last executing test programs: 6.147792101s ago: executing program 3 (id=1737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.198897664s ago: executing program 3 (id=1740): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)=@secondary) r4 = add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000580)='asymmetric\x00', 0x0, &(0x7f00000005c0)="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", 0x559, r4) r6 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x0, 0x0) flistxattr(r6, 0x0, 0xfffffc86) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8020) sendmmsg(0xffffffffffffffff, &(0x7f00000012c0), 0x40000000000009f, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b40)={r5, 0x83}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62dd70ef53038a0e38940ef7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b", 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) 5.167390266s ago: executing program 2 (id=1741): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/41) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000400)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, 0x0) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'pim6reg\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x9, 0x9, 0x8, [0x7, 0x7f, 0x9, 0x2, 0x3ff, 0x9, 0x8, 0x3]}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000000010001", 0x7) 4.804172528s ago: executing program 0 (id=1742): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x10) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x1b, "fd5a44512b7e1b0020ed2abb4301002700"}}) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x62c21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f5, 0x0, 0x4}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = fsmount(r1, 0x1, 0x0) fchdir(r9) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 4.490048642s ago: executing program 1 (id=1743): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) migrate_pages(0x0, 0x4, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)={0x1c, r4, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400)={0x0, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x7b4, 0x80a00) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r6, &(0x7f0000005000)='synaptics-smbus', 0xf) 4.486935775s ago: executing program 0 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014000000010089907800000000ffffffff"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r4}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 4.229098138s ago: executing program 3 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019d00)=0x80000000000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000006800010400002000000000000a00000000000000080001000300000006000300010000000c00020001000000010000001c000c80060001000b0e000008000200640000000800030064000000d404d9d1b8d772ee47960af9f711329d3f02ab2aebdcdff347425c14e3e1cb60ec88f6"], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 4.226510497s ago: executing program 1 (id=1753): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) write(r3, &(0x7f0000000540)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r3, &(0x7f0000000580)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400190008000200010101010500040040000000", 0x60) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0xac, 0x35}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) 4.165342775s ago: executing program 2 (id=1745): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.352938703s ago: executing program 0 (id=1746): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.861014226s ago: executing program 1 (id=1747): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xa, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x7e, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000001640)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000016c0)={0xfffffffffffffc00, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000001840)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000001940)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) 2.860419046s ago: executing program 2 (id=1748): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000240), 0x0) 2.628051982s ago: executing program 1 (id=1749): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 2.401925133s ago: executing program 0 (id=1750): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) rmdir(&(0x7f0000000040)='./file0/file3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f00000003c0)=""/154, 0x9a, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e25, 0xfffffffe, @mcast1, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}], 0x3c) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x7, 0x84, 0x2, 0x5, 0x1, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xfffffffe}], 0x1, 0x40000100, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x180001) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000600)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x1a, 0x13, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 2.164855229s ago: executing program 2 (id=1752): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000400)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580)=0x3, 0xac5) syz_clone3(&(0x7f00000005c0)={0x23800000, &(0x7f0000000640), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.41221682s ago: executing program 1 (id=1754): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)=@secondary) r4 = add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000580)='asymmetric\x00', 0x0, &(0x7f00000005c0)="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", 0x559, r4) r6 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x0, 0x0) flistxattr(r6, 0x0, 0xfffffc86) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8020) sendmmsg(0xffffffffffffffff, &(0x7f00000012c0), 0x40000000000009f, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b40)={r5, 0xc4}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62dd70ef53038a0e38940ef7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b208158713c814e6e9e7a9cb923bdcf8df50500000000878700b8bf19da1095e6b47db929f5277a39b2c121f0adffea4fc3cdf6578298601882835783433d69235c", 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) 1.197573497s ago: executing program 2 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/41) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000400)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000180)=0x18) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'pim6reg\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x9, 0x9, 0x8, [0x7, 0x7f, 0x9, 0x2, 0x3ff, 0x9, 0x8, 0x3]}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000000010001", 0x7) 1.1931919s ago: executing program 0 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014000000010089907800000000ffffffff"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r4}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 918.559953ms ago: executing program 2 (id=1757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10e, 0xfffffffdfffffffc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000003c0)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x5f) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xf}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 917.074008ms ago: executing program 3 (id=1758): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) migrate_pages(0x0, 0x4, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)={0x1c, r4, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400)={0x0, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x7b4, 0x80a00) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r6, &(0x7f0000005000)='synaptics-smbus', 0xf) 490.904489ms ago: executing program 3 (id=1759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xa, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x7e, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000001640)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000016c0)={0xfffffffffffffc00, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000001840)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000001940)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) 432.596069ms ago: executing program 1 (id=1760): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) rmdir(&(0x7f0000000040)='./file0/file3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f00000003c0)=""/154, 0x9a, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e25, 0xfffffffe, @mcast1, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}], 0x3c) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x7, 0x84, 0x2, 0x5, 0x1, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xfffffffe}], 0x1, 0x40000100, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x180001) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000600)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x1a, 0x13, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 340.342042ms ago: executing program 3 (id=1761): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) write(r3, &(0x7f0000000540)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r3, &(0x7f0000000580)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400190008000200010101010500040040000000", 0x60) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0xac, 0x35}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) 0s ago: executing program 0 (id=1762): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') close(r0) kernel console output (not intermixed with test programs): eed USB device number 4 using dummy_hcd [ 223.619942][ T9430] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 223.619957][ T9430] overlayfs: failed to set xattr on upper [ 223.619961][ T9430] overlayfs: ...falling back to redirect_dir=nofollow. [ 223.619965][ T9430] overlayfs: ...falling back to metacopy=off. [ 223.619969][ T9430] overlayfs: ...falling back to index=off. [ 223.619972][ T9430] overlayfs: ...falling back to uuid=null. [ 223.684138][ T9432] random: crng reseeded on system resumption [ 223.714103][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 223.714560][ T5838] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.715496][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.715518][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.716622][ T5838] usb 6-1: config 0 descriptor?? [ 223.926504][ T5838] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 224.166609][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 224.190464][ T58] usb 6-1: USB disconnect, device number 4 [ 224.829674][ T9451] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 224.829707][ T9451] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 224.977259][ T52] IPVS: starting estimator thread 0... [ 225.072019][ T9456] IPVS: using max 43 ests per chain, 103200 per kthread [ 225.362359][ T9459] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.914931][ T9468] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 225.914946][ T9468] overlayfs: failed to set xattr on upper [ 225.914951][ T9468] overlayfs: ...falling back to redirect_dir=nofollow. [ 225.914954][ T9468] overlayfs: ...falling back to metacopy=off. [ 225.914958][ T9468] overlayfs: ...falling back to index=off. [ 225.914962][ T9468] overlayfs: ...falling back to uuid=null. [ 226.332453][ T5787] net_ratelimit: 10 callbacks suppressed [ 226.332472][ T5787] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 226.332494][ T5787] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.413931][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 226.851237][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 226.851258][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.985144][ T9490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.202990][ T9497] ptp ptp0: new virtual clock ptp2 [ 227.203042][ T9497] ptp ptp0: guarantee physical clock free running [ 227.363519][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 227.363550][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.872136][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 227.872168][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.382165][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 228.382187][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.574905][ T9512] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.574920][ T9512] overlayfs: failed to set xattr on upper [ 228.574930][ T9512] overlayfs: ...falling back to redirect_dir=nofollow. [ 228.574934][ T9512] overlayfs: ...falling back to metacopy=off. [ 228.574938][ T9512] overlayfs: ...falling back to index=off. [ 228.574942][ T9512] overlayfs: ...falling back to uuid=null. [ 228.631525][ T9511] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.818882][ T9537] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.452128][ T13] net_ratelimit: 10 callbacks suppressed [ 231.452143][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 231.452156][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 231.985927][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 231.985959][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 231.989087][ T9564] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.989101][ T9564] overlayfs: failed to set xattr on upper [ 231.989105][ T9564] overlayfs: ...falling back to redirect_dir=nofollow. [ 231.989109][ T9564] overlayfs: ...falling back to metacopy=off. [ 231.989113][ T9564] overlayfs: ...falling back to index=off. [ 231.989117][ T9564] overlayfs: ...falling back to uuid=null. [ 232.120242][ T9571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 232.120257][ T9571] overlayfs: failed to set xattr on upper [ 232.120261][ T9571] overlayfs: ...falling back to redirect_dir=nofollow. [ 232.120265][ T9571] overlayfs: ...falling back to metacopy=off. [ 232.120269][ T9571] overlayfs: ...falling back to index=off. [ 232.120273][ T9571] overlayfs: ...falling back to uuid=null. [ 232.492315][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 232.492348][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.003166][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 233.003199][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.525149][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 233.525170][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.883747][ T58] e1000 0000:00:06.0 eth0: Reset adapter [ 234.076160][ T9586] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 234.304539][ T9610] random: crng reseeded on system resumption [ 234.381271][ T9607] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.544887][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 234.580840][ T9623] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.580860][ T9623] overlayfs: failed to set xattr on upper [ 234.580866][ T9623] overlayfs: ...falling back to redirect_dir=nofollow. [ 234.580872][ T9623] overlayfs: ...falling back to metacopy=off. [ 234.580878][ T9623] overlayfs: ...falling back to index=off. [ 234.580885][ T9623] overlayfs: ...falling back to uuid=null. [ 235.122064][ T9627] : renamed from vlan0 (while UP) [ 235.145910][ T9627] bonding: b is being created... [ 236.283635][ T5821] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 236.622340][ T13] net_ratelimit: 10 callbacks suppressed [ 236.622362][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 236.622383][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 237.142126][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 237.142148][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 237.652373][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 237.652439][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 238.162179][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 238.162201][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 238.672368][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 238.672389][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 241.742225][ T13] net_ratelimit: 10 callbacks suppressed [ 241.742243][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 241.742263][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 242.252147][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 242.252168][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 242.774390][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 242.774418][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 242.800266][ T9681] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 242.883426][ T9676] FAULT_INJECTION: forcing a failure. [ 242.883426][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 242.883458][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT(full) [ 242.883481][ T9676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.883494][ T9676] Call Trace: [ 242.883501][ T9676] [ 242.883510][ T9676] dump_stack_lvl+0x100/0x190 [ 242.883542][ T9676] should_fail_ex.cold+0x5/0xa [ 242.883570][ T9676] should_failslab+0xc2/0x120 [ 242.883602][ T9676] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 242.883630][ T9676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.883662][ T9676] ? alloc_pwq+0x3ff/0xdd0 [ 242.883695][ T9676] alloc_pwq+0x3ff/0xdd0 [ 242.883730][ T9676] apply_wqattrs_prepare+0x847/0xbb0 [ 242.883768][ T9676] apply_workqueue_attrs_locked+0x64/0xe0 [ 242.883798][ T9676] __alloc_workqueue+0xd7b/0x1950 [ 242.883828][ T9676] alloc_workqueue_noprof+0xc7/0x130 [ 242.883850][ T9676] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 242.883881][ T9676] ? __asan_memcpy+0x3c/0x60 [ 242.883907][ T9676] loop_configure+0xddc/0x1590 [ 242.883931][ T9676] ? __lock_acquire+0x5c0/0x1f40 [ 242.883964][ T9676] ? lock_acquire+0x1d1/0x380 [ 242.883992][ T9676] ? unwind_next_frame+0xbd/0x2090 [ 242.884020][ T9676] ? __lock_acquire+0x5c0/0x1f40 [ 242.884050][ T9676] ? lock_acquire+0x1d1/0x380 [ 242.884080][ T9676] ? __pfx_loop_configure+0x10/0x10 [ 242.884124][ T9676] lo_ioctl+0xe45/0x1df0 [ 242.884148][ T9676] ? stack_trace_save+0x8e/0xc0 [ 242.884174][ T9676] ? __pfx_stack_trace_save+0x10/0x10 [ 242.884221][ T9676] ? stack_depot_save_flags+0x27/0x9f0 [ 242.884249][ T9676] ? __lock_acquire+0x5c0/0x1f40 [ 242.884282][ T9676] ? tomoyo_path_number_perm+0x46d/0x580 [ 242.884309][ T9676] ? kasan_save_stack+0x3f/0x50 [ 242.884338][ T9676] ? kasan_save_stack+0x30/0x50 [ 242.884365][ T9676] ? kasan_save_track+0x14/0x30 [ 242.884398][ T9676] ? kasan_save_free_info+0x3b/0x70 [ 242.884419][ T9676] ? __kasan_slab_free+0x5f/0x80 [ 242.884447][ T9676] ? kfree+0x22b/0x6d0 [ 242.884467][ T9676] ? tomoyo_path_number_perm+0x46d/0x580 [ 242.884492][ T9676] ? security_file_ioctl_compat+0xd3/0x230 [ 242.884518][ T9676] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 242.884542][ T9676] ? __do_fast_syscall_32+0x13a/0x8b0 [ 242.884565][ T9676] ? do_fast_syscall_32+0x32/0x70 [ 242.884586][ T9676] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.884612][ T9676] ? __pfx_lo_ioctl+0x10/0x10 [ 242.884664][ T9676] ? blk_get_meta_cap+0xd4/0x6c0 [ 242.884686][ T9676] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.884706][ T9676] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 242.884728][ T9676] ? tomoyo_path_number_perm+0x28f/0x580 [ 242.884753][ T9676] ? tomoyo_path_number_perm+0x28f/0x580 [ 242.884820][ T9676] lo_compat_ioctl+0xf3/0x160 [ 242.884842][ T9676] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 242.884862][ T9676] compat_blkdev_ioctl+0x682/0x7b0 [ 242.884886][ T9676] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 242.884929][ T9676] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 242.884951][ T9676] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 242.884978][ T9676] __do_fast_syscall_32+0x13a/0x8b0 [ 242.885000][ T9676] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.885022][ T9676] do_fast_syscall_32+0x32/0x70 [ 242.885045][ T9676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.885067][ T9676] RIP: 0023:0xf73cefec [ 242.885089][ T9676] Code: Unable to access opcode bytes at 0xf73cefc2. [ 242.885098][ T9676] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 242.885119][ T9676] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004c0a [ 242.885132][ T9676] RDX: 0000000080001ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.885145][ T9676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.885161][ T9676] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.885174][ T9676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.885202][ T9676] [ 243.282122][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 243.282154][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 243.400316][ T9694] random: crng reseeded on system resumption [ 243.550464][ T9699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 243.550480][ T9699] overlayfs: failed to set xattr on upper [ 243.550484][ T9699] overlayfs: ...falling back to redirect_dir=nofollow. [ 243.550488][ T9699] overlayfs: ...falling back to metacopy=off. [ 243.550492][ T9699] overlayfs: ...falling back to index=off. [ 243.550495][ T9699] overlayfs: ...falling back to uuid=null. [ 243.774585][ T9701] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.792300][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 243.792333][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 245.935199][ T9730] CIFS: Attempting to mount //127.0.0.1/share [ 246.051999][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 246.221956][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 246.222434][ T58] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 246.223291][ T58] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 246.223304][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.223314][ T58] usb 6-1: config 0 has no interface number 0 [ 246.223330][ T58] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 246.223341][ T58] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.223359][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.226943][ T58] usb 6-1: config 0 descriptor?? [ 246.231286][ T58] ldusb 6-1:0.55: Interrupt in endpoint not found [ 246.319306][ T9730] CIFS: VFS: cifs_mount failed w/return code = -112 [ 247.102524][ T13] net_ratelimit: 10 callbacks suppressed [ 247.102539][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 247.102552][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 247.612137][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 247.612158][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.124948][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 248.124978][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.489073][ T5821] usb 6-1: USB disconnect, device number 5 [ 248.642205][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 248.642248][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.665757][ T9779] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.175736][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:17 [ 249.175769][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.957688][ T9823] bridge0: entered promiscuous mode [ 250.957725][ T9823] bridge0: entered allmulticast mode [ 251.001032][ T9823] netlink: 14 bytes leftover after parsing attributes in process `syz.0.930'. [ 251.001092][ T9823] batman_adv: batadv0: Interface deactivated: dummy0 [ 251.001837][ T9823] batman_adv: batadv0: Removing interface: dummy0 [ 251.182681][ T9830] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 251.182702][ T9830] overlayfs: failed to set xattr on upper [ 251.182708][ T9830] overlayfs: ...falling back to redirect_dir=nofollow. [ 251.182714][ T9830] overlayfs: ...falling back to metacopy=off. [ 251.182720][ T9830] overlayfs: ...falling back to index=off. [ 251.182726][ T9830] overlayfs: ...falling back to uuid=null. [ 253.107603][ T9871] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.107625][ T9871] overlayfs: failed to set xattr on upper [ 253.107632][ T9871] overlayfs: ...falling back to redirect_dir=nofollow. [ 253.107639][ T9871] overlayfs: ...falling back to metacopy=off. [ 253.107645][ T9871] overlayfs: ...falling back to index=off. [ 253.107651][ T9871] overlayfs: ...falling back to uuid=null. [ 254.883214][ T9906] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.883230][ T9906] overlayfs: failed to set xattr on upper [ 254.883234][ T9906] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.883238][ T9906] overlayfs: ...falling back to metacopy=off. [ 254.883242][ T9906] overlayfs: ...falling back to index=off. [ 254.883245][ T9906] overlayfs: ...falling back to uuid=null. [ 255.324840][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.359817][ T9927] 9pnet_virtio: no channels available for device c::: [ 259.271011][T10001] input: syz0 as /devices/virtual/input/input6 [ 259.775041][T10007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 259.775058][T10007] overlayfs: failed to set xattr on upper [ 259.775062][T10007] overlayfs: ...falling back to redirect_dir=nofollow. [ 259.775066][T10007] overlayfs: ...falling back to metacopy=off. [ 259.775070][T10007] overlayfs: ...falling back to index=off. [ 259.775073][T10007] overlayfs: ...falling back to uuid=null. [ 261.056318][T10033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.974'. [ 263.604134][T10085] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 263.916014][T10094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.986'. [ 264.129720][T10102] tmpfs: Bad value for 'mpol' [ 265.794346][ T42] audit: type=1800 audit(1792499964.458:268): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.989" name="bus" dev="ramfs" ino=28658 res=0 errno=0 [ 266.322779][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.3.997'. [ 266.718265][T10146] binder: 10145:10146 ioctl c00c6211 0 returned -14 [ 266.953465][T10136] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 267.685887][T10164] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 267.685916][T10164] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 268.111681][T10170] tmpfs: Bad value for 'mpol' [ 270.232609][ T42] audit: type=1800 audit(1792499968.908:269): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1004" name="bus" dev="ramfs" ino=33795 res=0 errno=0 [ 270.263900][T10195] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 270.263920][T10195] overlayfs: failed to set xattr on upper [ 270.263928][T10195] overlayfs: ...falling back to redirect_dir=nofollow. [ 270.263934][T10195] overlayfs: ...falling back to metacopy=off. [ 270.263941][T10195] overlayfs: ...falling back to index=off. [ 270.263947][T10195] overlayfs: ...falling back to uuid=null. [ 270.301622][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1006'. [ 271.971775][T10229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1021'. [ 272.346220][T10238] tmpfs: Bad value for 'mpol' [ 272.473640][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1030'. [ 273.877110][ T42] audit: type=1800 audit(1792499972.548:270): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1024" name="bus" dev="ramfs" ino=33835 res=0 errno=0 [ 274.917999][T10279] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 274.918015][T10279] overlayfs: failed to set xattr on upper [ 274.918018][T10279] overlayfs: ...falling back to redirect_dir=nofollow. [ 274.918022][T10279] overlayfs: ...falling back to metacopy=off. [ 274.918026][T10279] overlayfs: ...falling back to index=off. [ 274.918030][T10279] overlayfs: ...falling back to uuid=null. [ 275.228922][T10281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1034'. [ 275.944389][T10302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.614694][ T5971] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 277.772271][ T5971] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 277.772870][ T5971] usb 5-1: Dual-Role OTG device on HNP port [ 277.773190][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.781136][ T5971] gspca_main: spca501-2.14.0 probing 0000:0000 [ 277.782347][ T5971] gspca_spca501: reg write: error -32 [ 277.782359][ T5971] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 277.782417][ T5971] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 277.783215][ T5971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.986577][T10315] tmpfs: Bad value for 'mpol' [ 278.419472][T10323] random: crng reseeded on system resumption [ 278.492039][T10326] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 278.492055][T10326] overlayfs: failed to set xattr on upper [ 278.492059][T10326] overlayfs: ...falling back to redirect_dir=nofollow. [ 278.492063][T10326] overlayfs: ...falling back to metacopy=off. [ 278.492067][T10326] overlayfs: ...falling back to index=off. [ 278.492071][T10326] overlayfs: ...falling back to uuid=null. [ 279.231875][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1046'. [ 280.459767][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1051'. [ 280.517705][ T42] audit: type=1326 audit(1792499979.188:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.1.1052" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cefec code=0x0 [ 280.569053][T10358] syz.1.1052 uses obsolete (PF_INET,SOCK_PACKET) [ 280.922720][T10368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.922735][T10368] overlayfs: failed to set xattr on upper [ 280.922739][T10368] overlayfs: ...falling back to redirect_dir=nofollow. [ 280.922743][T10368] overlayfs: ...falling back to metacopy=off. [ 280.922747][T10368] overlayfs: ...falling back to index=off. [ 280.922751][T10368] overlayfs: ...falling back to uuid=null. [ 281.112105][ T5838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 281.546579][T10355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1051'. [ 281.551442][T10355] jffs2: notice: (10355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.638569][ T5838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 281.638595][ T5838] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 281.638614][ T5838] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 281.639230][ T5838] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 281.639247][ T5838] usb 7-1: can't read configurations, error -71 [ 281.744689][T10373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 282.931995][T10401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 282.932012][T10401] overlayfs: failed to set xattr on upper [ 282.932016][T10401] overlayfs: ...falling back to redirect_dir=nofollow. [ 282.932020][T10401] overlayfs: ...falling back to metacopy=off. [ 282.932024][T10401] overlayfs: ...falling back to index=off. [ 282.932028][T10401] overlayfs: ...falling back to uuid=null. [ 283.612895][T10411] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.831998][ T42] audit: type=1800 audit(1792499983.499:272): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1059" name="bus" dev="ramfs" ino=34308 res=0 errno=0 [ 284.726447][T10421] random: crng reseeded on system resumption [ 284.932912][T10428] random: crng reseeded on system resumption [ 284.952835][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 285.303580][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.497872][T10447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 286.497888][T10447] overlayfs: failed to set xattr on upper [ 286.497893][T10447] overlayfs: ...falling back to redirect_dir=nofollow. [ 286.497897][T10447] overlayfs: ...falling back to metacopy=off. [ 286.497902][T10447] overlayfs: ...falling back to index=off. [ 286.497906][T10447] overlayfs: ...falling back to uuid=null. [ 287.309672][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 287.491318][T10462] random: crng reseeded on system resumption [ 287.532091][ T5821] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 287.631511][T10467] random: crng reseeded on system resumption [ 287.705748][T10457] jffs2: notice: (10457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 287.723286][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 287.723313][ T5821] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 287.723331][ T5821] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 287.724072][ T5821] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 287.724088][ T5821] usb 6-1: can't read configurations, error -71 [ 287.774844][T10465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1078'. [ 287.815610][T10471] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.317579][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 288.866095][T10486] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 288.866111][T10486] overlayfs: failed to set xattr on upper [ 288.866115][T10486] overlayfs: ...falling back to redirect_dir=nofollow. [ 288.866119][T10486] overlayfs: ...falling back to metacopy=off. [ 288.866123][T10486] overlayfs: ...falling back to index=off. [ 288.866127][T10486] overlayfs: ...falling back to uuid=null. [ 288.893238][T10493] random: crng reseeded on system resumption [ 288.970981][T10499] random: crng reseeded on system resumption [ 289.178596][T10501] netlink: 'syz.3.1087': attribute type 6 has an invalid length. [ 289.324551][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1089'. [ 289.999770][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 290.440733][T10520] syz.1.1094 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 290.636718][T10528] rxe_eth0 speed is unknown, defaulting to 1000 [ 290.951564][T10535] random: crng reseeded on system resumption [ 291.014975][T10538] random: crng reseeded on system resumption [ 291.476995][ T42] audit: type=1326 audit(1792499991.149:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.477178][ T42] audit: type=1326 audit(1792499991.149:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.477810][ T42] audit: type=1326 audit(1792499991.149:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.478151][ T42] audit: type=1326 audit(1792499991.149:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.478321][ T42] audit: type=1326 audit(1792499991.149:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.478743][ T42] audit: type=1326 audit(1792499991.149:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.478988][ T42] audit: type=1326 audit(1792499991.149:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.479214][ T42] audit: type=1326 audit(1792499991.149:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.479483][ T42] audit: type=1326 audit(1792499991.149:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.479682][ T42] audit: type=1326 audit(1792499991.149:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.3.1102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 291.902027][ T5887] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 292.052127][ T5887] usb 8-1: Using ep0 maxpacket: 16 [ 292.056664][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 292.056704][ T5887] usb 8-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 292.072961][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.072985][ T5887] usb 8-1: Product: syz [ 292.072998][ T5887] usb 8-1: Manufacturer: syz [ 292.073012][ T5887] usb 8-1: SerialNumber: syz [ 292.559517][ T5887] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.581172][ T5887] usb 8-1: USB disconnect, device number 6 [ 292.652987][T10311] udevd[10311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 292.786861][T10572] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.786876][T10572] overlayfs: failed to set xattr on upper [ 292.786880][T10572] overlayfs: ...falling back to redirect_dir=nofollow. [ 292.786884][T10572] overlayfs: ...falling back to metacopy=off. [ 292.786888][T10572] overlayfs: ...falling back to index=off. [ 292.786892][T10572] overlayfs: ...falling back to uuid=null. [ 292.926359][T10574] random: crng reseeded on system resumption [ 293.401547][T10581] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.992327][ T5971] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 294.162672][ T5971] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 294.163461][ T5971] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.163484][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.166509][ T5971] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 294.168997][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 294.169030][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 294.170316][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 294.170367][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 294.180838][ T5971] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 294.187574][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 294.187647][ T5971] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 294.277454][ T5971] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 294.590917][T10597] warning: `syz.3.1112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 296.387839][ T5888] usb 8-1: USB disconnect, device number 7 [ 296.396816][ T5888] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 296.404719][ T5888] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 296.405440][ T5888] keyspan 8-1:1.0: device disconnected [ 297.865349][T10618] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.865364][T10618] overlayfs: failed to set xattr on upper [ 297.865368][T10618] overlayfs: ...falling back to redirect_dir=nofollow. [ 297.865372][T10618] overlayfs: ...falling back to metacopy=off. [ 297.865376][T10618] overlayfs: ...falling back to index=off. [ 297.865380][T10618] overlayfs: ...falling back to uuid=null. [ 297.993705][T10622] random: crng reseeded on system resumption [ 298.313454][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 298.369715][T10626] sctp: [Deprecated]: syz.0.1121 (pid 10626) Use of int in max_burst socket option. [ 298.369715][T10626] Use struct sctp_assoc_value instead [ 298.674058][T10628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.833356][T10629] ovs-system: entered promiscuous mode [ 298.936950][T10639] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 298.936965][T10639] overlayfs: failed to set xattr on upper [ 298.936968][T10639] overlayfs: ...falling back to redirect_dir=nofollow. [ 298.936979][T10639] overlayfs: ...falling back to metacopy=off. [ 298.936983][T10639] overlayfs: ...falling back to index=off. [ 298.936987][T10639] overlayfs: ...falling back to uuid=null. [ 299.160001][T10643] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.298350][T10649] IPVS: ip_vs_add_dest(): server weight less than zero [ 302.195420][T10700] overlayfs: failed to resolve '/OeKaW@K': -2 [ 302.195866][T10699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.197565][T10699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.274466][T10701] overlayfs: overlapping lowerdir path [ 303.820782][T10681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.979392][T10705] random: crng reseeded on system resumption [ 304.096074][T10703] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.282071][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 305.093724][T10730] FAULT_INJECTION: forcing a failure. [ 305.093724][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 305.093746][T10730] CPU: 1 UID: 0 PID: 10730 Comm: syz.1.1146 Not tainted syzkaller #0 PREEMPT(full) [ 305.093760][T10730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.093768][T10730] Call Trace: [ 305.093772][T10730] [ 305.093777][T10730] dump_stack_lvl+0x100/0x190 [ 305.093796][T10730] should_fail_ex.cold+0x5/0xa [ 305.093813][T10730] should_failslab+0xc2/0x120 [ 305.093833][T10730] kmem_cache_alloc_noprof+0x92/0x6a0 [ 305.093849][T10730] ? d_instantiate+0x8a/0xb0 [ 305.093860][T10730] ? alloc_empty_file+0x5b/0x1c0 [ 305.093873][T10730] alloc_empty_file+0x5b/0x1c0 [ 305.093885][T10730] alloc_file_pseudo+0x183/0x290 [ 305.093897][T10730] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 305.093929][T10730] __shmem_file_setup+0x205/0x460 [ 305.093947][T10730] ? __pfx___shmem_file_setup+0x10/0x10 [ 305.093969][T10730] ? vm_area_alloc+0x1f/0x160 [ 305.093982][T10730] shmem_zero_setup+0x96/0x1b0 [ 305.093997][T10730] __mmap_region+0x26b6/0x32e0 [ 305.094014][T10730] ? __pfx___mmap_region+0x10/0x10 [ 305.094028][T10730] ? __lock_acquire+0x5c0/0x1f40 [ 305.094056][T10730] ? mas_next_slot+0xc05/0x13a0 [ 305.094078][T10730] ? unmapped_area_topdown+0x54e/0x6a0 [ 305.094101][T10730] ? lock_acquire+0x1d1/0x380 [ 305.094117][T10730] ? __update_page_owner_handle+0x63/0x530 [ 305.094153][T10730] mmap_region+0x3db/0x6d0 [ 305.094168][T10730] ? __pfx_mmap_region+0x10/0x10 [ 305.094182][T10730] ? shmem_get_unmapped_area+0x141/0x960 [ 305.094201][T10730] ? cap_mmap_addr+0x4b/0x120 [ 305.094213][T10730] ? bpf_lsm_mmap_addr+0x9/0x30 [ 305.094224][T10730] ? security_mmap_addr+0x71/0x1e0 [ 305.094239][T10730] ? __get_unmapped_area+0x255/0x3e0 [ 305.094258][T10730] do_mmap+0x12c7/0x1c30 [ 305.094278][T10730] ? lock_acquire+0x1d1/0x380 [ 305.094294][T10730] ? __pfx_do_mmap+0x10/0x10 [ 305.094317][T10730] ? __pfx_down_write_killable+0x10/0x10 [ 305.094334][T10730] vm_mmap_pgoff+0x28d/0x470 [ 305.094352][T10730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 305.094367][T10730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.094407][T10730] ? lock_acquire+0x1d1/0x380 [ 305.094424][T10730] ? kvm_alloc_apic_access_page+0x27/0x110 [ 305.094444][T10730] vm_mmap+0x8e/0xc0 [ 305.094466][T10730] __x86_set_memory_region+0x2c8/0x7a0 [ 305.094482][T10730] ? kvm_alloc_apic_access_page+0x27/0x110 [ 305.094500][T10730] ? __pfx___x86_set_memory_region+0x10/0x10 [ 305.094517][T10730] ? __pfx___mutex_lock+0x10/0x10 [ 305.094531][T10730] ? policy_nodemask+0xed/0x4f0 [ 305.094547][T10730] ? __asan_memset+0x23/0x50 [ 305.094577][T10730] ? alloc_loaded_vmcs+0x1b5/0x2d0 [ 305.094598][T10730] kvm_alloc_apic_access_page+0x9e/0x110 [ 305.094615][T10730] vmx_vcpu_create+0x79b/0xb90 [ 305.094629][T10730] ? intel_pmu_init+0x3ac/0x560 [ 305.094645][T10730] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 305.094659][T10730] ? mark_held_locks+0x40/0x70 [ 305.094678][T10730] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.094696][T10730] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.094711][T10730] kvm_arch_vcpu_create+0x670/0xab0 [ 305.094727][T10730] kvm_vm_ioctl+0x1c2d/0x4170 [ 305.094741][T10730] ? tomoyo_path_number_perm+0x46d/0x580 [ 305.094757][T10730] ? stack_trace_save+0x8e/0xc0 [ 305.094773][T10730] ? __pfx_stack_trace_save+0x10/0x10 [ 305.094790][T10730] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 305.094801][T10730] ? __lock_acquire+0x5c0/0x1f40 [ 305.094819][T10730] ? tomoyo_path_number_perm+0x46d/0x580 [ 305.094834][T10730] ? kasan_save_stack+0x3f/0x50 [ 305.094849][T10730] ? kasan_save_stack+0x30/0x50 [ 305.094864][T10730] ? kasan_save_track+0x14/0x30 [ 305.094879][T10730] ? kasan_save_free_info+0x3b/0x70 [ 305.094891][T10730] ? __kasan_slab_free+0x5f/0x80 [ 305.094907][T10730] ? kfree+0x22b/0x6d0 [ 305.094918][T10730] ? tomoyo_path_number_perm+0x46d/0x580 [ 305.094932][T10730] ? security_file_ioctl_compat+0xd3/0x230 [ 305.094946][T10730] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 305.094961][T10730] ? __do_fast_syscall_32+0x13a/0x8b0 [ 305.094975][T10730] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 305.094994][T10730] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 305.095025][T10730] ? kasan_quarantine_put+0x104/0x240 [ 305.095041][T10730] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.095053][T10730] ? find_held_lock+0x2b/0x80 [ 305.095066][T10730] ? tomoyo_path_number_perm+0x28f/0x580 [ 305.095080][T10730] ? tomoyo_path_number_perm+0x28f/0x580 [ 305.095098][T10730] ? tomoyo_path_number_perm+0x188/0x580 [ 305.095113][T10730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.095127][T10730] ? futex_wait+0x11e/0x370 [ 305.095147][T10730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.095166][T10730] ? do_vfs_ioctl+0x226/0x13e0 [ 305.095179][T10730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.095194][T10730] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 305.095207][T10730] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 305.095218][T10730] ? __fget_files+0x34/0x3d0 [ 305.095235][T10730] ? find_held_lock+0x2b/0x80 [ 305.095248][T10730] ? __fget_files+0x215/0x3d0 [ 305.095263][T10730] ? hook_file_ioctl_common+0x140/0x440 [ 305.095291][T10730] ? __fget_files+0x21f/0x3d0 [ 305.095318][T10730] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 305.095337][T10730] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 305.095359][T10730] __do_fast_syscall_32+0x13a/0x8b0 [ 305.095381][T10730] do_fast_syscall_32+0x32/0x70 [ 305.095400][T10730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.095424][T10730] RIP: 0023:0xf73cefec [ 305.095444][T10730] Code: Unable to access opcode bytes at 0xf73cefc2. [ 305.095452][T10730] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 305.095470][T10730] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae41 [ 305.095477][T10730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.095484][T10730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.095491][T10730] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.095497][T10730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.095513][T10730] [ 305.514722][T10734] fuse: Bad value for 'fd' [ 305.577603][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 305.822036][ T5821] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 306.035133][T10736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1149'. [ 306.079201][T10736] jffs2: notice: (10736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.176720][ T5821] usb 8-1: unable to get BOS descriptor or descriptor too short [ 306.176762][ T5821] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 306.176790][ T5821] usb 8-1: too many configurations: 32, using maximum allowed: 8 [ 306.177957][ T5821] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 306.177983][ T5821] usb 8-1: can't read configurations, error -71 [ 306.787203][T10750] random: crng reseeded on system resumption [ 307.132377][T10764] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.087680][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 308.692019][T10789] random: crng reseeded on system resumption [ 308.795629][T10791] Illegal XDP return value 4294967294 on prog (id 192) dev N/A, expect packet loss! [ 309.487871][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1164'. [ 309.489160][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.489355][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.518809][T10800] random: crng reseeded on system resumption [ 309.523159][T10799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1164'. [ 309.525758][T10799] jffs2: notice: (10799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 310.111121][T10813] net_ratelimit: 6 callbacks suppressed [ 310.111135][T10813] openvswitch: netlink: IP tunnel dst address not specified [ 310.164103][T10813] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 310.675209][T10821] random: crng reseeded on system resumption [ 310.678404][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 310.697723][T10824] jffs2: notice: (10824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 311.220340][T10833] random: crng reseeded on system resumption [ 311.377844][T10838] rxe_eth0 speed is unknown, defaulting to 1000 [ 313.066712][T10863] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.066735][T10863] overlayfs: failed to set xattr on upper [ 313.066742][T10863] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.066749][T10863] overlayfs: ...falling back to metacopy=off. [ 313.066757][T10863] overlayfs: ...falling back to index=off. [ 313.066764][T10863] overlayfs: ...falling back to uuid=null. [ 313.484386][T10873] random: crng reseeded on system resumption [ 314.293990][T10897] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.610320][T10903] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 314.610362][T10903] overlayfs: failed to set xattr on upper [ 314.610369][T10903] overlayfs: ...falling back to redirect_dir=nofollow. [ 314.610376][T10903] overlayfs: ...falling back to metacopy=off. [ 314.610382][T10903] overlayfs: ...falling back to index=off. [ 314.610389][T10903] overlayfs: ...falling back to uuid=null. [ 315.599164][T10923] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 315.599209][T10923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.599588][T10923] vhci_hcd vhci_hcd.0: Device attached [ 315.792750][ T58] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 315.851983][ T58] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 315.875495][T10928] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.875511][T10928] overlayfs: failed to set xattr on upper [ 315.875515][T10928] overlayfs: ...falling back to redirect_dir=nofollow. [ 315.875519][T10928] overlayfs: ...falling back to metacopy=off. [ 315.875523][T10928] overlayfs: ...falling back to index=off. [ 315.875527][T10928] overlayfs: ...falling back to uuid=null. [ 316.484239][T10924] vhci_hcd: connection reset by peer [ 316.485584][ T5787] vhci_hcd vhci_hcd.2: stop threads [ 316.485599][ T5787] vhci_hcd vhci_hcd.2: release socket [ 316.485764][ T5787] vhci_hcd vhci_hcd.2: disconnect device [ 317.062486][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.360714][T10948] rxe_eth0 speed is unknown, defaulting to 1000 [ 318.110422][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.110989][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.151761][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.151826][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.152053][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.152107][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.163649][T10968] bridge0: entered promiscuous mode [ 318.163680][T10968] bridge0: entered allmulticast mode [ 318.265620][T10968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1207'. [ 318.471233][T10936] syz.0.1200 (10936) used greatest stack depth: 19512 bytes left [ 319.772050][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 319.931982][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 319.932573][ T5838] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 319.933623][ T5838] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.933646][ T5838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 319.935765][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.935813][ T5838] usb 6-1: Product: syz [ 319.935825][ T5838] usb 6-1: Manufacturer: syz [ 319.935833][ T5838] usb 6-1: SerialNumber: syz [ 319.937605][ T5838] usb 6-1: config 0 descriptor?? [ 320.151601][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 320.159353][ T5838] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 320.166737][ T5838] imon:send_packet: packet tx failed (-71) [ 320.181952][ T5838] imon 6-1:0.0: panel buttons/knobs setup failed [ 320.204818][T11000] rxe_eth0 speed is unknown, defaulting to 1000 [ 320.461975][ T5838] rc_core: IR keymap rc-imon-pad not found [ 320.462034][ T5838] Registered IR keymap rc-empty [ 320.463098][ T5838] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 320.463110][ T5838] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 320.464157][ T5838] imon:send_packet: packet tx failed (-71) [ 320.483954][ T5838] imon 6-1:0.0: remote input dev register failed [ 320.484027][ T5838] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 320.820552][ T5838] imon 6-1:0.0: unable to initialize intf0, err 0 [ 320.820566][ T5838] imon:imon_probe: failed to initialize context! [ 320.820572][ T5838] imon 6-1:0.0: unable to register, err -19 [ 320.825756][ T5838] usb 6-1: USB disconnect, device number 8 [ 320.992033][ T58] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 321.132217][ T5838] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 321.283152][ T5838] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 321.284198][ T5838] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 321.284224][ T5838] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 321.284247][ T5838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.286150][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.286170][ T5838] usb 6-1: Product: syz [ 321.286183][ T5838] usb 6-1: Manufacturer: syz [ 321.286195][ T5838] usb 6-1: SerialNumber: syz [ 321.288375][ T5838] usb 6-1: config 0 descriptor?? [ 321.289878][T10992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 321.500928][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 321.506391][ T5838] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 321.782552][ T5838] rc_core: IR keymap rc-imon-pad not found [ 321.782571][ T5838] Registered IR keymap rc-empty [ 321.782629][ T5838] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 321.782644][ T5838] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 321.787354][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1220'. [ 321.925900][ T5838] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 321.930946][ T5838] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 321.955367][ T5838] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:9> initialized [ 322.032274][T10949] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 322.215499][T11020] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1220'. [ 322.218605][T11020] jffs2: notice: (11020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 322.232760][T11030] imon:lcd_write: invalid payload size: 0 (expected 8) [ 322.292184][T10949] usb 8-1: unable to get BOS descriptor or descriptor too short [ 322.292210][T10949] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 322.292228][T10949] usb 8-1: too many configurations: 32, using maximum allowed: 8 [ 322.293515][T10949] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 322.293532][T10949] usb 8-1: can't read configurations, error -71 [ 322.414037][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.414496][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.418186][ T5838] usb 6-1: USB disconnect, device number 9 [ 322.967033][T11040] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 322.967052][T11040] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1225'. [ 322.967065][T11040] netlink: 'syz.1.1225': attribute type 2 has an invalid length. [ 322.967076][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 322.980060][T11040] null_blk: my_zoned_dev: using native zone append [ 323.003100][T11040] null_blk: disk my_zoned_dev created [ 323.238705][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 323.937445][T11053] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.162410][T11057] random: crng reseeded on system resumption [ 324.226784][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.226820][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.227779][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.228447][T11060] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 324.228469][T11060] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 324.228587][T11060] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 324.230002][T11060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 324.238854][T11060] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 324.249917][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.255207][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.257790][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.259102][T11060] dummy0 speed is unknown, defaulting to 1000 [ 324.277187][T11060] smc: removing ib device rxe0 [ 324.312917][T11060] smbdirect: ib_dev[rxe0] removed [ 324.806752][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1233'. [ 325.062015][ T855] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 325.289295][T11076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1233'. [ 325.330860][T11076] jffs2: notice: (11076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 325.546147][ T855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 325.546189][ T855] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 325.546211][ T855] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 325.546838][ T855] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 325.546854][ T855] usb 6-1: can't read configurations, error -71 [ 326.191634][T11093] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 326.191653][T11093] overlayfs: failed to set xattr on upper [ 326.191660][T11093] overlayfs: ...falling back to redirect_dir=nofollow. [ 326.191666][T11093] overlayfs: ...falling back to metacopy=off. [ 326.191671][T11093] overlayfs: ...falling back to index=off. [ 326.191676][T11093] overlayfs: ...falling back to uuid=null. [ 326.264977][T11095] random: crng reseeded on system resumption [ 326.374843][T11101] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 326.374858][T11101] overlayfs: failed to set xattr on upper [ 326.374862][T11101] overlayfs: ...falling back to redirect_dir=nofollow. [ 326.374866][T11101] overlayfs: ...falling back to metacopy=off. [ 326.374871][T11101] overlayfs: ...falling back to index=off. [ 326.374874][T11101] overlayfs: ...falling back to uuid=null. [ 326.396521][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.396669][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.403076][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.403124][T11102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.403260][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.403307][T11102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.403535][T11102] bridge0: entered promiscuous mode [ 326.403546][T11102] bridge0: entered allmulticast mode [ 326.458397][T11102] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1239'. [ 326.481759][T11104] afs: Unknown parameter 'dy' [ 327.421791][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'. [ 327.672071][ T5838] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 327.783919][T11130] random: crng reseeded on system resumption [ 327.885506][T11127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1246'. [ 327.888115][T11127] jffs2: notice: (11127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.943810][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.943851][ T5838] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 327.943879][ T5838] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 327.944647][ T5838] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 327.944674][ T5838] usb 6-1: can't read configurations, error -71 [ 328.221932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 328.231982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 328.961656][T11146] syzkaller1: entered promiscuous mode [ 328.961736][T11146] syzkaller1: entered allmulticast mode [ 330.183667][T11171] dummy0 speed is unknown, defaulting to 1000 [ 330.302671][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 330.542472][ T5971] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 330.704428][ T5971] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 330.708349][ T5971] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 330.708787][ T5971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.711394][ T5971] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 330.711686][ T5971] usb 8-1: Manufacturer: syz [ 330.721424][ T5971] usb 8-1: config 0 descriptor?? [ 330.825575][ T5971] rc_core: IR keymap rc-hauppauge not found [ 330.825586][ T5971] Registered IR keymap rc-empty [ 330.826707][ T5971] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 330.827563][ T5971] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input14 [ 330.941764][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.942095][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.955252][ T5971] usb 8-1: USB disconnect, device number 12 [ 331.065183][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'. [ 331.302430][ T5887] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 331.483440][T11190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1263'. [ 331.487564][T11190] jffs2: notice: (11190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.565114][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 331.569507][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.569532][ T5887] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 331.569550][ T5887] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 331.570955][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 331.570980][ T5887] usb 7-1: can't read configurations, error -71 [ 333.027413][T11211] dummy0 speed is unknown, defaulting to 1000 [ 333.141950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.215540][T11235] random: crng reseeded on system resumption [ 336.334072][ T42] kauditd_printk_skb: 88 callbacks suppressed [ 336.334093][ T42] audit: type=1326 audit(1792500036.009:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.334138][ T42] audit: type=1326 audit(1792500036.009:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.336509][ T42] audit: type=1326 audit(1792500036.009:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.336552][ T42] audit: type=1326 audit(1792500036.009:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.336895][ T42] audit: type=1326 audit(1792500036.009:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.338278][ T42] audit: type=1326 audit(1792500036.009:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.339902][ T42] audit: type=1326 audit(1792500036.009:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.343885][ T42] audit: type=1326 audit(1792500036.019:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71277eb code=0x7ffc0000 [ 336.344272][ T42] audit: type=1326 audit(1792500036.019:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.344513][ T42] audit: type=1326 audit(1792500036.019:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11253 comm="syz.1.1280" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 336.602788][ T58] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 336.752802][ T58] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 336.756257][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.756271][ T58] usb 6-1: Product: syz [ 336.756279][ T58] usb 6-1: Manufacturer: syz [ 336.756286][ T58] usb 6-1: SerialNumber: syz [ 336.778538][ T58] usb 6-1: USB2VGA dongle found at address 14 [ 336.780356][ T58] usb 6-1: Allocated 8 output buffers [ 336.860735][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.861435][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.176606][ T58] usb 6-1: Failed to early initialize device [ 337.183084][ T58] usb 6-1: USB disconnect, device number 14 [ 337.810624][T11273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 337.810647][T11273] overlayfs: failed to set xattr on upper [ 337.810653][T11273] overlayfs: ...falling back to redirect_dir=nofollow. [ 337.810660][T11273] overlayfs: ...falling back to metacopy=off. [ 337.810666][T11273] overlayfs: ...falling back to index=off. [ 337.810674][T11273] overlayfs: ...falling back to uuid=null. [ 337.832951][T11276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1285'. [ 338.072614][ T5887] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 338.263984][T11276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1285'. [ 338.268133][T11276] jffs2: notice: (11276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.269963][T11281] : renamed from vlan0 (while UP) [ 338.283805][T11281] bonding: b is being created... [ 338.344370][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1285'. [ 338.346372][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 338.346395][ T5887] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 338.346413][ T5887] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 338.347097][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 338.347114][ T5887] usb 7-1: can't read configurations, error -71 [ 340.269066][T11311] lo: entered promiscuous mode [ 340.285684][T11311] tunl0: entered promiscuous mode [ 340.293097][T11311] gre0: entered promiscuous mode [ 340.298473][T11316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 340.298561][T11316] overlayfs: failed to set xattr on upper [ 340.298569][T11316] overlayfs: ...falling back to redirect_dir=nofollow. [ 340.298576][T11316] overlayfs: ...falling back to metacopy=off. [ 340.298583][T11316] overlayfs: ...falling back to index=off. [ 340.298589][T11316] overlayfs: ...falling back to uuid=null. [ 340.316082][T11311] gretap0: entered promiscuous mode [ 340.331390][T11311] erspan0: entered promiscuous mode [ 340.344526][T11311] ip_vti0: entered promiscuous mode [ 340.351143][T11311] ip6_vti0: entered promiscuous mode [ 340.359499][T11311] sit0: entered promiscuous mode [ 340.374727][T11311] ip6tnl0: entered promiscuous mode [ 340.378376][T11311] ip6gre0: entered promiscuous mode [ 340.384867][T11311] syz_tun: entered promiscuous mode [ 340.391273][T11311] ip6gretap0: entered promiscuous mode [ 340.395876][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.395964][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.397786][T11311] vcan0: entered promiscuous mode [ 340.400486][T11311] team0: entered promiscuous mode [ 340.400498][T11311] team_slave_0: entered promiscuous mode [ 340.400649][T11311] team_slave_1: entered promiscuous mode [ 340.415046][T11311] nlmon0: entered promiscuous mode [ 340.420934][T11311] vxcan0: entered promiscuous mode [ 340.421407][T11311] vxcan1: entered promiscuous mode [ 340.422800][T11311] veth0: entered promiscuous mode [ 340.425105][T11311] veth1: entered promiscuous mode [ 340.428468][T11311] wg0: entered promiscuous mode [ 340.430284][T11311] wg1: entered promiscuous mode [ 340.432472][T11311] wg2: entered promiscuous mode [ 340.434051][T11311] veth0_to_bridge: entered promiscuous mode [ 340.438805][T11311] veth1_to_bridge: entered promiscuous mode [ 340.443295][T11311] veth0_to_bond: entered promiscuous mode [ 340.445678][T11311] veth1_to_bond: entered promiscuous mode [ 340.448483][T11311] veth0_to_team: entered promiscuous mode [ 340.452575][T11311] veth1_to_team: entered promiscuous mode [ 340.456379][T11311] veth0_to_batadv: entered promiscuous mode [ 340.458576][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.458613][T11311] batadv_slave_0: entered promiscuous mode [ 340.460427][T11311] veth1_to_batadv: entered promiscuous mode [ 340.461864][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.463025][T11311] batadv_slave_1: entered promiscuous mode [ 340.465017][T11311] xfrm0: entered promiscuous mode [ 340.466778][T11311] veth0_to_hsr: entered promiscuous mode [ 340.469524][T11311] veth1_to_hsr: entered promiscuous mode [ 340.473389][T11311] hsr0: entered promiscuous mode [ 340.475773][T11311] veth1_virt_wifi: entered promiscuous mode [ 340.477836][T11311] veth0_virt_wifi: entered promiscuous mode [ 340.479042][T11311] virt_wifi0: entered promiscuous mode [ 340.485079][T11311] : entered promiscuous mode [ 340.487221][T11311] vlan1: entered promiscuous mode [ 340.490126][T11311] macvlan0: entered promiscuous mode [ 340.498582][T11311] macvlan1: entered promiscuous mode [ 340.499721][T11311] ipvlan0: entered promiscuous mode [ 340.499802][T11311] ipvlan1: entered promiscuous mode [ 340.511415][T11311] macvtap0: entered promiscuous mode [ 340.515381][T11311] macsec0: entered promiscuous mode [ 340.516848][T11311] geneve0: entered promiscuous mode [ 340.518070][T11311] geneve1: entered promiscuous mode [ 340.520421][T11311] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 340.527850][T11311] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 340.533853][T11311] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 340.536131][T11311] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 340.537730][T11311] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 340.537857][T11311] erspan0.1: entered promiscuous mode [ 340.538384][T11311] hsr1: entered promiscuous mode [ 340.539686][T11311] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 340.539764][T11311] bond1: entered promiscuous mode [ 340.539825][T11311] b: entered promiscuous mode [ 340.552077][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.552116][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.552144][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.552172][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.580243][T11328] : renamed from vlan0 [ 341.592279][T11328] bonding: b is being created... [ 341.861464][T11333] dummy0 speed is unknown, defaulting to 1000 [ 342.164365][T11336] dummy0 speed is unknown, defaulting to 1000 [ 343.053653][T11312] syz.1.1292 (11312) used greatest stack depth: 18720 bytes left [ 345.143196][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 345.335277][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 345.337591][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.337633][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.349264][ T29] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 345.349364][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 345.349392][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 345.349919][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 345.349951][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 345.355907][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 345.356836][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 345.356875][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 345.361249][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 345.578067][T11381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 345.578082][T11381] overlayfs: failed to set xattr on upper [ 345.578086][T11381] overlayfs: ...falling back to redirect_dir=nofollow. [ 345.578090][T11381] overlayfs: ...falling back to metacopy=off. [ 345.578094][T11381] overlayfs: ...falling back to index=off. [ 345.578098][T11381] overlayfs: ...falling back to uuid=null. [ 346.945662][T11403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 346.945677][T11403] overlayfs: failed to set xattr on upper [ 346.945681][T11403] overlayfs: ...falling back to redirect_dir=nofollow. [ 346.945685][T11403] overlayfs: ...falling back to metacopy=off. [ 346.945689][T11403] overlayfs: ...falling back to index=off. [ 346.945693][T11403] overlayfs: ...falling back to uuid=null. [ 347.366596][T11412] input: syz0 as /devices/virtual/input/input15 [ 347.921149][ T29] usb 7-1: USB disconnect, device number 11 [ 347.926381][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 347.936501][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 347.936774][ T29] keyspan 7-1:1.0: device disconnected [ 348.232813][T11424] dummy0 speed is unknown, defaulting to 1000 [ 348.890060][T11432] bridge0: entered promiscuous mode [ 348.890097][T11432] bridge0: entered allmulticast mode [ 349.039550][T11432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1323'. [ 349.630445][ T36] smbdirect: ib_dev[syz0] removed [ 349.889700][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 350.045934][T11454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.045950][T11454] overlayfs: failed to set xattr on upper [ 350.045954][T11454] overlayfs: ...falling back to redirect_dir=nofollow. [ 350.045959][T11454] overlayfs: ...falling back to metacopy=off. [ 350.045963][T11454] overlayfs: ...falling back to index=off. [ 350.045967][T11454] overlayfs: ...falling back to uuid=null. [ 350.665909][T11461] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.665931][T11461] overlayfs: failed to set xattr on upper [ 350.665937][T11461] overlayfs: ...falling back to redirect_dir=nofollow. [ 350.665944][T11461] overlayfs: ...falling back to metacopy=off. [ 350.665950][T11461] overlayfs: ...falling back to index=off. [ 350.665956][T11461] overlayfs: ...falling back to uuid=null. [ 351.274192][T11476] random: crng reseeded on system resumption [ 351.853304][T11485] input: syz0 as /devices/virtual/input/input16 [ 352.713201][T11496] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.713217][T11496] overlayfs: failed to set xattr on upper [ 352.713220][T11496] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.713224][T11496] overlayfs: ...falling back to metacopy=off. [ 352.713228][T11496] overlayfs: ...falling back to index=off. [ 352.713232][T11496] overlayfs: ...falling back to uuid=null. [ 352.718309][T11500] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.718327][T11500] overlayfs: failed to set xattr on upper [ 352.718331][T11500] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.718336][T11500] overlayfs: ...falling back to metacopy=off. [ 352.718340][T11500] overlayfs: ...falling back to index=off. [ 352.718343][T11500] overlayfs: ...falling back to uuid=null. [ 352.798306][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 352.891031][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 353.049166][T11512] random: crng reseeded on system resumption [ 355.004634][T11544] random: crng reseeded on system resumption [ 355.115146][T11547] overlayfs: failed to resolve './bus': -2 [ 355.155552][T11549] random: crng reseeded on system resumption [ 355.245712][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 356.301041][T11573] random: crng reseeded on system resumption [ 356.505655][T11579] : renamed from vlan0 [ 356.518496][T11583] random: crng reseeded on system resumption [ 356.521349][T11579] bonding: b is being created... [ 356.636817][T11592] overlayfs: failed to resolve './bus': -2 [ 357.331931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 357.384328][T11607] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.384344][T11607] overlayfs: failed to set xattr on upper [ 357.384348][T11607] overlayfs: ...falling back to redirect_dir=nofollow. [ 357.384352][T11607] overlayfs: ...falling back to metacopy=off. [ 357.384355][T11607] overlayfs: ...falling back to index=off. [ 357.384359][T11607] overlayfs: ...falling back to uuid=null. [ 358.767218][T11625] random: crng reseeded on system resumption [ 358.904440][T11637] overlayfs: failed to resolve './bus': -2 [ 359.134571][T11646] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 359.134587][T11646] overlayfs: failed to set xattr on upper [ 359.134592][T11646] overlayfs: ...falling back to redirect_dir=nofollow. [ 359.134595][T11646] overlayfs: ...falling back to metacopy=off. [ 359.134600][T11646] overlayfs: ...falling back to index=off. [ 359.134603][T11646] overlayfs: ...falling back to uuid=null. [ 360.898932][T11671] random: crng reseeded on system resumption [ 360.999486][T11676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 360.999501][T11676] overlayfs: failed to set xattr on upper [ 360.999505][T11676] overlayfs: ...falling back to redirect_dir=nofollow. [ 360.999509][T11676] overlayfs: ...falling back to metacopy=off. [ 360.999513][T11676] overlayfs: ...falling back to index=off. [ 360.999517][T11676] overlayfs: ...falling back to uuid=null. [ 361.187293][T11674] bonding: b is being created... [ 361.187774][T11674] bonding: b already exists [ 363.343533][T11715] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 363.343555][T11715] overlayfs: failed to set xattr on upper [ 363.343562][T11715] overlayfs: ...falling back to redirect_dir=nofollow. [ 363.343568][T11715] overlayfs: ...falling back to metacopy=off. [ 363.343575][T11715] overlayfs: ...falling back to index=off. [ 363.343581][T11715] overlayfs: ...falling back to uuid=null. [ 363.922167][T11731] input: syz0 as /devices/virtual/input/input17 [ 364.046049][T11727] bonding: b is being created... [ 364.046677][T11727] bonding: b already exists [ 365.347054][T11761] random: crng reseeded on system resumption [ 365.581972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 365.611968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 365.651970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 366.996298][T11785] input: syz0 as /devices/virtual/input/input18 [ 367.175368][T11783] bonding: b is being created... [ 367.175884][T11783] bonding: b already exists [ 367.641554][T11800] random: crng reseeded on system resumption [ 370.284958][T11822] random: crng reseeded on system resumption [ 370.369828][T11828] random: crng reseeded on system resumption [ 372.686266][T11869] random: crng reseeded on system resumption [ 373.056582][T11876] random: crng reseeded on system resumption [ 374.146606][T11904] random: crng reseeded on system resumption [ 374.234536][T11908] input: syz0 as /devices/virtual/input/input19 [ 374.948807][T11915] random: crng reseeded on system resumption [ 376.491952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 378.204748][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.243701][T12021] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 381.243718][T12021] overlayfs: failed to set xattr on upper [ 381.243722][T12021] overlayfs: ...falling back to redirect_dir=nofollow. [ 381.243727][T12021] overlayfs: ...falling back to metacopy=off. [ 381.243730][T12021] overlayfs: ...falling back to index=off. [ 381.243734][T12021] overlayfs: ...falling back to uuid=null. [ 383.443851][T12057] binder: 12056:12057 ioctl c00c6211 0 returned -14 [ 383.682457][T12064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 383.683570][T12064] overlayfs: failed to set xattr on upper [ 383.683577][T12064] overlayfs: ...falling back to redirect_dir=nofollow. [ 383.683582][T12064] overlayfs: ...falling back to metacopy=off. [ 383.683586][T12064] overlayfs: ...falling back to index=off. [ 383.683589][T12064] overlayfs: ...falling back to uuid=null. [ 386.556484][T12108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 386.556498][T12108] overlayfs: failed to set xattr on upper [ 386.556503][T12108] overlayfs: ...falling back to redirect_dir=nofollow. [ 386.556507][T12108] overlayfs: ...falling back to metacopy=off. [ 386.556510][T12108] overlayfs: ...falling back to index=off. [ 386.556514][T12108] overlayfs: ...falling back to uuid=null. [ 386.666489][T12113] overlayfs: failed to resolve '/OeKaW@K': -2 [ 386.794465][T12113] overlayfs: overlapping lowerdir path [ 387.843212][T12127] random: crng reseeded on system resumption [ 388.292404][ T5888] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 388.444075][ T5888] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 388.446058][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.446136][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.481693][ T5888] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 388.483000][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 388.483138][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 388.496839][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 388.497228][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 388.514324][ T5888] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 388.542957][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 388.543591][ T5888] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 388.557409][ T5888] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 389.333671][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 390.309471][T12165] random: crng reseeded on system resumption [ 390.966963][ T5888] usb 6-1: USB disconnect, device number 15 [ 390.976391][ T5888] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 390.981787][ T5888] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 390.988401][ T5888] keyspan 6-1:1.0: device disconnected [ 391.411248][T12188] overlayfs: failed to resolve '/OeKaW@K': -2 [ 391.463418][T12188] overlayfs: overlapping lowerdir path [ 392.586327][T12200] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 392.586402][T12200] overlayfs: failed to set xattr on upper [ 392.586411][T12200] overlayfs: ...falling back to redirect_dir=nofollow. [ 392.586418][T12200] overlayfs: ...falling back to metacopy=off. [ 392.586425][T12200] overlayfs: ...falling back to index=off. [ 392.586432][T12200] overlayfs: ...falling back to uuid=null. [ 392.823653][T12204] random: crng reseeded on system resumption [ 394.498715][T12239] random: crng reseeded on system resumption [ 394.722021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 394.733995][T12246] overlayfs: missing 'lowerdir' [ 396.127128][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 396.139027][T12267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.218053][T12270] ovs-system: entered promiscuous mode [ 396.323476][T12274] overlayfs: failed to resolve '/OeKaW@K': -2 [ 396.374328][T12274] overlayfs: overlapping lowerdir path [ 396.734526][T12276] random: crng reseeded on system resumption [ 398.273821][T12296] binder: 12295:12296 ioctl c00c6211 0 returned -14 [ 399.520782][ T42] kauditd_printk_skb: 81 callbacks suppressed [ 399.520800][ T42] audit: type=1326 audit(1792500101.190:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12319 comm="syz.0.1554" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62fec code=0x0 [ 400.232668][ T2330] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 400.402810][ T2330] usb 8-1: Using ep0 maxpacket: 32 [ 400.406575][ T2330] usb 8-1: unable to get BOS descriptor or descriptor too short [ 400.406617][ T2330] usb 8-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 400.407709][ T2330] usb 8-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 400.407769][ T2330] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.412858][ T2330] usb 8-1: language id specifier not provided by device, defaulting to English [ 400.414332][ T2330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.414352][ T2330] usb 8-1: Product: syz [ 400.414365][ T2330] usb 8-1: SerialNumber: syz [ 400.615967][T12339] overlayfs: failed to resolve '/OeKaW@K': -2 [ 400.630765][T12339] overlayfs: overlapping lowerdir path [ 402.488368][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 402.506194][ T2330] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 402.546120][ T2330] usb 8-1: USB disconnect, device number 13 [ 402.579440][ T9667] udevd[9667]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 402.644107][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 402.756035][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 404.002202][ T5838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 404.160245][T12382] jffs2: notice: (12382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 404.182521][ T5838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 404.182546][ T5838] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 404.182565][ T5838] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 404.183176][ T5838] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 404.183193][ T5838] usb 7-1: can't read configurations, error -71 [ 404.279979][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.280244][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.551821][ T110] IPVS: starting estimator thread 0... [ 404.652793][T12396] IPVS: using max 27 ests per chain, 64800 per kthread [ 407.994798][T12400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.059909][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 410.219212][T12457] binder: 12456:12457 ioctl c00c6211 0 returned -14 [ 412.178246][T12448] syz.0.1584 (12448) used greatest stack depth: 17800 bytes left [ 413.478475][T12462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.663482][T12503] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 413.800796][T12504] process 'syz.0.1596' launched '/dev/fd/12' with NULL argv: empty string added [ 413.934309][ T5971] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 414.082463][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 414.086613][ T5971] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.086638][ T5971] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 414.087411][ T5971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.087423][ T5971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 414.087442][ T5971] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.089206][ T5971] usb 6-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 414.089219][ T5971] usb 6-1: Product: syz [ 414.089226][ T5971] usb 6-1: Manufacturer: syz [ 414.089234][ T5971] usb 6-1: SerialNumber: syz [ 414.712900][ T5971] cdc_ncm 6-1:1.0: skipping garbage [ 414.712913][ T5971] cdc_ncm 6-1:1.0: skipping garbage [ 414.712920][ T5971] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 414.712938][ T5971] cdc_ncm 6-1:1.0: bind() failure [ 414.743246][ T5971] usb 6-1: USB disconnect, device number 16 [ 414.762280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 415.414657][T12520] overlayfs: missing 'lowerdir' [ 415.918525][T12532] sctp: [Deprecated]: syz.3.1603 (pid 12532) Use of int in max_burst socket option. [ 415.918525][T12532] Use struct sctp_assoc_value instead [ 416.806591][T12542] IPVS: ip_vs_add_dest(): server weight less than zero [ 418.224813][T12577] netlink: 'syz.0.1611': attribute type 6 has an invalid length. [ 419.111399][T12585] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.111414][T12585] overlayfs: failed to set xattr on upper [ 419.111418][T12585] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.111423][T12585] overlayfs: ...falling back to metacopy=off. [ 419.111427][T12585] overlayfs: ...falling back to index=off. [ 419.111431][T12585] overlayfs: ...falling back to uuid=null. [ 420.083102][T12605] binder: 12604:12605 ioctl c00c6211 0 returned -14 [ 420.147487][T12609] sctp: [Deprecated]: syz.2.1621 (pid 12609) Use of int in max_burst socket option. [ 420.147487][T12609] Use struct sctp_assoc_value instead [ 420.751622][ T42] audit: type=1326 audit(1792500122.420:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761088][ T42] audit: type=1326 audit(1792500122.420:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761191][ T42] audit: type=1326 audit(1792500122.430:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761263][ T42] audit: type=1326 audit(1792500122.430:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761310][ T42] audit: type=1326 audit(1792500122.430:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761358][ T42] audit: type=1326 audit(1792500122.430:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761479][ T42] audit: type=1326 audit(1792500122.430:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.761585][ T42] audit: type=1326 audit(1792500122.430:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.768642][T12617] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 420.789191][ T42] audit: type=1326 audit(1792500122.430:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 420.789218][ T42] audit: type=1326 audit(1792500122.430:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 421.095399][ T4107] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 421.242016][ T4107] usb 6-1: Using ep0 maxpacket: 16 [ 421.244249][ T4107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 421.244283][ T4107] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 421.250002][ T4107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.250021][ T4107] usb 6-1: Product: syz [ 421.250032][ T4107] usb 6-1: Manufacturer: syz [ 421.250043][ T4107] usb 6-1: SerialNumber: syz [ 421.526705][ T4107] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.557763][ T4107] usb 6-1: USB disconnect, device number 17 [ 421.626518][T10311] udevd[10311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 423.455322][T12655] binder: 12653:12655 ioctl c00c6211 0 returned -14 [ 424.002460][ T5887] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 424.152831][ T5887] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 424.153697][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.153732][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.158263][ T5887] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 424.158434][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 424.158494][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 424.159751][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 424.159818][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 424.161021][ T5887] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 424.196005][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 424.196075][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 424.197433][ T5887] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 424.393614][T12658] Console: switching to colour dummy device 80x25 [ 424.837775][T12656] ima: policy update completed [ 426.512424][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 426.512438][ T42] audit: type=1800 audit(1792500128.180:523): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34593 res=0 errno=0 [ 426.512467][ T42] audit: type=1800 audit(1792500128.180:524): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34616 res=0 errno=0 [ 426.549500][ T4107] usb 7-1: USB disconnect, device number 14 [ 426.558135][ T4107] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 426.565189][ T4107] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 426.568964][ T4107] keyspan 7-1:1.0: device disconnected [ 426.690227][T12703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.690263][T12703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 427.835368][ T42] audit: type=1800 audit(1792500129.510:525): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=575664 res=0 errno=0 [ 428.510258][T12685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.614272][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.616526][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.636303][T12720] jffs2: notice: (12720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 428.661577][ T42] audit: type=1800 audit(1792500130.330:526): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34643 res=0 errno=0 [ 428.663332][ T42] audit: type=1800 audit(1792500130.340:527): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34666 res=0 errno=0 [ 428.720606][T12729] sctp: [Deprecated]: syz.1.1646 (pid 12729) Use of int in max_burst socket option. [ 428.720606][T12729] Use struct sctp_assoc_value instead [ 428.892032][ T5821] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 429.042846][ T5821] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 429.042884][ T5821] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 429.043825][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.043845][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.043875][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.043896][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.043922][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.045028][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.045047][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.045075][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.045095][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.045115][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.046049][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.046076][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.046105][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.046125][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.046145][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.047054][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.047071][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.047100][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.047120][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.047140][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.048058][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.048076][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.048108][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.048128][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.048148][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.049028][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.049046][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.049075][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.049095][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.049115][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.050013][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.050033][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.050064][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.050086][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.050108][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.051011][ T5821] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.051030][ T5821] usb 8-1: config 1 has no interface number 0 [ 429.051059][ T5821] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 429.051080][ T5821] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.051100][ T5821] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.075105][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.075126][ T5821] usb 8-1: Product: syz [ 429.075139][ T5821] usb 8-1: Manufacturer: syz [ 429.075151][ T5821] usb 8-1: SerialNumber: syz [ 429.120153][T12725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 429.125625][ T42] audit: type=1800 audit(1792500130.800:528): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=575721 res=0 errno=0 [ 429.131637][ T42] audit: type=1800 audit(1792500130.800:529): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=575753 res=0 errno=0 [ 429.135285][ T42] audit: type=1800 audit(1792500130.810:530): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=575728 res=0 errno=0 [ 429.137932][ T42] audit: type=1800 audit(1792500130.810:531): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=575729 res=0 errno=0 [ 429.368315][T12725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 429.583799][ T42] audit: type=1800 audit(1792500131.260:532): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=575837 res=0 errno=0 [ 429.688143][ T5821] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:04:07 [ 430.122871][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.123236][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.234948][T12755] misc userio: The device must be registered before sending interrupts [ 430.387893][T12760] 9pnet_virtio: no channels available for device syz [ 431.454406][T12776] random: crng reseeded on system resumption [ 431.687096][ T5821] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 431.687114][ T5821] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 431.688924][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 431.688938][ T42] audit: type=1800 audit(1792500133.360:535): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=575750 res=0 errno=0 [ 431.689946][ T42] audit: type=1800 audit(1792500133.360:536): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=575751 res=0 errno=0 [ 431.690788][ T42] audit: type=1800 audit(1792500133.360:537): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=575730 res=0 errno=0 [ 431.691215][ T42] audit: type=1800 audit(1792500133.360:538): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=575752 res=0 errno=0 [ 431.698831][ T5821] usb 8-1: USB disconnect, device number 14 [ 431.700180][ T5821] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 431.758412][T12785] syzkaller1: entered promiscuous mode [ 431.758427][T12785] syzkaller1: entered allmulticast mode [ 431.782954][ T5821] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 431.795412][ T42] audit: type=1800 audit(1792500133.470:539): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30012 res=0 errno=0 [ 431.951110][ T42] audit: type=1800 audit(1792500133.620:540): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1663" name="file0" dev="tmpfs" ino=2284 res=0 errno=0 [ 431.977315][ T42] audit: type=1804 audit(1792500133.650:541): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1663" name="/newroot/411/file0" dev="tmpfs" ino=2284 res=1 errno=0 [ 431.997912][T12793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.997938][T12793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.145989][ T42] audit: type=1800 audit(1792500134.820:542): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576179 res=0 errno=0 [ 433.797071][T12825] IPVS: ip_vs_add_dest(): server weight less than zero [ 433.805690][ T42] audit: type=1800 audit(1792500135.480:543): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576192 res=0 errno=0 [ 434.427860][T12829] fuse: Unknown parameter 'fd0x0000000000000003' [ 434.458111][T12833] syzkaller1: entered promiscuous mode [ 434.458133][T12833] syzkaller1: entered allmulticast mode [ 434.812341][ T2330] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 434.942308][ T5887] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 434.962793][ T2330] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 434.963727][ T2330] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.963751][ T2330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.965897][ T42] audit: type=1800 audit(1792500136.640:544): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=576349 res=0 errno=0 [ 434.966690][ T2330] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 434.966783][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 434.966811][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 434.967378][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 434.967410][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 434.970280][ T2330] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 434.974221][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 434.974286][ T2330] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 434.975640][ T2330] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 435.103833][T12844] jffs2: notice: (12844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 435.121692][ T5887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 435.121734][ T5887] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 435.121764][ T5887] usb 8-1: too many configurations: 32, using maximum allowed: 8 [ 435.124212][ T5887] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 435.124239][ T5887] usb 8-1: can't read configurations, error -71 [ 437.619413][ T5888] usb 7-1: USB disconnect, device number 15 [ 437.623168][ T5888] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 437.628298][ T5888] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 437.628608][ T5888] keyspan 7-1:1.0: device disconnected [ 437.717749][T12891] sctp: [Deprecated]: syz.3.1688 (pid 12891) Use of int in max_burst socket option. [ 437.717749][T12891] Use struct sctp_assoc_value instead [ 438.655426][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 438.655545][T12909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.664304][T12909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.730643][T12909] ovs-system: entered promiscuous mode [ 439.652200][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.743080][T12924] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 439.743101][T12924] overlayfs: failed to set xattr on upper [ 439.743107][T12924] overlayfs: ...falling back to redirect_dir=nofollow. [ 439.743114][T12924] overlayfs: ...falling back to metacopy=off. [ 439.743120][T12924] overlayfs: ...falling back to index=off. [ 439.743126][T12924] overlayfs: ...falling back to uuid=null. [ 439.954710][T12929] netlink: 'syz.3.1698': attribute type 6 has an invalid length. [ 440.199515][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 440.199528][ T42] audit: type=1326 audit(1792500141.870:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.199665][ T42] audit: type=1326 audit(1792500141.870:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.201306][ T42] audit: type=1326 audit(1792500141.870:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.201332][ T42] audit: type=1326 audit(1792500141.870:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.201352][ T42] audit: type=1326 audit(1792500141.870:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.201709][ T42] audit: type=1326 audit(1792500141.870:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.205053][ T42] audit: type=1326 audit(1792500141.880:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.205184][ T42] audit: type=1326 audit(1792500141.880:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.208732][ T42] audit: type=1326 audit(1792500141.880:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71377eb code=0x7ffc0000 [ 440.209192][ T42] audit: type=1326 audit(1792500141.880:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defec code=0x7ffc0000 [ 440.518132][ T5888] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 440.676541][ T5888] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 440.696776][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.696874][ T5888] usb 8-1: Product: syz [ 440.696915][ T5888] usb 8-1: Manufacturer: syz [ 440.696956][ T5888] usb 8-1: SerialNumber: syz [ 440.730080][ T5888] usb 8-1: USB2VGA dongle found at address 17 [ 440.739927][ T5888] usb 8-1: Allocated 8 output buffers [ 441.059104][ T5888] usb 8-1: Failed to early initialize device [ 441.062129][ T5888] usb 8-1: USB disconnect, device number 17 [ 442.318420][T12981] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 442.318435][T12981] overlayfs: failed to set xattr on upper [ 442.318440][T12981] overlayfs: ...falling back to redirect_dir=nofollow. [ 442.318444][T12981] overlayfs: ...falling back to metacopy=off. [ 442.318448][T12981] overlayfs: ...falling back to index=off. [ 442.318451][T12981] overlayfs: ...falling back to uuid=null. [ 442.813132][ T5888] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 442.966242][ T5888] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 442.966635][T12992] netlink: 'syz.2.1711': attribute type 6 has an invalid length. [ 442.967121][ T5888] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.967137][ T5888] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.967151][ T5888] usb 8-1: config 0 interface 0 has no altsetting 0 [ 442.967166][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.968682][ T5888] usb 8-1: config 0 descriptor?? [ 443.491635][ T5888] usbhid 8-1:0.0: can't add hid device: -71 [ 443.491686][ T5888] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 443.493256][ T5888] usb 8-1: USB disconnect, device number 18 [ 443.877983][T12950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.975220][T13020] IPVS: ip_vs_add_dest(): server weight less than zero [ 445.636277][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 445.636301][ T42] audit: type=1804 audit(1792500147.310:670): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1720" name="bus" dev="ramfs" ino=48026 res=1 errno=0 [ 445.637642][ T42] audit: type=1804 audit(1792500147.310:671): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1720" name="bus" dev="ramfs" ino=48026 res=1 errno=0 [ 445.752074][ T42] audit: type=1800 audit(1792500147.420:672): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577327 res=0 errno=0 [ 445.982001][ T5888] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 446.133184][ T5888] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 446.133970][ T5888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.133994][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.137800][ T5888] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 446.137894][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 446.137921][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 446.138148][ T42] audit: type=1800 audit(1792500147.810:673): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577345 res=0 errno=0 [ 446.138589][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 446.138622][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 446.138973][ T42] audit: type=1800 audit(1792500147.810:674): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=577374 res=0 errno=0 [ 446.139572][ T42] audit: type=1800 audit(1792500147.810:675): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=577352 res=0 errno=0 [ 446.140038][ T42] audit: type=1800 audit(1792500147.810:676): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=577353 res=0 errno=0 [ 446.140126][ T5888] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 446.140967][ T42] audit: type=1800 audit(1792500147.810:677): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=577354 res=0 errno=0 [ 446.142511][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 446.142545][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 446.144535][ T5888] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 446.154415][ T42] audit: type=1800 audit(1792500147.830:678): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577394 res=0 errno=0 [ 446.156714][ T42] audit: type=1800 audit(1792500147.830:679): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577410 res=0 errno=0 [ 446.614999][T13042] IPv6: addrconf: prefix option has invalid lifetime [ 446.951823][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 446.958857][T13049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.027425][T13052] ovs-system: entered promiscuous mode [ 448.063303][T13059] random: crng reseeded on system resumption [ 448.732824][ T5888] usb 8-1: USB disconnect, device number 19 [ 448.738614][ T5888] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 448.743759][ T5888] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 448.755626][ T5888] keyspan 8-1:1.0: device disconnected [ 449.240716][T13082] macsec1: entered promiscuous mode [ 449.240747][T13082] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 449.241374][T13082] macsec1: entered allmulticast mode [ 449.241461][T13082] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 449.248575][T13082] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 449.258192][T13082] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 449.258209][T13082] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 449.444199][T13083] 9pnet_virtio: no channels available for device syz [ 450.195806][T13103] Invalid ELF header magic: != ELF [ 450.218384][T13103] overlay: Unknown parameter '/' [ 450.505105][T13105] random: crng reseeded on system resumption [ 450.677584][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 451.415139][T13124] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 451.415162][T13124] overlayfs: failed to set xattr on upper [ 451.415169][T13124] overlayfs: ...falling back to redirect_dir=nofollow. [ 451.415176][T13124] overlayfs: ...falling back to metacopy=off. [ 451.415182][T13124] overlayfs: ...falling back to index=off. [ 451.415187][T13124] overlayfs: ...falling back to uuid=null. [ 451.615441][T13126] openvswitch: netlink: IP tunnel dst address not specified [ 451.700174][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 451.700194][ T42] audit: type=1800 audit(1792500153.370:688): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1743" name="protocol" dev="sysfs" ino=49101 res=0 errno=0 [ 451.712922][ T42] audit: type=1800 audit(1792500153.380:689): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577736 res=0 errno=0 [ 451.721323][T13126] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input25 [ 451.804854][ T42] audit: type=1800 audit(1792500153.480:690): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=577752 res=0 errno=0 [ 451.805351][ T42] audit: type=1800 audit(1792500153.480:691): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=577755 res=0 errno=0 [ 451.805798][ T42] audit: type=1800 audit(1792500153.480:692): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=577754 res=0 errno=0 [ 451.806248][ T42] audit: type=1800 audit(1792500153.480:693): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=577753 res=0 errno=0 [ 451.806813][ T42] audit: type=1800 audit(1792500153.480:694): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=577744 res=0 errno=0 [ 451.807372][ T42] audit: type=1800 audit(1792500153.480:695): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=577747 res=0 errno=0 [ 451.814337][ T42] audit: type=1800 audit(1792500153.480:696): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=577740 res=0 errno=0 [ 451.814380][ T42] audit: type=1800 audit(1792500153.490:697): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=577768 res=0 errno=0 [ 451.951228][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 452.301351][T13142] lo: entered promiscuous mode [ 452.314811][T13142] tunl0: entered promiscuous mode [ 452.316515][T13142] gre0: entered promiscuous mode [ 452.325637][T13142] gretap0: entered promiscuous mode [ 452.327739][T13142] erspan0: entered promiscuous mode [ 452.329436][T13142] ip_vti0: entered promiscuous mode [ 452.330545][T13142] ip6_vti0: entered promiscuous mode [ 452.331772][T13142] sit0: entered promiscuous mode [ 452.342518][T13142] ip6tnl0: entered promiscuous mode [ 452.343906][T13142] ip6gre0: entered promiscuous mode [ 452.345591][T13142] syz_tun: entered promiscuous mode [ 452.348210][T13142] ip6gretap0: entered promiscuous mode [ 452.349672][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.349809][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.351638][T13142] vcan0: entered promiscuous mode [ 452.368756][T13142] team0: entered promiscuous mode [ 452.368774][T13142] team_slave_0: entered promiscuous mode [ 452.368939][T13142] team_slave_1: entered promiscuous mode [ 452.370717][T13142] nlmon0: entered promiscuous mode [ 452.381759][T13142] vxcan0: entered promiscuous mode [ 452.384243][T13142] vxcan1: entered promiscuous mode [ 452.384697][T13142] veth0: entered promiscuous mode [ 452.386427][T13142] veth1: entered promiscuous mode [ 452.388219][T13142] wg0: entered promiscuous mode [ 452.389304][T13142] wg1: entered promiscuous mode [ 452.402762][T13142] wg2: entered promiscuous mode [ 452.404075][T13142] veth0_to_bridge: entered promiscuous mode [ 452.406532][T13142] veth1_to_bridge: entered promiscuous mode [ 452.408832][T13142] veth0_to_bond: entered promiscuous mode [ 452.410970][T13142] veth1_to_bond: entered promiscuous mode [ 452.425281][T13142] veth0_to_team: entered promiscuous mode [ 452.430114][T13142] veth1_to_team: entered promiscuous mode [ 452.442975][T13142] veth0_to_batadv: entered promiscuous mode [ 452.446988][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.447073][T13142] batadv_slave_0: entered promiscuous mode [ 452.450024][T13142] xfrm0: entered promiscuous mode [ 452.468188][T13142] veth0_to_hsr: entered promiscuous mode [ 452.476419][T13142] veth1_to_hsr: entered promiscuous mode [ 452.484110][T13142] hsr0: entered promiscuous mode [ 452.492403][T13142] veth1_virt_wifi: entered promiscuous mode [ 452.498715][T13142] veth0_virt_wifi: entered promiscuous mode [ 452.504557][T13142] virt_wifi0: entered promiscuous mode [ 452.516912][T13142] : entered promiscuous mode [ 452.536323][T13142] vlan1: entered promiscuous mode [ 452.592157][T13142] macvlan0: entered promiscuous mode [ 452.600995][T13142] macvlan1: entered promiscuous mode [ 452.614112][T13142] ipvlan0: entered promiscuous mode [ 452.615266][T13142] ipvlan1: entered promiscuous mode [ 452.640600][T13142] macvtap0: entered promiscuous mode [ 452.651313][T13142] macsec0: entered promiscuous mode [ 452.660474][T13142] geneve0: entered promiscuous mode [ 452.679423][T13142] geneve1: entered promiscuous mode [ 452.696229][T13142] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 452.717147][T13142] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 452.726390][T13142] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 452.731616][T13142] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 452.738209][T13142] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 452.738325][T13142] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 452.738420][T13142] erspan0.1: entered promiscuous mode [ 452.744336][T13142] hsr1: entered promiscuous mode [ 452.748547][T13142] bond1: entered promiscuous mode [ 452.748619][T13142] b: entered promiscuous mode [ 452.752216][ T5787] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.752256][ T5787] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.752288][ T5787] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.752388][ T5787] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.264759][T13155] random: crng reseeded on system resumption [ 454.716531][T13172] netlink: 'syz.0.1750': attribute type 6 has an invalid length. [ 455.255593][T13185] openvswitch: netlink: IP tunnel dst address not specified [ 455.350760][T13189] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26 [ 455.639672][T13195] random: crng reseeded on system resumption [ 455.832460][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 456.498380][T13210] netlink: 'syz.1.1760': attribute type 6 has an invalid length. [ 456.605814][T13213] [ 456.606640][T13213] ====================================================== [ 456.608802][T13213] WARNING: possible circular locking dependency detected [ 456.610983][T13213] syzkaller #0 Not tainted [ 456.612579][T13213] ------------------------------------------------------ [ 456.614949][T13213] syz.0.1762/13213 is trying to acquire lock: [ 456.616839][T13213] ffffffff90fb99a8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 456.619714][T13213] [ 456.619714][T13213] but task is already holding lock: [ 456.622019][T13213] ffff888028f9c880 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 456.624921][T13213] [ 456.624921][T13213] which lock already depends on the new lock. [ 456.624921][T13213] [ 456.628112][T13213] [ 456.628112][T13213] the existing dependency chain (in reverse order) is: [ 456.630917][T13213] [ 456.630917][T13213] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 456.633563][T13213] lock_acquire+0x1d1/0x380 [ 456.635154][T13213] down_write+0x8b/0x1f0 [ 456.636653][T13213] configfs_depend_item_unlocked+0xf3/0x6a0 [ 456.638650][T13213] usbg_make_tpg+0x251/0x610 [ 456.640259][T13213] target_fabric_make_tpg+0xab/0x8c0 [ 456.642115][T13213] configfs_mkdir+0x525/0xd40 [ 456.643629][T13213] vfs_mkdir+0x364/0x850 [ 456.645057][T13213] filename_mkdirat+0x48b/0x5e0 [ 456.646749][T13213] __ia32_sys_mkdirat+0x88/0xc0 [ 456.648381][T13213] __do_fast_syscall_32+0x13a/0x8b0 [ 456.650159][T13213] do_fast_syscall_32+0x32/0x70 [ 456.651840][T13213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.653967][T13213] [ 456.653967][T13213] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 456.656421][T13213] lock_acquire+0x1d1/0x380 [ 456.658010][T13213] __mutex_lock+0x1a4/0x1c20 [ 456.659608][T13213] usbg_make_tpg+0x10b/0x610 [ 456.661236][T13213] target_fabric_make_tpg+0xab/0x8c0 [ 456.663055][T13213] configfs_mkdir+0x525/0xd40 [ 456.664679][T13213] vfs_mkdir+0x364/0x850 [ 456.666180][T13213] filename_mkdirat+0x48b/0x5e0 [ 456.667851][T13213] __ia32_sys_mkdirat+0x88/0xc0 [ 456.669530][T13213] __do_fast_syscall_32+0x13a/0x8b0 [ 456.671317][T13213] do_fast_syscall_32+0x32/0x70 [ 456.672990][T13213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.675115][T13213] [ 456.675115][T13213] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 456.677526][T13213] check_prev_add+0xeb/0xe60 [ 456.679138][T13213] __lock_acquire+0x1528/0x1f40 [ 456.680823][T13213] lock_acquire+0x1d1/0x380 [ 456.682427][T13213] __mutex_lock+0x1a4/0x1c20 [ 456.684021][T13213] configfs_rmdir+0x5ae/0x950 [ 456.685645][T13213] vfs_rmdir+0x328/0x8a0 [ 456.687151][T13213] filename_rmdir+0x31a/0x5c0 [ 456.688772][T13213] __ia32_sys_rmdir+0x45/0x60 [ 456.690428][T13213] __do_fast_syscall_32+0x13a/0x8b0 [ 456.692198][T13213] do_fast_syscall_32+0x32/0x70 [ 456.693876][T13213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.695984][T13213] [ 456.695984][T13213] other info that might help us debug this: [ 456.695984][T13213] [ 456.699100][T13213] Chain exists of: [ 456.699100][T13213] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 456.699100][T13213] [ 456.703502][T13213] Possible unsafe locking scenario: [ 456.703502][T13213] [ 456.705791][T13213] CPU0 CPU1 [ 456.707456][T13213] ---- ---- [ 456.709117][T13213] lock(&sb->s_type->i_mutex_key#25); [ 456.710849][T13213] lock(tpg_instances_lock); [ 456.713496][T13213] lock(&sb->s_type->i_mutex_key#25); [ 456.716632][T13213] lock(&subsys->su_mutex); [ 456.718483][T13213] [ 456.718483][T13213] *** DEADLOCK *** [ 456.718483][T13213] [ 456.721654][T13213] locks held by syz.0.1762/13213: 3, last CPU#3: [ 456.724164][T13213] #0: ffff888023db8460 (sb_writers#12){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 456.727865][T13213] #1: ffff88801f8ac880 (&default_group_class[depth - 1]#7/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 456.732341][T13213] #2: ffff888028f9c880 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 456.736329][T13213] [ 456.736329][T13213] stack backtrace: [ 456.738659][T13213] CPU: 3 UID: 0 PID: 13213 Comm: syz.0.1762 Not tainted syzkaller #0 PREEMPT(full) [ 456.742364][T13213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.746316][T13213] Call Trace: [ 456.747641][T13213] [ 456.748823][T13213] dump_stack_lvl+0x100/0x190 [ 456.750729][T13213] print_circular_bug.cold+0x178/0x1be [ 456.752880][T13213] check_noncircular+0x146/0x160 [ 456.754854][T13213] check_prev_add+0xeb/0xe60 [ 456.756696][T13213] ? __bfs+0x150/0x2a0 [ 456.758323][T13213] __lock_acquire+0x1528/0x1f40 [ 456.760265][T13213] lock_acquire+0x1d1/0x380 [ 456.762105][T13213] ? configfs_rmdir+0x5ae/0x950 [ 456.764064][T13213] ? __pfx___might_resched+0x10/0x10 [ 456.766164][T13213] ? __lock_acquire+0x5c0/0x1f40 [ 456.768137][T13213] __mutex_lock+0x1a4/0x1c20 [ 456.769983][T13213] ? configfs_rmdir+0x5ae/0x950 [ 456.771928][T13213] ? configfs_rmdir+0x5ae/0x950 [ 456.773873][T13213] ? reacquire_held_locks+0xdd/0x1f0 [ 456.775968][T13213] ? __pfx___mutex_lock+0x10/0x10 [ 456.777991][T13213] ? do_raw_spin_lock+0x128/0x260 [ 456.779990][T13213] ? find_held_lock+0x2b/0x80 [ 456.781598][T13213] ? fast_dput+0x2fe/0x6f0 [ 456.783005][T13213] ? do_raw_spin_unlock+0x145/0x1e0 [ 456.784626][T13213] ? _raw_spin_unlock+0x28/0x50 [ 456.786161][T13213] ? fast_dput+0x168/0x6f0 [ 456.787567][T13213] ? configfs_rmdir+0x5ae/0x950 [ 456.789097][T13213] configfs_rmdir+0x5ae/0x950 [ 456.790581][T13213] ? __pfx_configfs_rmdir+0x10/0x10 [ 456.792189][T13213] ? __pfx_down_write+0x10/0x10 [ 456.793732][T13213] vfs_rmdir+0x328/0x8a0 [ 456.795073][T13213] filename_rmdir+0x31a/0x5c0 [ 456.796549][T13213] ? __pfx_filename_rmdir+0x10/0x10 [ 456.798172][T13213] ? do_getname+0x191/0x390 [ 456.799594][T13213] __ia32_sys_rmdir+0x45/0x60 [ 456.801077][T13213] __do_fast_syscall_32+0x13a/0x8b0 [ 456.802728][T13213] do_fast_syscall_32+0x32/0x70 [ 456.804268][T13213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.806249][T13213] RIP: 0023:0xf7f62fec [ 456.807530][T13213] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 456.809567][T13213] RSP: 002b:00000000f4b8e50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 456.812160][T13213] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000 [ 456.814611][T13213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.817047][T13213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.819496][T13213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 456.821967][T13213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.824417][T13213] [ 456.927109][ T66] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 457.562079][ T8309] Bluetooth: hci4: command 0x1003 tx timeout [ 457.566942][ T5738] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 458.239798][T13209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.239956][T13209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.240053][T13209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.240144][T13209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.522648][ T5738] Bluetooth: hci0: command 0x0406 tx timeout [ 460.282703][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 460.282742][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 460.282786][ T8309] Bluetooth: hci1: command 0x0406 tx timeout