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r3, r4, 0x0) poll(&(0x7f0000000200)=[{r1, 0x1210}], 0x1, 0x1ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3873, 0xffffffffffffffff, 0x200000) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000005000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2b14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2af4, 0x3, 0x0, 0x1, [{0x1384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x12f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "0e5a69cce0a36224bb2919f95e43e2e089008e0bda0409724994f294f83fe57f9463b52b046e3046232337056f182030b55b4292b03b0f3e02de3888ae63bdb48b7394c71c268ec1f011202ae2eaef15ce9e03fecfa87a1389bf01c9efdc527c0f24afd704642dea1dc734f1326885a340c0b7c1064f3f3b7c06fa2741acdb4a2a384105a4e9a4a25bec7c0f59694a4f89f8cbe89d"}, @NFTA_DATA_VALUE={0x3d, 0x1, "c6a58683e89509785464d901c2981bea47d5f0e0574fcfd304a7aff01574360b39f30373fe97dbb55433f0c6046e64e904e4efcaf882f6542d"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "eafd94339b166c614a18c578254922055c2da3ad7e3e5abcc1fb5272c7ee13692b1bce9eb00516450ef7e3bdd061cb026e981514bfabe46939890925329f22a8bf2788042b6e753515652a4e2a247a9af302f8846b9bcd7f596bdc4aa15c5bef545234f59030daa4525050aa5a015c87c9430993bf85748f666eb45800bef6df5258d6b693f7f0dd695b857fe5aa7bfdcfe5df00ffa804324b750233d6"}, @NFTA_DATA_VALUE={0x86, 0x1, "a8a4f373d12acafd40ab1ad872c8efebaa165e5c062a8e2337df918d57347e05fa7d4007b0a03d33c2119fe8aa9627a8e031f6be3ea1795d9381cfb2de56f4e85d6af9d2b889a48512572b4111b6376dce7cf93c0de29eac835e4778adceb70bb4a67f8b46363db092a653669bc31d3f4fd49605ccbb9f3d5d4cc21cb5c8617f2152"}, @NFTA_DATA_VALUE={0x3d, 0x1, "85b2e0c86ca577a209e1a7e3d627e0c83aca0ca125a011d6d28465177b24cecc9dc7de5f5f9955f65229e9d67e404de7eae84c57eea7a9e59a"}, @NFTA_DATA_VALUE={0x53, 0x1, "6f04adfdf9a1b162dc446c15f72a305b8764a24e11843715a91b1714ef623db468a07d6c4b276a90210dc319069d2814fd6aa7549fa8f0e0a4630fe4b0c548aef3dc14a67eedfcd52b66f99b87160e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}]}}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa5}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x3f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "9375c0572423a6f0179e281b472c8cb6a73aa31a22ea71e47c4a5c2d899168964b219606c60c330b52b31c4a5664d8c6232be456c136f3c06725bd7f018c4a825b0622141857c66e517f1d4c29"}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "da9a3fa0150b4ff3944c7b384e1c025363278e22ee92abe96410fedd630a3124f994396f96d24030cbbb96d440d9665f6f533e0babff5c876c6e0ac13b677ba48800826bab90273ea358c1d4a37d8eb3732716c20212e87c1363f776709537b66acf58745137f2cf9e3951f2a97afb0281ac588fa77260966bf4f1f65a1d54312bce5f1882f69c6e057bebe4ffad91bda8bfd554f7c4fb8a0b697eba95"}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "ffe2876dde8d05d50f"}, @NFTA_SET_ELEM_USERDATA={0xa4, 0x6, 0x1, 0x0, "3459018955f451644176136dda836b1e9ee55633cfeeab17fcde7854acc93ed7803f679b7c5d286d6307c0d46312cf50c01a149c6ba94ca02562821edc7416bb2c0d9d5f89e2332e5982e6ea4ee3646793f291f41eaecdde78a2f6b8e5a1799fffae604545be3652b68e69ea3d4c74e511953c9183d17769c5675aa029a692331048351c7537d08efe7135edc411a24f8fe21505a38483f923791be345056dce"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x68, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz1\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz1\x00'}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '&\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '-'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xce54}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '-\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x20}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0xd4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "3024d874f5d0c9903b67fc446de55f6c0e31a7ec7609a13449ff8bbd43af77d0343e6bb279c6ae440f72d49be28fa818cb1287d2e9090914583db787b58e7a1472605cefdec6ccc26053916f68e2e02e073450f85947001bb8883421f842c7c118e1adca4b3c41fdbcfd17c89990edd89307f62d5119ddee13ae7b0bd431"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x43, 0x1, "ec292c869c59ed087e815616f9bd0744426558a75b5609aa611110f6ab21fe4bcfba7579033e8bf3bae5ae8514ee1688e249b43e1494dd788555bfd2ff8dba"}]}, @NFTA_SET_ELEM_USERDATA={0x90, 0x6, 0x1, 0x0, "5efa676a001782d6c2c5dcbf1e8fb3cfd8452a53deba7caff43869b9d1fcde5351fa6e3046a2dc836996df664c5852c3fb18dbcfb603b6a55776bd01d8de277558adb377b756e43bf2052a480d3cbae1c3d8f59d811ad4c835a9b4c4f163c86bb3b9b2081077e5c68c23b87c269e5045d74a31369dd259a6cdc81261e833e20cb3cbb87d1d66cea65580464d"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x118c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "037759513c2ef1d6068c5d0213e7991dac7e490d99058fc24e163a6644f21c3a6ea415364135104cbeb8e4903ba0564669cedce1785ab9ee5ce0705feb34090cefb0a96c725022b834dad4206766ca0588e1bb1fc6eb29827cadb04104e4881f6f5cf8e3fc6736c0db75b25d32f844985e8dd80f3dbe9589ca2366d1e56571d2c1c61ebb0439c8d3bac4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x51, 0x1, "07fe7da622a76ad28a1c2668e4c15ac967f9e6866a4dfeddc035fa3e54467813522ac4c2d11ff82d426789c31e04ee82b7203099f95189df77fa88f814ba2644a1bae22ba931a17dd26e7bbb2d"}]}]}]}]}, @NFT_MSG_DELRULE={0x740, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x72c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x52}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x95}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x3a8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x398, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x2a8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc4, 0x1, "9315b28bf3c14b983553048b2ecbf10818827bf4bc7563d3b69fb94030da7f1f430e03ff0b0a7d8ac74b2a0b8ca2cfbc5cd64c2397a2a526659ab899d384f585c4e41ee5496f0a3e7251738f470637ac447fa59cc8a97eb0b4a6f426cbb711af739f112c323a5678ddd55929bc2dd022ad98499e943e64df45782a175870b84d61488697bf2c858c06f5733cd655670d9793676ecf8aebc70ea4781a4fc2b7633140464d74be4d3d673f5ce45e40d1596ce7efd7623083bb29ef030a7bcd248d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xef, 0x1, "ece4b65a3e4a7c45f5696c607ed83c22532980c0bcb1121fbc209159320fa8f1dda0bbc277479b5b57a2b5306d2d96e5e6bc453c52a63306cfef1b3d87467fa5b172ce9be02fabf4722aa7e90e30250b54fc7dd9ce84d2139088b6bf47700815c8a3f01cc8455ca6662f5fc0bf3a73a388a42bd92da410798bd9a471573da47d8fa75cb713de2d39b089c7adef9e42e1a9c53116d616dbf4cb1b11b4e695694d60bfdb35bcdcd25a967027a3c9c93f0d87b8ca44148489832a6d88b5fd816c4156c214058fd9cbaaf6c767d1ea2997755034a5c55df9cdbebf7bc21c931acff3b62f7459bca5f064bd30fb"}, @NFTA_DATA_VALUE={0xc4, 0x1, "bed4f2fe8497cd413f8734f9cab14b0c1161b7e4a0b5f43743eb7746ab98b10d75e25b47c7d8d2e1e5be710c77e15632ae1ac70b78631304cbf8be3e73d67216d47e81b3744d8cb79a61f999c2fdbca90b869150fb6047eafdbca9eb0a7b152d12ecd5dfd73e4e020cbe2173fa4a94c52f93d16e8e18e8c51c7c770ae0a65c1a53d2bc0dd15dde215becd52493f0135cc9d505594ce81f7d8be4afeee105f0a79a33fe86d03b0385d32069521604dd9a4399b60b5bdbbf13b16481be2408bbc0"}]}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0xcc, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "8664f3955ca536ca6e0fa0678c157eab5b1545563beea12021c567f206cac1c93d83cb2b00865548b14df8da0e97aa61b6d7148fb445823632f1a8f16fa1893d0d9de40ea51cfa01d488b518f1af7fd4e4d6c18ffe1d1338eaba331fd10be8d90ab313f81d799ce979eeff8612e5f7637a4967b80c6e93cea4b31dc89fde7d06c526f2b5ab9607a7f667fae36c2a1f5c1c33b76e6d3cfab01d9dbd46ef508381add4095775af86b3d283fcd5164904a82d"}]}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xcc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x2b0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x29c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "d3f3f3cfc95095553905c31f231c33e4e0449d44b1c7ef7889b4bcf7fe7b54e704654be0"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "b3225d25e9577a56c9be5135e44fe2d0251d007722e2"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6f, 0x1, "23711f65454b3d34703c6b36c1a3332008c08cd0df0c0ff928f316290f1ccf8bbe88d7ceef8d1792f4b29f96396f1de3f6d5d399a8aabe7bb29d9b4b256f69604e2d389b9c9d5c5164f4c1b394ea8234b05ce933c6f36061495c6dd87d97367a6b7209a0373627284ae146"}, @NFTA_DATA_VALUE={0x70, 0x1, "0ca427d08cfd74c72e601b1f293a7a71c2cd3a2a076dc739d204d37a1bd588de6e51c79453d854df2460bd0411c03124ef290a339ec83dbe0e84a0305e78d6c2662e74627d4842ca8f7f5d24e17d5b4b5f3a4e6684f824d08761d504846f3b6ddb25975fb300dc61011b151a"}]}, @NFTA_IMMEDIATE_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "349106cc77e90aad9bb59b2b942f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3db}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x327c}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimensat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 1m47.141418032s ago: executing program 3 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syz_tun\x00', @local}) getrlimit(0xae0a5bf13daa2ed3, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) 1m46.035644935s ago: executing program 3 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='#easure uid>1', 0xd) 1m45.920989632s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x84, 0x41, &(0x7f0000000600)=ANY=[], 0x58) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='measure uid>1', 0xd) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x8008, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065fffffb7f00000809"], 0x38) r6 = syz_pidfd_open(r2, 0x0) process_mrelease(r6, 0x700000000000000) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x8, 0x103) 1m45.641343641s ago: executing program 3 (id=331): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="01", 0x1}, {&(0x7f0000000340)="05", 0x1}], 0x2, 0xfff7fc01, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc39, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x32ce970513f32900) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioperm(0xe, 0x9, 0x20) 1m30.504561941s ago: executing program 32 (id=331): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="01", 0x1}, {&(0x7f0000000340)="05", 0x1}], 0x2, 0xfff7fc01, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc39, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x32ce970513f32900) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioperm(0xe, 0x9, 0x20) 17.840799789s ago: executing program 1 (id=825): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x7}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x8, 0xfffffff7, 0x100, 0x8}) r1 = getpid() ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x2, 0xe, 0x2, 0x7, 0x219, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_sa2={0x2, 0x13, 0xb, 0x0, 0x0, 0x70bd27}, @sadb_lifetime={0x4, 0x2, 0x773, 0x4cc, 0x7, 0x2}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bbf, 0x5, {0x6, 0x33, 0x80, 0x6, 0x0, 0x1, 0x0, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "ae"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in=@empty, 0x1, 0x8, 0x10}]}, 0x10c8}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f00000013c0)={{r0, &(0x7f0000001280)='\x00', 0x509000, &(0x7f00000012c0)={@align=0x6, {0x4, 0x101, 0x1f8e, 0x15}}, 0x7, &(0x7f0000001300), &(0x7f0000001340)=0x400}, {[0x0, 0x3, 0x4, 0x7]}, 0x7, 0x2a, &(0x7f0000001380)=""/42}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000001400)={0x0, @reserved}) write$6lowpan_enable(r3, &(0x7f00000014c0)='1', 0x1) sendmsg$nl_generic(r3, &(0x7f0000002740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002700)={&(0x7f0000001540)={0x119c, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {0x4}, [@generic="3a649515e6aeef1d70092f5686f5ae421cce2b9ae4108c0134fb41a5db85fbe14668f9d7a645525085ff7617140d7c2c98d9071d24833620dc369bc659c94f87b10b092552951cb21c4ea488ea889791172c4a77f9c45b51fde23b11e4826c2df6ecf6eb7c5f3c0fe6d1979e4d6b0fe2bf03455bc0fd92", @nested={0x10, 0xf, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x113}]}, @nested={0x1014, 0x23, 0x0, 0x1, [@generic="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", @nested={0x4, 0x163}, @nested={0x4, 0x15c}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x6}]}, @generic="a4", @generic="7d6312370884f8e9a89cebe696e233bcac82cd5789b03304d718aa3957dd4d7891171348e8c6ee0d82a1379086c122", @nested={0xb9, 0x138, 0x0, 0x1, [@generic="8c8a8a3e1e1ed81b42eddf0b95f3ff47004eb4b73435d4c6212cd33962155f9fc5d19e9a8ed3cc506bcda86df659b1af2c5cde3c19b12c57593dd4a67044fac0ac7cb7be74edb5349cd3b4632edf6b17733c3f53238618c2e6ac0958", @typed={0x4, 0x10e}, @nested={0x4, 0x62}, @generic="d738f28e2af209c09a65556589", @typed={0x2b, 0x3f, 0x0, 0x0, @binary="d0ce944109ab176b2f2ee21327e09291032261971d1f6f4290efe3e6067d816581804ea2fe5ab3"}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r1}, @nested={0x4, 0xbb}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @nested={0x4, 0x64}]}]}, 0x119c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x806c5864, &(0x7f0000002780)) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x68, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x918}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f00000029c0)=@multiplanar_mmap={0x19e7, 0x7, 0x4, 0x0, 0x8, {}, {0x5, 0x0, 0x3, 0x8, 0x1, 0xcd, "3d805ec6"}, 0x5, 0x1, {&(0x7f0000002940)=[{0x81, 0x7, {0x5}, 0x2}, {0x81, 0x0, {0x80000001}, 0xff}]}, 0x0, 0x0, r3}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) sendmsg$key(r2, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x2, 0x1, 0x8, 0x7, 0x40, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x80000000, 0x3, 0xee, 0x6}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0xe68d, @empty, 0xb7c7}, @in6={0xa, 0x4e23, 0xfff, @remote, 0xb}}, @sadb_x_sec_ctx={0x1e, 0x18, 0xfe, 0xf, 0xe2, "4249dbd32b0dd4f11c1bfc9ef78247f2164d27f29c83f768371c9c9bf1d0bc0a9e1bc782509b02698de755644153b50f895dfdfb778e2883e563bf722a99312fa817bd5c8c225c2038ed9385a3074ffff00a0748e03137e162b6f23c24ea02e00905c5d93aa269354265999f681770d1ad799e357713f8520bcb9651f52c545d56cf48e809bda2c113daeb546b43ab5e1019ce8c689e622c835575c193b3cd8ddbe01a725369303f388f0eb582d085413c5db64274375f5acb363416a23a38cc4891fd57f78930d58450167db1cc10e9f35e49464d1522fedf70cc9a355152273d88"}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_sec_ctx={0x13, 0x18, 0xa, 0x5, 0x8c, "4793c7e37393978cdd6f7d7d12fbf1a05e289cf09dd2bba83af15eab532051f0a79e0a28401d375e008e3f0dceccd4e0e15f83fabab50bf5865fae9e0887f4bcbd28a466bd86d51479468a229bdf5623ca1a073d587d51154354ce31a1e5e455ebd98b5d02c18d4100117f4c545ddf2bb2c904b5f6d7bdc11fd3f718e55b78c4d82d970e3ccb86909440db89"}]}, 0x200}}, 0x4000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000002d40)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002d80)={0x6, 0x0, 0xb9b3, 0x7f}, &(0x7f0000002dc0)=0x10) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002e00)={0xfffff800, 0x7fff}) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000002e40)={0x7, 0x80000, r3}) openat$rfkill(0xffffff9c, &(0x7f0000002e80), 0x440, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000002ec0)={0x1f, 0x37, 0x1, {0x1, 0x6, 0xbf, r1, 0x1, '1'}}, 0x1f) bind$bt_rfcomm(r3, &(0x7f0000002f00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000003180)={@dev, @multicast1, 0x0}, &(0x7f00000031c0)=0xc) sendmsg$inet(r2, &(0x7f00000032c0)={&(0x7f0000002f40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002f80)="7fdd8308e88471fa7b1d83850f53119f4011bad661a6ccb1dd062ce3a79899c9810722695f6e7d40003de2aed7fd1d578e99eba3f07ace37808a913d6234cb378fddad5f01f87cb9f503c84f7ab077395b3a9cbe7a74ab4edcf43ddccf0fe78f1bf818a0df25eeba0a5a8caf6fc9628d3c93d8ad63af733a5217e49e01f70086fd4ce6f86b4afa3ba6064236499522faa3507339e2fb0db2e78230142a726dbff4ac9460c72576bd380c02b5929987e3a6efd5bd67fcd0382299b12fec2620b0e7bf356d39c713dcbe6289e9c01b02e5e86d7ac7e3ac40b3404943218482a9a57af73dfeff071546", 0xe8}, {&(0x7f0000003080)="386eafcfa6645d64dc297f7a8f357d7305e7bc3c4a92179ffc7de09fad89215795619cacade80e1d90d7b55951dbdba17e40c45e0726a0c059dee89a896e05aa93a02d6dad43c89245053fc4a10a1a452007544f329ae3671d45d65f24225a16ef40", 0x62}, {&(0x7f0000003100)="38a15df9b35fd8a86cbe087d46", 0xd}], 0x3, &(0x7f0000003200)=[@ip_ttl={{0x10, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xe3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @remote, @local}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf6b1}, {@private=0xa010100, 0xd1}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}], 0x88}, 0x20008001) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000003400)={{@align=0x3, {0x4, 0x9, 0x4d42, 0xbb20}}, {{[0x1000, 0x2, 0x67, 0x3]}, 0x0, 0x2, 0x1ff, 0x0, &(0x7f0000003300)=[{{@align=0x1, {0x40, 0x56, 0x0, 0x80000001}}, 0x370, 0x0, ']-%\x00'}, {{@_ha_fsid={[0x9, 0xa94d]}, {0x8, 0x6, 0x1, 0xf}}, 0x4c, 0x0, '\x00'}, {{@align, {0xff, 0x8, 0x80, 0x7}}, 0x7, 0x0, '{\x00'}, {{@_ha_fsid={[0x2, 0x6b90f178]}, {0x6, 0x9, 0x7}}, 0x1, 0x0, '1'}, {{@_ha_fsid={[0x7, 0x101]}, {0x0, 0x5, 0x6, 0x7}}, 0x4, 0x0, '\x00'}, {{@_ha_fsid={[0x3ff]}, {0xc, 0x0, 0x7, 0xf43}}, 0x8001, 0x0, '+&\x00'}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003440)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r6, 0x8004af81, &(0x7f0000003480)) write$hidraw(r6, &(0x7f00000034c0)="080aaf4102c924dd30103df44f084c81fbd776352f676d84dc2f5e174e0a6de37bf5faf7cf21e68d60535ea9df118ccb73d5daabcf82063c2e2d06fb6d715e6c2af4806085fd46be001e38a06e39a937ce4de459b6e55d896c075950a08e455be7069c0e1e196347ec37e1cfd0ba7ef87a8671a96f378bf897391cbaaf09f0edfcca26b68e0ce4156fcc", 0x8a) 17.749795559s ago: executing program 1 (id=826): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) read$FUSE(r1, &(0x7f0000002940)={0x2020}, 0x2020) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x3, 'hub\x00'}) 16.860140311s ago: executing program 1 (id=828): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/nfs', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/174, 0xae) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x7, 0x40, 0x14, @remote, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x800000, 0xd}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000611850000000000085000000270000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$panthor(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000019340)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000019440)={r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={r6, 0x5, &(0x7f00000001c0)=[0xd, 0x1, 0x3, 0x5, 0x8], &(0x7f0000000200)=[0x5], &(0x7f0000000280)=[0x5, 0x1, 0xf61d, 0x7, 0x3, 0xffff, 0x200]}) write(r2, &(0x7f0000000340)="23000000010007", 0x7) 16.748532566s ago: executing program 1 (id=830): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x2, 0x7, &(0x7f0000000200)=""/7}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 16.640457228s ago: executing program 1 (id=832): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="010105"]) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 16.070701495s ago: executing program 1 (id=841): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, 0x41, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0xd, 0x0, 0x1, [@typed={0xf, 0xe3, 0x0, 0x0, @str='virt_wifi0\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYBLOB="5806ce7b127492bbf1f8b3d37f1e7de68ece4ec3d3c32b851d49e08874f27353cd2500ad0f5c3fb2a72c5378670eb4f1d0eadaf9c1f5b7f8fb37ac4620408ee0d20d626e26b6607e244d327227d5a4f1912f04568edbbf2fd180d67e315af7c9323c4e33488ab43db073e77caa59a6bff6c4f463aaf59e2d51d2ecef33ea7c1c962c9de6fdf2b522e97a9619e90d9209cee4b15f3ddc6369202bab46c9a990592782219bbc2666222ed37129781bcc81f46d3b7fc0492c95fb0139b3aaf835", @ANYRES16=r2], 0xa) 7.527815286s ago: executing program 2 (id=885): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0x0, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0xfd800000}) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="feeed636000000000000000000000000000000000000000040000000000708000000000000780000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='5\n', 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="97743d953e1a3e7e422942cb4bdff80498830f6c8bb7e4475a5305557b1a2846e3145e3e290f27cf099a30a635736a9f19fabbfaa661cf4a9c40405568cfc1425b13c045ddc95d0fe37e241a13fff65bf5de3ad532564f2f12f30c61c5e6cb944d381755c839bb"]) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r7, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000020605000000000000000000000000000c00078008000640000000000500010006000400000000000900020073797a31000000000d000300686173683a6d616300000000"], 0x4c}}, 0x0) dup(r1) 7.485661995s ago: executing program 2 (id=886): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000380)=""/131, 0x83) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e200000000000000a00102000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000001000000000000000000800000000000000000000000000900000023000000ffffffff00060000000000000000080200000000000004000000000000000000000000000000006b6e00020001000000000000000000000000000000cab5c1e8fe93bf125334ee24cbad72afece82f7dccf49a243fe2f22e8818f81260de244697e91be857bebed94715e52d2f7aec79a6d4135fdcd73f5bc1d7e7c32776ef79b863b78d"], 0xb8}}, 0x24000080) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) 5.35025655s ago: executing program 2 (id=895): socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c090400250100000100090501"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) 4.84818634s ago: executing program 4 (id=899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}}, 0x0) 4.721553705s ago: executing program 4 (id=900): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.671557264s ago: executing program 4 (id=901): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa, 0x9}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 4.620527867s ago: executing program 4 (id=902): select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00b}]}, 0x8) mmap$IORING_OFF_SQ_RING(0x1000000, 0xbffffb, 0x200000d, 0x4001032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000840)="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", 0x11a) 4.560791474s ago: executing program 4 (id=903): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000380)=""/131, 0x83) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e200000000000000a00102000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000001000000000000000000800000000000000000000000000900000023000000ffffffff00060000000000000000080200000000000004000000000000000000000000000000006b6e00020001000000000000000000000000000000cab5c1e8fe93bf125334ee24cbad72afece82f7dccf49a243fe2f22e8818f81260de244697e91be857bebed94715e52d2f7aec79a6d4135fdcd73f5bc1d7e7c32776ef79b863b78d"], 0xb8}}, 0x24000080) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) 2.251473874s ago: executing program 2 (id=904): mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xe) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe80"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000f5ffffff6110ea9184b900199500090000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x93a, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.320614387s ago: executing program 0 (id=908): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}}, 0x0) 1.294921588s ago: executing program 2 (id=909): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.181035372s ago: executing program 2 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0xbd7a02a7dcac7ab6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x9, 0x4) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 1.180435728s ago: executing program 0 (id=911): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x29b003, 0x23) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x7, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x8001, 0x0, 0x0, 0xd}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x305600) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x5, 0x80}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000340), 0x3c5000, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x16, &(0x7f00000001c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @generic={0x66, 0x8, 0x0, 0xfffa, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @alu={0x6, 0x0, 0x0, 0xa, 0x1, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0xcf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.068974442s ago: executing program 4 (id=912): socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c090400250100000100090501"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) 1.068436342s ago: executing program 0 (id=913): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd6000f50000283aff0000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc0108000000000000de00"/94], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) fcntl$setown(r1, 0x8, r6) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000840)={@caif=@dgm={0x25, 0x2, 0x62}, {&(0x7f0000000280)=""/152, 0x98}, &(0x7f0000000340), 0x25}, 0xa0) mmap(&(0x7f00007c2000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xd}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r9) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) ioctl$CDROMSTART(r7, 0x5308) getgroups(0x3ffffffffffffeba, &(0x7f0000000280)=[0x0, 0x0]) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r11 = fsmount(r7, 0x1, 0x1) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r8) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="08010000", @ANYRES16=r12, @ANYBLOB="000825bd7000fedbdf25050000003c000980080002000000000008000100a50b0000080002000000000008000100250000000800020003000000080002000400000008000100feffffff5400098008000100040000000800010000000080080002000200000008000100400000000800020002000000080002000080000008000200fcc5000008000200020000000800020000004000080001000100008040000580080001006574680007000100b8a40b5f262fcbd900040004000000080004aa0200000008000300000908000800020004000000240004801300010062726f6164636173742d6c696e6b00000900010073797a3100000000"], 0x108}, 0x1, 0x0, 0x0, 0x4800}, 0x20000081) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2b0, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb5, 0x3, "7b3978e532b1a6a6c56bf8a3c991de77b0ab541dd1fb57b4e0a842ce6433c147aceb8add44a73a779846258f8d53c537e9382f0083bde0971c5c2f8f3cb92ff41c9535bab981725ad15eb220a6edfe4a43383ac3358af048bd6e6290f742b360f13363ca0f311366c68395ede3437a26c91f6d5f647a3f71bb58184fa82ae756cc3b65d17c1c0b3a3202d56e4b53fd738e2ea6946fa65b8f59be794e26d22b1e1f53d420bed892f33aa6d35a88dae07eb5"}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34a}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3167}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x9, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6d25, @mcast2, 0x3}}}}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.042522477s ago: executing program 33 (id=841): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, 0x41, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0xd, 0x0, 0x1, [@typed={0xf, 0xe3, 0x0, 0x0, @str='virt_wifi0\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYBLOB="5806ce7b127492bbf1f8b3d37f1e7de68ece4ec3d3c32b851d49e08874f27353cd2500ad0f5c3fb2a72c5378670eb4f1d0eadaf9c1f5b7f8fb37ac4620408ee0d20d626e26b6607e244d327227d5a4f1912f04568edbbf2fd180d67e315af7c9323c4e33488ab43db073e77caa59a6bff6c4f463aaf59e2d51d2ecef33ea7c1c962c9de6fdf2b522e97a9619e90d9209cee4b15f3ddc6369202bab46c9a990592782219bbc2666222ed37129781bcc81f46d3b7fc0492c95fb0139b3aaf835", @ANYRES16=r2], 0xa) 809.295345ms ago: executing program 0 (id=915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000029c0)={0xffffffffffffffff, 0x0, &(0x7f0000002980)={&(0x7f00000027c0)={0x1a8, 0x13, 0x2, 0x70bd2b, 0x25dfdbff, {0x8, 0x8, 0xe7, 0x8, {0x4e20, 0x4e23, [0xae89, 0x2, 0x4, 0x5], [0x5, 0x3ff, 0x3, 0x60000000], 0x0, [0x5]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "bfc7e3082883c8416153e135262ac7804129e1da41712802f1eedb0b9d732f15ff793b5740fdc5df2862ab5854358d95bf87d67456e428ed7f0ac80684147697862c37425b2d23aaf8280e257d1b9f62489837a7cbcc57c9465bafa450333790b5dee380da189763ed54163d3f"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "c2412597107c85d12fcaa4ade8f19cbc522facb5cdd21583326aaad0f48848c4d4702866c1b3866a2f27476cf004ce11bac6790e55f563548d04153344aa1893969b54e9afcc5f51bea9d2ef25b94340fc5dadf7db1fc67316022d33a7ae9a0f0583eec67b6715cc873858fb4f9bd837eb702fe764a6b65cdbe86b3821e3d64c1d9ee47efd6682daf78a2ede217841046a851a405e0b82356f1caa09f04193292eda618877f5255564c8fdd63f81dface9ade9571a632f2fd191774fa69a80cee9f3a2417e9a3c58363f3967fc4067b341354fa9493351bdaa1ae173d2bc7a472be954"}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x45}, 0x0) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r0, &(0x7f0000002780)={r1, r0, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0x24}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='acpi-nfit', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/acpi-nfit/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000800)='pcspkr\x00', 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 603.949048ms ago: executing program 0 (id=916): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000004c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/9, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=917): syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) (async) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000000000001000000240000633d20b99d40e1e700000000000700000000000000000000000902000000005f0000"], &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1, 0x20000000}, 0x28) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000002c0)={0x2, 0x2, 0x5, 0x2, 0xeb8, 0x80009, 0x361}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRES64], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRES64], 0x50) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000001b00)=0x6, 0x4) fchdir(r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073b57a31000000078008c9f54000200005080013400000000e0500050002000000050004000100000011"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x27e, &(0x7f0000000080), 0x0}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x27e, &(0x7f0000000080), 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe61c1323c3c20c32) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): tooth: hci1: Opcode 0x0c1a failed: -4 [ 127.521138][ T7634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.528053][ T7634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.542824][ T7634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.557838][ T7634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.166802][ T5092] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 128.411640][ T7634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.411103][ T6151] usb 40-1: device descriptor read/8, error -110 [ 129.501444][ T5092] Bluetooth: hci1: command 0x0419 tx timeout [ 129.570603][ T5092] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.570617][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 129.843016][ T6151] usb usb40-port1: attempt power cycle [ 130.404012][ T6151] usb usb40-port1: unable to enumerate USB device [ 130.506249][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 131.031931][ T7737] bond2 (unregistering): Released all slaves [ 131.439572][ T7757] random: crng reseeded on system resumption [ 131.454135][ T7758] fuse: Unknown parameter 'user_i00000000000000000000' [ 131.499357][ T7760] ptrace attach of "/syz-executor exec"[5745] was attempted by "/syz-executor exec"[7760] [ 131.589118][ T7764] FAULT_INJECTION: forcing a failure. [ 131.589118][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 131.593699][ T7764] CPU: 3 UID: 0 PID: 7764 Comm: syz.2.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.593727][ T7764] Tainted: [L]=SOFTLOCKUP [ 131.593733][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.593752][ T7764] Call Trace: [ 131.593759][ T7764] [ 131.593766][ T7764] dump_stack_lvl+0x100/0x190 [ 131.593974][ T7764] should_fail_ex.cold+0x5/0xa [ 131.594016][ T7764] should_failslab+0xc2/0x120 [ 131.594066][ T7764] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.594087][ T7764] ? netdevice_event+0x308/0x9a0 [ 131.594180][ T7764] netdevice_event+0x308/0x9a0 [ 131.594202][ T7764] ? __pfx_netdevice_event+0x10/0x10 [ 131.594224][ T7764] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 131.594246][ T7764] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 131.594267][ T7764] ? __pfx_add_default_gids+0x10/0x10 [ 131.594284][ T7764] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 131.594305][ T7764] ? __pfx_add_netdev_ips+0x10/0x10 [ 131.594323][ T7764] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 131.594343][ T7764] ? wext_netdev_notifier_call+0xe/0x20 [ 131.594418][ T7764] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 131.594458][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.594506][ T7764] notifier_call_chain+0x99/0x3f0 [ 131.594545][ T7764] call_netdevice_notifiers_info+0xbe/0x110 [ 131.594590][ T7764] __dev_notify_flags+0x12c/0x2e0 [ 131.594614][ T7764] ? __pfx___dev_notify_flags+0x10/0x10 [ 131.594640][ T7764] ? __pfx___dev_change_flags+0x10/0x10 [ 131.594672][ T7764] netif_change_flags+0x108/0x160 [ 131.594701][ T7764] dev_change_flags+0xba/0x260 [ 131.594722][ T7764] devinet_ioctl+0x110b/0x1f10 [ 131.594770][ T7764] ? __pfx_devinet_ioctl+0x10/0x10 [ 131.594796][ T7764] ? _copy_from_user+0x59/0xd0 [ 131.594894][ T7764] inet_ioctl+0x3aa/0x3f0 [ 131.594921][ T7764] ? __pfx_inet_ioctl+0x10/0x10 [ 131.594951][ T7764] ? kasan_quarantine_put+0x104/0x240 [ 131.594984][ T7764] ? tomoyo_path_number_perm+0x188/0x580 [ 131.595028][ T7764] sock_do_ioctl+0x118/0x280 [ 131.595048][ T7764] ? __pfx_sock_do_ioctl+0x10/0x10 [ 131.595073][ T7764] ? do_vfs_ioctl+0x226/0x13e0 [ 131.595103][ T7764] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.595134][ T7764] compat_sock_ioctl+0x568/0x760 [ 131.595161][ T7764] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 131.595182][ T7764] ? hook_file_ioctl_common+0x140/0x440 [ 131.595219][ T7764] ? __fget_files+0x21f/0x3d0 [ 131.595245][ T7764] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 131.595269][ T7764] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 131.595300][ T7764] __do_fast_syscall_32+0xe7/0x970 [ 131.595335][ T7764] ? lockdep_hardirqs_on+0x78/0x100 [ 131.595359][ T7764] do_fast_syscall_32+0x32/0x70 [ 131.595383][ T7764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.595408][ T7764] RIP: 0023:0xf7fd7fec [ 131.595431][ T7764] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 131.595449][ T7764] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 131.595469][ T7764] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 131.595480][ T7764] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.595491][ T7764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.595501][ T7764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.595511][ T7764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.595533][ T7764] [ 131.711750][ T850] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 131.713898][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.846309][ T7767] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 131.849950][ T850] usb 9-1: device descriptor read/64, error -71 [ 132.100060][ T850] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 132.239969][ T850] usb 9-1: device descriptor read/64, error -71 [ 132.362776][ T850] usb usb9-port1: attempt power cycle [ 132.374124][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.377529][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720815][ T850] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 132.740731][ T850] usb 9-1: device descriptor read/8, error -71 [ 132.794831][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 132.794860][ T42] audit: type=1326 audit(1787038838.652:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.820444][ T42] audit: type=1326 audit(1787038838.652:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.830182][ T42] audit: type=1326 audit(1787038838.662:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.836683][ T42] audit: type=1326 audit(1787038838.662:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.844667][ T42] audit: type=1326 audit(1787038838.662:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.857379][ T42] audit: type=1326 audit(1787038838.662:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.866434][ T42] audit: type=1326 audit(1787038838.662:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.875237][ T42] audit: type=1326 audit(1787038838.662:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.884144][ T42] audit: type=1326 audit(1787038838.672:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 132.893497][ T42] audit: type=1326 audit(1787038838.672:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.1.501" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 133.000065][ T850] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 133.022793][ T850] usb 9-1: device descriptor read/8, error -71 [ 133.083950][ T7799] gadgetfs: bound to dummy_udc driver [ 133.110430][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 133.130211][ T850] usb usb9-port1: unable to enumerate USB device [ 133.274859][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 133.730875][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.962917][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 133.966895][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 134.075884][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'. [ 134.078892][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 134.134216][ T7814] FAULT_INJECTION: forcing a failure. [ 134.134216][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 134.138417][ T7814] CPU: 2 UID: 0 PID: 7814 Comm: syz.1.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.138435][ T7814] Tainted: [L]=SOFTLOCKUP [ 134.138439][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.138453][ T7814] Call Trace: [ 134.138459][ T7814] [ 134.138464][ T7814] dump_stack_lvl+0x100/0x190 [ 134.138641][ T7814] should_fail_ex.cold+0x5/0xa [ 134.138678][ T7814] should_failslab+0xc2/0x120 [ 134.138725][ T7814] __kmalloc_cache_noprof+0x91/0x6c0 [ 134.138744][ T7814] ? binder_alloc_new_buf+0x1550/0x3050 [ 134.138836][ T7814] ? binder_alloc_new_buf+0x1575/0x3050 [ 134.138851][ T7814] ? binder_alloc_new_buf+0x1929/0x3050 [ 134.138870][ T7814] binder_alloc_new_buf+0x1929/0x3050 [ 134.138901][ T7814] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 134.138925][ T7814] binder_transaction+0x1ebc/0x9bb0 [ 134.138953][ T7814] ? uid_gt+0xb8/0x110 [ 134.139044][ T7814] ? __lock_acquire+0x49f/0x1a40 [ 134.139091][ T7814] ? __pfx_binder_transaction+0x10/0x10 [ 134.139113][ T7814] ? __lock_acquire+0x49f/0x1a40 [ 134.139150][ T7814] ? __lock_acquire+0x49f/0x1a40 [ 134.139182][ T7814] ? __lock_acquire+0x49f/0x1a40 [ 134.139199][ T7814] ? __lock_acquire+0x49f/0x1a40 [ 134.139219][ T7814] ? __pfx_widen_string+0x10/0x10 [ 134.139318][ T7814] ? find_held_lock+0x2b/0x80 [ 134.139342][ T7814] ? __might_fault+0xc5/0x140 [ 134.139363][ T7814] ? __might_fault+0xc5/0x140 [ 134.139394][ T7814] binder_thread_write+0x12f4/0x4db0 [ 134.139416][ T7814] ? kasan_save_track+0x14/0x30 [ 134.139437][ T7814] ? kasan_save_free_info+0x3b/0x70 [ 134.139462][ T7814] ? __pfx_binder_thread_write+0x10/0x10 [ 134.139482][ T7814] ? binder_debug+0xe0/0x190 [ 134.139507][ T7814] ? __pfx_binder_debug+0x10/0x10 [ 134.139534][ T7814] ? binder_debug+0xe0/0x190 [ 134.139556][ T7814] ? __pfx_binder_debug+0x10/0x10 [ 134.139592][ T7814] ? __pfx_binder_ioctl+0x10/0x10 [ 134.139611][ T7814] binder_ioctl+0x28ca/0x74a0 [ 134.139633][ T7814] ? tomoyo_path_number_perm+0x28f/0x580 [ 134.139665][ T7814] ? tomoyo_path_number_perm+0x28f/0x580 [ 134.139686][ T7814] ? tomoyo_path_number_perm+0x188/0x580 [ 134.139707][ T7814] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.139727][ T7814] ? __pfx_binder_ioctl+0x10/0x10 [ 134.139751][ T7814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.139781][ T7814] ? do_vfs_ioctl+0x226/0x13e0 [ 134.139826][ T7814] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.139858][ T7814] ? find_held_lock+0x2b/0x80 [ 134.139880][ T7814] ? __fget_files+0x215/0x3d0 [ 134.139900][ T7814] ? hook_file_ioctl_common+0x140/0x440 [ 134.139930][ T7814] ? __fget_files+0x21f/0x3d0 [ 134.139950][ T7814] ? __pfx_binder_ioctl+0x10/0x10 [ 134.139968][ T7814] compat_ptr_ioctl+0x6e/0xa0 [ 134.139992][ T7814] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 134.140017][ T7814] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 134.140044][ T7814] __do_fast_syscall_32+0xe7/0x970 [ 134.140065][ T7814] ? lockdep_hardirqs_on+0x78/0x100 [ 134.140090][ T7814] do_fast_syscall_32+0x32/0x70 [ 134.140113][ T7814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.140143][ T7814] RIP: 0023:0xf7f27fec [ 134.140165][ T7814] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 134.140186][ T7814] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 134.140205][ T7814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 134.140214][ T7814] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.140226][ T7814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.140237][ T7814] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.140247][ T7814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.140268][ T7814] [ 134.265499][ T6062] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 134.410039][ T6062] usb 7-1: Using ep0 maxpacket: 8 [ 134.412181][ T6062] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.416234][ T6062] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.419111][ T6062] usb 7-1: config 0 has no interface number 0 [ 134.422662][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.426586][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.431109][ T6062] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.434722][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.438619][ T6062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.443326][ T6062] usb 7-1: config 0 descriptor?? [ 134.447943][ T6062] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.876956][ T6062] usb 7-1: USB disconnect, device number 11 [ 134.887577][ T6062] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 135.546648][ T7838] netlink: 124 bytes leftover after parsing attributes in process `syz.1.519'. [ 135.567141][ T7840] openvswitch: netlink: Message has 8 unknown bytes. [ 135.799927][ T11] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 135.869949][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 135.959901][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 135.963028][ T11] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.968312][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.972773][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.976667][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 135.981563][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 135.986330][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.998182][ T11] hub 6-1:1.0: bad descriptor, ignoring hub [ 136.000983][ T11] hub 6-1:1.0: probe with driver hub failed with error -5 [ 136.004882][ T11] cdc_wdm 6-1:1.0: skipping garbage [ 136.007186][ T11] cdc_wdm 6-1:1.0: skipping garbage [ 136.010994][ T11] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 136.013728][ T11] cdc_wdm 6-1:1.0: Unknown control protocol [ 136.020918][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 136.026381][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 136.031621][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 136.035184][ T9] usb 9-1: config 0 has no interface number 0 [ 136.037890][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.042924][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.048273][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.052992][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.058494][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.064187][ T9] usb 9-1: config 0 descriptor?? [ 136.074104][ T9] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 137.317396][ T7857] tipc: Enabling of bearer rejected, failed to enable media [ 137.726980][ T7866] binder: 7865:7866 ioctl c00c6211 0 returned -14 [ 138.544213][ C2] wdm_int_callback: 3 callbacks suppressed [ 138.544237][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 138.548911][ C2] wdm_int_callback: 3 callbacks suppressed [ 138.548925][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 138.555784][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 138.558135][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 138.561675][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 138.563290][ T850] usb 6-1: USB disconnect, device number 18 [ 138.564260][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 138.568819][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 138.609701][ T6062] usb 9-1: USB disconnect, device number 6 [ 138.623196][ T6062] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 138.906654][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.534'. [ 138.915248][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 138.970492][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.119945][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 139.122596][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 139.126523][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 139.129166][ T24] usb 5-1: config 0 has no interface number 0 [ 139.131600][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.135195][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 139.138992][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.143105][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.147327][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.157342][ T24] usb 5-1: config 0 descriptor?? [ 139.164192][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 139.167896][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 139.716292][ T7908] netlink: 124 bytes leftover after parsing attributes in process `syz.1.541'. [ 139.960134][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 140.092645][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 140.096135][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 140.120108][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 140.124444][ T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.135882][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.145691][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.152545][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 140.159509][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 140.163378][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.173539][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 140.175885][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 140.178919][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 140.181347][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 140.185802][ T24] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 140.187783][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 140.695592][ T7924] openvswitch: netlink: Unknown nsh attribute 0 [ 140.757423][ T7929] MTDSB: Device #1 doesn't appear to exist [ 140.757423][ T7929] [ 140.789070][ T7924] ftl_cs: FTL header not found. [ 140.836635][ T7924] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 140.964730][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'. [ 141.003701][ T7942] team0 (unregistering): Port device team_slave_0 removed [ 141.012122][ T7942] team0 (unregistering): Port device team_slave_1 removed [ 141.812951][ T6151] usb 5-1: USB disconnect, device number 11 [ 141.840074][ T11] usb 6-1: USB disconnect, device number 19 [ 141.847364][ T6151] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 142.016540][ T7982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 142.497013][ T7998] wg2 speed is unknown, defaulting to 1000 [ 142.524452][ T7998] wg2 speed is unknown, defaulting to 1000 [ 142.540876][ T7998] wg2 speed is unknown, defaulting to 1000 [ 142.578730][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 142.668920][ T8002] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 142.672896][ T8002] bond0: option arp_ip_target: invalid value (-192.168.1.1) [ 143.256438][ C0] Illegal XDP return value 16128 on prog (id 39) dev lo, expect packet loss! [ 143.535547][ T8022] ceph: No mds server is up or the cluster is laggy [ 143.579880][ T9] libceph: connect (1)[c::]:6789 error -101 [ 143.597922][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 143.793793][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 143.861786][ T11] libceph: connect (1)[c::]:6789 error -101 [ 143.864480][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 144.026880][ T8032] hsr0: entered promiscuous mode [ 144.254551][ T7998] infiniband syz0: set down [ 144.257071][ T7998] infiniband syz0: added wg2 [ 144.391437][ T7998] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 144.397273][ T7998] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 144.402794][ T7998] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 144.425105][ T8045] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 144.446546][ T8045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.513205][ T8045] team0: Port device netdevsim1 added [ 144.516473][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 144.534907][ T7998] RDS/IB: syz0: added [ 144.548011][ T7998] smc: adding ib device syz0 with port count 1 [ 144.550960][ T7998] smc: ib device syz0 port 1 has no pnetid [ 145.219364][ T8051] hsr_slave_0: left promiscuous mode [ 145.226057][ T8051] hsr_slave_1: left promiscuous mode [ 145.243064][ T11] wg2 speed is unknown, defaulting to 1000 [ 145.297549][ T7998] wg2 speed is unknown, defaulting to 1000 [ 145.314229][ T850] wg2 speed is unknown, defaulting to 1000 [ 145.393831][ T8053] FAULT_INJECTION: forcing a failure. [ 145.393831][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.397889][ T8053] CPU: 3 UID: 0 PID: 8053 Comm: syz.4.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.397906][ T8053] Tainted: [L]=SOFTLOCKUP [ 145.397910][ T8053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.397917][ T8053] Call Trace: [ 145.397922][ T8053] [ 145.397926][ T8053] dump_stack_lvl+0x100/0x190 [ 145.397945][ T8053] should_fail_ex.cold+0x5/0xa [ 145.397958][ T8053] _copy_to_user+0x32/0xd0 [ 145.397993][ T8053] simple_read_from_buffer+0xcb/0x170 [ 145.398013][ T8053] proc_fail_nth_read+0x1af/0x230 [ 145.398027][ T8053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.398040][ T8053] ? rw_verify_area+0xce/0x6d0 [ 145.398056][ T8053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.398067][ T8053] vfs_read+0x1e4/0xb40 [ 145.398080][ T8053] ? __pfx_vfs_read+0x10/0x10 [ 145.398089][ T8053] ? find_held_lock+0x2b/0x80 [ 145.398104][ T8053] ? __fget_files+0x215/0x3d0 [ 145.398121][ T8053] ? __fget_files+0x21f/0x3d0 [ 145.398136][ T8053] ksys_read+0x12a/0x250 [ 145.398146][ T8053] ? __pfx_ksys_read+0x10/0x10 [ 145.398160][ T8053] do_int80_emulation+0x14b/0x720 [ 145.398179][ T8053] asm_int80_emulation+0x1a/0x20 [ 145.398190][ T8053] RIP: 0023:0xf71e74eb [ 145.398199][ T8053] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 145.398210][ T8053] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 145.398221][ T8053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549d5d0 [ 145.398228][ T8053] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 145.398234][ T8053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.398239][ T8053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.398246][ T8053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.398259][ T8053] [ 145.459111][ T7998] wg2 speed is unknown, defaulting to 1000 [ 145.648137][ T7998] wg2 speed is unknown, defaulting to 1000 [ 145.826420][ T7998] wg2 speed is unknown, defaulting to 1000 [ 146.069266][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.456282][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 146.629932][ T6062] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 146.809891][ T6062] usb 7-1: Using ep0 maxpacket: 8 [ 146.813724][ T6062] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.820689][ T6062] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.824857][ T6062] usb 7-1: config 0 has no interface number 0 [ 146.826807][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.839849][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.843565][ T6062] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.846828][ T6062] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.859885][ T6062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.864201][ T6062] usb 7-1: config 0 descriptor?? [ 146.876036][ T6062] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 146.946861][ T8078] dyndbg: bad flag-op , at start of [ 146.950815][ T8078] dyndbg: flags parse failed [ 146.952292][ T8078] dyndbg: bad flag-op /, at start of / [ 146.954391][ T8078] dyndbg: flags parse failed [ 147.241750][ T8076] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 147.248193][ T8079] netlink: 'syz.4.581': attribute type 3 has an invalid length. [ 147.303874][ T8082] wg2 speed is unknown, defaulting to 1000 [ 147.565688][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.587708][ T8098] FAULT_INJECTION: forcing a failure. [ 147.587708][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.594075][ T8098] CPU: 2 UID: 0 PID: 8098 Comm: syz.1.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.594105][ T8098] Tainted: [L]=SOFTLOCKUP [ 147.594112][ T8098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.594123][ T8098] Call Trace: [ 147.594131][ T8098] [ 147.594138][ T8098] dump_stack_lvl+0x100/0x190 [ 147.594169][ T8098] should_fail_ex.cold+0x5/0xa [ 147.594191][ T8098] _copy_from_iter+0x1f4/0x1690 [ 147.594214][ T8098] ? __asan_memset+0x23/0x50 [ 147.594237][ T8098] ? __pfx__copy_from_iter+0x10/0x10 [ 147.594254][ T8098] ? __pfx___alloc_skb+0x10/0x10 [ 147.594309][ T8098] netlink_sendmsg+0x808/0xda0 [ 147.594360][ T8098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.594387][ T8098] ? apparmor_socket_sendmsg+0x15b/0x270 [ 147.594412][ T8098] ____sys_sendmsg+0xa4d/0xbe0 [ 147.594431][ T8098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.594456][ T8098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.594488][ T8098] ___sys_sendmsg+0x190/0x1e0 [ 147.594512][ T8098] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.594547][ T8098] ? find_held_lock+0x2b/0x80 [ 147.594587][ T8098] __sys_sendmsg+0x160/0x210 [ 147.594616][ T8098] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.594650][ T8098] ? __pfx_ksys_write+0x10/0x10 [ 147.594674][ T8098] __do_fast_syscall_32+0xe7/0x970 [ 147.594700][ T8098] ? lockdep_hardirqs_on+0x78/0x100 [ 147.594726][ T8098] do_fast_syscall_32+0x32/0x70 [ 147.594751][ T8098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.594774][ T8098] RIP: 0023:0xf7f27fec [ 147.594795][ T8098] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 147.594803][ T8098] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 147.594822][ T8098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 147.594834][ T8098] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.594844][ T8098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.594854][ T8098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.594865][ T8098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.594889][ T8098] [ 147.602708][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.619953][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 147.832277][ T24] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.839915][ T24] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 147.845957][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.852010][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.857795][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.861032][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.863916][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.867308][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.870273][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.873339][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.876748][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.879600][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.882792][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.886252][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.889169][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.892932][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.896376][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.899300][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.903912][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.907359][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.910529][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.913422][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.916914][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.920162][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.923084][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.926560][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 147.931526][ T24] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.934422][ T24] usb 9-1: Product: syz [ 147.935777][ T24] usb 9-1: Manufacturer: syz [ 147.937327][ T24] usb 9-1: SerialNumber: syz [ 147.940591][ T24] usb 9-1: config 0 descriptor?? [ 147.962629][ T24] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 148.387699][ T8110] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 149.413150][ T5841] usb 7-1: USB disconnect, device number 12 [ 149.429174][ T5841] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 150.077145][ T5841] usb 9-1: USB disconnect, device number 7 [ 150.114131][ T5841] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 150.327302][ T8120] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 150.337034][ T8120] udc dummy_udc.0: failed to start g1: -19 [ 150.344131][ T8120] UDC core: g1: couldn't find an available UDC or it's busy [ 150.945279][ T8148] fuse: Unknown parameter 'gy»óDíuro00000000000000000000' [ 151.896686][ T27] select_fallback_rq: 16 callbacks suppressed [ 151.896719][ T27] process 8153 (syz.1.603) no longer affine to cpu1 [ 151.896844][ T27] process 8152 (syz.1.603) no longer affine to cpu1 [ 152.248709][ T8156] smpboot: CPU 1 is now offline [ 152.358328][ T8156] smpboot: CPU 3 is now offline [ 152.631088][ T8177] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.642231][ T8177] block device autoloading is deprecated and will be removed. [ 152.869888][ T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.987778][ T8190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.616'. [ 153.564324][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 153.579997][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 153.583026][ T11] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.588243][ T11] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.593989][ T11] usb 5-1: config 0 has no interface number 0 [ 153.596041][ T11] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.599435][ T11] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.603424][ T11] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.607272][ T11] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.613963][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.628764][ T11] usb 5-1: config 0 descriptor?? [ 153.636148][ T11] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.678561][ T64] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 154.172381][ T8215] Console: switching to colour dummy device 80x25 [ 154.616951][ T6062] IPVS: starting estimator thread 0... [ 154.622112][ T8214] wg2 speed is unknown, defaulting to 1000 [ 154.635219][ T8217] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 154.711321][ T8217] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 154.720099][ T8217] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 154.732183][ T8217] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 154.743871][ T8217] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 154.755863][ T8224] IPVS: using max 45 ests per chain, 108000 per kthread [ 154.778211][ T8217] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 33664 usecs [ 154.867075][ T8217] pci 0000:00:01.0: Adding to iommu group 1 [ 154.914839][ T8217] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 154.917015][ T8217] pci 0000:00:01.0: vgaarb: bridge control possible [ 154.919084][ T8217] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 154.947063][ T8228] SQUASHFS error: Failed to read block 0x0: -5 [ 154.965729][ T8217] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 154.979754][ T8217] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 155.002565][ T8217] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 155.005041][ T8231] FAULT_INJECTION: forcing a failure. [ 155.005041][ T8231] name failslab, interval 1, probability 0, space 9, times 0 [ 155.020954][ T8231] CPU: 2 UID: 0 PID: 8231 Comm: syz.4.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.020973][ T8231] Tainted: [L]=SOFTLOCKUP [ 155.020977][ T8231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.020992][ T8231] Call Trace: [ 155.020996][ T8231] [ 155.021001][ T8231] dump_stack_lvl+0x100/0x190 [ 155.021078][ T8231] should_fail_ex.cold+0x5/0xa [ 155.021107][ T8231] should_failslab+0xc2/0x120 [ 155.021141][ T8231] __kmalloc_cache_noprof+0x91/0x6c0 [ 155.021154][ T8231] ? down_write_killable+0x152/0x250 [ 155.021171][ T8231] ? alloc_ldt_struct+0x5d/0x1b0 [ 155.021195][ T8231] alloc_ldt_struct+0x5d/0x1b0 [ 155.021233][ T8231] write_ldt+0x62b/0xd40 [ 155.021262][ T8231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.021278][ T8231] ? __fget_files+0x21f/0x3d0 [ 155.021292][ T8231] ? __pfx_write_ldt+0x10/0x10 [ 155.021309][ T8231] ? fput+0x79/0x100 [ 155.021322][ T8231] ? ksys_write+0x1ac/0x250 [ 155.021333][ T8231] ? __pfx_ksys_write+0x10/0x10 [ 155.021345][ T8231] __ia32_sys_modify_ldt+0xb0/0x170 [ 155.021362][ T8231] __do_fast_syscall_32+0xe7/0x970 [ 155.021377][ T8231] ? lockdep_hardirqs_on+0x78/0x100 [ 155.021392][ T8231] do_fast_syscall_32+0x32/0x70 [ 155.021407][ T8231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.021422][ T8231] RIP: 0023:0xf70aefec [ 155.021436][ T8231] Code: Unable to access opcode bytes at 0xf70aefc2. [ 155.021449][ T8231] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000007b [ 155.021461][ T8231] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080000a40 [ 155.021468][ T8231] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.021474][ T8231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.021480][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.021487][ T8231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.021501][ T8231] [ 155.033317][ T8217] [drm] Found bochs VGA, ID 0xb0c5. [ 155.118992][ T8217] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 155.153916][ T8217] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 155.424157][ T42] audit: type=1326 audit(1787038861.282:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.4.630" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 155.457713][ T8217] Console: switching to colour frame buffer device 160x50 [ 155.523326][ T8217] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 155.917884][ T8251] openvswitch: netlink: IP tunnel TTL not specified. [ 156.121534][ T8257] Bluetooth: MGMT ver 1.23 [ 156.269996][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'. [ 156.292512][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 156.347927][ T8265] wg2 speed is unknown, defaulting to 1000 [ 156.450838][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.455980][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.464125][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 156.471980][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.482536][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.491875][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.571337][ T24] usb 6-1: config 0 descriptor?? [ 156.580268][ T8255] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.810996][ T5818] usb 5-1: USB disconnect, device number 12 [ 156.861542][ T5818] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 158.939178][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 158.944493][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 158.961729][ T24] usb 6-1: USB disconnect, device number 20 [ 158.997632][ T8283] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 159.015542][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.643'. [ 159.024460][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 159.154480][ T8290] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 159.163551][ T8290] trusted_key: encrypted_key: insufficient parameters specified [ 159.168452][ T8292] FAULT_INJECTION: forcing a failure. [ 159.168452][ T8292] name failslab, interval 1, probability 0, space 9, times 0 [ 159.185564][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.0.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.185585][ T8292] Tainted: [L]=SOFTLOCKUP [ 159.185589][ T8292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.185602][ T8292] Call Trace: [ 159.185607][ T8292] [ 159.185612][ T8292] dump_stack_lvl+0x100/0x190 [ 159.185747][ T8292] should_fail_ex.cold+0x5/0xa [ 159.185773][ T8292] should_failslab+0xc2/0x120 [ 159.185806][ T8292] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 159.185821][ T8292] ? __alloc_skb+0x5b7/0x710 [ 159.185886][ T8292] ? __alloc_skb+0x140/0x710 [ 159.185902][ T8292] __alloc_skb+0x140/0x710 [ 159.185917][ T8292] ? __alloc_skb+0x5b7/0x710 [ 159.185937][ T8292] ? __pfx___alloc_skb+0x10/0x10 [ 159.185968][ T8292] netlink_alloc_large_skb+0x69/0x150 [ 159.185997][ T8292] netlink_sendmsg+0x680/0xda0 [ 159.186012][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.186028][ T8292] ? apparmor_socket_sendmsg+0x15b/0x270 [ 159.186085][ T8292] ____sys_sendmsg+0xa4d/0xbe0 [ 159.186098][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.186112][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.186130][ T8292] ___sys_sendmsg+0x190/0x1e0 [ 159.186144][ T8292] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.186163][ T8292] ? find_held_lock+0x2b/0x80 [ 159.186203][ T8292] __sys_sendmsg+0x160/0x210 [ 159.186219][ T8292] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.186239][ T8292] ? __pfx_ksys_write+0x10/0x10 [ 159.186255][ T8292] __do_fast_syscall_32+0xe7/0x970 [ 159.186308][ T8292] ? lockdep_hardirqs_on+0x78/0x100 [ 159.186323][ T8292] do_fast_syscall_32+0x32/0x70 [ 159.186338][ T8292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.186353][ T8292] RIP: 0023:0xf7f75fec [ 159.186367][ T8292] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 159.186379][ T8292] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 159.186391][ T8292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 159.186398][ T8292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.186404][ T8292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.186410][ T8292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.186416][ T8292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.186430][ T8292] [ 159.366156][ T8296] syzkaller0: entered promiscuous mode [ 159.369574][ T8296] syzkaller0: entered allmulticast mode [ 159.387701][ T8296] netlink: 128 bytes leftover after parsing attributes in process `syz.0.649'. [ 159.693426][ T8306] netlink: 124 bytes leftover after parsing attributes in process `syz.0.652'. [ 159.758595][ T8307] x_tables: duplicate underflow at hook 3 [ 159.773981][ T8307] ./bus: Can't lookup blockdev [ 159.940050][ T11] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.089897][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 160.092226][ T11] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 160.096114][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.099561][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.119128][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 160.131075][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 160.145573][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.188455][ T11] hub 5-1:1.0: bad descriptor, ignoring hub [ 160.196332][ T11] hub 5-1:1.0: probe with driver hub failed with error -5 [ 160.208925][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 160.216709][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 160.222813][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 160.232963][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 160.533431][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 160.588292][ T8321] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 160.595067][ T8323] FAULT_INJECTION: forcing a failure. [ 160.595067][ T8323] name failslab, interval 1, probability 0, space 9, times 0 [ 160.603621][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.2.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.603639][ T8323] Tainted: [L]=SOFTLOCKUP [ 160.603643][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.603650][ T8323] Call Trace: [ 160.603653][ T8323] [ 160.603658][ T8323] dump_stack_lvl+0x100/0x190 [ 160.603680][ T8323] should_fail_ex.cold+0x5/0xa [ 160.603696][ T8323] should_failslab+0xc2/0x120 [ 160.603715][ T8323] __kmalloc_noprof+0xfc/0x820 [ 160.603731][ T8323] ? tomoyo_encode2+0xfb/0x3c0 [ 160.603752][ T8323] tomoyo_encode2+0xfb/0x3c0 [ 160.603770][ T8323] tomoyo_encode+0x29/0x50 [ 160.603785][ T8323] tomoyo_realpath_from_path+0x18c/0x690 [ 160.603805][ T8323] tomoyo_path_number_perm+0x23c/0x580 [ 160.603831][ T8323] ? tomoyo_path_number_perm+0x22e/0x580 [ 160.603846][ T8323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.603861][ T8323] ? get_pid_task+0x106/0x250 [ 160.603889][ T8323] ? find_held_lock+0x2b/0x80 [ 160.603904][ T8323] ? __fget_files+0x215/0x3d0 [ 160.603917][ T8323] ? hook_file_ioctl_common+0x140/0x440 [ 160.603931][ T8323] ? __fget_files+0x215/0x3d0 [ 160.603944][ T8323] ? __fget_files+0x21f/0x3d0 [ 160.603958][ T8323] security_file_ioctl_compat+0xd3/0x230 [ 160.603974][ T8323] __ia32_compat_sys_ioctl+0xc2/0x360 [ 160.603993][ T8323] __do_fast_syscall_32+0xe7/0x970 [ 160.604009][ T8323] ? lockdep_hardirqs_on+0x78/0x100 [ 160.604024][ T8323] do_fast_syscall_32+0x32/0x70 [ 160.604039][ T8323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.604054][ T8323] RIP: 0023:0xf7fd7fec [ 160.604066][ T8323] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 160.604071][ T8323] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 160.604082][ T8323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 160.604089][ T8323] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.604095][ T8323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.604101][ T8323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.604107][ T8323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.604121][ T8323] [ 160.604132][ T8323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.663696][ T8317] veth3: entered promiscuous mode [ 160.709606][ T8321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.730753][ T8324] bond1: (slave geneve2): making interface the new active one [ 160.737553][ T8324] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 160.954400][ T8330] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.968123][ T8330] overlayfs: failed to set xattr on upper [ 160.970514][ T8330] overlayfs: ...falling back to redirect_dir=nofollow. [ 160.973230][ T8330] overlayfs: ...falling back to index=off. [ 160.975172][ T8330] overlayfs: ...falling back to uuid=null. [ 160.977077][ T8330] overlayfs: maximum fs stacking depth exceeded [ 161.220963][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 161.695132][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 161.698766][ T8342] netlink: 277 bytes leftover after parsing attributes in process `syz.4.663'. [ 161.702214][ T8342] netlink: 277 bytes leftover after parsing attributes in process `syz.4.663'. [ 161.707580][ T8342] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 161.726830][ T8342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.752545][ T8342] bond2: (slave dummy0): making interface the new active one [ 161.757043][ T8342] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 161.764859][ T8342] : renamed from dummy0 (while UP) [ 161.887182][ T8344] ima: policy update failed [ 161.891496][ T42] audit: type=1802 audit(1787038867.742:236): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.664" res=0 errno=0 [ 162.057164][ T8355] loop5: detected capacity change from 0 to 4095 [ 162.102456][ T5888] Buffer I/O error on dev loop5, logical block 511, async page read [ 162.712286][ T24] usb 5-1: USB disconnect, device number 13 [ 162.743731][ T8370] FAULT_INJECTION: forcing a failure. [ 162.743731][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.749478][ T8370] CPU: 2 UID: 0 PID: 8370 Comm: syz.0.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.749498][ T8370] Tainted: [L]=SOFTLOCKUP [ 162.749501][ T8370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.749508][ T8370] Call Trace: [ 162.749513][ T8370] [ 162.749518][ T8370] dump_stack_lvl+0x100/0x190 [ 162.749544][ T8370] should_fail_ex.cold+0x5/0xa [ 162.749563][ T8370] _copy_from_user+0x2e/0xd0 [ 162.749604][ T8370] memdup_user+0x6b/0xe0 [ 162.749628][ T8370] security_setselfattr+0x82/0x320 [ 162.749649][ T8370] __ia32_sys_lsm_set_self_attr+0x10f/0x1a0 [ 162.749665][ T8370] __do_fast_syscall_32+0xe7/0x970 [ 162.749697][ T8370] ? lockdep_hardirqs_on+0x78/0x100 [ 162.749713][ T8370] do_fast_syscall_32+0x32/0x70 [ 162.749728][ T8370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.749743][ T8370] RIP: 0023:0xf7f75fec [ 162.749756][ T8370] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 162.749761][ T8370] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001cc [ 162.749773][ T8370] RAX: ffffffffffffffda RBX: 0000000000000069 RCX: 0000000000000000 [ 162.749779][ T8370] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.749786][ T8370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.749792][ T8370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.749798][ T8370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.749811][ T8370] [ 163.139889][ T9] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 163.290809][ T9] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 163.295059][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.303787][ T9] usb 7-1: config 0 has no interfaces? [ 163.314853][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.320821][ T9] usb 7-1: Product: syz [ 163.326302][ T9] usb 7-1: Manufacturer: syz [ 163.335227][ T9] usb 7-1: SerialNumber: syz [ 163.346897][ T9] usb 7-1: config 0 descriptor?? [ 163.470336][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'. [ 163.888586][ T8398] xt_bpf: check failed: parse error [ 164.079965][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.229870][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 164.232528][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.239206][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.244825][ T9] usb 5-1: config 0 has no interface number 0 [ 164.248296][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.254913][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.259965][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 164.260723][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.270170][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.278272][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.284493][ T9] usb 5-1: config 0 descriptor?? [ 164.296076][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.410418][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.414607][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.418129][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 164.421507][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.424829][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 164.433307][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.436085][ T24] usb 9-1: Product: syz [ 164.437598][ T24] usb 9-1: Manufacturer: syz [ 164.439135][ T24] usb 9-1: SerialNumber: syz [ 164.447144][ T24] cdc_mbim 9-1:1.0: skipping garbage [ 164.640230][ T8407] wg2 speed is unknown, defaulting to 1000 [ 164.707456][ T8402] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 165.499533][ T8402] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 165.843377][ T8420] libceph: resolve '400' (ret=-3): failed [ 165.853969][ T24] cdc_mbim 9-1:1.0: bind() failure [ 165.870079][ T24] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 165.880365][ T24] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 165.883990][ T24] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 165.896101][ T24] usb 9-1: USB disconnect, device number 8 [ 165.950438][ T9] usb 7-1: USB disconnect, device number 13 [ 166.083836][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 166.093733][ T8427] netlink: 'syz.2.690': attribute type 23 has an invalid length. [ 166.184239][ T8429] FAULT_INJECTION: forcing a failure. [ 166.184239][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.188358][ T8429] CPU: 2 UID: 0 PID: 8429 Comm: syz.2.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.188376][ T8429] Tainted: [L]=SOFTLOCKUP [ 166.188380][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.188387][ T8429] Call Trace: [ 166.188392][ T8429] [ 166.188397][ T8429] dump_stack_lvl+0x100/0x190 [ 166.188416][ T8429] should_fail_ex.cold+0x5/0xa [ 166.188429][ T8429] _copy_from_iter+0x1f4/0x1690 [ 166.188444][ T8429] ? __pfx__copy_from_iter+0x10/0x10 [ 166.188456][ T8429] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.188479][ T8429] copy_page_from_iter+0x238/0x300 [ 166.188491][ T8429] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 166.188553][ T8429] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 166.188566][ T8429] ? unwind_get_return_address+0x59/0xa0 [ 166.188584][ T8429] ? arch_stack_walk+0xa6/0xf0 [ 166.188603][ T8429] ? __lock_acquire+0x49f/0x1a40 [ 166.188622][ T8429] tun_get_user+0x16d6/0x3c20 [ 166.188641][ T8429] ? __pfx_tun_get_user+0x10/0x10 [ 166.188655][ T8429] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.188672][ T8429] ? find_held_lock+0x2b/0x80 [ 166.188686][ T8429] ? tun_get+0x191/0x370 [ 166.188698][ T8429] ? tun_get+0x191/0x370 [ 166.188713][ T8429] tun_chr_write_iter+0xdc/0x200 [ 166.188727][ T8429] vfs_write+0x6ac/0x1050 [ 166.188740][ T8429] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.188755][ T8429] ? __pfx_vfs_write+0x10/0x10 [ 166.188764][ T8429] ? find_held_lock+0x2b/0x80 [ 166.188786][ T8429] ksys_write+0x12a/0x250 [ 166.188796][ T8429] ? __pfx_ksys_write+0x10/0x10 [ 166.188811][ T8429] do_int80_emulation+0x14b/0x720 [ 166.188828][ T8429] asm_int80_emulation+0x1a/0x20 [ 166.188840][ T8429] RIP: 0023:0xf71d74eb [ 166.188849][ T8429] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 166.188860][ T8429] RSP: 002b:00000000f549644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 166.188876][ T8429] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000100 [ 166.188883][ T8429] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 166.188889][ T8429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.188895][ T8429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.188901][ T8429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.188914][ T8429] [ 166.322869][ T8431] FAULT_INJECTION: forcing a failure. [ 166.322869][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.326956][ T8431] CPU: 2 UID: 0 PID: 8431 Comm: syz.2.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.326974][ T8431] Tainted: [L]=SOFTLOCKUP [ 166.326978][ T8431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.326985][ T8431] Call Trace: [ 166.326989][ T8431] [ 166.326994][ T8431] dump_stack_lvl+0x100/0x190 [ 166.327012][ T8431] should_fail_ex.cold+0x5/0xa [ 166.327025][ T8431] strncpy_from_user+0x3b/0x2d0 [ 166.327044][ T8431] do_getname+0x78/0x390 [ 166.327061][ T8431] user_statfs+0x8c/0x1a0 [ 166.327086][ T8431] ? __pfx_user_statfs+0x10/0x10 [ 166.327097][ T8431] ? __mutex_unlock_slowpath+0x35d/0x930 [ 166.327116][ T8431] __do_compat_sys_statfs+0x8d/0x100 [ 166.327128][ T8431] ? __pfx___do_compat_sys_statfs+0x10/0x10 [ 166.327145][ T8431] ? __pfx_ksys_write+0x10/0x10 [ 166.327158][ T8431] __do_fast_syscall_32+0xe7/0x970 [ 166.327173][ T8431] ? lockdep_hardirqs_on+0x78/0x100 [ 166.327188][ T8431] do_fast_syscall_32+0x32/0x70 [ 166.327203][ T8431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.327217][ T8431] RIP: 0023:0xf7fd7fec [ 166.327230][ T8431] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 166.327236][ T8431] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000063 [ 166.327247][ T8431] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 166.327253][ T8431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.327259][ T8431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.327265][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.327271][ T8431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.327285][ T8431] [ 166.760710][ T8441] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 167.235329][ T9] usb 5-1: USB disconnect, device number 14 [ 167.281945][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 167.450953][ T8452] FAULT_INJECTION: forcing a failure. [ 167.450953][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.455253][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.0.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.455271][ T8452] Tainted: [L]=SOFTLOCKUP [ 167.455274][ T8452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.455281][ T8452] Call Trace: [ 167.455287][ T8452] [ 167.455292][ T8452] dump_stack_lvl+0x100/0x190 [ 167.455311][ T8452] should_fail_ex.cold+0x5/0xa [ 167.455325][ T8452] strncpy_from_user+0x3b/0x2d0 [ 167.455344][ T8452] do_getname+0x78/0x390 [ 167.455361][ T8452] __do_sys_file_getattr+0x47b/0x530 [ 167.455376][ T8452] ? __pfx___do_sys_file_getattr+0x10/0x10 [ 167.455389][ T8452] ? __fget_files+0x21f/0x3d0 [ 167.455403][ T8452] ? fput+0x79/0x100 [ 167.455417][ T8452] ? __pfx_ksys_write+0x10/0x10 [ 167.455430][ T8452] __do_fast_syscall_32+0xe7/0x970 [ 167.455446][ T8452] ? lockdep_hardirqs_on+0x78/0x100 [ 167.455461][ T8452] do_fast_syscall_32+0x32/0x70 [ 167.455475][ T8452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.455490][ T8452] RIP: 0023:0xf7f75fec [ 167.455504][ T8452] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 167.455509][ T8452] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001d4 [ 167.455521][ T8452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 167.455527][ T8452] RDX: 00000000800000c0 RSI: 0000000000000018 RDI: 0000000000000100 [ 167.455534][ T8452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.455540][ T8452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.455546][ T8452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.455559][ T8452] [ 167.824917][ T8460] devpts: Unknown parameter 'gid0x0000000000000000—t' [ 167.843431][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.705'. [ 168.222042][ T8473] openvswitch: netlink: Duplicate or invalid key (type 0). [ 168.528443][ T8478] jffs2: notice: (8478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.501417][ T8492] devpts: Unknown parameter 'gid0x0000000000000000—t' [ 169.517036][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.715'. [ 169.709247][ T8500] jffs2: notice: (8500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.739326][ T8500] FAULT_INJECTION: forcing a failure. [ 169.739326][ T8500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.744527][ T8500] CPU: 2 UID: 0 PID: 8500 Comm: syz.4.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.744553][ T8500] Tainted: [L]=SOFTLOCKUP [ 169.744559][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.744569][ T8500] Call Trace: [ 169.744574][ T8500] [ 169.744580][ T8500] dump_stack_lvl+0x100/0x190 [ 169.744606][ T8500] should_fail_ex.cold+0x5/0xa [ 169.744626][ T8500] strncpy_from_user+0x3b/0x2d0 [ 169.744654][ T8500] do_getname+0x78/0x390 [ 169.744679][ T8500] do_utimes_path+0xc9/0x1b0 [ 169.744703][ T8500] ? __pfx_do_utimes_path+0x10/0x10 [ 169.744730][ T8500] do_utimes+0x34/0x100 [ 169.744752][ T8500] do_compat_futimesat+0x217/0x280 [ 169.744775][ T8500] ? __pfx_do_compat_futimesat+0x10/0x10 [ 169.744799][ T8500] ? ksys_write+0x1ac/0x250 [ 169.744816][ T8500] ? __pfx_ksys_write+0x10/0x10 [ 169.744836][ T8500] __do_fast_syscall_32+0xe7/0x970 [ 169.744859][ T8500] ? lockdep_hardirqs_on+0x78/0x100 [ 169.744881][ T8500] do_fast_syscall_32+0x32/0x70 [ 169.744903][ T8500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.744929][ T8500] RIP: 0023:0xf70aefec [ 169.744947][ T8500] Code: Unable to access opcode bytes at 0xf70aefc2. [ 169.744955][ T8500] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000010f [ 169.744972][ T8500] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000 [ 169.744982][ T8500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.744991][ T8500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.745001][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.745010][ T8500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.745031][ T8500] [ 170.088510][ T8514] devpts: Unknown parameter 'gid0x0000000000000000—t' [ 170.132879][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 170.239469][ T8519] binder: 8518:8519 ioctl 80585882 80000000 returned -22 [ 170.245049][ T8519] binder: 8518:8519 ioctl c01c64ad 80000200 returned -22 [ 170.254651][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 170.262391][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.1.726'. [ 170.430046][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 171.139939][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 171.271821][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 171.275594][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 171.279122][ T24] usb 9-1: config 0 has no interface number 0 [ 171.282902][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.290022][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 171.294500][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.298998][ T24] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.303521][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.311397][ T24] usb 9-1: config 0 descriptor?? [ 171.324064][ T24] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 171.373549][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 171.383469][ T8537] devpts: Bad value for 'gid' [ 171.385480][ T8537] devpts: Bad value for 'gid' [ 171.387652][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 171.391351][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 171.432344][ T8539] FAULT_INJECTION: forcing a failure. [ 171.432344][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.448316][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'. [ 171.452145][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.0.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.452169][ T8539] Tainted: [L]=SOFTLOCKUP [ 171.452176][ T8539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.452196][ T8539] Call Trace: [ 171.452201][ T8539] [ 171.452206][ T8539] dump_stack_lvl+0x100/0x190 [ 171.452396][ T8539] should_fail_ex.cold+0x5/0xa [ 171.452421][ T8539] _copy_from_iter+0x1f4/0x1690 [ 171.452484][ T8539] ? __asan_memset+0x23/0x50 [ 171.452512][ T8539] ? __pfx__copy_from_iter+0x10/0x10 [ 171.452523][ T8539] ? __pfx___alloc_skb+0x10/0x10 [ 171.452593][ T8539] netlink_sendmsg+0x808/0xda0 [ 171.452632][ T8539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.452649][ T8539] ? apparmor_socket_sendmsg+0x15b/0x270 [ 171.452671][ T8539] ____sys_sendmsg+0xa4d/0xbe0 [ 171.452683][ T8539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.452697][ T8539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.452716][ T8539] ___sys_sendmsg+0x190/0x1e0 [ 171.452729][ T8539] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.452749][ T8539] ? find_held_lock+0x2b/0x80 [ 171.452786][ T8539] __sys_sendmsg+0x160/0x210 [ 171.452802][ T8539] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.452822][ T8539] ? __pfx_ksys_write+0x10/0x10 [ 171.452838][ T8539] __do_fast_syscall_32+0xe7/0x970 [ 171.452892][ T8539] ? lockdep_hardirqs_on+0x78/0x100 [ 171.452907][ T8539] do_fast_syscall_32+0x32/0x70 [ 171.452921][ T8539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.452937][ T8539] RIP: 0023:0xf7f75fec [ 171.452951][ T8539] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 171.452962][ T8539] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 171.452973][ T8539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 171.452980][ T8539] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.452987][ T8539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.452993][ T8539] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.452999][ T8539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.453013][ T8539] [ 171.538433][ T8545] FAULT_INJECTION: forcing a failure. [ 171.538433][ T8545] name failslab, interval 1, probability 0, space 9, times 0 [ 171.544337][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.544356][ T8545] Tainted: [L]=SOFTLOCKUP [ 171.544360][ T8545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.544367][ T8545] Call Trace: [ 171.544371][ T8545] [ 171.544375][ T8545] dump_stack_lvl+0x100/0x190 [ 171.544394][ T8545] should_fail_ex.cold+0x5/0xa [ 171.544408][ T8545] should_failslab+0xc2/0x120 [ 171.544424][ T8545] __kmalloc_noprof+0xfc/0x820 [ 171.544445][ T8545] ? tomoyo_encode2+0xfb/0x3c0 [ 171.544465][ T8545] tomoyo_encode2+0xfb/0x3c0 [ 171.544482][ T8545] tomoyo_encode+0x29/0x50 [ 171.544497][ T8545] tomoyo_realpath_from_path+0x18c/0x690 [ 171.544516][ T8545] tomoyo_path_number_perm+0x23c/0x580 [ 171.544542][ T8545] ? tomoyo_path_number_perm+0x22e/0x580 [ 171.544557][ T8545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.544571][ T8545] ? get_pid_task+0x106/0x250 [ 171.544599][ T8545] ? find_held_lock+0x2b/0x80 [ 171.544613][ T8545] ? __fget_files+0x215/0x3d0 [ 171.544626][ T8545] ? hook_file_ioctl_common+0x140/0x440 [ 171.544640][ T8545] ? __fget_files+0x215/0x3d0 [ 171.544654][ T8545] ? __fget_files+0x21f/0x3d0 [ 171.544667][ T8545] security_file_ioctl_compat+0xd3/0x230 [ 171.544683][ T8545] __ia32_compat_sys_ioctl+0xc2/0x360 [ 171.544702][ T8545] __do_fast_syscall_32+0xe7/0x970 [ 171.544718][ T8545] ? lockdep_hardirqs_on+0x78/0x100 [ 171.544734][ T8545] do_fast_syscall_32+0x32/0x70 [ 171.544748][ T8545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.544763][ T8545] RIP: 0023:0xf7fd7fec [ 171.544775][ T8545] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 171.544780][ T8545] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 171.544791][ T8545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008550c [ 171.544798][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.544804][ T8545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.544810][ T8545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.544816][ T8545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.544829][ T8545] [ 171.544840][ T8545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.200231][ T8549] wg2 speed is unknown, defaulting to 1000 [ 173.391237][ T8569] devpts: Bad value for 'gid' [ 173.392877][ T8569] devpts: Bad value for 'gid' [ 173.398391][ T8569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'. [ 173.726410][ T8576] FAULT_INJECTION: forcing a failure. [ 173.726410][ T8576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.740130][ T8576] CPU: 2 UID: 0 PID: 8576 Comm: syz.2.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.740151][ T8576] Tainted: [L]=SOFTLOCKUP [ 173.740155][ T8576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.740161][ T8576] Call Trace: [ 173.740165][ T8576] [ 173.740170][ T8576] dump_stack_lvl+0x100/0x190 [ 173.740189][ T8576] should_fail_ex.cold+0x5/0xa [ 173.740202][ T8576] _copy_from_iter+0x1f4/0x1690 [ 173.740231][ T8576] ? __pfx__copy_from_iter+0x10/0x10 [ 173.740241][ T8576] ? trace_kmalloc+0xeb/0x110 [ 173.740257][ T8576] ? __kasan_kmalloc+0xaa/0xb0 [ 173.740272][ T8576] ? __kmalloc_noprof+0x343/0x820 [ 173.740286][ T8576] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 173.740317][ T8576] kernfs_fop_write_iter+0x186/0x5f0 [ 173.740335][ T8576] vfs_write+0x6ac/0x1050 [ 173.740348][ T8576] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 173.740366][ T8576] ? __pfx_vfs_write+0x10/0x10 [ 173.740379][ T8576] ? find_held_lock+0x2b/0x80 [ 173.740404][ T8576] ksys_write+0x12a/0x250 [ 173.740414][ T8576] ? __pfx_ksys_write+0x10/0x10 [ 173.740424][ T8576] ? ksys_write+0x1ac/0x250 [ 173.740434][ T8576] ? __pfx_ksys_write+0x10/0x10 [ 173.740447][ T8576] __do_fast_syscall_32+0xe7/0x970 [ 173.740464][ T8576] ? lockdep_hardirqs_on+0x78/0x100 [ 173.740479][ T8576] do_fast_syscall_32+0x32/0x70 [ 173.740494][ T8576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.740508][ T8576] RIP: 0023:0xf7fd7fec [ 173.740521][ T8576] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 173.740526][ T8576] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 173.740539][ T8576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 173.740546][ T8576] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.740552][ T8576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.740558][ T8576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.740564][ T8576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.740578][ T8576] [ 174.041290][ T5818] usb 9-1: USB disconnect, device number 9 [ 174.044975][ T5818] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 174.252360][ T42] audit: type=1326 audit(1787038880.112:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.2.752" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7fec code=0x0 [ 174.405648][ T8601] devpts: Bad value for 'gid' [ 174.407371][ T8601] devpts: Bad value for 'gid' [ 174.418533][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 174.531545][ T8607] FAULT_INJECTION: forcing a failure. [ 174.531545][ T8607] name failslab, interval 1, probability 0, space 9, times 0 [ 174.535989][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.1.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.536015][ T8607] Tainted: [L]=SOFTLOCKUP [ 174.536018][ T8607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.536028][ T8607] Call Trace: [ 174.536034][ T8607] [ 174.536041][ T8607] dump_stack_lvl+0x100/0x190 [ 174.536067][ T8607] should_fail_ex.cold+0x5/0xa [ 174.536088][ T8607] should_failslab+0xc2/0x120 [ 174.536112][ T8607] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 174.536134][ T8607] ? __alloc_skb+0x5b7/0x710 [ 174.536158][ T8607] ? __alloc_skb+0x140/0x710 [ 174.536184][ T8607] __alloc_skb+0x140/0x710 [ 174.536205][ T8607] ? __alloc_skb+0x5b7/0x710 [ 174.536221][ T8607] ? __pfx___alloc_skb+0x10/0x10 [ 174.536249][ T8607] netlink_alloc_large_skb+0x69/0x150 [ 174.536273][ T8607] netlink_sendmsg+0x680/0xda0 [ 174.536297][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.536320][ T8607] ? apparmor_socket_sendmsg+0x15b/0x270 [ 174.536343][ T8607] ____sys_sendmsg+0xa4d/0xbe0 [ 174.536361][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.536383][ T8607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.536410][ T8607] ___sys_sendmsg+0x190/0x1e0 [ 174.536433][ T8607] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.536463][ T8607] ? find_held_lock+0x2b/0x80 [ 174.536486][ T8607] __sys_sendmsg+0x160/0x210 [ 174.536504][ T8607] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.536524][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 174.536544][ T8607] __do_fast_syscall_32+0xe7/0x970 [ 174.536568][ T8607] ? lockdep_hardirqs_on+0x78/0x100 [ 174.536605][ T8607] do_fast_syscall_32+0x32/0x70 [ 174.536620][ T8607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.536642][ T8607] RIP: 0023:0xf7f27fec [ 174.536662][ T8607] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 174.536669][ T8607] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 174.536686][ T8607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 174.536697][ T8607] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.536704][ T8607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.536713][ T8607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.536722][ T8607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.536745][ T8607] [ 174.697731][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.758'. [ 174.743204][ T8615] FAULT_INJECTION: forcing a failure. [ 174.743204][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.750128][ T8615] CPU: 2 UID: 0 PID: 8615 Comm: syz.1.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.750148][ T8615] Tainted: [L]=SOFTLOCKUP [ 174.750151][ T8615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.750158][ T8615] Call Trace: [ 174.750163][ T8615] [ 174.750168][ T8615] dump_stack_lvl+0x100/0x190 [ 174.750187][ T8615] should_fail_ex.cold+0x5/0xa [ 174.750204][ T8615] _copy_to_iter+0x5a4/0x1720 [ 174.750234][ T8615] ? __pfx__copy_to_iter+0x10/0x10 [ 174.750257][ T8615] ? find_held_lock+0x2b/0x80 [ 174.750278][ T8615] ? packet_seq_stop+0x31/0xb0 [ 174.750304][ T8615] ? packet_seq_stop+0x31/0xb0 [ 174.750319][ T8615] seq_read_iter+0xdab/0x1270 [ 174.750338][ T8615] seq_read+0x344/0x4d0 [ 174.750348][ T8615] ? __pfx_seq_read+0x10/0x10 [ 174.750362][ T8615] ? lock_acquire+0x1b9/0x370 [ 174.750381][ T8615] ? __pfx_seq_read+0x10/0x10 [ 174.750392][ T8615] proc_reg_read+0x240/0x330 [ 174.750407][ T8615] ? __pfx_proc_reg_read+0x10/0x10 [ 174.750422][ T8615] vfs_read+0x1e4/0xb40 [ 174.750434][ T8615] ? __pfx_vfs_read+0x10/0x10 [ 174.750444][ T8615] ? find_held_lock+0x2b/0x80 [ 174.750457][ T8615] ? __fget_files+0x215/0x3d0 [ 174.750471][ T8615] ? __fget_files+0x21f/0x3d0 [ 174.750487][ T8615] ksys_read+0x12a/0x250 [ 174.750497][ T8615] ? __pfx_ksys_read+0x10/0x10 [ 174.750507][ T8615] ? ksys_write+0x1ac/0x250 [ 174.750517][ T8615] ? __pfx_ksys_write+0x10/0x10 [ 174.750530][ T8615] __do_fast_syscall_32+0xe7/0x970 [ 174.750547][ T8615] ? lockdep_hardirqs_on+0x78/0x100 [ 174.750561][ T8615] do_fast_syscall_32+0x32/0x70 [ 174.750576][ T8615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.750594][ T8615] RIP: 0023:0xf7f27fec [ 174.750612][ T8615] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 174.750617][ T8615] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 174.750629][ T8615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 174.750636][ T8615] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.750641][ T8615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.750647][ T8615] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.750654][ T8615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.750667][ T8615] [ 174.863390][ T8619] loop9: detected capacity change from 0 to 255852544 [ 175.192586][ T8602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.196363][ T8602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.202353][ T8602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.205849][ T8602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.298993][ T8634] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 175.586776][ T8644] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 175.588890][ T8644] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.609152][ T8644] vhci_hcd vhci_hcd.0: Device attached [ 175.654335][ T8644] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 175.796676][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 175.864341][ T8652] Console: switching to colour dummy device 80x25 [ 175.881306][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.492872][ T8645] vhci_hcd: connection closed [ 176.500244][ T5783] vhci_hcd vhci_hcd.1: stop threads [ 176.510445][ T5783] vhci_hcd vhci_hcd.1: release socket [ 176.515410][ T5783] vhci_hcd vhci_hcd.1: disconnect device [ 176.680085][ T5825] usb 40-1: enqueue for inactive port 0 [ 176.699914][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 176.731466][ T8653] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 176.779444][ T8653] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 176.785061][ T8653] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 176.787728][ T8653] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 176.790812][ T8653] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 176.809506][ T8653] pci 0000:00:01.0: Adding to iommu group 1 [ 176.825591][ T8653] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 176.827740][ T8653] pci 0000:00:01.0: vgaarb: bridge control possible [ 176.829835][ T8653] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 176.849454][ T8656] IPv6: A: Disabled Multicast RS [ 176.879060][ T8653] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 176.882174][ T8653] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 176.886386][ T8653] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 176.899287][ T8653] [drm] Found bochs VGA, ID 0xb0c5. [ 176.901243][ T8653] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 176.969196][ T8653] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 177.181415][ T5825] usb usb40-port1: attempt power cycle [ 177.224153][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 177.224270][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.225347][ T8653] Console: switching to colour frame buffer device 160x50 [ 177.236597][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 177.238688][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.250389][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.250428][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 177.250445][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 177.258088][ T8676] syzkaller1: entered promiscuous mode [ 177.258104][ T8676] syzkaller1: entered allmulticast mode [ 177.315597][ T8653] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 177.742944][ T5825] usb usb40-port1: unable to enumerate USB device [ 177.756980][ T8687] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 177.759119][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.762141][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 178.450790][ T7107] wlan0: Trigger new scan to find an IBSS to join [ 178.509944][ T8688] vhci_hcd: connection closed [ 178.537303][ T8708] FAULT_INJECTION: forcing a failure. [ 178.537303][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.543680][ T5783] vhci_hcd vhci_hcd.2: stop threads [ 178.550566][ T5783] vhci_hcd vhci_hcd.2: release socket [ 178.566141][ T8708] CPU: 2 UID: 0 PID: 8708 Comm: syz.0.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.566170][ T8708] Tainted: [L]=SOFTLOCKUP [ 178.566176][ T8708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.566193][ T8708] Call Trace: [ 178.566200][ T8708] [ 178.566206][ T8708] dump_stack_lvl+0x100/0x190 [ 178.566383][ T8708] should_fail_ex.cold+0x5/0xa [ 178.566418][ T8708] _copy_from_iter+0x1f4/0x1690 [ 178.566492][ T8708] ? __asan_memset+0x23/0x50 [ 178.566533][ T8708] ? __pfx__copy_from_iter+0x10/0x10 [ 178.566549][ T8708] ? __pfx___alloc_skb+0x10/0x10 [ 178.566644][ T8708] netlink_sendmsg+0x808/0xda0 [ 178.566683][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.566704][ T8708] ? apparmor_socket_sendmsg+0x15b/0x270 [ 178.566734][ T8708] ____sys_sendmsg+0xa4d/0xbe0 [ 178.566753][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.566775][ T8708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.566804][ T8708] ___sys_sendmsg+0x190/0x1e0 [ 178.566823][ T8708] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.566851][ T8708] ? find_held_lock+0x2b/0x80 [ 178.566907][ T8708] __sys_sendmsg+0x160/0x210 [ 178.566932][ T8708] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.566958][ T8708] ? __pfx_ksys_write+0x10/0x10 [ 178.566983][ T8708] __do_fast_syscall_32+0xe7/0x970 [ 178.567059][ T8708] ? lockdep_hardirqs_on+0x78/0x100 [ 178.567083][ T8708] do_fast_syscall_32+0x32/0x70 [ 178.567105][ T8708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.567127][ T8708] RIP: 0023:0xf7f75fec [ 178.567146][ T8708] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 178.567160][ T8708] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 178.567174][ T8708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 178.567184][ T8708] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.567194][ T8708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.567204][ T8708] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.567213][ T8708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.567236][ T8708] [ 178.568779][ T5783] vhci_hcd vhci_hcd.2: disconnect device [ 179.049900][ T5825] usb 42-1: enqueue for inactive port 0 [ 179.135630][ T8716] netlink: 196 bytes leftover after parsing attributes in process `syz.0.790'. [ 179.155346][ T8716] FAULT_INJECTION: forcing a failure. [ 179.155346][ T8716] name failslab, interval 1, probability 0, space 9, times 0 [ 179.174377][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.0.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.174399][ T8716] Tainted: [L]=SOFTLOCKUP [ 179.174402][ T8716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.174409][ T8716] Call Trace: [ 179.174413][ T8716] [ 179.174418][ T8716] dump_stack_lvl+0x100/0x190 [ 179.174443][ T8716] should_fail_ex.cold+0x5/0xa [ 179.174456][ T8716] should_failslab+0xc2/0x120 [ 179.174473][ T8716] __kmalloc_noprof+0xfc/0x820 [ 179.174488][ T8716] ? do_raw_spin_lock+0x128/0x260 [ 179.174502][ T8716] ? offload_action_alloc+0x29/0xf0 [ 179.174523][ T8716] offload_action_alloc+0x29/0xf0 [ 179.174540][ T8716] tcf_action_offload_add_ex+0x1b6/0x7b0 [ 179.174558][ T8716] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 179.174584][ T8716] ? tcf_action_fill_size+0x110/0x340 [ 179.174598][ T8716] ? tcf_action_fill_size+0x110/0x340 [ 179.174616][ T8716] tcf_action_init+0x679/0xa60 [ 179.174636][ T8716] ? __pfx_tcf_action_init+0x10/0x10 [ 179.174661][ T8716] ? __kernel_text_address+0xd/0x30 [ 179.174679][ T8716] ? unwind_get_return_address+0x59/0xa0 [ 179.174697][ T8716] ? arch_stack_walk+0xa6/0xf0 [ 179.174723][ T8716] ? kfree_skbmem+0x19a/0x210 [ 179.174736][ T8716] ? kasan_save_stack+0x3f/0x50 [ 179.174749][ T8716] ? kasan_save_stack+0x30/0x50 [ 179.174762][ T8716] ? kasan_save_track+0x14/0x30 [ 179.174775][ T8716] ? kasan_save_free_info+0x3b/0x70 [ 179.174785][ T8716] ? __kasan_slab_free+0x5f/0x80 [ 179.174799][ T8716] ? kmem_cache_free+0x127/0x6b0 [ 179.174810][ T8716] ? kfree_skbmem+0x19a/0x210 [ 179.174821][ T8716] ? consume_skb+0xd1/0x110 [ 179.174830][ T8716] ? nlmon_xmit+0xa5/0xe0 [ 179.174887][ T8716] tcf_action_add+0xed/0x5c0 [ 179.174905][ T8716] ? __pfx_tcf_action_add+0x10/0x10 [ 179.174942][ T8716] ? __nla_parse+0x40/0x60 [ 179.174959][ T8716] tc_ctl_action+0x2e3/0x470 [ 179.174975][ T8716] ? __pfx_tc_ctl_action+0x10/0x10 [ 179.174995][ T8716] ? __pfx_tc_ctl_action+0x10/0x10 [ 179.175011][ T8716] rtnetlink_rcv_msg+0x3c9/0xe90 [ 179.175024][ T8716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.175038][ T8716] ? ref_tracker_free+0x37e/0x6c0 [ 179.175051][ T8716] netlink_rcv_skb+0x159/0x420 [ 179.175066][ T8716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.175077][ T8716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.175095][ T8716] ? netlink_deliver_tap+0x1ae/0xcc0 [ 179.175111][ T8716] netlink_unicast+0x585/0x850 [ 179.175126][ T8716] ? __pfx_netlink_unicast+0x10/0x10 [ 179.175138][ T8716] ? __build_skb_around+0x278/0x390 [ 179.175152][ T8716] ? is_vmalloc_addr+0x86/0xa0 [ 179.175166][ T8716] netlink_sendmsg+0x8b0/0xda0 [ 179.175181][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.175196][ T8716] ? apparmor_socket_sendmsg+0x15b/0x270 [ 179.175211][ T8716] ____sys_sendmsg+0xa4d/0xbe0 [ 179.175223][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.175237][ T8716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.175256][ T8716] ___sys_sendmsg+0x190/0x1e0 [ 179.175269][ T8716] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.175288][ T8716] ? find_held_lock+0x2b/0x80 [ 179.175310][ T8716] __sys_sendmsg+0x160/0x210 [ 179.175328][ T8716] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.175347][ T8716] ? __pfx_ksys_write+0x10/0x10 [ 179.175362][ T8716] __do_fast_syscall_32+0xe7/0x970 [ 179.175378][ T8716] ? lockdep_hardirqs_on+0x78/0x100 [ 179.175393][ T8716] do_fast_syscall_32+0x32/0x70 [ 179.175407][ T8716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.175426][ T8716] RIP: 0023:0xf7f75fec [ 179.175438][ T8716] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 179.175443][ T8716] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 179.175455][ T8716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 179.175461][ T8716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.175467][ T8716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.175474][ T8716] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.175480][ T8716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.175493][ T8716] [ 179.175506][ T8716] netlink: 196 bytes leftover after parsing attributes in process `syz.0.790'. [ 179.590885][ T8722] random: crng reseeded on system resumption [ 179.670101][ T8716] netlink: 19 bytes leftover after parsing attributes in process `syz.0.790'. [ 179.682005][ T5825] usb usb42-port1: attempt power cycle [ 179.686098][ T8723] 9p: Bad value for 'rfdno' [ 179.692009][ T8723] 9p: Bad value for 'rfdno' [ 179.831454][ T8726] vhci_hcd: not connected 4 [ 180.214764][ T8742] netlink: 196 bytes leftover after parsing attributes in process `syz.0.798'. [ 180.230045][ T8742] netlink: 196 bytes leftover after parsing attributes in process `syz.0.798'. [ 180.246796][ T8742] netlink: 19 bytes leftover after parsing attributes in process `syz.0.798'. [ 180.260995][ T5825] usb usb42-port1: unable to enumerate USB device [ 180.395028][ T8744] ptrace attach of "/syz-executor exec"[5742] was attempted by "/syz-executor exec"[8744] [ 180.646557][ T8740] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 182.889623][ T8787] netlink: 'syz.4.813': attribute type 2 has an invalid length. [ 182.898914][ T8787] netlink: 'syz.4.813': attribute type 8 has an invalid length. [ 182.909044][ T8787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.813'. [ 182.946267][ T8788] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 182.953562][ T8787] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 183.196944][ T8792] bonding: unable to delete non-existent b [ 183.329978][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.659934][ T5818] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 183.799898][ T5825] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 183.819440][ T5818] usb 9-1: unable to get BOS descriptor or descriptor too short [ 183.822087][ T5818] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 183.831056][ T5818] usb 9-1: config 100 has an invalid interface number: 173 but max is 0 [ 183.834992][ T5818] usb 9-1: config 100 has no interface number 0 [ 183.840445][ T5818] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 183.850627][ T5818] usb 9-1: config 100 interface 173 altsetting 142 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 183.860702][ T5818] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x8A has invalid maxpacket 59360, setting to 8 [ 183.868519][ T5818] usb 9-1: config 100 interface 173 has no altsetting 0 [ 183.881186][ T5818] usb 9-1: string descriptor 0 read error: -22 [ 183.883550][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.891172][ T8808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.895087][ T8808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.909001][ T5818] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected [ 183.923659][ T5818] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 183.960363][ T5825] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 183.964331][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.971852][ T5825] usb 7-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.971873][ T5825] usb 7-1: config 1 interface 0 has no altsetting 0 [ 183.973914][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.973934][ T5825] usb 7-1: Product: syz [ 183.973947][ T5825] usb 7-1: Manufacturer: syz [ 183.974006][ T5825] usb 7-1: SerialNumber: syz [ 184.129637][ T8808] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 184.129810][ C2] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 184.265369][ T5818] usb 9-1: USB disconnect, device number 10 [ 184.273289][ T5818] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 184.286741][ T5818] metro_usb 9-1:100.173: device disconnected [ 184.449154][ T8730] syz.0.792 (8730) used greatest stack depth: 17056 bytes left [ 184.652069][ T42] audit: type=1326 audit(1787038890.512:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.664615][ T42] audit: type=1326 audit(1787038890.512:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.672015][ T42] audit: type=1326 audit(1787038890.512:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.681954][ T42] audit: type=1326 audit(1787038890.512:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.691731][ T42] audit: type=1326 audit(1787038890.522:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.698502][ T42] audit: type=1326 audit(1787038890.522:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.710559][ T42] audit: type=1326 audit(1787038890.522:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.725696][ T42] audit: type=1326 audit(1787038890.522:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.745046][ T42] audit: type=1326 audit(1787038890.522:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.761160][ T42] audit: type=1326 audit(1787038890.522:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.828" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 184.768566][ T8833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.943197][ T8833] md: could not open device unknown-block(0,0). [ 184.948846][ T8833] md: error, md_import_device() returned -6 [ 184.954323][ T8840] md: could not open device unknown-block(1,0). [ 184.959763][ T8840] md: error, md_import_device() returned -16 [ 185.055755][ T8847] Bluetooth: hci0: unsupported parameter 255 [ 185.057962][ T8847] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 185.175350][ T8855] FAULT_INJECTION: forcing a failure. [ 185.175350][ T8855] name failslab, interval 1, probability 0, space 9, times 0 [ 185.184896][ T8855] CPU: 2 UID: 0 PID: 8855 Comm: syz.4.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.184916][ T8855] Tainted: [L]=SOFTLOCKUP [ 185.184920][ T8855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.184927][ T8855] Call Trace: [ 185.184931][ T8855] [ 185.184935][ T8855] dump_stack_lvl+0x100/0x190 [ 185.184955][ T8855] should_fail_ex.cold+0x5/0xa [ 185.184968][ T8855] should_failslab+0xc2/0x120 [ 185.184984][ T8855] __kvmalloc_node_noprof+0x116/0x970 [ 185.184999][ T8855] ? __kvmalloc_node_noprof+0x330/0x970 [ 185.185013][ T8855] ? io_alloc_cache_init+0x38/0x170 [ 185.185031][ T8855] io_alloc_cache_init+0x38/0x170 [ 185.185046][ T8855] io_rsrc_cache_init+0x40/0x50 [ 185.185062][ T8855] io_uring_setup.cold+0x4c0/0x1c2e [ 185.185110][ T8855] ? rcu_read_lock_any_held+0x6a/0xa0 [ 185.185132][ T8855] ? find_held_lock+0x2b/0x80 [ 185.185153][ T8855] ? __pfx_io_uring_setup+0x10/0x10 [ 185.185170][ T8855] ? ksys_write+0x190/0x250 [ 185.185190][ T8855] ? __mutex_unlock_slowpath+0x35d/0x930 [ 185.185226][ T8855] ? fput+0x79/0x100 [ 185.185247][ T8855] ? ksys_write+0x1ac/0x250 [ 185.185263][ T8855] ? __pfx_ksys_write+0x10/0x10 [ 185.185275][ T8855] __ia32_sys_io_uring_setup+0xc2/0x170 [ 185.185288][ T8855] __do_fast_syscall_32+0xe7/0x970 [ 185.185303][ T8855] ? lockdep_hardirqs_on+0x78/0x100 [ 185.185317][ T8855] do_fast_syscall_32+0x32/0x70 [ 185.185332][ T8855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.185346][ T8855] RIP: 0023:0xf70aefec [ 185.185360][ T8855] Code: Unable to access opcode bytes at 0xf70aefc2. [ 185.185365][ T8855] RSP: 002b:00000000f549d43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 185.185377][ T8855] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 185.185383][ T8855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.185389][ T8855] RBP: 00000000f549d4fc R08: 0000000000000000 R09: 0000000000000000 [ 185.185395][ T8855] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.185401][ T8855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.185415][ T8855] [ 185.338515][ T5092] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 185.477633][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 185.605507][ T8870] FAULT_INJECTION: forcing a failure. [ 185.605507][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.610924][ T8870] CPU: 2 UID: 0 PID: 8870 Comm: syz.4.844 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.610942][ T8870] Tainted: [L]=SOFTLOCKUP [ 185.610947][ T8870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.610953][ T8870] Call Trace: [ 185.610957][ T8870] [ 185.610961][ T8870] dump_stack_lvl+0x100/0x190 [ 185.610980][ T8870] should_fail_ex.cold+0x5/0xa [ 185.610993][ T8870] strncpy_from_user+0x3b/0x2d0 [ 185.611012][ T8870] do_getname+0x78/0x390 [ 185.611029][ T8870] do_sys_openat2+0xc7/0x1e0 [ 185.611045][ T8870] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.611062][ T8870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.611081][ T8870] __ia32_compat_sys_openat+0x12d/0x210 [ 185.611097][ T8870] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 185.611113][ T8870] ? fput+0x79/0x100 [ 185.611126][ T8870] ? ksys_write+0x1ac/0x250 [ 185.611136][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 185.611150][ T8870] __do_fast_syscall_32+0xe7/0x970 [ 185.611165][ T8870] ? lockdep_hardirqs_on+0x78/0x100 [ 185.611180][ T8870] do_fast_syscall_32+0x32/0x70 [ 185.611195][ T8870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.611210][ T8870] RIP: 0023:0xf70aefec [ 185.611223][ T8870] Code: Unable to access opcode bytes at 0xf70aefc2. [ 185.611228][ T8870] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 185.611240][ T8870] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000900 [ 185.611247][ T8870] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.611253][ T8870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.611259][ T8870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.611266][ T8870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.611279][ T8870] [ 186.012204][ T8879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.847'. [ 186.452175][ T8885] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 186.459373][ T8885] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.0), cmd(4) [ 186.586964][ T5825] usb 7-1: USB disconnect, device number 14 [ 186.853141][ T8894] jffs2: notice: (8894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.970666][ T8900] syzkaller0: entered promiscuous mode [ 186.980052][ T8900] syzkaller0: entered allmulticast mode [ 187.014543][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 187.204614][ T8910] netlink: NAT attribute has 5 unknown bytes [ 187.208117][ T8910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.439906][ T5825] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 187.600397][ T5825] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 187.607961][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.612641][ T5825] usb 5-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.617470][ T5825] usb 5-1: config 1 interface 0 has no altsetting 0 [ 187.624362][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.628400][ T5825] usb 5-1: Product: syz [ 187.631464][ T5825] usb 5-1: Manufacturer: syz [ 187.636466][ T5825] usb 5-1: SerialNumber: syz [ 188.186604][ C2] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 188.189847][ C2] sr 2:0:0:0: [sr0] tag#25 CDB: Volume set (in), Read cd be 17 af f9 4a e8 [ 189.404728][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 189.431447][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.437222][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.445940][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.448500][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.455412][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.465338][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.468945][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.472238][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.474913][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.477530][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.480499][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.483098][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.485771][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.488406][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.491934][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.494573][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.497440][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.503904][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.508803][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.514091][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.518666][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.524127][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.529391][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.533456][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.536513][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.540195][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.542799][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.545451][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.548901][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.553214][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.557131][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.560940][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.565941][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.568911][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.576364][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.580367][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.587674][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.591826][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.596112][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.600473][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.604711][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.609085][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.614583][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.619114][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.623432][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.626107][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.628809][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.631942][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.634655][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.637419][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.640546][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.643182][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.645923][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.648624][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.652510][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.655255][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.657919][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.660939][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.663664][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.666336][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.668949][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.672010][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.674771][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 189.677468][ T8941] overlay: filesystem on ./file0 not supported as upperdir [ 190.213926][ T5825] usb 5-1: USB disconnect, device number 15 [ 190.557720][ T8959] FAULT_INJECTION: forcing a failure. [ 190.557720][ T8959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.562562][ T8959] CPU: 2 UID: 0 PID: 8959 Comm: syz.2.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.562594][ T8959] Tainted: [L]=SOFTLOCKUP [ 190.562598][ T8959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.562605][ T8959] Call Trace: [ 190.562609][ T8959] [ 190.562613][ T8959] dump_stack_lvl+0x100/0x190 [ 190.562632][ T8959] should_fail_ex.cold+0x5/0xa [ 190.562646][ T8959] _copy_to_user+0x32/0xd0 [ 190.562664][ T8959] simple_read_from_buffer+0xcb/0x170 [ 190.562691][ T8959] proc_fail_nth_read+0x1af/0x230 [ 190.562705][ T8959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.562717][ T8959] ? rw_verify_area+0xce/0x6d0 [ 190.562734][ T8959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.562746][ T8959] vfs_read+0x1e4/0xb40 [ 190.562763][ T8959] ? __pfx_vfs_read+0x10/0x10 [ 190.562773][ T8959] ? find_held_lock+0x2b/0x80 [ 190.562788][ T8959] ? __fget_files+0x215/0x3d0 [ 190.562803][ T8959] ? __fget_files+0x21f/0x3d0 [ 190.562818][ T8959] ksys_read+0x12a/0x250 [ 190.562828][ T8959] ? __pfx_ksys_read+0x10/0x10 [ 190.562843][ T8959] do_int80_emulation+0x14b/0x720 [ 190.562861][ T8959] asm_int80_emulation+0x1a/0x20 [ 190.562872][ T8959] RIP: 0023:0xf71d74eb [ 190.562882][ T8959] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 190.562893][ T8959] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 190.562905][ T8959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54965d0 [ 190.562912][ T8959] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 190.562918][ T8959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.562924][ T8959] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.562931][ T8959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.562944][ T8959] [ 191.060042][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 191.094960][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'. [ 191.210480][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.214473][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.218379][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.228565][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.234625][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.239542][ T9] usb 5-1: Product: syz [ 191.242001][ T9] usb 5-1: Manufacturer: syz [ 191.244085][ T9] usb 5-1: SerialNumber: syz [ 191.253181][ T9] usb 5-1: config 0 descriptor?? [ 191.261934][ T9] usb 5-1: selecting invalid altsetting 0 [ 191.463613][ T9] usb 5-1: USB disconnect, device number 16 [ 192.030831][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 192.082086][ T8984] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 192.115414][ T8984] bridge1: entered promiscuous mode [ 192.123067][ T8984] bond1: (slave bridge1): making interface the new active one [ 192.126017][ T8984] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 192.135418][ T8984] bridge2: entered promiscuous mode [ 192.141893][ T8984] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 192.170669][ T5825] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 192.192548][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.196767][ T9] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.200802][ T9] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 56287, setting to 64 [ 192.204311][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.208260][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.211316][ T9] usb 7-1: Product: syz [ 192.212696][ T9] usb 7-1: Manufacturer: syz [ 192.214172][ T9] usb 7-1: SerialNumber: syz [ 192.225219][ T9] usb 7-1: config 0 descriptor?? [ 192.227572][ T8977] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.232722][ T9] usb 7-1: selecting invalid altsetting 0 [ 192.330973][ T5825] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 192.334980][ T5825] usb 9-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.338091][ T5825] usb 9-1: config 1 interface 0 has no altsetting 0 [ 192.342467][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.345164][ T5825] usb 9-1: Product: syz [ 192.346540][ T5825] usb 9-1: Manufacturer: syz [ 192.348061][ T5825] usb 9-1: SerialNumber: syz [ 192.445293][ T6062] usb 7-1: USB disconnect, device number 15 [ 192.500669][ T5818] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 192.649920][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 192.653585][ T5818] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 192.657211][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.661847][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.664600][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 192.668110][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 192.673778][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.679273][ T5818] hub 5-1:1.0: bad descriptor, ignoring hub [ 192.681434][ T5818] hub 5-1:1.0: probe with driver hub failed with error -5 [ 192.684008][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 192.685733][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 192.688160][ T5818] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 192.690393][ T5818] cdc_wdm 5-1:1.0: Unknown control protocol [ 193.814590][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.817730][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.996686][ T8998] devpts: Bad value for 'gid' [ 193.998320][ T8998] devpts: Bad value for 'gid' [ 194.006350][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'. [ 194.330700][ T5825] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 194.499952][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 194.502313][ T5825] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.506454][ T5825] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.509276][ T5825] usb 7-1: config 0 has no interface number 0 [ 194.512184][ T5825] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.515647][ T5825] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 194.519560][ T5825] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.523478][ T5825] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.527626][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.532394][ T5825] usb 7-1: config 0 descriptor?? [ 194.542649][ T5825] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 194.869557][ T9003] wg2 speed is unknown, defaulting to 1000 [ 194.945112][ T9] usb 9-1: USB disconnect, device number 11 [ 195.194904][ T9007] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 195.201959][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 195.206453][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 195.257577][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.259635][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.261718][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.263746][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.265743][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.267752][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.269766][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.271759][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.273890][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.275886][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.278781][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.280838][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.283272][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.285363][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.287578][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.289658][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.291952][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.294034][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.296492][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.298584][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.300754][ T9] usb 5-1: USB disconnect, device number 17 [ 195.319389][ T9012] jffs2: notice: (9012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.351607][ T11] usb 7-1: USB disconnect, device number 16 [ 195.355940][ T11] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 196.186361][ T9026] FAULT_INJECTION: forcing a failure. [ 196.186361][ T9026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.246386][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.4.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.246407][ T9026] Tainted: [L]=SOFTLOCKUP [ 196.246411][ T9026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.246418][ T9026] Call Trace: [ 196.246422][ T9026] [ 196.246427][ T9026] dump_stack_lvl+0x100/0x190 [ 196.246446][ T9026] should_fail_ex.cold+0x5/0xa [ 196.246460][ T9026] _copy_from_user+0x2e/0xd0 [ 196.246479][ T9026] kstrtouint_from_user+0xd6/0x1d0 [ 196.246493][ T9026] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 196.246506][ T9026] ? __lock_acquire+0x49f/0x1a40 [ 196.246524][ T9026] proc_fail_nth_write+0x83/0x220 [ 196.246537][ T9026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.246552][ T9026] vfs_write+0x2aa/0x1050 [ 196.246564][ T9026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.246577][ T9026] ? __pfx_vfs_write+0x10/0x10 [ 196.246587][ T9026] ? find_held_lock+0x2b/0x80 [ 196.246601][ T9026] ? __fget_files+0x215/0x3d0 [ 196.246616][ T9026] ? __fget_files+0x21f/0x3d0 [ 196.246631][ T9026] ksys_write+0x12a/0x250 [ 196.246641][ T9026] ? __pfx_ksys_write+0x10/0x10 [ 196.246656][ T9026] do_int80_emulation+0x14b/0x720 [ 196.246673][ T9026] asm_int80_emulation+0x1a/0x20 [ 196.246685][ T9026] RIP: 0023:0xf71e74eb [ 196.246694][ T9026] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 196.246705][ T9026] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 196.246716][ T9026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f547c5d0 [ 196.246723][ T9026] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.246729][ T9026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.246735][ T9026] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.246741][ T9026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.246755][ T9026] [ 196.521372][ T11] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 196.604907][ T9033] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 196.607530][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'. [ 196.617038][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 196.671907][ T11] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 196.675637][ T11] usb 7-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.678782][ T11] usb 7-1: config 1 interface 0 has no altsetting 0 [ 196.683154][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.685702][ T11] usb 7-1: Product: syz [ 196.687121][ T11] usb 7-1: Manufacturer: syz [ 196.691711][ T11] usb 7-1: SerialNumber: syz [ 196.979947][ T5825] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.130576][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 197.134161][ T5825] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.139314][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.144734][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.148944][ T5825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 197.156239][ T5825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 197.162682][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.179458][ T5825] hub 5-1:1.0: bad descriptor, ignoring hub [ 197.185794][ T5825] hub 5-1:1.0: probe with driver hub failed with error -5 [ 197.191455][ T11] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 197.199184][ T5825] cdc_wdm 5-1:1.0: skipping garbage [ 197.203612][ T5825] cdc_wdm 5-1:1.0: skipping garbage [ 197.208534][ T5825] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.212170][ T5825] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.349894][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 197.352077][ T11] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.356040][ T11] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.358664][ T11] usb 9-1: config 0 has no interface number 0 [ 197.360748][ T11] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.364304][ T11] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.368298][ T11] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.373063][ T11] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.377713][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.384486][ T11] usb 9-1: config 0 descriptor?? [ 197.455234][ T11] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 197.706722][ T9046] wg2 speed is unknown, defaulting to 1000 [ 199.222444][ T1485] usb 7-1: USB disconnect, device number 17 [ 199.737102][ T5818] usb 5-1: USB disconnect, device number 18 [ 199.737119][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 199.840580][ T24] usb 9-1: USB disconnect, device number 12 [ 199.851224][ T24] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 200.006142][ T9060] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 200.016192][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 200.025046][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 200.124282][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.907'. [ 200.553633][ T9077] netlink: 136 bytes leftover after parsing attributes in process `syz.0.913'. [ 200.559709][ T9077] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 200.693412][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.704856][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.708905][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.722399][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.727242][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.750274][ T24] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 200.840630][ T9085] acpi-nfit pcspkr: error -ENODEV: No ACPI companion [ 200.854246][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 200.887040][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 200.920807][ T24] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 200.931332][ T24] usb 9-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.936017][ T24] usb 9-1: config 1 interface 0 has no altsetting 0 [ 200.950824][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.953414][ T24] usb 9-1: Product: syz [ 200.954783][ T24] usb 9-1: Manufacturer: syz [ 200.956345][ T24] usb 9-1: SerialNumber: syz [ 201.228676][ T9083] wg2 speed is unknown, defaulting to 1000 [ 201.553345][ T9103] ------------[ cut here ]------------ [ 201.555175][ T9103] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 201.558942][ T9103] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#0: syz.0.917/9103 [ 201.561998][ T9103] Modules linked in: [ 201.563512][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.0.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.567656][ T9103] Tainted: [L]=SOFTLOCKUP [ 201.569362][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.573434][ T9103] RIP: 0010:__might_sleep+0x97/0xc0 [ 201.575532][ T9103] Code: 8b 94 24 78 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c 23 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 ad 25 a4 00 eb 9f 89 74 24 04 e8 d2 25 a4 [ 201.582906][ T9103] RSP: 0018:ffffc9000636fb68 EFLAGS: 00010282 [ 201.585241][ T9103] RAX: dffffc0000000000 RBX: ffffffff8bcfd800 RCX: ffffffff81e1d99d [ 201.588248][ T9103] RDX: ffffffff81e1d99d RSI: 0000000000000002 RDI: ffffffff91256230 [ 201.591328][ T9103] RBP: 000000000000026f R08: ffffffff81fbd4c2 R09: 0000000000000000 [ 201.594436][ T9103] R10: ffffc9000636fd20 R11: 0000000000000000 R12: ffff888044278000 [ 201.597449][ T9103] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80cb90 [ 201.600564][ T9103] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f5436b40 [ 201.603940][ T9103] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 201.606474][ T9103] CR2: 00000000f739a8f8 CR3: 000000002a275000 CR4: 0000000000352ef0 [ 201.609579][ T9103] Call Trace: [ 201.611023][ T9103] [ 201.612188][ T9103] ? __lock_acquire+0x49f/0x1a40 [ 201.614192][ T9103] __mutex_lock+0x10e/0x1bd0 [ 201.616005][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.617827][ T9103] ? futex_hash_allocate+0x6fc/0x1120 [ 201.619996][ T9103] ? __pfx___mutex_lock+0x10/0x10 [ 201.622085][ T9103] ? do_raw_spin_lock+0x128/0x260 [ 201.624061][ T9103] ? find_held_lock+0x2b/0x80 [ 201.625931][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.628195][ T9103] ? lockdep_hardirqs_on+0x78/0x100 [ 201.630356][ T9103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.632659][ T9103] ? prepare_to_wait_event+0xbe/0x720 [ 201.634885][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.637040][ T9103] futex_hash_allocate+0xd22/0x1120 [ 201.639101][ T9103] ? __pfx_futex_hash_allocate+0x10/0x10 [ 201.641449][ T9103] ? __pfx_var_wake_function+0x10/0x10 [ 201.643605][ T9103] ? static_key_count+0x5a/0x70 [ 201.645532][ T9103] futex_hash_prctl+0x1b8/0x390 [ 201.647465][ T9103] __do_sys_prctl+0x16dd/0x2270 [ 201.649469][ T9103] ? __pfx___do_sys_prctl+0x10/0x10 [ 201.651725][ T9103] __do_fast_syscall_32+0xe7/0x970 [ 201.653786][ T9103] do_fast_syscall_32+0x32/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.655691][ T9103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.658321][ T9103] RIP: 0023:0xf7f75fec [ 201.659941][ T9103] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 201.662016][ T9103] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 201.664568][ T9103] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 201.667335][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.670521][ T9103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.673518][ T9103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.676562][ T9103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.679552][ T9103] [ 201.680818][ T9103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.683624][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.0.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.687903][ T9103] Tainted: [L]=SOFTLOCKUP [ 201.689571][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.693301][ T9103] Call Trace: [ 201.694571][ T9103] [ 201.695707][ T9103] dump_stack_lvl+0x100/0x190 [ 201.697529][ T9103] vpanic+0x552/0x970 [ 201.699044][ T9103] ? __pfx_vpanic+0x10/0x10 [ 201.700759][ T9103] panic+0xd1/0xe0 [ 201.702173][ T9103] ? __pfx_panic+0x10/0x10 [ 201.703818][ T9103] ? check_panic_on_warn+0x1f/0x90 [ 201.705745][ T9103] check_panic_on_warn.cold+0x19/0x34 [ 201.707730][ T9103] ? __might_sleep+0x94/0xc0 [ 201.709509][ T9103] __warn.cold+0x191/0x318 [ 201.711199][ T9103] __report_bug+0x30f/0x440 [ 201.712910][ T9103] ? __might_sleep+0x94/0xc0 [ 201.714650][ T9103] ? __pfx___report_bug+0x10/0x10 [ 201.716554][ T9103] ? lock_acquire+0x1b9/0x370 [ 201.718314][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.720305][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.722327][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.724278][ T9103] ? mark_held_locks+0x40/0x70 [ 201.726072][ T9103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.728298][ T9103] report_bug_entry+0xe1/0x290 [ 201.730095][ T9103] ? __might_sleep+0x97/0xc0 [ 201.731842][ T9103] handle_bug+0x1cd/0x2a0 [ 201.733483][ T9103] exc_invalid_op+0x17/0x50 [ 201.735178][ T9103] asm_exc_invalid_op+0x1a/0x20 [ 201.736978][ T9103] RIP: 0010:__might_sleep+0x97/0xc0 [ 201.738964][ T9103] Code: 8b 94 24 78 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c 23 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 ad 25 a4 00 eb 9f 89 74 24 04 e8 d2 25 a4 [ 201.746003][ T9103] RSP: 0018:ffffc9000636fb68 EFLAGS: 00010282 [ 201.748301][ T9103] RAX: dffffc0000000000 RBX: ffffffff8bcfd800 RCX: ffffffff81e1d99d [ 201.751213][ T9103] RDX: ffffffff81e1d99d RSI: 0000000000000002 RDI: ffffffff91256230 [ 201.754131][ T9103] RBP: 000000000000026f R08: ffffffff81fbd4c2 R09: 0000000000000000 [ 201.757081][ T9103] R10: ffffc9000636fd20 R11: 0000000000000000 R12: ffff888044278000 [ 201.759966][ T9103] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80cb90 [ 201.762845][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.764810][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.766789][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.768757][ T9103] ? __lock_acquire+0x49f/0x1a40 [ 201.770586][ T9103] __mutex_lock+0x10e/0x1bd0 [ 201.772374][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.774409][ T9103] ? futex_hash_allocate+0x6fc/0x1120 [ 201.776458][ T9103] ? __pfx___mutex_lock+0x10/0x10 [ 201.778385][ T9103] ? do_raw_spin_lock+0x128/0x260 [ 201.780310][ T9103] ? find_held_lock+0x2b/0x80 [ 201.782126][ T9103] ? prepare_to_wait_event+0x8d/0x720 [ 201.784180][ T9103] ? lockdep_hardirqs_on+0x78/0x100 [ 201.786189][ T9103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.788445][ T9103] ? prepare_to_wait_event+0xbe/0x720 [ 201.790523][ T9103] ? futex_hash_allocate+0xd22/0x1120 [ 201.792589][ T9103] futex_hash_allocate+0xd22/0x1120 [ 201.794583][ T9103] ? __pfx_futex_hash_allocate+0x10/0x10 [ 201.796724][ T9103] ? __pfx_var_wake_function+0x10/0x10 [ 201.798832][ T9103] ? static_key_count+0x5a/0x70 [ 201.800727][ T9103] futex_hash_prctl+0x1b8/0x390 [ 201.802588][ T9103] __do_sys_prctl+0x16dd/0x2270 [ 201.804469][ T9103] ? __pfx___do_sys_prctl+0x10/0x10 [ 201.806456][ T9103] __do_fast_syscall_32+0xe7/0x970 [ 201.808426][ T9103] do_fast_syscall_32+0x32/0x70 [ 201.810364][ T9103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.812818][ T9103] RIP: 0023:0xf7f75fec [ 201.814411][ T9103] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 201.816948][ T9103] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 201.820114][ T9103] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 201.823136][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.826147][ T9103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.829213][ T9103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.832230][ T9103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.835272][ T9103] [ 201.837083][ T9103] Kernel Offset: disabled [ 201.838759][ T9103] Rebooting in 86400 seconds..