last executing test programs: 2m29.630732892s ago: executing program 1 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2m29.58085132s ago: executing program 1 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000b13ff03f8204549af300", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x53f1, 0x2, 0xb, 0x7}, {0x6, 0x4c, 0x37, 0x40000}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x1e, 0x3, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x43, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m29.490437706s ago: executing program 1 (id=156): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000003480), 0x0, 0x40000003, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48004, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setgroups(0x0, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x18) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r10, &(0x7f00000031c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000004c0)="804289e13e4dca73e880f4de668a1f8e5f411420b502a05e620ce581fe6256122dc33b76c13ad29aa4384fba5845e0c800ae93615786a474b3a71f6899fadb12a33d5cdce56ede100df0623f0e7aac5d8b46da36a833b8e90249b42d0ab03267e0bf61c4460a9129d6fff9b71fed31fc6246bcee3e819c9602523488a57a81e5da60b8e17c7e739b83599b7a273bd70b48c59f73595875e28104546a285f1bebd2a4096d8c138b2ab1c07ef9d45b9e91c59f127791ad530861e608363ae8542b479179f13983c4e623ee1d30bc5105c099c3ed5caf", 0xd5}, {&(0x7f0000000680)="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", 0xfd}, {&(0x7f0000000780)="0810fb25067af39b7d2adb3e105da9035824399985cc260166afdf3385a70256ad38f17c141efb56210e196cbc1aee39b3dc8d1199f871d22c53af14af172278f0", 0x41}, {&(0x7f0000000d80)="945d71e14e8abfadec3a529fc064a3421f459def0f79ab2c458a934d02223652d2ba3bc0c138019e46a2ef6cc7a667df46bba773d159f0d2d853fe137f9d03d739532eaa8c3ebc37cb117bcd1269114b8b48dde10d8454259704f5eca25aaddc43b2292c844ad6f5a78a22a29b05ab1600e9a80f5d41038a48c2d2c792ddaa679f28d4b17a85772fbcb555b04f9739d4c873dd2074016d60b9caddc8071f666bd074e6862c33c51bbaebef39db8fca561ff32697e292163f0c54e3064ca8d4447dde04e0f64b6165fe31eacd9ba48a2360dd853b611c9d3597863f2a07ad8f612fa0b7f8a5701c6c46115c910aa231c6d7b3afc1f63386aa1a0f224f1fbc13c8faee24b864a645e89873fd45670edbc75b9a1d0aa43ce76effa7377239a0e6f3fc6122b7dacc3511c1af8ae1165d056727f28938f33a98b5cf1a2addb9ae628384b8760bc38459b5258c9bea53573e84b460e6ce677c0b8f58c48c2de35d3d878bdee34eda069917d8c5a0117c915028d46d8e6690d239f8dc2481b446791b7cf1d6ce8c1fdd9df7d1abca41b16f74dabfc972888c7303be38a147cae4359862234a3f4c53e496d2f7435f53f4e5ffc381cb1cf0e0609f7da3b74ea42a994ad3372fa2d4381555339c1f40a149194c21068b1b2d7c419838aaa2901fc761f251a3f50bac7219a2af295c43a96368cdd1e1d50e89fa7a207732a9edf2a441d5f4f00c4f86e8f7be3ef71e0a979bbfbf70e60084b6374c260237e2b505566233e1414f359a34807bf7cca9aa9096723a6bbf23638966ba00bab9c305381908d91a852249aa460ca654cfbd53deba47bffb7bf58ba35f739909cc47058b955e62d2e2254235582629f7c9aa634d91879f5dcc28cef3c88532dfa16b12a234b2e422e3102d4f9e9170809acc91485bad5961389949a0e510b0754ad0be4adfb447ad2ded74ffc648aacecfb46e5933f68123aa002b4cd1a7092dd6ed3001ada2c24276abf8a13bb7564707c559e9a9d6b04abddf3eff163c9f9df66fe6d27ff380eb49db3c95b3f37055edff53dfb70136bac4801680ade07a5c7907244ac8cad39d46c85b3abcbf95da6221e3c9826e98f4e716a43219fe36ca93db25563f70033c4feae17b0199b1253422af50a9e08694bfc78a97b7d2b6127d0cd3b23e26d46a0b771c09f9822746cb15550fdb4aceb1ce35e43fdecdb7c164f20c739acd10bae99fadef49a45b317dca8d6c997125be6cff2fe7723f95299e011d9ced777a9cbfefdfa9c0fd97f38e2c4c29ff3a1a0b156c48208a37463f9ac4aa4bf7bd30dd1aafa40d253fc5d602e6ba12a11e39fb0e14bcdb7bd2d703935ce251b7707d0c028e4f05536abfe2f276ffac93fecb97af0411897374af336c88799f62c552a2218c6c5eddb3337149c0b09842f3cd40b4bc64c808b6b1a9f634ca37144f63590504cd696544b272a0d95a1930c88d556962b93b9b5c3c3892b0c60d63cc41cf248aebdd476e32d3ead37c6e708b920ac76a175dbc9ad15bc7c44177b29c31298aca73fdb15a81e06fc0b6371a0bf7b63f190016831af959f0b908f950b03ebebe1dbccc379c0baedf6e89a8325a3ef6ba6e56e53c6fa7931333cfe3cecd52670da29a6467ee3762d24992b30f28e33ac022784564c0b750b793656631d954a02e5e168f2d308b16fdeda36493b6b9acd2a5520480be49921e0772507004f11b20504a1502a4c9a1aef6a974d856cd4a34d181178b8549614d0519335f7720aea7dc54b01ae4f449fffdd1d44dbb268b3b6b2c526e8d287e41080a904d89a1fb2e28bb2b10b385815d648efd2d95720e5a31519e116e71895fd0da08bbf20a04016204f4f2f1a343feec9a70e31317feaf63890119e60c2842d1a5fb61f177dce604ffca502cefbe5b1ba3f878e857f6aaa04b21de2bb7fbe7930a7f01eea93e7e9a54bdd519f55c7ad3828a67e9a526d5624fd6cb6e679e8904c4c91936968de19be9577eed95dbb6c28479c45461112e983a52361e00b46ea5fbd0dae492eeb1dc2c72c78b0683660ca340b1ff8b23d5129ef45ce5f2f0090a603d32a371a34c7f959ba8dcf0c65cab730cc196c25d1b5037bd5597cd68a3cb9397ec53f38d39137a41152378d88d9a2e196d7982351aeffddee761238f0ea949c8917e99403ae078519234632b64fc1aacae8685af0fea0436fde8b618dd3fb6456eaaa1759caa37a409d05164005e7d6d068689b90812eb7769a2240fcc778cfc3536b6398a1bc166b44c5756e9f369e8ef2f322b984acc088102d5e6f32552b847dc425cfa780ab065909d57d442ad3b478f4313a037d6ef1a1252870d41e1e557a8b8c9b1c0409745fd41527106733554ab415ef7f8f9a5f24f495d9ff73a3615f57eecdca295ebacb8fe707424dd15dcd19ad108b2f2b08dc1e4f73c6e05f4f1f0bd494092ded5916793d15e93b39397709a2b11a265d10b4f7003f92c8f42d914fed000b5b59fab8cf9a0b1357fa2bfcf8db3b0b158df02cd74306cf3015ff3c219b194317f2b0f7377217cb20edc7f4a2a6be68ce4f910dbc78133d64c8bb09fa2a6005a0006dbc68a640f86b38f9c3cf5d6461ec1c22952319e691992dce5273531965dc2065c5eec240d9d4cd9b85bc2f1a4b76d30f4ddca995ff384b772902a60545475ddbb0783334b8123804dbaea9c8e4c161b1fd719fd27af4a682d51934475a52bc9e1bd555073a7b1c4f96fa7672d3bc2597d522684231702d426cb882763f7c349d2e20ea57843f0b21f6dec288c27c4741663b4e5037fa3de03860f186b5c70c8c9821e5fcabef96cdd971792ac9069a943f9061dd6225cccc92efe7bc7faf9e3bfa02a26c67da654973b262c683b08ecbdac406846ad06598651be3f8fdc24206a0950da3c0f34b25e7ee5efc33226db100163812bddf04080f0ee76eb7b288dd600a1242da6e20e2273fdbdf73717559ea92f2d30a21e9fe28fc92ee9c060d7e5a22bbf399832ff56675d4f20943caa677fedfbce5766de57529cfcd21d09ff6557092f9579a0323df7403a4b588b72c6721f607201c6912bef2f8646c5f020ec703c1a5ba41d51efb70b9c57611d956b06cd22c8ffa4e6fbafa83282efa277a6d5a80f788dfff10458f7217130ff454ca8c801cbcbfb388e61cae7a196d82a04b4ba8927b1baeb6e4799b04f424c8ada1c0a2ba1aba451159561c853ec27aea7854c77244958b1780a8df674c1a0eb3308feca1e00b3bc4a152702cffe26b4a4bb1cb58c23c3e22b2023c6f2828cb1e24f008c49420425a31cc82682a207b843a4d3c114de7087b11a1cff19504c34dc47049b50bde9bc222044fe73acd7c2e19849e163af44dd6f704379e042a062a459d297b23bf726c16f18f180a0c04b1edfa169addc33e52982bd8389b61619db2cd93c05e10551d1df9d41944b5e663951d72ee7269062cd20c576a408871a731e0fa633ed81027825e8a2fa1a6779f3572adbbf15d95d42bea14ce9f01f9655716e0703fc4571822eb94b75e60dbb4ccfdb1383ee4c49f278fe5833b7b2f7021eb1e238721ae83c018c0f567b0b2d48306d7ed252709ec1bdfd8e031546a501cd09708e271e7f7c0131f0ed370b72cd42ae760d0eb3d329363eb32a94723d1859a120353002c6693b398f23634a563400afca4b43afe1bdbaae74b7eb4c4bb149c2aae470ab39b6af95e4fa12340bd5076dca18f61181f7484dad397b98946e22008f8e6908cb2f2db0d35605630a6bf4340fa6e7ee56a4a75fdc23a77cd04d8160cc479d1cb3d617f9a9feb243ed197c5006e3e8ef27c5ce9d9478aca1fd0f687f07d005c672f2964faf3705df6dbc9edd493e66edd76ad574093736c4cef9e052f93226f331afdfba736af2f084ee5ea00381a32e8269c36905a40058d42d6c304e14497f773822ff441d24d79e673e380d8755c3099f489ee370731176341552367e77396c4d6af07f7da58dec7aaadd81fe8e1822d87422a220ed7d571b9643794109464134f31edf4a02be77f1d3e2c8d1ef1b700e02eb89d170ed25733e2c5075f095c5771e830260de9af3d0fec1e6f33d22244444a509a59afe6814d3d28ccbccb25b971f4b1cab602f3d508bd78db3514c34eb53f3a255e2b6455a6c817d51ab0d91726ccde17e2b5fbf75214374abb725cdcef21612fa4be620341d17a1c3cca4124809cd1041506e82955949e2b615e335e235102ff1d76784c78f359084358caf4783c6f5a9f781e3ad9a4a00d5660c1cb46d624429800ccbb1c79aa6e587f400620704fe5003679226049b1775a4ac4c98fe98a44da53e4bbc77e46cfa09583c2e88eb98fed7ec04ce5ff1114b57d47c2aeeb7da709d3ce25de9b1e07e43009b5191c098892ea8ca26f6a9c6678d5239ba324b5197fcfac096a3b61b3bebd858729a114104dc9e3555e0bcfea2e68e568274ac8618a7849bc0d96e500e12bc9f2575349241b00dccaac249e09a7e9fdc91d6d375b01e9d4896f1ab0cbeb518b56f25e21706a039eb460936cdc1018cca4b21e184cdca76110937cb28e557f1dc7d63d610252e56bc28a2e83098d44e9c5a95b6068bd9e5dda596e9d84bbfe013629308663454e1d378fc9edc78728c3156a75fea9c25c8cf650d67919df11ae234ad1661f66d6d264802cd7e8ed5aeb9cfff9c7daaf20076faa50c6b1d3b179fe3e7adcfa92d13fbe99ac023d2e8e1c212a39122cec2a5e5e5205823383e89845be46221cd60212a40feec3383acc66a5fba966598e203d5365744be10e6058b5cb97769766f9a62ffcfb03d70fff577a1107e82b41553d24ba7173a76dc52dcc073f42a2ca593fe459e5b6cde2634941348185580be072863ed3b8be9e1c0d3cfafb51d786f968f1b79ba7c", 0xd88}, {&(0x7f0000002e80)="1db9937b376fe671bf5fb928060ad68c88957e8cfb51509357cee8655f975055476c762d792ac33ca3378dc5232451198128bbe42e125883d832462110b3e3fa0a80", 0x42}, {&(0x7f0000003040)}, {&(0x7f0000000800)="f13f4bbcc4bb2b4bc52a6f4ad4007d531896a24e1a65c64b0a2157b921f226", 0x1f}], 0x9) 2m29.220605655s ago: executing program 1 (id=157): r0 = openat$zero(0xffffff9c, &(0x7f00000002c0), 0x142, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@erp={0x2a, 0x1, {0x1}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10005806}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m29.220171468s ago: executing program 1 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000003080300000000000000000000000000040004800500030001"], 0x20}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x3, 0x100000, 0x0, &(0x7f0000000500)=""/63, 0x0, 0x80a0000}) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x403, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x2, 0x8, 0x101, 0x0, 0x0, {0xe, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 2m29.021147937s ago: executing program 1 (id=161): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c280080101800401108014000c0000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 2m13.939864193s ago: executing program 32 (id=161): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c280080101800401108014000c0000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 3.766972508s ago: executing program 2 (id=1177): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160a62) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x40000060) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x21, 0x0, 0x0, 0x70bd29}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0x80}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xd}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0618b60a07000000"], 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x2e, 0x0, &(0x7f0000000000)) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000340)={{r4}, 0xc, 0x8000000000000000, 0x4}) 2.888126419s ago: executing program 2 (id=1184): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='q\x00\x00\x00\x00'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000fc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x8}, 0xffffffffffffffff, 0x6}}, 0x48) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x6fd, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x2, 0xac141400}]}, 0x20}, 0x1, 0x7}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.81023805s ago: executing program 2 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x4, 0x200000) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000480)=0xfff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xc2000) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) write(r3, &(0x7f00000001c0)='pch_udc\x00', 0x8) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/pch_udc/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) close(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000002c0)=""/197) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0xfff, 0x8, &(0x7f0000000140)=0x1}) r10 = userfaultfd(0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r12, &(0x7f0000000500), 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)=ANY=[@ANYBLOB="c3e9fe8100714439", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) 2.729072363s ago: executing program 2 (id=1187): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r1]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0xc6, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.728727983s ago: executing program 0 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 11) 2.663652251s ago: executing program 0 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.648492739s ago: executing program 0 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(0x0, 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000029000000000e0000000000744ee48030a35235f86cbc921f8328054825a87b8056ce309e1cf2687c1ff06ef147395db4857461b4d558694313358a67e56710f685b9a81aa7c2852c60379535b776ee1872c693aae4217988e7688caa80f64c5ff3ca0563af7056b9534f8242c8a628e62cd935f5660aa73523a78bf51a5820f566ab844e77da7b6b180100010000000000c014fe9e55404923b2367f6a963bd6d595d03b0ab11f9af9d5cfebd3a2129146c78c0400000011316a58f27c01fa47508441f8b6ed3df83bedcdfdd0170e811c92deb01830d66e0a1e0d6642f2737abf1300330c7d4430262bc10aba00"/252, @ANYRES32=0x0], 0x20}}], 0x1, 0x1000) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r10 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="000200060062ab5bd17fb6ce00000000000000000000000017c0a99b09e5bd8ec090b1400c8a923fd9da3795172e448921d3a67c530226249253a7d3181540177c4bb928cb6a98e56f02099e5af19703b5c43a51987cf01c4e4f9bbaa0a406bb92e1d2dd62d738cf14c7c8e79f32a520de15ed9af384edff9e1463cce9cd01c2af6d0bc260271aba4409168afbf2b6933c88d1abe111f652fb5db20af450934196e77e633cdc95ed03facd0289c96cd1847c38d2f20ad98dc1420c0000008645599e05b6db9be0d383c079d22c5622398863a39a4e07d0baf025"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c844}, 0x4000) 2.480140337s ago: executing program 3 (id=1192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r5, 0xc0106450, &(0x7f0000000080)={r6, 0x1, 0x3}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="e9bf407e28a694e1f9cb053139d2f0753a6d87d32ec3c91c56b95b7dcd4e656edbf64b58b869840b57df66e3e8126cb6c0a3569e00ef4cac0f342a7f1e2331d974616bf4aa3353d793c60674828196f5654be39ff697cefcadcbfd173c0089ec2ed60a2071da0cb354f597e6", @ANYBLOB="01002cbd70f494ff0f0700000000000009000200000008000b000000000008000c00a80ae5007a1fd9cd12f922bb07996968e4e6834a12f10f7a43e3eeb16cf117b76364849cfa51424c5ca87e45abb3eb0ec0edf51fbae38217d4dcd53bf3ccff5bc3945d3a00000000000003604721e9b78ba6c3f49c2053089f65c606f4153b41db4730d719b7951dec54d9e47fbc214f6184261cccd20d2af1fa178c9c05a66c7ccfe1c52eee06c89d650a46c9d6439a36c9b5a8971fcb3a2a8f"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 2.428843877s ago: executing program 3 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf255e04000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r8 = accept4$inet(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) write(r3, &(0x7f0000000140)='1\n', 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x323fd8d8845f14ae}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010041) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e0010203080002007f0000010800030001000000", 0x34) 1.721880709s ago: executing program 0 (id=1194): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) ioctl(r0, 0x3b76, &(0x7f0000000a00)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0xf06a7edfa1303b6e, &(0x7f0000000a80)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000b40)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="a6b41fd7", @ANYRES16=r4, @ANYBLOB="200026bd7000ffdbdf250100000008002c000f000000050035000d000000"], 0x24}, 0x1, 0x0, 0x0, 0x408c5}, 0x40840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r3], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r6, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.721471957s ago: executing program 3 (id=1195): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0xffb) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffd}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb4126e468ef8bba0}, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1ef) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) 1.59499169s ago: executing program 0 (id=1196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800e9e697aa967800000000000000000a000000000000003b81042b59b932b404000b7e78dc41651b7ce755873c07268a0f1494beb39a281b2b67adc1cf2cd3c161dfa018682c0da326c374972cda70c6205ba1e540ff46c8452965151678baeb20b82d9be6ddf31383a42740d1175b2e75e0837338f12faa9a71ace629296264112964f4506e575f98b68dabe9ebd60e4e9cdf10187535860d50031288fd335db7172d6dad4e351da47bdd0af4c06259a115fd1b3f77c8c1028964b930483523ee1d7887e94fa16530a73212fca0cbffaf3a47d9ab3bb9722024385b5612b1"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x38, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0xe}]}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000180)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c1900000815c00000800250000000000"], 0x28}}, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) socket$alg(0x26, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xe4) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x0, r8}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x00\x00\x00\x00\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.mT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x00\x00\x00f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18\x82\xff_\f\xed\xdfHb\xaazi/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq,\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J', 0x42, 0x120, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x2, 0x45) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.57507028s ago: executing program 3 (id=1197): fanotify_init(0x1200, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x9}}, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 1.519422284s ago: executing program 0 (id=1198): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @multicast1}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000580)={'filter\x00', 0x0, 0x4, 0xfb, [0xfff, 0x2, 0xfffffff9, 0x3, 0x10001, 0xffffffff], 0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/251}, &(0x7f0000000600)=0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/210) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xd931d3864d39dcca) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) dup(r8) 1.439456943s ago: executing program 3 (id=1199): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000003480), 0x0, 0x40000003, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48004, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setgroups(0x0, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x18) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r10, &(0x7f00000031c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000004c0)="804289e13e4dca73e880f4de668a1f8e5f411420b502a05e620ce581fe6256122dc33b76c13ad29aa4384fba5845e0c800ae93615786a474b3a71f6899fadb12a33d5cdce56ede100df0623f0e7aac5d8b46da36a833b8e90249b42d0ab03267e0bf61c4460a9129d6fff9b71fed31fc6246bcee3e819c9602523488a57a81e5da60b8e17c7e739b83599b7a273bd70b48c59f73595875e28104546a285f1bebd2a4096d8c138b2ab1c07ef9d45b9e91c59f127791ad530861e608363ae8542b479179f13983c4e623ee1d30bc5105c099c3ed5caf", 0xd5}, {&(0x7f0000000680)="2099df814fba42dc1aeabdbb669569004dc95be330d420cefc33785fb430d388ed4de6bb1ba472ba6450b300c553b448ec40d7a081dc2793a0bcefcdd320f87bb1164bd4753f539b71f9f815c3b32e9b1c8feff57af72adb3c634dee21e67df692a3de16d1dbd6e5e30f805bf44762076eeadc972f582a4ab4daf87d4608e4927433e500284e81cb6f336f9564968995752cdee05c16fba70959346cb787fd62b5f1beba09e00faeaea132c21d5d13ebbd42cda44cc20d3c299b4a4dd645a35e34fac64dc780942e2637b88611f4c5bd6a39601f427fa56dd101d4af5ac5", 0xde}, {&(0x7f0000000d80)="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", 0xd4d}, {&(0x7f0000002e80)="1db9937b376fe671bf5fb928060ad68c88957e8cfb51509357cee8655f975055476c762d792ac33ca3378dc5232451198128bbe42e125883d832462110b3e3fa0a80", 0x42}, {&(0x7f0000003040)}, {&(0x7f0000000800)="f13f4bbcc4bb2b4bc52a6f4ad4007d531896a24e1a65c64b0a2157b921f226", 0x1f}], 0x8) 1.240417656s ago: executing program 4 (id=1200): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000031bc1b6dd500140012800900e0d4260a582266d10100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES64, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x240440d1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r3], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x3) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.132878793s ago: executing program 4 (id=1201): r0 = io_uring_setup(0x1ac, &(0x7f00000000c0)={0x0, 0xfca0, 0x40, 0x0, 0x80022e}) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 1.132565446s ago: executing program 4 (id=1202): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='stat\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0xffe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40008) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002200)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f00000021c0), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ah={{0x30}, {[0x13c, 0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x6, [0x20, 0x0, 0x8, 0xb, 0x26, 0xb, 0x14, 0x2b, 0x7, 0x23, 0xe, 0x32, 0x2e, 0x0, 0x2c, 0xd], 0x2, 0x36, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x1, 0x3, 0x9, 'pptp\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x32b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002100)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1000005, 0x0, 0x3, 0x1, 0xe9, 0x3}, &(0x7f0000002180)=0x20) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000002140)='streaming/header/h/u/file0\x00') 960.515171ms ago: executing program 2 (id=1203): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 262.531235ms ago: executing program 4 (id=1204): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xd, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x4}, 0x6) connect$inet6(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000005c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000001c0)="75e2184ab8f02e0ca34aa6cc7f95cd9003273ce7ccb3031529d47cf6105c77163951c2cc21846973dfb00d24975a6b0caa3f08a5f62344a8c34383854f2dc22d543628644ddf38c94006776615a733f60da32190ea9ed1c6ccefdcf3ed5e6303545cda5dceddc96396b39afeedae34c9", 0x70}, {&(0x7f0000000300)="02100097385121bf8260f4374522621c2cb31b1f67f6dd74c399cbc16402fa9dbe13b4a665a3bb51f0e078a6d3426bc51e53ced24e2f2e19a0e6fe3f06b6491b2912274d07f81ecae1ec77a014663122b83111595157843c1123bbfac7d88d75866cedbbfb7259c04bf530ea87fbe5313da26957445de35269c749ca8db71a6711f8c1d5", 0x84}, {&(0x7f0000000600)="8788a1e1394065e31b0272094e2c8d160560e4b245b5d1a383bcf39c5446f46e4ea57b143b510ea9f6b0790492936860582d542659ac80d47861267d467858fe26c91ef3aaab1ee7488c8a439b5f4bf2a77f78a304b682c8002c6a67a9c6b692306b837c65aaec7619e6a8dc9360030bea8e37580ecbc87f751f275abb1a556394a0f790312cec6da5048e92b682d0044e82f7c1237720ba132209c9cc87397bad436c8426e063b1821e74d7e154a72c6b8c1246fb4302c5da98f02eac61fc72e58e3abcf1386a17c5e65f644f8a5b2b2a9a1787b767e4e24d34a6956b281a499b1408a75dd3", 0xe6}, {&(0x7f0000000700)="54c1071b34c88aead06bf1ee5cdf2dc187972d90019d4c0ed4157e52589ed21b583ecf286780ad94596c85aac6340dd42343834673def10a20073285169e834dabe3e2543685b65d2352cdbf624c893e4c8c7c515592bd8c46e3dea21d7e829faeaf79154cf5002ae5b652be1563d1170e28b81d21d0f952f2b8141479989a12b91d98744d105d", 0x87}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="d2295de59aacf2bc358002faebaf6f481d8b4c96a390ce9acb62882bfb629cdc6bf4129b27d33a79c5548a9eafbaef78ae481e600242930c8eb1e2c3eb9f7b338484426cbd459dad44842058eb764a4f9fdc23a975b99242149670d33c6e858620ef19d6e6f79da0ab", 0x69}, {&(0x7f0000000880)="8f4fccdaca010e0050c5fd62068f0c34e0ca0b60ced5b39a08676dbeef1a7bcb4912c530c8a54c1555697cbf30b7ecf5d3548509a2b9fc2d7f8cd720854b8f80d00d9911f856c605349cd59ef71b022edc01f95da41309ba999edec78f460253533d54ba487ec7e0b5e4c0af38e427548fad6b5938e593987085ae9e327c89ccc6f09324f97ed48a1877e5", 0x8b}, {&(0x7f0000000940)="5937a5fec9e61d1c56065671df68bb5f02dac43ba21b13c9d9d7ea2c3f5b1d8ead5621445bf01c95ed7213ea092699f12ca61ea50ebbc4b4819cdfc332856c6dd40342b4717140af7588c8ab094a9ebe1c653f514a68aa9d6beb4950a6a1b92e1257b1f94213ce14fb4a0430d4e7a5a83767636e9b72f3c6f3a8689d7a6ea5fa9ca64cb2c7ed94de2418ca1c4d37ddb4d279b906ab6f1250f42771eabc15eb5ba68e124455c7f6a33d3c4402ca7932154526b2c48df021689f5c92cf17324cb0e5a60788757ef4468b6c9ba0c5efe792300bd53ad531", 0xd6}], 0x8, &(0x7f0000000b00)=[@cred={{0x18, 0x1, 0x2, {r5, 0xee00}}}], 0x18, 0x20000000}}, {{&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="eac49d41f7616a2b1568696bc83ae9aba7641f198255a7849eefa5511566533c82d219aad49034c362d972bc449deb2937fe27c3d7e3f9dcbb718cdcc2aa55fde4027fbf608c17562d0a0c536992213cf919a7fd6f1db64cba1d9107830597", 0x5f}, {&(0x7f0000000c40)="22bb29fe0721415f9e1aab9fdad2cba04a2ed333ca004b066706611b7ba2173fc230984c613c2a7535b23e275a5e29dbe8bf77bd18343a2ff454bcb16d0f9800990bb491045c93f4a3194cb3f6d644df10a3e98295384aaedf3b3e86533070c34cfb3b74f5d46240800246db319802cb7ef3c710d5e19aa30706c670323072c3c1cc4560800a7362da34205cc88b061515e83c8c9258eba8c32881bd5e3fb9727ada46a604eb82b01ef8d3d7b3e2fde2dfa070d3636489b97c732561d9c77236aa226cd692fc3ee76d6c32cb4a13ebbbb640fe643e9f1d9bbf0554b4", 0xdc}, {&(0x7f0000000d40)="697bb08f9ed48c01b4f06066db213aa91cd9d9f7068be13d4a266359bf0400a5b479aad734585968cde66bdf6d32d7972a6acf114a4362115ef58b8cbe8ae4f9649276d5f2d8d8bb0fbae8a241dead2883ad9734da00d2ae6b25ab3b07d263a8c7990525b70e639de4cc5f3f060114b1512eac63658b476f62089f6350e4cabdea87480a4df130aa3e74d3e3a724cd9e16bde9a18727bcc1f71ea51b11f77ed0e07f516c81168050acf3fb2e385bee465d1e685a57a4d5d169051771655e9204382b5b0fef511f48", 0xc8}, {&(0x7f0000000e40)="84138c7671052260814e2f796a77f6a9646e7779d2e4750fab450e3996dce5e43ee815ac6ec4b0c190b1182c3127f173cb41112f72e702707dd14644a949effdd7bc4d0fc9143051a7e10f8c5433819277743a0bfe465ed03a6131a04aa6b6ee9d426a", 0x63}, {&(0x7f0000000ec0)="cefbff7fb8f6480d1ffbd132aab5a9b0d43e60460ea63c831b392878e8c1e22028695acecf934a47eb7d93f83ec2b0a7430d234b302eddbabe8e3d5c44cb7d4fc50922dc03c9802eec4f65d7410ef1d30d57aa6a86cda60d7db43f3e22af6b08195b7bd54d3c361144d6ee5e493b0d6146553603c45132f6aa5ccc756f2059b99ff60f85b551b04500b0ac9c47f3efe069d2fa5fb338c9758351ca673ba37215db14dea4279cce28474fead844fd39be005dd4772292b9ea793c8496077a4451d83d1f8127", 0xc5}], 0x5, &(0x7f0000001000), 0x0, 0x60080049}}, {{&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)="692b5737eedee6cea49ec6ba5ac61adb4f760adde30fe83bd2927bf7deb67a51c71c45957060f0d3a39fe62b41fc896fee4b12b02b5ed1b7072e5bd0473aa85258b433e7df89803a13af2d6d79031d184d425ce9", 0x54}, {&(0x7f0000001140)="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", 0xfa}, {&(0x7f0000001240)="2d3d59bb9c455077142ff2bb5ab8efc1af4ff2f91cf5727d7ab5626cfd674e58890e9a0466b0930a1b47d5c1825b8b053c3c", 0x32}, {&(0x7f0000001280)="1de7f850376f8ddf5590bb1a02c81cc66064b32c7be5df41a86b5667adfde1a1b1e76a8121cc0a17f8bca2cc52753737be534d3118865426c55e9d01a755d9bcae0b0be31f19ea89404ab3445a4cdea5a94d67da33345d0abd9c6f90fbbbb2cb7488b2bd568144ae2ba34f3f4f5f934b01feb00379e6ed34b3d198e62c84c18355eafd9a874dbccec845e52c0c0379e8e7badf21836fa026ca5ce97bf5a00e143b5bb3f97aea00cadded92a9328af289a8774db87be2fad85ff190404c", 0xbd}], 0x4, &(0x7f0000001540)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r7, r7]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r2, r3, r3, r3, r2, r7, r2, 0xffffffffffffffff, r0, r4]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0xd0, 0x8010}}, {{&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000016c0)="cfa754de3767a20f77af4a440b205d3a9a03d4fb7a328ae8872788dc50060105e3ff6870d11114868c86c2c9f1f900184f5b02456aac9f56d8211c6ce30da905eeeb1160413b405b6630cf5498333487eaf1f11f5a049874d7c7b90f72c7bd8ca555aa4e1daf015953c01563078d6d6be6864850cc0b37599bdc7a2f4885a45c5b41683a3d3360", 0x87}, {&(0x7f0000001780)="b71f48dffa6dae31ae02f03be20354566c4056b1096d874efb03ae", 0x1b}, {&(0x7f00000017c0)="ce939c640ae459803b851528f0b328b35592c284a677ec0e237bb9aa32", 0x1d}, {&(0x7f0000001800)="06d3cdc9700705d63af9547a7b2280d56adab72039e7c8c87d0df996176d85e5ae3706acdbe11d8baded4429c15a853d0c7e8a28bd3898dde4ac74d9c2dbb20dbb5a0ce4b811d5e951ac94e7876af295991f2797fc87035712f9f4653bc7e55767554259db38a6b79d0a41458f85e3bcaaf231b9eb201736636d25b1557fb79db03b21c7aa1118eb375381e431d8c605e7fe1d20878d3b5e102eefb0d8d4e5d61824a38e17177f81993a6160b22ba370616cae4596001735aef9c3b7966748142690ab58e69318d77ef9d45488a07d9a", 0xd0}, {&(0x7f0000001900)="35f064cd84107402a40060acfa2859aded2820d4038cd02f6d9e2e9d8b4b394af361e8ea8a39d0381f972d88a4c9d1aecd422290850b06513e", 0x39}, {&(0x7f0000001380)="467fd6ea51dc59f312ef7a7f849ce30bcdb5e11dd37175a5b4d8456987cb08d9bad1af276772d13fc02bd91b43f60ce63b9eec0dcdd7a9c94f01842ad690115b5be0b426e440bcf9665c8f8fa374ccd25e5506bf00ed2a1ff6a2f04e4424971b30c7cc741aac4ebc8105a64c122527468346a8d24cdc5197bdc85d08d77898b55ee1668b5b97f1d9741ab11fe9492d9e2522b7e5c819d834c7ef5bb538041087c79af489bf2e688ff82d7c491dd2caacdf8aa0e6a22c2e573e90461f2958c650e90aeba8858105219f2144e916e3d733d9e6e96cc58159b70deae02dec6d9dd7686584c89bcd04fcf930c17dbb4e4fdbbc556d7020cb72cc", 0xf8}], 0x6, &(0x7f0000001a00)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xd0}}, {{&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001b80)="d6a70d0f43fcd7825299d4a9bf74756277a969733ced2e635ef8b53d4fd350a240f5899802ea183d6de322aeddc123c597983631ead8755cb7adf2afe3d03abf420692c8de3905dc0e428364ffd1d7501264cad906f3d2e28b9efd9adb7fbf1153f3d7431047bb4edf21f032c5e6956c3866", 0x72}, {&(0x7f0000001c00)="3212e72f6a49e13c6b431cfa128bd1c271123b62801f46fc33aa3756e0b587b8eda5d8769a344323893be4ec39da01d2602526dae0c19a9e2f8a190ee11fe6faad568599a66b3553b2e1002d10f6684b5f64fd86c7de46e002addfa505caa0ea41a3c34b50fd6eb28a729dc8474e3806804dc71adb9c7bff8c3597b9325ef54638e7f4440347d22a14b2bea42abad4", 0x8f}, {&(0x7f0000001cc0)="bebd65a25ee5f46ff85c738fe80ba354bc925fcd9453d107fbcbf3bc334d551e02972ae67d60a0c2c8e646ebfc7e35462a46dd13c53e811e099e7e", 0x3b}, {&(0x7f0000001d00)="937ef5754fb046", 0x7}, {&(0x7f0000001d40)="fa7482a4fa76f2a30b5f4d", 0xb}, {&(0x7f0000001d80)="937730d4c43e0ffd5179121ad183c5652d1776157fbb524c27fbff8dd153e66ea674e060ea70ef2aef0b4be88df487c6c33c2a8c153943971c3ce3a60ebe8cb6f97ebe282cc191f0d5f9c40a6009299fde10f32eca13634541284ef78aa2256affa34ea475136eb2e574743cb6e84e126e8a5c6cc52a579046dbff487cd9a9d1197c2fa9f82241ca00397db9ec1045b4d1914c24d78a649aecc034be9eb6260065910dbc4ac17531b4ca", 0xaa}, {&(0x7f0000001e40)="3dc87b7206bc3498debf86cbbd864541abc5cad2c8f0adcff78b7243d9769599f183ba7b588c8f", 0x27}], 0x7, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x54, 0x40}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002100)="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", 0x1000}], 0x1, &(0x7f00000031c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r6, r6]}}, @cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x24, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xf0, 0x4000000}}], 0x6, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1a, 0x3, 0x2000f3) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3e8958c667043df67f983afc67722ab98f0d515519f4ab7484761cf83ebec656734a8a0fc62d5300b21852f7e6aa57935a713ff88de714cc29ee346f99a0", @ANYRES32=0x0, @ANYBLOB="00000000000100001c0012800b0001006d616373656300000c000280060002404e210000"], 0x3c}}, 0x40004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r8, 0x0, 0x25, 0xf, @val=@perf_event={0x22640000000000}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38ae00007f0000000000000000000000090000f00200300000000008004100736977001c003300776c616e3000"/58], 0x38}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) 260.513116ms ago: executing program 3 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800044000000041080007400000000508000640000000010500020000000000080003400004001f0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) listen(r0, 0x204) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, 0x0}]) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 112.18503ms ago: executing program 4 (id=1206): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x6101, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x300, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000000) 60.27476ms ago: executing program 2 (id=1207): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000000), 0x4) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000000)={0x7ff, 0x8, 0x4000000, {0x1, 0x10}, 0x100005, 0x5c6}) socketpair(0x22, 0x5, 0x40, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000340)={0x3, 0x8, 0x400, 0x1ac}, 0x10) ioctl$DVB_DEMUX_DMX_QUERYBUF(r0, 0xc0186f3d, &(0x7f0000000040)={0x1, 0x0, 0x881b, 0xffffffff, 0x9e4e8f0c03c13476, 0x7}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c001400", @ANYRES16=r2, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x60045}, 0x20000800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08000800ff7f00000800070007000000080006000f000000080009008ae3a9720800080005000000080009000400"/62], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w\x00Ano=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) 0s ago: executing program 4 (id=1208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) write$cgroup_type(r1, &(0x7f0000000080), 0x9) write(0xffffffffffffffff, &(0x7f0000000140)='file drivers/md/raid5.c +', 0x19) kernel console output (not intermixed with test programs): proto 1 vid 0x0525 pid 0xA4A8 [ 149.375326][ T7933] bond1 (unregistering): Released all slaves [ 149.496954][ T7921] FAULT_INJECTION: forcing a failure. [ 149.496954][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 149.516481][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.0.584 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.516511][ T7921] Tainted: [L]=SOFTLOCKUP [ 149.516517][ T7921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.516526][ T7921] Call Trace: [ 149.516541][ T7921] [ 149.516548][ T7921] dump_stack_lvl+0x100/0x190 [ 149.516650][ T7921] should_fail_ex.cold+0x5/0xa [ 149.516685][ T7921] should_failslab+0xc2/0x120 [ 149.516729][ T7921] __kmalloc_noprof+0xfc/0x820 [ 149.516760][ T7921] ? usb_alloc_urb+0x66/0xa0 [ 149.516823][ T7921] usb_alloc_urb+0x66/0xa0 [ 149.516841][ T7921] usb_control_msg+0x1d3/0x4b0 [ 149.516862][ T7921] ? __pfx_usb_control_msg+0x10/0x10 [ 149.516884][ T7921] ? __pfx_rpm_resume+0x10/0x10 [ 149.516948][ T7921] ? do_raw_spin_lock+0x128/0x260 [ 149.516985][ T7921] hub_ext_port_status+0x152/0x600 [ 149.517014][ T7921] usb_port_resume+0x2ec/0x1940 [ 149.517044][ T7921] ? __pfx_usb_port_resume+0x10/0x10 [ 149.517070][ T7921] ? do_raw_spin_lock+0x128/0x260 [ 149.517088][ T7921] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.517110][ T7921] usb_generic_driver_resume+0x41/0xa0 [ 149.517130][ T7921] ? __pfx_usb_generic_driver_resume+0x10/0x10 [ 149.517149][ T7921] usb_resume_both+0x3e0/0x7f0 [ 149.517176][ T7921] ? __pfx_usb_resume_both+0x10/0x10 [ 149.517201][ T7921] ? mark_held_locks+0x40/0x70 [ 149.517228][ T7921] ? __pfx_usb_runtime_resume+0x10/0x10 [ 149.517245][ T7921] __rpm_callback+0xc8/0x620 [ 149.517267][ T7921] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 149.517305][ T7921] ? __pfx_usb_runtime_resume+0x10/0x10 [ 149.517323][ T7921] rpm_callback+0x16a/0x1b0 [ 149.517345][ T7921] ? __pfx_usb_runtime_resume+0x10/0x10 [ 149.517362][ T7921] rpm_resume+0xd13/0x1320 [ 149.517391][ T7921] ? __pfx_rpm_resume+0x10/0x10 [ 149.517414][ T7921] ? do_raw_spin_lock+0x128/0x260 [ 149.517433][ T7921] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.517458][ T7921] rpm_resume+0x721/0x1320 [ 149.517504][ T7921] ? __pfx_rpm_resume+0x10/0x10 [ 149.517526][ T7921] ? do_raw_spin_lock+0x128/0x260 [ 149.517544][ T7921] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.517571][ T7921] ? _raw_spin_lock_irqsave+0x52/0x60 [ 149.517631][ T7921] __pm_runtime_resume+0xb6/0x170 [ 149.517656][ T7921] usb_autopm_get_interface+0x20/0xe0 [ 149.517682][ T7921] usblp_open+0x17e/0x450 [ 149.517702][ T7921] ? __pfx_usblp_open+0x10/0x10 [ 149.517722][ T7921] usb_open+0x189/0x220 [ 149.517739][ T7921] ? __pfx_usb_open+0x10/0x10 [ 149.517754][ T7921] chrdev_open+0x234/0x6a0 [ 149.517789][ T7921] ? __pfx_chrdev_open+0x10/0x10 [ 149.517809][ T7921] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.517834][ T7921] do_dentry_open+0x6ab/0x14d0 [ 149.517853][ T7921] ? __pfx_chrdev_open+0x10/0x10 [ 149.517876][ T7921] vfs_open+0x82/0x3f0 [ 149.517901][ T7921] path_openat+0x2873/0x4280 [ 149.517936][ T7921] ? __pfx_path_openat+0x10/0x10 [ 149.517961][ T7921] do_file_open+0x20e/0x430 [ 149.517977][ T7921] ? __lock_acquire+0x49f/0x1a40 [ 149.518003][ T7921] ? __pfx_do_file_open+0x10/0x10 [ 149.518039][ T7921] ? _raw_spin_unlock+0x28/0x50 [ 149.518057][ T7921] ? alloc_fd+0x471/0x7a0 [ 149.518090][ T7921] do_sys_openat2+0x10f/0x1e0 [ 149.518111][ T7921] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.518134][ T7921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.518158][ T7921] ? __fget_files+0x21f/0x3d0 [ 149.518179][ T7921] __ia32_compat_sys_openat+0x12d/0x210 [ 149.518203][ T7921] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 149.518225][ T7921] ? ksys_write+0x1ac/0x250 [ 149.518249][ T7921] do_int80_emulation+0x14b/0x720 [ 149.518277][ T7921] asm_int80_emulation+0x1a/0x20 [ 149.518294][ T7921] RIP: 0023:0xf71b74eb [ 149.518309][ T7921] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 149.518325][ T7921] RSP: 002b:00000000f546d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.518359][ T7921] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f546d100 [ 149.518369][ T7921] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.518379][ T7921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.518388][ T7921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.518398][ T7921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.518420][ T7921] [ 149.523188][ T7921] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 149.676006][ T7924] lo: left allmulticast mode [ 149.683885][ T7925] CIFS: VFS: Error connecting to socket. Aborting operation. [ 149.691044][ T7925] CIFS: VFS: cifs_mount failed w/return code = -4 [ 149.797392][ T7939] openvswitch: netlink: IPv6 tunnel dst address is zero [ 149.880950][ T7944] block2mtd: error: cannot open device /dev/loop0 [ 149.884281][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x9c78 instead [ 149.889293][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x6055 instead [ 149.892508][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe060 instead [ 149.895537][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6770 instead [ 149.900202][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x03eb instead [ 149.903662][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x0606 instead [ 149.907778][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x770a instead [ 149.911356][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1818 instead [ 149.914576][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x6010 instead [ 149.919067][ T7944] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1c9c instead [ 149.922423][ T7944] jffs2: Further such events for this erase block will not be printed [ 149.936260][ T850] usb 5-1: USB disconnect, device number 17 [ 149.940697][ T850] usblp0: removed [ 150.068194][ T7944] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 150.071378][ T7944] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 5 [ 150.750111][ T7959] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 151.533834][ T7970] overlayfs: failed to resolve './bus': -2 [ 151.778738][ T7975] openvswitch: netlink: IPv6 tunnel dst address is zero [ 151.789726][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.796213][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.798985][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.802749][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.805439][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.818390][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.824460][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.835712][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.844109][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.848199][ T7974] binder: 7973:7974 ioctl 4018620d 0 returned -22 [ 151.851972][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: unknown main item tag 0x0 [ 151.865542][ T5885] hid-generic 0200:70BD27:25DFDBFB.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 152.104255][ T7980] fido_id[7980]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.510308][ T7997] syz.0.604 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.703084][ T7995] smbdirect: ib_dev[syz2] removed [ 152.796615][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 152.860598][ T8005] CIFS: Attempting to mount //127.0.0.1/share [ 152.909187][ T8009] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 152.931815][ T8009] bond1: entered promiscuous mode [ 152.934316][ T8009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.941993][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 152.966419][ T8013] lo: entered allmulticast mode [ 153.216308][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 153.216322][ T42] audit: type=1326 audit(1786177703.852:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.229260][ T42] audit: type=1326 audit(1786177703.852:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.238581][ T42] audit: type=1326 audit(1786177703.852:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248786][ T42] audit: type=1326 audit(1786177703.852:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248812][ T42] audit: type=1326 audit(1786177703.852:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248834][ T42] audit: type=1326 audit(1786177703.852:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248854][ T42] audit: type=1326 audit(1786177703.862:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248877][ T42] audit: type=1326 audit(1786177703.862:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248920][ T42] audit: type=1326 audit(1786177703.862:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.248943][ T42] audit: type=1326 audit(1786177703.862:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.2.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 153.334012][ T8025] jffs2: notice: (8025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.342426][ T8027] FAULT_INJECTION: forcing a failure. [ 153.342426][ T8027] name failslab, interval 1, probability 0, space 0, times 0 [ 153.348061][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.4.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.348091][ T8027] Tainted: [L]=SOFTLOCKUP [ 153.348097][ T8027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.348109][ T8027] Call Trace: [ 153.348137][ T8027] [ 153.348145][ T8027] dump_stack_lvl+0x100/0x190 [ 153.348259][ T8027] should_fail_ex.cold+0x5/0xa [ 153.348300][ T8027] should_failslab+0xc2/0x120 [ 153.348352][ T8027] __kmalloc_cache_noprof+0x91/0x6c0 [ 153.348382][ T8027] ? find_held_lock+0x2b/0x80 [ 153.348424][ T8027] ? alloc_fs_context+0x57/0xf40 [ 153.348473][ T8027] alloc_fs_context+0x57/0xf40 [ 153.348496][ T8027] ? __get_fs_type+0xe3/0x200 [ 153.348533][ T8027] path_mount+0xdbd/0x23d0 [ 153.348564][ T8027] ? __pfx_path_mount+0x10/0x10 [ 153.348591][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 153.348665][ T8027] ? putname+0xb1/0x110 [ 153.348697][ T8027] ? kmem_cache_free+0x127/0x6b0 [ 153.348725][ T8027] ? __ia32_sys_mount+0x292/0x310 [ 153.348748][ T8027] __ia32_sys_mount+0x292/0x310 [ 153.348772][ T8027] ? __pfx___ia32_sys_mount+0x10/0x10 [ 153.348794][ T8027] ? ksys_write+0x1ac/0x250 [ 153.348813][ T8027] ? __pfx_ksys_write+0x10/0x10 [ 153.348838][ T8027] __do_fast_syscall_32+0xe7/0x970 [ 153.348865][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 153.348916][ T8027] do_fast_syscall_32+0x32/0x70 [ 153.348944][ T8027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.348970][ T8027] RIP: 0023:0xf701efec [ 153.348993][ T8027] Code: Unable to access opcode bytes at 0xf701efc2. [ 153.349021][ T8027] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 153.349040][ T8027] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000040 [ 153.349052][ T8027] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.349063][ T8027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.349074][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.349084][ T8027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.349108][ T8027] [ 153.624387][ T8004] lo: left allmulticast mode [ 153.627631][ T8005] CIFS: VFS: Error connecting to socket. Aborting operation. [ 153.630036][ T8005] CIFS: VFS: cifs_mount failed w/return code = -4 [ 154.188338][ T8058] random: crng reseeded on system resumption [ 154.285880][ T5885] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 154.377990][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 154.384433][ T8065] CIFS: Attempting to mount //127.0.0.1/share [ 154.489066][ T8069] lo: entered allmulticast mode [ 154.705743][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 154.855740][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 154.860065][ T34] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 154.867081][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.871094][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.874448][ T34] usb 8-1: Product: ᧯ʾ귨渖贩ｧｻ쓩⭵꺳ìªâ¦“얳埠êœâ¡Šé¨¶ç€Ÿá¬žâ•ºç‰•á·§è‡µç€î»¥é…œâ‰…ꂶ헶嫰黅çºì°±à¹–푛꾫 [ 154.879421][ T34] usb 8-1: Manufacturer: 㟟ã»à¿…຋䨙ꦖ⌋뒨쭭ꬺ釤㽀混ꭖ㪂દ鄟â»àº·áº¿æ™‡å¡®í•¬ç° è…§å§‹ì¥ŽéžŽËºê¸”錄䗾曌㦼簩㻹泩⤬踶뾆뀵ä¸Ý‘槅헦㚬ç€à¹¸è£œë’꛺醼ៃజ闸䦹嶾댞Ꮎ䓱鷘韊๶챙呹踾뽇篗쾻íœã›·î‚Šå¬µâ¤©î™™æ¿­Å¤ï‡äº„è½ì¸‚䦶栎曬꠵ê’é¶í â¤ á“· [ 154.882930][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 154.889078][ T34] usb 8-1: SerialNumber: â Š [ 155.123417][ T8068] can: request_module (can-proto-4) failed. [ 155.135130][ T34] cdc_ncm 8-1:1.0: bind() failure [ 155.140721][ T34] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 155.142949][ T34] cdc_ncm 8-1:1.1: bind() failure [ 155.147328][ T34] usb 8-1: USB disconnect, device number 32 [ 155.207461][ T8064] lo: left allmulticast mode [ 155.213956][ T8065] CIFS: VFS: Error connecting to socket. Aborting operation. [ 155.216756][ T8065] CIFS: VFS: cifs_mount failed w/return code = -4 [ 155.636712][ T8092] dvmrp0: entered allmulticast mode [ 155.755994][ T8099] ªªªªª»: renamed from veth0_vlan [ 155.821323][ T8092] 9pnet: p9_errstr2errno: server reported unknown error 0x [ 156.008231][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 156.015131][ T8103] CIFS: Attempting to mount //127.0.0.1/share [ 156.312854][ T8112] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 156.321011][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 156.327733][ T8108] lo: entered allmulticast mode [ 156.329509][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 156.332600][ T8112] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 156.645737][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 156.795845][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 156.800810][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.805218][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.810162][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.816936][ T34] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.820926][ T34] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.824328][ T34] usb 8-1: Manufacturer: syz [ 156.855009][ T34] usb 8-1: config 0 descriptor?? [ 156.858354][ T8102] lo: left allmulticast mode [ 156.877366][ T8103] CIFS: VFS: Error connecting to socket. Aborting operation. [ 156.887930][ T8103] CIFS: VFS: cifs_mount failed w/return code = -4 [ 156.931601][ T8122] netlink: 'syz.0.642': attribute type 3 has an invalid length. [ 157.297920][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 157.303853][ T8142] CIFS: Attempting to mount //127.0.0.1/share [ 157.413292][ T8147] overlayfs: missing 'workdir' [ 157.417878][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.640'. [ 157.429664][ T8147] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.450147][ T8147] bond1 (unregistering): Released all slaves [ 157.469685][ T8144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 157.847937][ T8156] /dev/sg0: Can't lookup blockdev [ 158.129517][ T8142] CIFS: VFS: Error connecting to socket. Aborting operation. [ 158.135865][ T8142] CIFS: VFS: cifs_mount failed w/return code = -4 [ 158.182311][ T8168] bond1: entered allmulticast mode [ 158.188579][ T8167] bond1: left allmulticast mode [ 158.207018][ T8172] syz_tun: entered allmulticast mode [ 158.212174][ T8171] syz_tun: left allmulticast mode [ 158.298763][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 158.309583][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 158.829841][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 158.835513][ T8197] CIFS: Attempting to mount //127.0.0.1/share [ 158.940699][ T8199] lo: entered allmulticast mode [ 159.418515][ T34] usb 8-1: USB disconnect, device number 33 [ 159.534772][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 159.660296][ T8196] lo: left allmulticast mode [ 159.663343][ T8197] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.665852][ T8197] CIFS: VFS: cifs_mount failed w/return code = -4 [ 159.708293][ T8216] syzkaller0: entered promiscuous mode [ 159.710039][ T8216] syzkaller0: entered allmulticast mode [ 159.718514][ T8216] tipc: Started in network mode [ 159.720079][ T8216] tipc: Node identity 8e4afc72e0e, cluster identity 4711 [ 159.722597][ T8216] tipc: Enabled bearer , priority 0 [ 159.732027][ T8215] tipc: Resetting bearer [ 159.749246][ T8215] tipc: Disabling bearer [ 160.040525][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 160.050081][ T8231] CIFS: Attempting to mount //127.0.0.1/share [ 160.138915][ T8235] bridge0: port 3(vlan2) entered blocking state [ 160.141031][ T8235] bridge0: port 3(vlan2) entered disabled state [ 160.143131][ T8235] vlan2: entered allmulticast mode [ 160.144813][ T8235] bridge0: entered allmulticast mode [ 160.149349][ T8235] vlan2: left allmulticast mode [ 160.150971][ T8235] bridge0: left allmulticast mode [ 160.159769][ T8240] lo: entered allmulticast mode [ 160.264666][ T8235] bridge_slave_0: default FDB implementation only supports local addresses [ 160.280270][ T8246] overlayfs: failed to clone lowerpath [ 160.412783][ T8254] netlink: 27 bytes leftover after parsing attributes in process `syz.3.688'. [ 160.865900][ T850] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 160.870588][ T8230] lo: left allmulticast mode [ 160.877546][ T8231] CIFS: VFS: Error connecting to socket. Aborting operation. [ 160.881404][ T8231] CIFS: VFS: cifs_mount failed w/return code = -4 [ 161.164299][ T8271] FAULT_INJECTION: forcing a failure. [ 161.164299][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.168585][ T8271] CPU: 3 UID: 0 PID: 8271 Comm: syz.2.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.168603][ T8271] Tainted: [L]=SOFTLOCKUP [ 161.168607][ T8271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.168615][ T8271] Call Trace: [ 161.168619][ T8271] [ 161.168624][ T8271] dump_stack_lvl+0x100/0x190 [ 161.168643][ T8271] should_fail_ex.cold+0x5/0xa [ 161.168657][ T8271] _copy_to_user+0x32/0xd0 [ 161.168702][ T8271] simple_read_from_buffer+0xcb/0x170 [ 161.168723][ T8271] proc_fail_nth_read+0x1af/0x230 [ 161.168741][ T8271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.168759][ T8271] ? rw_verify_area+0xce/0x6d0 [ 161.168777][ T8271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.168794][ T8271] vfs_read+0x1e4/0xb40 [ 161.168806][ T8271] ? __pfx_vfs_read+0x10/0x10 [ 161.168815][ T8271] ? find_held_lock+0x2b/0x80 [ 161.168831][ T8271] ? __fget_files+0x215/0x3d0 [ 161.168844][ T8271] ? __fget_files+0x21f/0x3d0 [ 161.168879][ T8271] ksys_read+0x12a/0x250 [ 161.168890][ T8271] ? __pfx_ksys_read+0x10/0x10 [ 161.168905][ T8271] do_int80_emulation+0x14b/0x720 [ 161.168926][ T8271] asm_int80_emulation+0x1a/0x20 [ 161.168938][ T8271] RIP: 0023:0xf71c74eb [ 161.168948][ T8271] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 161.168959][ T8271] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 161.168971][ T8271] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54865d0 [ 161.168978][ T8271] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 161.168984][ T8271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.168991][ T8271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 161.168997][ T8271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.169015][ T8271] [ 161.217027][ T850] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.219030][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.691'. [ 161.221476][ T850] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.244025][ T850] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.250047][ T850] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.252996][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.255519][ T850] usb 9-1: Product: syz [ 161.257307][ T850] usb 9-1: Manufacturer: syz [ 161.258854][ T850] usb 9-1: SerialNumber: syz [ 161.262962][ T850] hub 9-1:1.0: bad descriptor, ignoring hub [ 161.267008][ T850] hub 9-1:1.0: probe with driver hub failed with error -5 [ 161.469054][ T850] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.776508][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 161.787770][ T8289] CIFS: Attempting to mount //127.0.0.1/share [ 161.848721][ T5885] usb 9-1: USB disconnect, device number 12 [ 161.852355][ T5885] usblp0: removed [ 162.000453][ T8301] FAULT_INJECTION: forcing a failure. [ 162.000453][ T8301] name failslab, interval 1, probability 0, space 0, times 0 [ 162.007028][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.3.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.007048][ T8301] Tainted: [L]=SOFTLOCKUP [ 162.007052][ T8301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.007059][ T8301] Call Trace: [ 162.007063][ T8301] [ 162.007068][ T8301] dump_stack_lvl+0x100/0x190 [ 162.007087][ T8301] should_fail_ex.cold+0x5/0xa [ 162.007103][ T8301] should_failslab+0xc2/0x120 [ 162.007119][ T8301] __kmalloc_noprof+0xfc/0x820 [ 162.007134][ T8301] ? rcu_is_watching+0x12/0xc0 [ 162.007163][ T8301] ? tomoyo_realpath_from_path+0xb6/0x690 [ 162.007185][ T8301] tomoyo_realpath_from_path+0xb6/0x690 [ 162.007205][ T8301] tomoyo_path_number_perm+0x23c/0x580 [ 162.007219][ T8301] ? tomoyo_path_number_perm+0x22e/0x580 [ 162.007234][ T8301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.007249][ T8301] ? get_pid_task+0x106/0x250 [ 162.007289][ T8301] ? find_held_lock+0x2b/0x80 [ 162.007304][ T8301] ? __fget_files+0x215/0x3d0 [ 162.007314][ T8301] ? hook_file_ioctl_common+0x140/0x440 [ 162.007329][ T8301] ? __fget_files+0x215/0x3d0 [ 162.007342][ T8301] ? __fget_files+0x21f/0x3d0 [ 162.007354][ T8301] security_file_ioctl_compat+0xd3/0x230 [ 162.007380][ T8301] __ia32_compat_sys_ioctl+0xc2/0x360 [ 162.007400][ T8301] __do_fast_syscall_32+0xe7/0x970 [ 162.007417][ T8301] ? lockdep_hardirqs_on+0x78/0x100 [ 162.007434][ T8301] do_fast_syscall_32+0x32/0x70 [ 162.007451][ T8301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.007465][ T8301] RIP: 0023:0xf705efec [ 162.007482][ T8301] Code: Unable to access opcode bytes at 0xf705efc2. [ 162.007488][ T8301] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 162.007499][ T8301] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c2c45512 [ 162.007506][ T8301] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.007513][ T8301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.007519][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.007526][ T8301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.007539][ T8301] [ 162.007544][ T8301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.610710][ T8289] CIFS: VFS: Error connecting to socket. Aborting operation. [ 162.614082][ T8289] CIFS: VFS: cifs_mount failed w/return code = -4 [ 163.445795][ T850] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 163.604938][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 163.613855][ T8330] CIFS: Attempting to mount //127.0.0.1/share [ 163.618816][ T850] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.679420][ T850] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.701220][ T850] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.704107][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.711275][ T8317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.718198][ T850] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x14a000) [ 164.206728][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 164.210407][ T1124] ata1: failed to read log page 10h (errno=-5) [ 164.217199][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 164.221289][ T1124] ata1.00: irq_stat 0x41000008 [ 164.224897][ T1124] ata1.00: failed command: WRITE FPDMA QUEUED [ 164.235729][ T1124] ata1.00: cmd 61/50:f0:e6:e6:09/0a:00:00:00:00/40 tag 30 ncq dma 1351680 ou [ 164.235729][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 164.242819][ T1124] ata1.00: status: { DRDY } [ 164.244411][ T1124] ata1.00: error: { ABRT } [ 164.257794][ T1124] ata1.00: configured for UDMA/100 [ 164.260130][ T1124] ata1: EH complete [ 164.435299][ T8330] CIFS: VFS: Error connecting to socket. Aborting operation. [ 164.438573][ T8330] CIFS: VFS: cifs_mount failed w/return code = -4 [ 164.470483][ T5840] usb 8-1: USB disconnect, device number 34 [ 165.145814][ T5817] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 165.255687][ T5840] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 165.297999][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 165.301143][ T5817] usb 7-1: not running at top speed; connect to a high speed hub [ 165.305212][ T5817] usb 7-1: config 14 has an invalid interface number: 159 but max is 1 [ 165.308312][ T5817] usb 7-1: config 14 has an invalid interface number: 37 but max is 1 [ 165.311154][ T5817] usb 7-1: config 14 has no interface number 0 [ 165.313201][ T5817] usb 7-1: config 14 has no interface number 1 [ 165.315814][ T5817] usb 7-1: config 14 interface 37 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 165.319495][ T5817] usb 7-1: config 14 interface 37 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 165.324204][ T5817] usb 7-1: config 14 interface 37 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 165.329037][ T5817] usb 7-1: config 14 interface 37 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.334340][ T5817] usb 7-1: config 14 interface 159 has no altsetting 0 [ 165.337303][ T5817] usb 7-1: config 14 interface 37 has no altsetting 0 [ 165.342622][ T5817] usb 7-1: New USB device found, idVendor=19d2, idProduct=1590, bcdDevice=14.f9 [ 165.346604][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.349868][ T5817] usb 7-1: Product: syz [ 165.351717][ T5817] usb 7-1: Manufacturer: syz [ 165.353649][ T5817] usb 7-1: SerialNumber: syz [ 165.407426][ T5840] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 165.411247][ T5840] usb 8-1: config 0 interface 0 has no altsetting 0 [ 165.414945][ T5840] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.418069][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.418666][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 165.420689][ T5840] usb 8-1: Product: syz [ 165.424767][ T5840] usb 8-1: Manufacturer: syz [ 165.426561][ T5840] usb 8-1: SerialNumber: syz [ 165.429809][ T5840] usb 8-1: config 0 descriptor?? [ 165.433199][ T8358] CIFS: Attempting to mount //127.0.0.1/share [ 165.438385][ T5840] usb 8-1: selecting invalid altsetting 0 [ 165.711539][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 165.721673][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.725405][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.728398][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.731198][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.733806][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.736496][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.739062][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.741854][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.744775][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.747449][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.750046][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.752811][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.755403][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.758072][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.760575][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.763363][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.766078][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.768675][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.770506][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'. [ 165.771323][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.776765][ T8363] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 165.779300][ T5885] usb 8-1: USB disconnect, device number 35 [ 165.780043][ T8363] usb 8-1: cannot submit urb 0, error -19: no device [ 165.783563][ T8363] usb 8-1: cannot submit urb 0, error -19: no device [ 165.785872][ T8363] usb 8-1: cannot submit urb 0, error -19: no device [ 166.075028][ T5817] option 7-1:14.159: GSM modem (1-port) converter detected [ 166.096132][ T5817] usb 7-1: USB disconnect, device number 21 [ 166.104817][ T5817] option 7-1:14.159: device disconnected [ 166.253996][ T8358] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.256985][ T8358] CIFS: VFS: cifs_mount failed w/return code = -4 [ 166.361687][ T8386] syzkaller0: entered promiscuous mode [ 166.363744][ T8386] syzkaller0: entered allmulticast mode [ 166.369637][ T8386] tipc: Started in network mode [ 166.371243][ T8386] tipc: Node identity aa8a298aa147, cluster identity 4711 [ 166.373718][ T8386] tipc: Enabled bearer , priority 0 [ 166.378242][ T8385] tipc: Resetting bearer [ 166.399557][ T8385] tipc: Disabling bearer [ 166.542269][ T8388] Device name cannot be null; rc = [-22] [ 166.676243][ T42] kauditd_printk_skb: 298 callbacks suppressed [ 166.676255][ T42] audit: type=1804 audit(1786177717.302:930): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.740" name="bus" dev="ramfs" ino=24024 res=1 errno=0 [ 166.688963][ T42] audit: type=1804 audit(1786177717.322:931): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.740" name="bus" dev="ramfs" ino=24024 res=1 errno=0 [ 167.011996][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 167.019186][ T8419] CIFS: Attempting to mount //127.0.0.1/share [ 167.124583][ T8423] lo: entered allmulticast mode [ 167.225684][ T850] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 167.377125][ T850] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.381796][ T850] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.388172][ T850] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.393260][ T850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.600581][ T850] usb 9-1: GET_CAPABILITIES returned 0 [ 167.602476][ T850] usbtmc 9-1:16.0: can't read capabilities [ 167.802334][ T10] usb 9-1: USB disconnect, device number 13 [ 167.842545][ T8418] lo: left allmulticast mode [ 167.846011][ T8419] CIFS: VFS: Error connecting to socket. Aborting operation. [ 167.848468][ T8419] CIFS: VFS: cifs_mount failed w/return code = -4 [ 168.227584][ T8444] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 168.509162][ T8450] 8021q: adding VLAN 0 to HW filter on device eth0 [ 168.516489][ T8450] 8021q: adding VLAN 0 to HW filter on device eth1 [ 168.520835][ T8450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.524162][ T8450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.622563][ T5781] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 169.433246][ T8474] FAULT_INJECTION: forcing a failure. [ 169.433246][ T8474] name failslab, interval 1, probability 0, space 0, times 0 [ 169.437732][ T8474] CPU: 1 UID: 0 PID: 8474 Comm: syz.3.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.437751][ T8474] Tainted: [L]=SOFTLOCKUP [ 169.437755][ T8474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.437762][ T8474] Call Trace: [ 169.437775][ T8474] [ 169.437779][ T8474] dump_stack_lvl+0x100/0x190 [ 169.437854][ T8474] should_fail_ex.cold+0x5/0xa [ 169.437881][ T8474] should_failslab+0xc2/0x120 [ 169.437916][ T8474] __kmalloc_cache_noprof+0x91/0x6c0 [ 169.437936][ T8474] ? percpu_ref_init+0xec/0x3f0 [ 169.437972][ T8474] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 169.437993][ T8474] percpu_ref_init+0xec/0x3f0 [ 169.438008][ T8474] io_uring_setup.cold+0x2be/0x1c2e [ 169.438026][ T8474] ? rcu_is_watching+0x12/0xc0 [ 169.438052][ T8474] ? __pfx_io_uring_setup+0x10/0x10 [ 169.438064][ T8474] ? __schedule+0x126e/0x6730 [ 169.438121][ T8474] ? fput+0x79/0x100 [ 169.438147][ T8474] ? exit_to_user_mode_loop+0x166/0x6f0 [ 169.438160][ T8474] ? rcu_is_watching+0x12/0xc0 [ 169.438175][ T8474] __ia32_sys_io_uring_setup+0xc2/0x170 [ 169.438188][ T8474] __do_fast_syscall_32+0xe7/0x970 [ 169.438205][ T8474] ? lockdep_hardirqs_on+0x78/0x100 [ 169.438223][ T8474] do_fast_syscall_32+0x32/0x70 [ 169.438241][ T8474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.438257][ T8474] RIP: 0023:0xf705efec [ 169.438272][ T8474] Code: Unable to access opcode bytes at 0xf705efc2. [ 169.438293][ T8474] RSP: 002b:00000000f540b4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 169.438304][ T8474] RAX: ffffffffffffffda RBX: 0000000000000278 RCX: 0000000080000340 [ 169.438310][ T8474] RDX: 0000000000000000 RSI: 00000000f540b514 RDI: 00000000f540b578 [ 169.438317][ T8474] RBP: 0000000080000100 R08: 0000000000000000 R09: 0000000000000000 [ 169.438323][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.438330][ T8474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.438344][ T8474] [ 170.642979][ T5883] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 170.683223][ T8510] fuse: Bad value for 'fd' [ 170.728269][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 170.792581][ T8515] lo: entered allmulticast mode [ 170.825937][ T5883] usb 9-1: device descriptor read/64, error -71 [ 170.860465][ T8501] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 170.862878][ T8501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.866012][ T8501] vhci_hcd vhci_hcd.0: Device attached [ 170.870276][ T8518] vhci_hcd: connection closed [ 170.870599][ T5809] vhci_hcd vhci_hcd.2: stop threads [ 170.873783][ T5809] vhci_hcd vhci_hcd.2: release socket [ 170.875400][ T5809] vhci_hcd vhci_hcd.2: disconnect device [ 171.085698][ T5883] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 171.225736][ T5883] usb 9-1: device descriptor read/64, error -71 [ 171.336076][ T5883] usb usb9-port1: attempt power cycle [ 171.460543][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 171.480928][ T8532] CIFS: Attempting to mount //127.0.0.1/share [ 171.553637][ T8511] lo: left allmulticast mode [ 171.586209][ T8536] lo: entered allmulticast mode [ 171.686053][ T5883] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 171.706359][ T5883] usb 9-1: device descriptor read/8, error -71 [ 171.955887][ T5883] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 171.977065][ T5883] usb 9-1: device descriptor read/8, error -71 [ 172.087881][ T5883] usb usb9-port1: unable to enumerate USB device [ 172.215971][ T8554] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.797'. [ 172.219003][ T8554] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.290550][ T8531] lo: left allmulticast mode [ 172.293605][ T8532] CIFS: VFS: Error connecting to socket. Aborting operation. [ 172.296379][ T8532] CIFS: VFS: cifs_mount failed w/return code = -4 [ 172.373994][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 172.380924][ T8567] CIFS: Attempting to mount //127.0.0.1/share [ 172.606467][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 172.641272][ T8568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.006635][ T8568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.151701][ T8576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.179958][ T8568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.239643][ T8567] CIFS: VFS: Error connecting to socket. Aborting operation. [ 173.245808][ T8567] CIFS: VFS: cifs_mount failed w/return code = -4 [ 173.326423][ T8568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.455775][ T5781] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.459668][ T5781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.466875][ T5781] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.470932][ T5781] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.621929][ T42] audit: type=1326 audit(1786177724.252:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.2.812" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x0 [ 173.729297][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 173.739155][ T8602] CIFS: Attempting to mount //127.0.0.1/share [ 173.793643][ T8604] CIFS: VFS: Invalid response size 0 for command 0 [ 173.795501][ T8605] lo: entered allmulticast mode [ 173.800015][ T8602] CIFS: VFS: cifs_mount failed w/return code = -5 [ 173.804904][ T8600] lo: left allmulticast mode [ 173.954428][ T8620] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 173.972166][ T8620] team0: Port device dummy0 added [ 174.195740][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 174.352090][ T10] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 174.363725][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.375895][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 174.388584][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.397940][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.415747][ T10] usb 8-1: Product: syz [ 174.423871][ T10] usb 8-1: Manufacturer: syz [ 174.438159][ T10] usb 8-1: SerialNumber: syz [ 174.450518][ T10] usb 8-1: config 0 descriptor?? [ 174.457609][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 174.462387][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 174.469574][ T10] usb 8-1: selecting invalid altsetting 0 [ 174.911840][ T5840] usb 8-1: USB disconnect, device number 36 [ 175.352772][ T8632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.518390][ T8632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.657089][ T8632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.757815][ T8632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.850514][ T8645] FAULT_INJECTION: forcing a failure. [ 175.850514][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 175.858101][ T8645] CPU: 3 UID: 0 PID: 8645 Comm: syz.2.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.858130][ T8645] Tainted: [L]=SOFTLOCKUP [ 175.858137][ T8645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.858148][ T8645] Call Trace: [ 175.858156][ T8645] [ 175.858163][ T8645] dump_stack_lvl+0x100/0x190 [ 175.858193][ T8645] should_fail_ex.cold+0x5/0xa [ 175.858211][ T8645] ? __skb_get_hash_net+0x153/0x560 [ 175.858275][ T8645] should_failslab+0xc2/0x120 [ 175.858318][ T8645] kmem_cache_alloc_noprof+0x91/0x6a0 [ 175.858343][ T8645] ? lock_acquire+0x1b9/0x370 [ 175.858373][ T8645] ? skb_clone+0x190/0x400 [ 175.858401][ T8645] skb_clone+0x190/0x400 [ 175.858427][ T8645] dev_queue_xmit_nit+0x255/0xa60 [ 175.858460][ T8645] dev_hard_start_xmit+0x2f5/0x760 [ 175.858489][ T8645] __dev_queue_xmit+0x1bbf/0x4970 [ 175.858520][ T8645] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.858553][ T8645] ? rcu_is_watching+0x12/0xc0 [ 175.858591][ T8645] ? __skb_clone+0x570/0x760 [ 175.858621][ T8645] netlink_deliver_tap+0xa4d/0xcc0 [ 175.858658][ T8645] netlink_unicast+0x6a5/0x850 [ 175.858684][ T8645] ? __pfx_netlink_unicast+0x10/0x10 [ 175.858702][ T8645] ? genl_rcv_msg+0x4be/0x800 [ 175.858731][ T8645] netlink_ack+0x655/0xb80 [ 175.858758][ T8645] netlink_rcv_skb+0x333/0x420 [ 175.858778][ T8645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.858802][ T8645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.858830][ T8645] ? netlink_deliver_tap+0x1ae/0xcc0 [ 175.858850][ T8645] genl_rcv+0x28/0x40 [ 175.858869][ T8645] netlink_unicast+0x585/0x850 [ 175.858894][ T8645] ? __pfx_netlink_unicast+0x10/0x10 [ 175.858921][ T8645] netlink_sendmsg+0x8b0/0xda0 [ 175.858946][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.858972][ T8645] ? apparmor_socket_sendmsg+0x15b/0x270 [ 175.858997][ T8645] ____sys_sendmsg+0xa4d/0xbe0 [ 175.859016][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.859039][ T8645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.859071][ T8645] ___sys_sendmsg+0x190/0x1e0 [ 175.859093][ T8645] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.859127][ T8645] ? find_held_lock+0x2b/0x80 [ 175.859169][ T8645] __sys_sendmsg+0x160/0x210 [ 175.859194][ T8645] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.859227][ T8645] ? __pfx_ksys_write+0x10/0x10 [ 175.859253][ T8645] __do_fast_syscall_32+0xe7/0x970 [ 175.859281][ T8645] ? lockdep_hardirqs_on+0x78/0x100 [ 175.859306][ T8645] do_fast_syscall_32+0x32/0x70 [ 175.859334][ T8645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.859359][ T8645] RIP: 0023:0xf7fc5fec [ 175.859380][ T8645] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 175.859389][ T8645] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.859405][ T8645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001080 [ 175.859416][ T8645] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.859425][ T8645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.859435][ T8645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.859445][ T8645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.859469][ T8645] [ 176.155870][ T5781] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.195470][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 176.205775][ T5781] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.208385][ T5781] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.225697][ T5781] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.317791][ T8657] xt_HMARK: proto mask must be zero with L3 mode [ 176.333473][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 176.341576][ T8657] vlan2: entered allmulticast mode [ 176.343264][ T8657] dummy0: entered allmulticast mode [ 176.346203][ T8657] bridge0: port 1(vlan2) entered blocking state [ 176.348305][ T8657] bridge0: port 1(vlan2) entered disabled state [ 176.351359][ T8657] vlan2: entered promiscuous mode [ 176.353132][ T8657] dummy0: entered promiscuous mode [ 176.807929][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 176.935739][ T50] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 177.018849][ T8684] fuse: Bad value for 'fd' [ 177.056576][ T8686] netlink: 'syz.0.844': attribute type 21 has an invalid length. [ 177.059616][ T8686] netlink: 'syz.0.844': attribute type 6 has an invalid length. [ 177.062632][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.844'. [ 177.087199][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.090482][ T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.094551][ T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.098172][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.307020][ T50] usb 9-1: GET_CAPABILITIES returned 0 [ 177.309327][ T50] usbtmc 9-1:16.0: can't read capabilities [ 177.347724][ T5885] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 177.361174][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 177.363934][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 177.366883][ T8693] netlink: 'syz.3.846': attribute type 19 has an invalid length. [ 177.369255][ T8693] netlink: 'syz.3.846': attribute type 20 has an invalid length. [ 177.507985][ T10] usb 9-1: USB disconnect, device number 18 [ 177.525153][ T8696] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 177.527920][ T5885] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 177.531729][ T5885] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.534728][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 177.539072][ T5885] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.542870][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.546258][ T5885] usb 7-1: Product: syz [ 177.547931][ T5885] usb 7-1: Manufacturer: syz [ 177.549878][ T5885] usb 7-1: SerialNumber: syz [ 177.554687][ T5885] usb 7-1: config 0 descriptor?? [ 177.559108][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 177.561604][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 177.566934][ T5885] usb 7-1: selecting invalid altsetting 0 [ 177.739792][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 177.824584][ T8702] lo: entered allmulticast mode [ 177.856201][ T5840] usb 7-1: USB disconnect, device number 22 [ 178.322978][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 178.326273][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 178.392274][ T8718] netlink: zone id is out of range [ 178.393958][ T8718] netlink: zone id is out of range [ 178.396080][ T8718] netlink: zone id is out of range [ 178.397831][ T8718] netlink: zone id is out of range [ 178.401104][ T8718] netlink: zone id is out of range [ 178.402845][ T8718] netlink: zone id is out of range [ 178.404462][ T8718] netlink: zone id is out of range [ 178.408592][ T8718] netlink: zone id is out of range [ 178.410162][ T8718] netlink: zone id is out of range [ 178.415213][ T8718] netlink: zone id is out of range [ 178.492612][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 178.500614][ T8721] CIFS: Attempting to mount //127.0.0.1/share [ 178.568883][ T8699] lo: left allmulticast mode [ 178.633200][ T8723] lo: entered allmulticast mode [ 179.322489][ T8720] lo: left allmulticast mode [ 179.326127][ T8721] CIFS: VFS: Error connecting to socket. Aborting operation. [ 179.328922][ T8721] CIFS: VFS: cifs_mount failed w/return code = -4 [ 179.419454][ T8742] overlayfs: failed to clone upperpath [ 179.515737][ T5840] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 179.556265][ T5883] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 179.707145][ T5883] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 179.709968][ T5883] usb 9-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 179.713127][ T5883] usb 9-1: config 0 has no interface number 0 [ 179.714964][ T5883] usb 9-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 179.718474][ T5883] usb 9-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 179.722450][ T5883] usb 9-1: config 0 interface 143 has no altsetting 0 [ 179.726754][ T5883] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 179.729614][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.732129][ T5883] usb 9-1: Product: syz [ 179.733396][ T5883] usb 9-1: Manufacturer: syz [ 179.734863][ T5883] usb 9-1: SerialNumber: syz [ 179.738819][ T5883] usb 9-1: config 0 descriptor?? [ 179.954025][ T5883] usb 9-1: USB disconnect, device number 19 [ 180.385789][ T5883] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 180.487020][ T5840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.490089][ T5840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.494557][ T5840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.497894][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.535703][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 180.539072][ T5883] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 180.541920][ T5883] usb 9-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 180.545376][ T5883] usb 9-1: config 0 has no interface number 0 [ 180.547632][ T5883] usb 9-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 180.551350][ T5883] usb 9-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 180.556616][ T5883] usb 9-1: config 0 interface 143 has no altsetting 0 [ 180.561077][ T5883] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 180.564153][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.566979][ T5883] usb 9-1: Product: syz [ 180.568389][ T5883] usb 9-1: Manufacturer: syz [ 180.569961][ T5883] usb 9-1: SerialNumber: syz [ 180.575281][ T5883] usb 9-1: config 0 descriptor?? [ 180.705877][ T50] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 180.707692][ T5840] usb 8-1: GET_CAPABILITIES returned 0 [ 180.710157][ T5840] usbtmc 8-1:16.0: can't read capabilities [ 180.787623][ T10] IPVS: starting estimator thread 0... [ 180.795269][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.799040][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.808990][ T5883] usb 9-1: USB disconnect, device number 20 [ 180.857563][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.860572][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.864462][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.868334][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.875761][ T8758] IPVS: using max 43 ests per chain, 103200 per kthread [ 180.910815][ T10] usb 8-1: USB disconnect, device number 37 [ 181.005790][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 181.077786][ T50] usb 7-1: GET_CAPABILITIES returned 0 [ 181.079513][ T50] usbtmc 7-1:16.0: can't read capabilities [ 181.284490][ T50] usb 7-1: USB disconnect, device number 23 [ 181.693500][ T8769] evm: overlay not supported [ 181.707685][ T8769] overlayfs: failed to verify origin (173/file1, ino=976, err=-116) [ 181.711277][ T8769] overlayfs: failed to verify origin (173/file1, ino=976, err=-116) [ 181.715724][ T10] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 181.867496][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.872072][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.877665][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.881389][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.979298][ T8778] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 182.004866][ T8778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.109361][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 182.111122][ T10] usbtmc 8-1:16.0: can't read capabilities [ 182.309682][ T10] usb 8-1: USB disconnect, device number 38 [ 182.926863][ T10] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 183.079159][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.082365][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.087549][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.090908][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.175747][ T5885] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 183.319819][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 183.442799][ T8821] overlayfs: failed to clone upperpath [ 183.570004][ T5885] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.798550][ T10] usbtmc 9-1:16.0: can't read capabilities [ 183.981266][ T5885] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.985821][ T5885] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.989159][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.993160][ T10] usb 9-1: USB disconnect, device number 21 [ 184.206048][ T5885] usb 8-1: GET_CAPABILITIES returned 0 [ 184.207897][ T5885] usbtmc 8-1:16.0: can't read capabilities [ 184.301876][ T8831] netlink: 'syz.2.898': attribute type 22 has an invalid length. [ 184.304547][ T8831] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 184.308840][ T8831] __nla_validate_parse: 4 callbacks suppressed [ 184.308850][ T8831] netlink: 224 bytes leftover after parsing attributes in process `syz.2.898'. [ 184.323519][ T8832] netlink: 'syz.2.898': attribute type 22 has an invalid length. [ 184.326667][ T8832] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 184.329798][ T8832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.898'. [ 184.417358][ T5885] usb 8-1: USB disconnect, device number 39 [ 184.811115][ T8860] jffs2: notice: (8860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.665960][ T50] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 185.829736][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.833417][ T50] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 185.836645][ T50] usb 7-1: config 100 has no interface number 0 [ 185.838705][ T50] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 185.841956][ T50] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 185.845546][ T50] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 185.851133][ T50] usb 7-1: config 100 interface 173 has no altsetting 0 [ 185.857227][ T50] usb 7-1: string descriptor 0 read error: -22 [ 185.859773][ T50] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 185.862741][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.864227][ T8902] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(12804.0.0), cmd(9) [ 185.870761][ T8886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.873757][ T8886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.889213][ T50] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 185.898317][ T50] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 185.935785][ T5840] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 186.090599][ T8886] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 186.099104][ T50] usb 7-1: USB disconnect, device number 24 [ 186.099163][ T5840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.107131][ T50] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 186.110295][ T50] metro_usb 7-1:100.173: device disconnected [ 186.115733][ T5840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.119907][ T5840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.123078][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.133164][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 186.207613][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 186.213738][ T8915] CIFS: Attempting to mount //127.0.0.1/share [ 186.330656][ T5840] usb 8-1: GET_CAPABILITIES returned 0 [ 186.332535][ T5840] usbtmc 8-1:16.0: can't read capabilities [ 186.392319][ T8921] FAULT_INJECTION: forcing a failure. [ 186.392319][ T8921] name failslab, interval 1, probability 0, space 0, times 0 [ 186.396313][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.4.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.396337][ T8921] Tainted: [L]=SOFTLOCKUP [ 186.396343][ T8921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.396351][ T8921] Call Trace: [ 186.396359][ T8921] [ 186.396365][ T8921] dump_stack_lvl+0x100/0x190 [ 186.396391][ T8921] should_fail_ex.cold+0x5/0xa [ 186.396419][ T8921] should_failslab+0xc2/0x120 [ 186.396444][ T8921] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 186.396468][ T8921] ? blk_alloc_queue+0x627/0x790 [ 186.396490][ T8921] ? __alloc_disk_node+0x5a/0x6b0 [ 186.396507][ T8921] __alloc_disk_node+0x5a/0x6b0 [ 186.396523][ T8921] __blk_alloc_disk+0xd2/0x170 [ 186.396537][ T8921] ? __pfx___blk_alloc_disk+0x10/0x10 [ 186.396559][ T8921] ? lockdep_init_map_type+0x5c/0x250 [ 186.396572][ T8921] ? lockdep_init_map_type+0x5c/0x250 [ 186.396585][ T8921] dm_create+0x5e8/0x1530 [ 186.396622][ T8921] dev_create+0x121/0x2a0 [ 186.396639][ T8921] ? __pfx_dev_create+0x10/0x10 [ 186.396659][ T8921] ctl_ioctl+0x4db/0xcd0 [ 186.396675][ T8921] ? __pfx_dev_create+0x10/0x10 [ 186.396692][ T8921] ? __pfx_ctl_ioctl+0x10/0x10 [ 186.396721][ T8921] ? __fget_files+0x21f/0x3d0 [ 186.396771][ T8921] dm_compat_ctl_ioctl+0x23/0x30 [ 186.396793][ T8921] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 186.396810][ T8921] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 186.396830][ T8921] __do_fast_syscall_32+0xe7/0x970 [ 186.396847][ T8921] ? lockdep_hardirqs_on+0x78/0x100 [ 186.396864][ T8921] do_fast_syscall_32+0x32/0x70 [ 186.396881][ T8921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.396896][ T8921] RIP: 0023:0xf701efec [ 186.396913][ T8921] Code: Unable to access opcode bytes at 0xf701efc2. [ 186.396919][ T8921] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 186.396930][ T8921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd03 [ 186.396937][ T8921] RDX: 0000000080001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.396944][ T8921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.396950][ T8921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.396956][ T8921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.396970][ T8921] [ 186.533432][ T5840] usb 8-1: USB disconnect, device number 40 [ 187.040535][ T8915] CIFS: VFS: Error connecting to socket. Aborting operation. [ 187.043018][ T8915] CIFS: VFS: cifs_mount failed w/return code = -4 [ 187.105487][ T42] audit: type=1800 audit(1786177737.732:933): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.934" name="p_volume_present" dev="configfs" ino=28776 res=0 errno=0 [ 187.205378][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 187.264528][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.285211][ T8955] netlink: 'syz.4.941': attribute type 12 has an invalid length. [ 187.290052][ T8955] netlink: 'syz.4.941': attribute type 29 has an invalid length. [ 187.293191][ T8955] netlink: 148 bytes leftover after parsing attributes in process `syz.4.941'. [ 187.296827][ T8955] netlink: 47 bytes leftover after parsing attributes in process `syz.4.941'. [ 187.557204][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 187.562971][ T8961] CIFS: Attempting to mount //127.0.0.1/share [ 187.565996][ T5885] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 187.596433][ T50] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 187.673432][ T8963] lo: entered allmulticast mode [ 187.725785][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 187.729779][ T5885] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 187.733538][ T5885] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.738402][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.742843][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.750031][ T5885] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 187.750105][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.753810][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.758671][ T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.761130][ T5885] usb 8-1: Product: syz [ 187.767271][ T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.768493][ T5885] usb 8-1: Manufacturer: syz [ 187.772667][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.774098][ T5885] usb 8-1: SerialNumber: syz [ 187.776387][ T5885] usb 8-1: config 0 descriptor?? [ 187.784036][ T8957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.993627][ T50] usb 9-1: GET_CAPABILITIES returned 0 [ 187.996323][ T50] usbtmc 9-1:16.0: can't read capabilities [ 187.996630][ T5885] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 188.004625][ T5885] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 188.198245][ T5885] usb 9-1: USB disconnect, device number 22 [ 188.203177][ C0] powermate: config urb returned -71 [ 188.203962][ T50] usb 8-1: USB disconnect, device number 41 [ 188.204933][ C0] powermate: usb_submit_urb(config) failed [ 188.207218][ C0] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 188.387188][ T8960] lo: left allmulticast mode [ 188.390139][ T8961] CIFS: VFS: Error connecting to socket. Aborting operation. [ 188.392515][ T8961] CIFS: VFS: cifs_mount failed w/return code = -4 [ 188.424447][ T8965] netlink: 'syz.2.947': attribute type 12 has an invalid length. [ 188.427005][ T8965] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 188.429473][ T8965] netlink: 148 bytes leftover after parsing attributes in process `syz.2.947'. [ 188.432361][ T8965] netlink: 59 bytes leftover after parsing attributes in process `syz.2.947'. [ 188.466476][ T8967] xt_ecn: cannot match TCP bits for non-tcp packets [ 188.827090][ T8972] FAULT_INJECTION: forcing a failure. [ 188.827090][ T8972] name failslab, interval 1, probability 0, space 0, times 0 [ 188.832232][ T8972] CPU: 2 UID: 0 PID: 8972 Comm: syz.4.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.832251][ T8972] Tainted: [L]=SOFTLOCKUP [ 188.832255][ T8972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.832262][ T8972] Call Trace: [ 188.832267][ T8972] [ 188.832285][ T8972] dump_stack_lvl+0x100/0x190 [ 188.832304][ T8972] should_fail_ex.cold+0x5/0xa [ 188.832318][ T8972] should_failslab+0xc2/0x120 [ 188.832335][ T8972] __kvmalloc_node_noprof+0x116/0x970 [ 188.832350][ T8972] ? net_generic+0xea/0x2a0 [ 188.832364][ T8972] ? nf_tables_newset+0x2520/0x4250 [ 188.832384][ T8972] nf_tables_newset+0x2520/0x4250 [ 188.832408][ T8972] ? __pfx_nf_tables_newset+0x10/0x10 [ 188.832428][ T8972] ? __nla_validate_parse+0x3cd/0x28b0 [ 188.832442][ T8972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.832486][ T8972] ? __nla_parse+0x40/0x60 [ 188.832500][ T8972] nfnetlink_rcv_batch+0x1410/0x2880 [ 188.832530][ T8972] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 188.832549][ T8972] ? __local_bh_enable_ip+0xa6/0x120 [ 188.832593][ T8972] ? __nla_parse+0x40/0x60 [ 188.832607][ T8972] nfnetlink_rcv+0x3bd/0x440 [ 188.832623][ T8972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 188.832643][ T8972] netlink_unicast+0x585/0x850 [ 188.832659][ T8972] ? __pfx_netlink_unicast+0x10/0x10 [ 188.832675][ T8972] netlink_sendmsg+0x8b0/0xda0 [ 188.832691][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.832706][ T8972] ? apparmor_socket_sendmsg+0x15b/0x270 [ 188.832738][ T8972] ____sys_sendmsg+0xa4d/0xbe0 [ 188.832757][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.832791][ T8972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.832819][ T8972] ___sys_sendmsg+0x190/0x1e0 [ 188.832833][ T8972] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.832852][ T8972] ? find_held_lock+0x2b/0x80 [ 188.832876][ T8972] __sys_sendmsg+0x160/0x210 [ 188.832893][ T8972] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.832913][ T8972] ? __pfx_ksys_write+0x10/0x10 [ 188.832928][ T8972] __do_fast_syscall_32+0xe7/0x970 [ 188.832946][ T8972] ? lockdep_hardirqs_on+0x78/0x100 [ 188.832963][ T8972] do_fast_syscall_32+0x32/0x70 [ 188.832980][ T8972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.832995][ T8972] RIP: 0023:0xf701efec [ 188.833009][ T8972] Code: Unable to access opcode bytes at 0xf701efc2. [ 188.833014][ T8972] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 188.833027][ T8972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 188.833034][ T8972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.833040][ T8972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.833046][ T8972] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.833053][ T8972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.833067][ T8972] [ 189.063110][ T8978] netlink: 'syz.2.953': attribute type 2 has an invalid length. [ 189.093844][ T8983] FAULT_INJECTION: forcing a failure. [ 189.093844][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 189.099016][ T8983] CPU: 3 UID: 0 PID: 8983 Comm: syz.4.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.099041][ T8983] Tainted: [L]=SOFTLOCKUP [ 189.099046][ T8983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.099055][ T8983] Call Trace: [ 189.099062][ T8983] [ 189.099068][ T8983] dump_stack_lvl+0x100/0x190 [ 189.099093][ T8983] should_fail_ex.cold+0x5/0xa [ 189.099107][ T8983] should_failslab+0xc2/0x120 [ 189.099124][ T8983] kmem_cache_alloc_noprof+0x91/0x6a0 [ 189.099140][ T8983] ? __mpol_dup+0x74/0x390 [ 189.099154][ T8983] __mpol_dup+0x74/0x390 [ 189.099164][ T8983] ? __pfx___mpol_dup+0x10/0x10 [ 189.099178][ T8983] mbind_range+0x2ad/0x550 [ 189.099190][ T8983] do_mbind+0x7dc/0xfd0 [ 189.099205][ T8983] ? __pfx_do_mbind+0x10/0x10 [ 189.099221][ T8983] ? find_held_lock+0x2b/0x80 [ 189.099253][ T8983] ? __pfx_get_nodes+0x10/0x10 [ 189.099271][ T8983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.099290][ T8983] ? __fget_files+0x21f/0x3d0 [ 189.099303][ T8983] kernel_mbind+0x1b7/0x200 [ 189.099316][ T8983] ? __pfx_kernel_mbind+0x10/0x10 [ 189.099326][ T8983] ? ksys_write+0x1ac/0x250 [ 189.099337][ T8983] ? __pfx_ksys_write+0x10/0x10 [ 189.099351][ T8983] __do_fast_syscall_32+0xe7/0x970 [ 189.099367][ T8983] ? lockdep_hardirqs_on+0x78/0x100 [ 189.099384][ T8983] do_fast_syscall_32+0x32/0x70 [ 189.099401][ T8983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.099416][ T8983] RIP: 0023:0xf701efec [ 189.099430][ T8983] Code: Unable to access opcode bytes at 0xf701efc2. [ 189.099435][ T8983] RSP: 002b:00000000f51f150c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 189.099446][ T8983] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 189.099453][ T8983] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 189.099460][ T8983] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 189.099466][ T8983] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.099472][ T8983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.099486][ T8983] [ 189.849980][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 189.860366][ T8989] CIFS: Attempting to mount //127.0.0.1/share [ 189.959864][ T8993] lo: entered allmulticast mode [ 190.095951][ T9004] netlink: 'syz.3.960': attribute type 4 has an invalid length. [ 190.098454][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.960'. [ 190.315977][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 190.335684][ T5840] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 190.485901][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 190.489092][ T5840] usb 8-1: config 0 has no interfaces? [ 190.492574][ T5840] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 190.495551][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 190.498360][ T5840] usb 8-1: Product: syz [ 190.499676][ T5840] usb 8-1: Manufacturer: syz [ 190.501240][ T5840] usb 8-1: SerialNumber: syz [ 190.504523][ T5840] usb 8-1: config 0 descriptor?? [ 190.678503][ T8988] lo: left allmulticast mode [ 190.681581][ T8989] CIFS: VFS: Error connecting to socket. Aborting operation. [ 190.684298][ T8989] CIFS: VFS: cifs_mount failed w/return code = -4 [ 190.712373][ T5817] usb 8-1: USB disconnect, device number 42 [ 190.729382][ T9015] trusted_key: syz.4.964 sent an empty control message without MSG_MORE. [ 191.562975][ T9052] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 191.569351][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'. [ 191.673239][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.982'. [ 191.725326][ T9064] netlink: 'syz.4.983': attribute type 3 has an invalid length. [ 191.728526][ T9064] netlink: 72 bytes leftover after parsing attributes in process `syz.4.983'. [ 191.815801][ T5883] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 191.963112][ T9072] block nbd0: not configured, cannot reconfigure [ 191.965689][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 191.972834][ T5883] usb 8-1: unable to get BOS descriptor or descriptor too short [ 191.979669][ T5883] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.985705][ T5883] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.992163][ T5883] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.997224][ T5883] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 192.007421][ T5883] usb 8-1: string descriptor 0 read error: -22 [ 192.012152][ T5883] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 192.098464][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.115995][ T5883] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.118245][ T5883] usb 8-1: MIDIStreaming interface descriptor not found [ 192.125378][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 192.132234][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 192.217167][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 192.317196][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 192.326071][ T9092] CIFS: Attempting to mount //127.0.0.1/share [ 193.147445][ T9092] CIFS: VFS: Error connecting to socket. Aborting operation. [ 193.149979][ T9092] CIFS: VFS: cifs_mount failed w/return code = -4 [ 193.808029][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.810877][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609502][ T5885] usb 8-1: USB disconnect, device number 43 [ 194.844287][ T9142] vlan0: entered promiscuous mode [ 194.854614][ T9142] team0: Port device vlan0 added [ 195.278050][ T9150] __nla_validate_parse: 3 callbacks suppressed [ 195.278067][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 195.284050][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 195.915682][ T5817] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 196.065719][ T5817] usb 9-1: Using ep0 maxpacket: 16 [ 196.069002][ T5817] usb 9-1: unable to get BOS descriptor or descriptor too short [ 196.072262][ T5817] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.076938][ T5817] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.080320][ T5817] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.083724][ T5817] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 196.096403][ T5817] usb 9-1: string descriptor 0 read error: -22 [ 196.098931][ T5817] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 196.102079][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.114694][ T5817] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.117445][ T5817] usb 9-1: MIDIStreaming interface descriptor not found [ 196.247007][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 196.253656][ T9188] CIFS: Attempting to mount //127.0.0.1/share [ 196.316774][ T9189] CIFS: VFS: Invalid response size 0 for command 0 [ 196.321645][ T9188] CIFS: VFS: cifs_mount failed w/return code = -5 [ 196.335070][ T9188] lo: entered allmulticast mode [ 196.338260][ T9187] lo: left allmulticast mode [ 196.354048][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1026'. [ 196.532015][ T9200] orangefs_devreq_write_iter: failed to copy head. [ 197.346739][ T9208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1032'. [ 197.530724][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 197.645875][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 197.733277][ T9231] batadv_slave_1: entered promiscuous mode [ 197.736863][ T9231] FAULT_INJECTION: forcing a failure. [ 197.736863][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 197.741346][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.3.1041 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.741366][ T9231] Tainted: [L]=SOFTLOCKUP [ 197.741370][ T9231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.741389][ T9231] Call Trace: [ 197.741396][ T9231] [ 197.741401][ T9231] dump_stack_lvl+0x100/0x190 [ 197.741420][ T9231] should_fail_ex.cold+0x5/0xa [ 197.741434][ T9231] should_failslab+0xc2/0x120 [ 197.741452][ T9231] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 197.741468][ T9231] ? __alloc_skb+0x140/0x710 [ 197.741487][ T9231] __alloc_skb+0x140/0x710 [ 197.741500][ T9231] ? __alloc_skb+0x5b7/0x710 [ 197.741514][ T9231] ? __pfx___alloc_skb+0x10/0x10 [ 197.741530][ T9231] ? __mutex_lock+0x26d/0x1bd0 [ 197.741549][ T9231] netlink_dump+0x194/0xd00 [ 197.741562][ T9231] ? __pfx___mutex_lock+0x10/0x10 [ 197.741578][ T9231] ? __pfx_netlink_dump+0x10/0x10 [ 197.741598][ T9231] __netlink_dump_start+0x6d6/0x990 [ 197.741612][ T9231] packet_diag_handler_dump+0x1f0/0x290 [ 197.741631][ T9231] ? __pfx_packet_diag_handler_dump+0x10/0x10 [ 197.741647][ T9231] ? __pfx_packet_diag_dump+0x10/0x10 [ 197.741664][ T9231] ? sock_diag_lock_handler+0x10f/0x2e0 [ 197.741685][ T9231] sock_diag_rcv_msg+0x431/0x7a0 [ 197.741701][ T9231] netlink_rcv_skb+0x159/0x420 [ 197.741714][ T9231] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 197.741730][ T9231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.741748][ T9231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.741763][ T9231] netlink_unicast+0x585/0x850 [ 197.741777][ T9231] ? __pfx_netlink_unicast+0x10/0x10 [ 197.741794][ T9231] netlink_sendmsg+0x8b0/0xda0 [ 197.741809][ T9231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.741824][ T9231] ? apparmor_socket_sendmsg+0x15b/0x270 [ 197.741843][ T9231] sock_write_iter+0x53a/0x5b0 [ 197.741855][ T9231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.741867][ T9231] ? __pfx_sock_write_iter+0x10/0x10 [ 197.741882][ T9231] ? bpf_lsm_file_permission+0x9/0x10 [ 197.741907][ T9231] ? security_file_permission+0x76/0x210 [ 197.741933][ T9231] ? rw_verify_area+0xce/0x6d0 [ 197.741953][ T9231] vfs_write+0x6ac/0x1050 [ 197.741965][ T9231] ? __pfx_sock_write_iter+0x10/0x10 [ 197.741978][ T9231] ? __pfx_vfs_write+0x10/0x10 [ 197.741988][ T9231] ? find_held_lock+0x2b/0x80 [ 197.742014][ T9231] ksys_write+0x1f8/0x250 [ 197.742025][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 197.742035][ T9231] ? ksys_write+0x1ac/0x250 [ 197.742046][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 197.742060][ T9231] __do_fast_syscall_32+0xe7/0x970 [ 197.742077][ T9231] ? lockdep_hardirqs_on+0x78/0x100 [ 197.742095][ T9231] do_fast_syscall_32+0x32/0x70 [ 197.742112][ T9231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.742127][ T9231] RIP: 0023:0xf705efec [ 197.742142][ T9231] Code: Unable to access opcode bytes at 0xf705efc2. [ 197.742147][ T9231] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 197.742158][ T9231] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 197.742165][ T9231] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.742171][ T9231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.742178][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.742184][ T9231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.742198][ T9231] [ 197.797353][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 197.866922][ T9231] batadv_slave_1: left promiscuous mode [ 198.092938][ T9237] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 198.095063][ T9237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.098407][ T9237] vhci_hcd vhci_hcd.0: Device attached [ 198.366202][ T5817] usb 44-1: SetAddress Request (2) to port 0 [ 198.368456][ T5817] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 198.715534][ T24] usb 9-1: USB disconnect, device number 23 [ 198.758121][ T9239] vhci_hcd: connection reset by peer [ 198.766316][ T5781] vhci_hcd vhci_hcd.3: stop threads [ 198.771791][ T5781] vhci_hcd vhci_hcd.3: release socket [ 198.778761][ T5781] vhci_hcd vhci_hcd.3: disconnect device [ 199.344015][ T9285] netlink: 'syz.3.1060': attribute type 10 has an invalid length. [ 199.358793][ T9285] team0: Port device dummy0 added [ 199.362648][ T9285] netlink: 'syz.3.1060': attribute type 10 has an invalid length. [ 199.373267][ T9285] team0: Port device dummy0 removed [ 199.758066][ T9300] net_ratelimit: 26 callbacks suppressed [ 199.758080][ T9300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.886400][ T9302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.933387][ T9307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.936591][ T9307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.114207][ T9309] overlayfs: failed to verify origin (250/file1, ino=1420, err=-116) [ 200.122280][ T9309] overlayfs: failed to verify origin (250/file1, ino=1420, err=-116) [ 200.425821][ T5885] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 200.599734][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 200.604996][ T5885] usb 8-1: not running at top speed; connect to a high speed hub [ 200.609326][ T5885] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 200.612918][ T5885] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 200.616559][ T5885] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 200.620600][ T5885] usb 8-1: config 14 has no interface number 0 [ 200.623071][ T5885] usb 8-1: config 14 has no interface number 1 [ 200.625506][ T5885] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 200.629917][ T5885] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 200.634619][ T5885] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.639895][ T5885] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 200.644280][ T5885] usb 8-1: config 14 interface 57 has no altsetting 0 [ 200.647015][ T5885] usb 8-1: config 14 interface 228 has no altsetting 0 [ 200.651472][ T5885] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 200.655128][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.658599][ T5885] usb 8-1: Product: syz [ 200.660591][ T5885] usb 8-1: Manufacturer: syz [ 200.662492][ T5885] usb 8-1: SerialNumber: syz [ 201.083880][ T5885] legousbtower 8-1:14.57: interrupt endpoints not found [ 201.283660][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.289126][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.309319][ T5885] legousbtower 8-1:14.228: get version request failed: -71 [ 201.312322][ T5885] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 201.318179][ T5885] usb 8-1: USB disconnect, device number 44 [ 201.842390][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 201.845400][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 201.848490][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 201.925920][ T9342] FAULT_INJECTION: forcing a failure. [ 201.925920][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.930620][ T9342] CPU: 3 UID: 0 PID: 9342 Comm: syz.2.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.930638][ T9342] Tainted: [L]=SOFTLOCKUP [ 201.930642][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.930649][ T9342] Call Trace: [ 201.930654][ T9342] [ 201.930659][ T9342] dump_stack_lvl+0x100/0x190 [ 201.930678][ T9342] should_fail_ex.cold+0x5/0xa [ 201.930691][ T9342] _copy_from_user+0x2e/0xd0 [ 201.930711][ T9342] ctl_ioctl+0x292/0xcd0 [ 201.930729][ T9342] ? __pfx_table_load+0x10/0x10 [ 201.930748][ T9342] ? __pfx_ctl_ioctl+0x10/0x10 [ 201.930777][ T9342] ? __fget_files+0x21f/0x3d0 [ 201.930792][ T9342] dm_compat_ctl_ioctl+0x23/0x30 [ 201.930808][ T9342] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 201.930824][ T9342] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 201.930844][ T9342] __do_fast_syscall_32+0xe7/0x970 [ 201.930863][ T9342] ? lockdep_hardirqs_on+0x78/0x100 [ 201.930879][ T9342] do_fast_syscall_32+0x32/0x70 [ 201.930896][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.930928][ T9342] RIP: 0023:0xf7fc5fec [ 201.930942][ T9342] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 201.930947][ T9342] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 201.930959][ T9342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 201.930966][ T9342] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.930975][ T9342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.930981][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.930987][ T9342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.931001][ T9342] [ 202.621260][ T9374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.991257][ T9383] FAULT_INJECTION: forcing a failure. [ 202.991257][ T9383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.995919][ T9383] CPU: 0 UID: 0 PID: 9383 Comm: syz.3.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.995938][ T9383] Tainted: [L]=SOFTLOCKUP [ 202.995942][ T9383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.995949][ T9383] Call Trace: [ 202.995953][ T9383] [ 202.995957][ T9383] dump_stack_lvl+0x100/0x190 [ 202.995976][ T9383] should_fail_ex.cold+0x5/0xa [ 202.995990][ T9383] _copy_from_user+0x2e/0xd0 [ 202.996008][ T9383] get_compat_msghdr+0xb3/0x480 [ 202.996029][ T9383] ? __pfx_get_compat_msghdr+0x10/0x10 [ 202.996049][ T9383] ? _kstrtoull+0x13c/0x1f0 [ 202.996074][ T9383] ? __pfx__kstrtoull+0x10/0x10 [ 202.996089][ T9383] ___sys_sendmsg+0x1b6/0x1e0 [ 202.996103][ T9383] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.996114][ T9383] ? __lock_acquire+0x49f/0x1a40 [ 202.996150][ T9383] __sys_sendmmsg+0x309/0x440 [ 202.996168][ T9383] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.996183][ T9383] ? find_held_lock+0x2b/0x80 [ 202.996201][ T9383] ? __mutex_unlock_slowpath+0x35d/0x930 [ 202.996226][ T9383] ? fput+0x79/0x100 [ 202.996240][ T9383] ? ksys_write+0x1ac/0x250 [ 202.996253][ T9383] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 202.996264][ T9383] ? lockdep_hardirqs_on+0x78/0x100 [ 202.996279][ T9383] __do_fast_syscall_32+0xe7/0x970 [ 202.996295][ T9383] ? lockdep_hardirqs_on+0x78/0x100 [ 202.996312][ T9383] do_fast_syscall_32+0x32/0x70 [ 202.996329][ T9383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.996343][ T9383] RIP: 0023:0xf705efec [ 202.996357][ T9383] Code: Unable to access opcode bytes at 0xf705efc2. [ 202.996362][ T9383] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 202.996385][ T9383] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 202.996392][ T9383] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 202.996399][ T9383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.996405][ T9383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.996411][ T9383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.996426][ T9383] [ 203.099130][ T9385] FAULT_INJECTION: forcing a failure. [ 203.099130][ T9385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.104017][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.3.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.104041][ T9385] Tainted: [L]=SOFTLOCKUP [ 203.104046][ T9385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.104056][ T9385] Call Trace: [ 203.104063][ T9385] [ 203.104070][ T9385] dump_stack_lvl+0x100/0x190 [ 203.104089][ T9385] should_fail_ex.cold+0x5/0xa [ 203.104100][ T9385] ? prepare_alloc_pages+0x16d/0x5f0 [ 203.104125][ T9385] should_fail_alloc_page+0xeb/0x140 [ 203.104149][ T9385] prepare_alloc_pages+0x1f0/0x5f0 [ 203.104174][ T9385] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 203.104189][ T9385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.104203][ T9385] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 203.104232][ T9385] ? clockevents_program_event+0x1ef/0x820 [ 203.104248][ T9385] ? try_to_wake_up+0xd8d/0x1c90 [ 203.104269][ T9385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.104285][ T9385] ? __lock_acquire+0x49f/0x1a40 [ 203.104310][ T9385] ? __lock_acquire+0x49f/0x1a40 [ 203.104328][ T9385] ? find_held_lock+0x2b/0x80 [ 203.104341][ T9385] ? xa_load+0x149/0x2c0 [ 203.104352][ T9385] ? xa_load+0x149/0x2c0 [ 203.104361][ T9385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.104380][ T9385] ? policy_nodemask+0xed/0x4f0 [ 203.104399][ T9385] alloc_pages_mpol+0x1fb/0x540 [ 203.104416][ T9385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 203.104437][ T9385] alloc_pages_noprof+0x1a/0x160 [ 203.104448][ T9385] pte_alloc_one+0x1c/0x3d0 [ 203.104474][ T9385] do_huge_pmd_anonymous_page+0x2bf/0x1530 [ 203.104490][ T9385] ? _raw_spin_unlock+0x28/0x50 [ 203.104504][ T9385] ? __pmd_alloc+0x3fb/0x950 [ 203.104523][ T9385] __handle_mm_fault+0x239e/0x2a00 [ 203.104538][ T9385] ? mt_find+0x45e/0x8e0 [ 203.104555][ T9385] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.104566][ T9385] ? __pfx_mt_find+0x10/0x10 [ 203.104594][ T9385] handle_mm_fault+0x37b/0xa30 [ 203.104608][ T9385] __get_user_pages+0x1178/0x32a0 [ 203.104637][ T9385] ? __pfx___get_user_pages+0x10/0x10 [ 203.104678][ T9385] populate_vma_page_range+0x267/0x3f0 [ 203.104699][ T9385] ? __pfx_populate_vma_page_range+0x10/0x10 [ 203.104716][ T9385] ? __pfx_find_vma_intersection+0x10/0x10 [ 203.104732][ T9385] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 203.104747][ T9385] __mm_populate+0x107/0x3a0 [ 203.104765][ T9385] ? __pfx___mm_populate+0x10/0x10 [ 203.104783][ T9385] ? up_write+0x2e5/0x5c0 [ 203.104796][ T9385] do_mlock+0x3f0/0x7f0 [ 203.104809][ T9385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.104830][ T9385] ? __pfx_do_mlock+0x10/0x10 [ 203.104845][ T9385] ? fput+0x79/0x100 [ 203.104859][ T9385] ? ksys_write+0x1ac/0x250 [ 203.104870][ T9385] ? __pfx_ksys_write+0x10/0x10 [ 203.104882][ T9385] __ia32_sys_mlock+0x57/0x80 [ 203.104895][ T9385] __do_fast_syscall_32+0xe7/0x970 [ 203.104912][ T9385] ? lockdep_hardirqs_on+0x78/0x100 [ 203.104928][ T9385] do_fast_syscall_32+0x32/0x70 [ 203.104945][ T9385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.104960][ T9385] RIP: 0023:0xf705efec [ 203.104976][ T9385] Code: Unable to access opcode bytes at 0xf705efc2. [ 203.104981][ T9385] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 203.104992][ T9385] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 203.104999][ T9385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.105006][ T9385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.105012][ T9385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.105018][ T9385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.105032][ T9385] [ 203.405770][ T5817] usb 44-1: device descriptor read/8, error -110 [ 203.673801][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 203.685958][ T34] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 203.694899][ T9399] CIFS: Attempting to mount //127.0.0.1/share [ 203.791550][ T9404] lo: entered allmulticast mode [ 203.806155][ T5817] usb usb44-port1: attempt power cycle [ 204.361039][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 204.373808][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 204.376539][ T34] usb 7-1: can't read configurations, error -71 [ 204.377427][ T5817] usb usb44-port1: unable to enumerate USB device [ 204.480780][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'. [ 204.503494][ T9398] lo: left allmulticast mode [ 204.506170][ T9399] CIFS: VFS: Error connecting to socket. Aborting operation. [ 204.508586][ T9399] CIFS: VFS: cifs_mount failed w/return code = -4 [ 205.079313][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 205.099695][ T9431] CIFS: Attempting to mount //127.0.0.1/share [ 205.231300][ T9433] lo: entered allmulticast mode [ 205.311834][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 205.559213][ T9439] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 205.898747][ T9430] lo: left allmulticast mode [ 205.901666][ T9431] CIFS: VFS: Error connecting to socket. Aborting operation. [ 205.904261][ T9431] CIFS: VFS: cifs_mount failed w/return code = -4 [ 206.016024][ T34] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 206.177815][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 206.184044][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.252057][ T9460] FAULT_INJECTION: forcing a failure. [ 206.252057][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 206.256080][ T9460] CPU: 2 UID: 0 PID: 9460 Comm: syz.4.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.256098][ T9460] Tainted: [L]=SOFTLOCKUP [ 206.256102][ T9460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.256109][ T9460] Call Trace: [ 206.256114][ T9460] [ 206.256119][ T9460] dump_stack_lvl+0x100/0x190 [ 206.256137][ T9460] should_fail_ex.cold+0x5/0xa [ 206.256151][ T9460] should_failslab+0xc2/0x120 [ 206.256167][ T9460] __kmalloc_cache_noprof+0x91/0x6c0 [ 206.256181][ T9460] ? syslog_print_all+0xed/0x3f0 [ 206.256195][ T9460] syslog_print_all+0xed/0x3f0 [ 206.256207][ T9460] ? __pfx_syslog_print_all+0x10/0x10 [ 206.256224][ T9460] ? bpf_lsm_capable+0x9/0x10 [ 206.256251][ T9460] ? security_capable+0x80/0x260 [ 206.256265][ T9460] do_syslog+0x350/0x6d0 [ 206.256279][ T9460] ? __pfx_do_syslog+0x10/0x10 [ 206.256291][ T9460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.256309][ T9460] ? __fget_files+0x21f/0x3d0 [ 206.256323][ T9460] ? fput+0x79/0x100 [ 206.256337][ T9460] ? ksys_write+0x1ac/0x250 [ 206.256347][ T9460] ? __pfx_ksys_write+0x10/0x10 [ 206.256360][ T9460] __ia32_sys_syslog+0x73/0xb0 [ 206.256371][ T9460] ? lockdep_hardirqs_on+0x78/0x100 [ 206.256387][ T9460] __do_fast_syscall_32+0xe7/0x970 [ 206.256404][ T9460] ? lockdep_hardirqs_on+0x78/0x100 [ 206.256421][ T9460] do_fast_syscall_32+0x32/0x70 [ 206.256437][ T9460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.256453][ T9460] RIP: 0023:0xf701efec [ 206.256470][ T9460] Code: Unable to access opcode bytes at 0xf701efc2. [ 206.256475][ T9460] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000067 [ 206.256487][ T9460] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 206.256494][ T9460] RDX: 000000000000005a RSI: 0000000000000000 RDI: 0000000000000000 [ 206.256500][ T9460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.256506][ T9460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.256513][ T9460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.256526][ T9460] [ 206.395883][ T5817] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 206.397338][ T34] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 206.422839][ T9463] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.425452][ T9463] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 206.430297][ T9463] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.433835][ T9463] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 206.558241][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 206.562183][ T5817] usb 7-1: not running at top speed; connect to a high speed hub [ 206.567386][ T5817] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 206.570686][ T5817] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 206.574006][ T5817] usb 7-1: config 14 has no interface number 0 [ 206.576997][ T5817] usb 7-1: config 14 has no interface number 1 [ 206.579498][ T5817] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 206.583621][ T5817] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 206.588182][ T5817] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 206.592680][ T5817] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 206.597124][ T5817] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 65280, setting to 64 [ 206.601450][ T5817] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.608357][ T5817] usb 7-1: config 14 interface 57 has no altsetting 0 [ 206.611061][ T5817] usb 7-1: config 14 interface 228 has no altsetting 0 [ 206.615490][ T5817] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 206.619168][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.622316][ T5817] usb 7-1: Product: syz [ 206.623943][ T5817] usb 7-1: Manufacturer: syz [ 206.625907][ T5817] usb 7-1: SerialNumber: syz [ 206.915634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 207.075636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.325871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.836420][ T5817] legousbtower 7-1:14.57: interrupt endpoints not found [ 207.999009][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 208.007345][ T9496] CIFS: Attempting to mount //127.0.0.1/share [ 208.046762][ T5817] legousbtower 7-1:14.228: get version request failed: -71 [ 208.049773][ T5817] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 208.064144][ T5817] usb 7-1: USB disconnect, device number 27 [ 208.816863][ T9496] CIFS: VFS: Error connecting to socket. Aborting operation. [ 208.819370][ T9496] CIFS: VFS: cifs_mount failed w/return code = -4 [ 208.924507][ T9511] FAULT_INJECTION: forcing a failure. [ 208.924507][ T9511] name failslab, interval 1, probability 0, space 0, times 0 [ 208.930530][ T9511] CPU: 3 UID: 0 PID: 9511 Comm: syz.4.1139 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.930550][ T9511] Tainted: [L]=SOFTLOCKUP [ 208.930554][ T9511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.930561][ T9511] Call Trace: [ 208.930565][ T9511] [ 208.930570][ T9511] dump_stack_lvl+0x100/0x190 [ 208.930601][ T9511] should_fail_ex.cold+0x5/0xa [ 208.930616][ T9511] should_failslab+0xc2/0x120 [ 208.930633][ T9511] __kmalloc_noprof+0xfc/0x820 [ 208.930649][ T9511] ? tomoyo_encode2+0xfb/0x3c0 [ 208.930669][ T9511] tomoyo_encode2+0xfb/0x3c0 [ 208.930685][ T9511] ? __get_fs_type+0xe3/0x200 [ 208.930701][ T9511] tomoyo_encode+0x29/0x50 [ 208.930716][ T9511] tomoyo_mount_acl+0x388/0x8b0 [ 208.930731][ T9511] ? is_bpf_text_address+0x8a/0x1a0 [ 208.930761][ T9511] ? is_bpf_text_address+0x8a/0x1a0 [ 208.930779][ T9511] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.930797][ T9511] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 208.930816][ T9511] ? kernel_text_address+0x8d/0x100 [ 208.930836][ T9511] ? unwind_get_return_address+0x59/0xa0 [ 208.930854][ T9511] ? arch_stack_walk+0xa6/0xf0 [ 208.930893][ T9511] ? tomoyo_domain+0xb2/0x150 [ 208.930904][ T9511] ? tomoyo_profile+0x47/0x60 [ 208.930917][ T9511] tomoyo_mount_permission+0x214/0x460 [ 208.930932][ T9511] ? tomoyo_mount_permission+0x1f6/0x460 [ 208.930948][ T9511] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 208.930972][ T9511] security_sb_mount+0xdd/0x270 [ 208.930986][ T9511] path_mount+0x158/0x23d0 [ 208.931003][ T9511] ? __pfx_path_mount+0x10/0x10 [ 208.931016][ T9511] ? lockdep_hardirqs_on+0x78/0x100 [ 208.931034][ T9511] ? putname+0xb1/0x110 [ 208.931047][ T9511] ? kmem_cache_free+0x127/0x6b0 [ 208.931063][ T9511] ? __ia32_sys_mount+0x292/0x310 [ 208.931076][ T9511] __ia32_sys_mount+0x292/0x310 [ 208.931090][ T9511] ? __pfx___ia32_sys_mount+0x10/0x10 [ 208.931103][ T9511] ? ksys_write+0x1ac/0x250 [ 208.931114][ T9511] ? __pfx_ksys_write+0x10/0x10 [ 208.931127][ T9511] __do_fast_syscall_32+0xe7/0x970 [ 208.931144][ T9511] ? lockdep_hardirqs_on+0x78/0x100 [ 208.931160][ T9511] do_fast_syscall_32+0x32/0x70 [ 208.931177][ T9511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.931192][ T9511] RIP: 0023:0xf701efec [ 208.931206][ T9511] Code: Unable to access opcode bytes at 0xf701efc2. [ 208.931211][ T9511] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 208.931223][ T9511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000340 [ 208.931229][ T9511] RDX: 0000000080000180 RSI: 0000000002000090 RDI: 00000000800003c0 [ 208.931236][ T9511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.931242][ T9511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.931249][ T9511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.931263][ T9511] [ 209.022319][ T9511] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 209.050622][ T9511] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 209.053722][ T9511] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 209.056563][ T9511] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 209.059978][ T9511] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 209.071576][ T9511] pci 0000:00:01.0: Adding to iommu group 1 [ 209.078649][ T9511] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 209.080814][ T9511] pci 0000:00:01.0: vgaarb: bridge control possible [ 209.082858][ T9511] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 209.091342][ T9511] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 209.094016][ T9511] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 209.098419][ T9511] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 209.112339][ T9511] [drm] Found bochs VGA, ID 0xb0c5. [ 209.114080][ T9511] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 209.130839][ T9511] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 209.155633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 209.165659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xbf000) [ 209.250354][ T9511] Console: switching to colour frame buffer device 160x50 [ 209.277243][ T9511] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 209.306527][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 209.308746][ T1124] ata1: failed to read log page 10h (errno=-5) [ 209.310726][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 209.311557][ T9519] macsec0: entered promiscuous mode [ 209.313237][ T1124] ata1.00: irq_stat 0x41000008 [ 209.319185][ T1124] ata1.00: failed command: WRITE FPDMA QUEUED [ 209.321188][ T1124] ata1.00: cmd 61/f8:f0:3e:ab:0a/05:00:00:00:00/40 tag 30 ncq dma 782336 out [ 209.321188][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 209.326716][ T1124] ata1.00: status: { DRDY } [ 209.328252][ T1124] ata1.00: error: { ABRT } [ 209.330776][ T1124] ata1.00: configured for UDMA/100 [ 209.332833][ T1124] ata1: EH complete [ 209.577493][ T9518] infiniband syz0: set down [ 209.579838][ T9518] infiniband syz0: added bond_slave_1 [ 209.613900][ T9518] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 209.618732][ T9518] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 209.624132][ T9518] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 209.676792][ T9518] RDS/IB: syz0: added [ 209.681311][ T9518] smc: adding ib device syz0 with port count 1 [ 209.684623][ T9518] smc: ib device syz0 port 1 has no pnetid [ 210.428302][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 210.447660][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 210.453194][ T9535] CIFS: Attempting to mount //127.0.0.1/share [ 210.559422][ T9539] lo: entered allmulticast mode [ 210.816893][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 210.863377][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'. [ 210.867883][ T9547] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1150'. [ 210.872239][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'. [ 211.278095][ T9534] lo: left allmulticast mode [ 211.281128][ T9535] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.283528][ T9535] CIFS: VFS: cifs_mount failed w/return code = -4 [ 211.422541][ T9561] FAULT_INJECTION: forcing a failure. [ 211.422541][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 211.428171][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.2.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.428189][ T9561] Tainted: [L]=SOFTLOCKUP [ 211.428192][ T9561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.428200][ T9561] Call Trace: [ 211.428211][ T9561] [ 211.428216][ T9561] dump_stack_lvl+0x100/0x190 [ 211.428341][ T9561] should_fail_ex.cold+0x5/0xa [ 211.428368][ T9561] should_failslab+0xc2/0x120 [ 211.428407][ T9561] __kmalloc_cache_noprof+0x91/0x6c0 [ 211.428426][ T9561] ? find_held_lock+0x2b/0x80 [ 211.428452][ T9561] ? alloc_fs_context+0x57/0xf40 [ 211.428480][ T9561] alloc_fs_context+0x57/0xf40 [ 211.428494][ T9561] ? __get_fs_type+0xe3/0x200 [ 211.428510][ T9561] path_mount+0xdbd/0x23d0 [ 211.428526][ T9561] ? __pfx_path_mount+0x10/0x10 [ 211.428539][ T9561] ? lockdep_hardirqs_on+0x78/0x100 [ 211.428607][ T9561] ? putname+0xb1/0x110 [ 211.428657][ T9561] ? kmem_cache_free+0x127/0x6b0 [ 211.428673][ T9561] ? __ia32_sys_mount+0x292/0x310 [ 211.428686][ T9561] __ia32_sys_mount+0x292/0x310 [ 211.428700][ T9561] ? __pfx___ia32_sys_mount+0x10/0x10 [ 211.428713][ T9561] ? ksys_write+0x1ac/0x250 [ 211.428724][ T9561] ? __pfx_ksys_write+0x10/0x10 [ 211.428750][ T9561] __do_fast_syscall_32+0xe7/0x970 [ 211.428767][ T9561] ? lockdep_hardirqs_on+0x78/0x100 [ 211.428783][ T9561] do_fast_syscall_32+0x32/0x70 [ 211.428800][ T9561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.428815][ T9561] RIP: 0023:0xf7fc5fec [ 211.428831][ T9561] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 211.428851][ T9561] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 211.428862][ T9561] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000300 [ 211.428869][ T9561] RDX: 0000000080000180 RSI: 0000000002000090 RDI: 0000000080000080 [ 211.428875][ T9561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.428882][ T9561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.428888][ T9561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.428902][ T9561] [ 211.522472][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 211.607803][ T9569] 9p: Could not find request transport: ÿÿ [ 211.611707][ T9569] 9p: Bad value for 'rfdno' [ 211.977091][ T5885] usb 8-1: USB disconnect, device number 45 [ 212.060607][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 212.073403][ T9574] CIFS: Attempting to mount //127.0.0.1/share [ 212.128523][ T9575] CIFS: VFS: Invalid response size 0 for command 0 [ 212.131766][ T9574] CIFS: VFS: cifs_mount failed w/return code = -5 [ 212.133083][ T9576] lo: entered allmulticast mode [ 212.143181][ T9573] lo: left allmulticast mode [ 212.221299][ T9582] FAULT_INJECTION: forcing a failure. [ 212.221299][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 212.229882][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.3.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.229910][ T9582] Tainted: [L]=SOFTLOCKUP [ 212.229915][ T9582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.229924][ T9582] Call Trace: [ 212.229929][ T9582] [ 212.229934][ T9582] dump_stack_lvl+0x100/0x190 [ 212.229959][ T9582] should_fail_ex.cold+0x5/0xa [ 212.229976][ T9582] should_failslab+0xc2/0x120 [ 212.229998][ T9582] __kmalloc_noprof+0xfc/0x820 [ 212.230017][ T9582] ? tomoyo_encode2+0xfb/0x3c0 [ 212.230108][ T9582] tomoyo_encode2+0xfb/0x3c0 [ 212.230131][ T9582] tomoyo_encode+0x29/0x50 [ 212.230150][ T9582] tomoyo_realpath_from_path+0x18c/0x690 [ 212.230175][ T9582] tomoyo_path_number_perm+0x23c/0x580 [ 212.230191][ T9582] ? tomoyo_path_number_perm+0x22e/0x580 [ 212.230210][ T9582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.230228][ T9582] ? get_pid_task+0x106/0x250 [ 212.230279][ T9582] ? find_held_lock+0x2b/0x80 [ 212.230298][ T9582] ? __fget_files+0x215/0x3d0 [ 212.230312][ T9582] ? hook_file_ioctl_common+0x140/0x440 [ 212.230330][ T9582] ? __fget_files+0x215/0x3d0 [ 212.230347][ T9582] ? __fget_files+0x21f/0x3d0 [ 212.230363][ T9582] security_file_ioctl_compat+0xd3/0x230 [ 212.230392][ T9582] __ia32_compat_sys_ioctl+0xc2/0x360 [ 212.230419][ T9582] __do_fast_syscall_32+0xe7/0x970 [ 212.230441][ T9582] ? lockdep_hardirqs_on+0x78/0x100 [ 212.230462][ T9582] do_fast_syscall_32+0x32/0x70 [ 212.230483][ T9582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.230502][ T9582] RIP: 0023:0xf705efec [ 212.230522][ T9582] Code: Unable to access opcode bytes at 0xf705efc2. [ 212.230528][ T9582] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 212.230543][ T9582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0246400 [ 212.230552][ T9582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.230560][ T9582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.230568][ T9582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.230576][ T9582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.230594][ T9582] [ 212.230608][ T9582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.455703][ T50] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 212.536169][ T9591] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1164'. [ 212.617518][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 212.620665][ T50] usb 9-1: not running at top speed; connect to a high speed hub [ 212.623876][ T50] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 212.626549][ T50] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 212.629305][ T50] usb 9-1: config 14 has no interface number 0 [ 212.631319][ T50] usb 9-1: config 14 has no interface number 1 [ 212.633324][ T50] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 212.637748][ T50] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 212.641747][ T50] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 212.645394][ T50] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 212.649148][ T50] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 65280, setting to 64 [ 212.652706][ T50] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.657529][ T50] usb 9-1: config 14 interface 57 has no altsetting 0 [ 212.659865][ T50] usb 9-1: config 14 interface 228 has no altsetting 0 [ 212.663721][ T50] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 212.666759][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.669433][ T50] usb 9-1: Product: syz [ 212.670747][ T50] usb 9-1: Manufacturer: syz [ 212.672245][ T50] usb 9-1: SerialNumber: syz [ 212.837081][ T9605] openvswitch: netlink: Message has 8 unknown bytes. [ 213.205796][ T850] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 213.292600][ T50] legousbtower 9-1:14.57: interrupt endpoints not found [ 213.355740][ T850] usb 8-1: Using ep0 maxpacket: 32 [ 213.359637][ T850] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.362331][ T850] usb 8-1: config 0 has no interface number 0 [ 213.366584][ T850] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 213.369499][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.372018][ T850] usb 8-1: Product: syz [ 213.373464][ T850] usb 8-1: Manufacturer: syz [ 213.374976][ T850] usb 8-1: SerialNumber: syz [ 213.378514][ T850] usb 8-1: config 0 descriptor?? [ 213.387003][ T850] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 213.390474][ T850] usb 8-1: selecting invalid altsetting 1 [ 213.392338][ T850] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 213.398722][ T850] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.402398][ T850] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 213.405091][ T850] usb 8-1: media controller created [ 213.419132][ T850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.496890][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 213.539173][ T50] legousbtower 9-1:14.228: get version request failed: -71 [ 213.541615][ T50] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 213.550463][ T50] usb 9-1: USB disconnect, device number 24 [ 213.771554][ T850] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 213.775002][ T850] zl10353_read_register: readreg error (reg=127, ret==-71) [ 213.778015][ T850] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 213.781995][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 213.789863][ T9616] CIFS: Attempting to mount //127.0.0.1/share [ 213.804943][ T850] usb 8-1: USB disconnect, device number 46 [ 213.859431][ T9621] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.896420][ T9622] lo: entered allmulticast mode [ 214.194075][ T9630] syzkaller0: entered promiscuous mode [ 214.197655][ T9630] syzkaller0: entered allmulticast mode [ 214.611896][ T9615] lo: left allmulticast mode [ 214.614803][ T9616] CIFS: VFS: Error connecting to socket. Aborting operation. [ 214.617701][ T9616] CIFS: VFS: cifs_mount failed w/return code = -4 [ 214.657929][ T9641] overlayfs: missing 'lowerdir' [ 214.749122][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.751779][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.875058][ T9646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.894281][ T9646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.931475][ T9650] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1182'. [ 214.942672][ T9646] dummy0: left allmulticast mode [ 214.946463][ T9646] macsec1: left promiscuous mode [ 214.948593][ T9646] macsec1: left allmulticast mode [ 214.951777][ T9646] bond1: left promiscuous mode [ 214.954689][ T9650] FAULT_INJECTION: forcing a failure. [ 214.954689][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 214.959183][ T9650] CPU: 3 UID: 0 PID: 9650 Comm: syz.3.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.959201][ T9650] Tainted: [L]=SOFTLOCKUP [ 214.959205][ T9650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.959212][ T9650] Call Trace: [ 214.959217][ T9650] [ 214.959221][ T9650] dump_stack_lvl+0x100/0x190 [ 214.959240][ T9650] should_fail_ex.cold+0x5/0xa [ 214.959254][ T9650] should_failslab+0xc2/0x120 [ 214.959271][ T9650] kmem_cache_alloc_noprof+0x91/0x6a0 [ 214.959288][ T9650] ? fib_table_insert+0x761/0x1c70 [ 214.959336][ T9650] fib_table_insert+0x761/0x1c70 [ 214.959348][ T9650] ? find_held_lock+0x2b/0x80 [ 214.959363][ T9650] ? try_to_wake_up+0xd8d/0x1c90 [ 214.959375][ T9650] ? try_to_wake_up+0xd8d/0x1c90 [ 214.959393][ T9650] ? __pfx_fib_table_insert+0x10/0x10 [ 214.959409][ T9650] ? find_held_lock+0x2b/0x80 [ 214.959423][ T9650] ? fib_magic+0x1a7/0x5c0 [ 214.959435][ T9650] ? fib_magic+0x1a7/0x5c0 [ 214.959450][ T9650] ? fib_magic+0x4d4/0x5c0 [ 214.959463][ T9650] fib_magic+0x4d4/0x5c0 [ 214.959477][ T9650] ? __pfx_fib_magic+0x10/0x10 [ 214.959501][ T9650] ? queue_work_on+0x141/0x1e0 [ 214.959522][ T9650] fib_add_ifaddr+0x16d/0x560 [ 214.959536][ T9650] ? inetaddr_event+0xf3/0x150 [ 214.959561][ T9650] ? __pfx_inetaddr_event+0x10/0x10 [ 214.959573][ T9650] fib_inetaddr_event+0x147/0x270 [ 214.959590][ T9650] notifier_call_chain+0x99/0x3f0 [ 214.959610][ T9650] blocking_notifier_call_chain+0x69/0xa0 [ 214.959627][ T9650] __inet_insert_ifa+0x91d/0xc70 [ 214.959646][ T9650] ? __pfx___inet_insert_ifa+0x10/0x10 [ 214.959664][ T9650] inet_rtm_newaddr+0xea1/0x18b0 [ 214.959681][ T9650] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 214.959698][ T9650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 214.959723][ T9650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 214.959741][ T9650] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 214.959755][ T9650] rtnetlink_rcv_msg+0x95e/0xe90 [ 214.959773][ T9650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.959795][ T9650] ? ref_tracker_free+0x37e/0x6c0 [ 214.959810][ T9650] netlink_rcv_skb+0x159/0x420 [ 214.959824][ T9650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.959842][ T9650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.959860][ T9650] ? netlink_deliver_tap+0x1ae/0xcc0 [ 214.959875][ T9650] netlink_unicast+0x585/0x850 [ 214.959890][ T9650] ? __pfx_netlink_unicast+0x10/0x10 [ 214.959902][ T9650] ? __build_skb_around+0x278/0x390 [ 214.959916][ T9650] ? is_vmalloc_addr+0x86/0xa0 [ 214.959932][ T9650] netlink_sendmsg+0x8b0/0xda0 [ 214.959947][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.959962][ T9650] ? apparmor_socket_sendmsg+0x15b/0x270 [ 214.959976][ T9650] __sys_sendto+0x48b/0x4e0 [ 214.959991][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.960004][ T9650] ? __pfx___sys_sendto+0x10/0x10 [ 214.960029][ T9650] ? fput+0x79/0x100 [ 214.960043][ T9650] ? ksys_write+0x1ac/0x250 [ 214.960055][ T9650] __ia32_sys_sendto+0xdd/0x1b0 [ 214.960069][ T9650] ? __do_fast_syscall_32+0x98/0x970 [ 214.960086][ T9650] ? lockdep_hardirqs_on+0x78/0x100 [ 214.960102][ T9650] __do_fast_syscall_32+0xe7/0x970 [ 214.960118][ T9650] ? lockdep_hardirqs_on+0x78/0x100 [ 214.960135][ T9650] do_fast_syscall_32+0x32/0x70 [ 214.960152][ T9650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.960177][ T9650] RIP: 0023:0xf705efec [ 214.960195][ T9650] Code: Unable to access opcode bytes at 0xf705efc2. [ 214.960200][ T9650] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 214.960210][ T9650] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 214.960217][ T9650] RDX: 0000000000010a73 RSI: 0000000000000800 RDI: 0000000000000000 [ 214.960224][ T9650] RBP: 000000005a5de35b R08: 0000000000000000 R09: 0000000000000000 [ 214.960230][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.960237][ T9650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.960252][ T9650] [ 214.966022][ T5809] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.088201][ T5809] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.090834][ T5809] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.093416][ T5809] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.589044][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 215.681067][ T9662] syzkaller0: entered promiscuous mode [ 215.682987][ T9662] syzkaller0: entered allmulticast mode [ 215.960163][ T9675] netlink: 'syz.3.1192': attribute type 83 has an invalid length. [ 215.998745][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 216.013296][ T9676] bond3 (unregistering): Released all slaves [ 216.032317][ T9679] CIFS: Attempting to mount //127.0.0.1/share [ 216.085099][ T9681] CIFS: VFS: Invalid response size 0 for command 0 [ 216.089194][ T9679] CIFS: VFS: cifs_mount failed w/return code = -5 [ 216.092390][ T9679] lo: entered allmulticast mode [ 216.094717][ T9678] lo: left allmulticast mode [ 216.733049][ T9686] overlayfs: failed to resolve './bus': -2 [ 216.813477][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 216.817986][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 216.871218][ T9696] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 217.146002][ T9704] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 217.161098][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'. [ 217.164455][ T9704] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1200'. [ 217.520023][ T9716] binder: 9711:9716 ioctl c0306201 0 returned -14 [ 218.375837][ T9729] random: crng reseeded on system resumption [ 218.399580][ C1] process 9695 (syz.0.1198) no longer affine to cpu1 [ 218.429434][ T9731] smpboot: CPU 1 is now offline [ 218.474559][ T9732] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 218.481479][ T19] ------------[ cut here ]------------ [ 218.482263][ T19] [ 218.482269][ T19] ====================================================== [ 218.482273][ T19] WARNING: possible circular locking dependency detected [ 218.482279][ T19] syzkaller #0 Tainted: G L [ 218.482285][ T19] ------------------------------------------------------ [ 218.482289][ T19] migration/0/19 is trying to acquire lock: [ 218.482295][ T19] ffffffff8eaf3f60 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 218.482328][ T19] [ 218.482328][ T19] but task is already holding lock: [ 218.482332][ T19] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 218.482357][ T19] [ 218.482357][ T19] which lock already depends on the new lock. [ 218.482357][ T19] [ 218.482361][ T19] [ 218.482361][ T19] the existing dependency chain (in reverse order) is: [ 218.482365][ T19] [ 218.482365][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 218.482379][ T19] lock_acquire+0x1b9/0x370 [ 218.482389][ T19] _raw_spin_lock_nested+0x31/0x40 [ 218.482404][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 218.482415][ T19] _task_rq_lock+0xcf/0x500 [ 218.482426][ T19] cgroup_move_task+0x81/0x320 [ 218.482441][ T19] css_set_move_task+0x285/0x600 [ 218.482465][ T19] cgroup_post_fork+0x1f9/0x9a0 [ 218.482488][ T19] copy_process+0x6b7a/0x8030 [ 218.482502][ T19] kernel_clone+0x176/0x9d0 [ 218.482515][ T19] user_mode_thread+0xcc/0x110 [ 218.482528][ T19] rest_init+0x21/0x260 [ 218.482538][ T19] start_kernel+0x48e/0x490 [ 218.482588][ T19] x86_64_start_reservations+0x24/0x30 [ 218.482605][ T19] x86_64_start_kernel+0x12b/0x130 [ 218.482621][ T19] common_startup_64+0x13e/0x158 [ 218.482645][ T19] [ 218.482645][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 218.482659][ T19] lock_acquire+0x1b9/0x370 [ 218.482668][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 218.482679][ T19] try_to_wake_up+0xbd/0x1c90 [ 218.482690][ T19] __wake_up_common+0x135/0x1f0 [ 218.482707][ T19] __wake_up+0x31/0x60 [ 218.482720][ T19] tty_port_default_wakeup+0x47/0x60 [ 218.482753][ T19] serial8250_tx_chars+0x68f/0x860 [ 218.482769][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 218.482789][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 218.482805][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 218.482821][ T19] serial8250_interrupt+0xf8/0x1b0 [ 218.482831][ T19] __handle_irq_event_percpu+0x232/0x880 [ 218.482844][ T19] handle_irq_event+0xab/0x1e0 [ 218.482856][ T19] handle_edge_irq+0x34c/0x950 [ 218.482868][ T19] __common_interrupt+0xd8/0x2f0 [ 218.482879][ T19] common_interrupt+0xb9/0xe0 [ 218.482889][ T19] asm_common_interrupt+0x26/0x40 [ 218.482899][ T19] pv_native_safe_halt+0xf/0x20 [ 218.482913][ T19] default_idle+0x9/0x10 [ 218.482928][ T19] default_idle_call+0x6c/0xb0 [ 218.482944][ T19] do_idle+0x3a7/0x5b0 [ 218.482955][ T19] cpu_startup_entry+0x4f/0x60 [ 218.482966][ T19] start_secondary+0x21d/0x2d0 [ 218.482985][ T19] common_startup_64+0x13e/0x158 [ 218.483000][ T19] [ 218.483000][ T19] -> #2 (&tty->write_wait){-...}-{3:3}: [ 218.483014][ T19] lock_acquire+0x1b9/0x370 [ 218.483022][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 218.483034][ T19] __wake_up+0x1c/0x60 [ 218.483046][ T19] tty_port_default_wakeup+0x47/0x60 [ 218.483061][ T19] serial8250_tx_chars+0x68f/0x860 [ 218.483076][ T19] __start_tx+0x3e4/0x490 [ 218.483090][ T19] serial8250_start_tx+0x368/0x540 [ 218.483104][ T19] __uart_start+0x295/0x510 [ 218.483115][ T19] uart_write+0x211/0xb20 [ 218.483129][ T19] n_tty_write+0x431/0x1160 [ 218.483137][ T19] file_tty_write.isra.0+0x4d2/0x890 [ 218.483151][ T19] redirected_tty_write+0xd4/0x120 [ 218.483165][ T19] vfs_write+0x6ac/0x1050 [ 218.483175][ T19] ksys_write+0x12a/0x250 [ 218.483183][ T19] do_syscall_64+0x115/0x840 [ 218.483197][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.483208][ T19] [ 218.483208][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 218.483221][ T19] lock_acquire+0x1b9/0x370 [ 218.483229][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 218.483257][ T19] serial8250_console_write+0x177/0x1a50 [ 218.483275][ T19] console_flush_one_record+0x790/0xe50 [ 218.483288][ T19] console_unlock+0x103/0x260 [ 218.483299][ T19] vprintk_emit+0x407/0x6b0 [ 218.483312][ T19] _printk+0xcf/0x110 [ 218.483321][ T19] register_console.cold+0xc0/0x248 [ 218.483331][ T19] univ8250_console_init+0x6f/0x80 [ 218.483360][ T19] console_init+0x3d5/0x5b0 [ 218.483379][ T19] start_kernel+0x314/0x490 [ 218.483393][ T19] x86_64_start_reservations+0x24/0x30 [ 218.483410][ T19] x86_64_start_kernel+0x12b/0x130 [ 218.483426][ T19] common_startup_64+0x13e/0x158 [ 218.483441][ T19] [ 218.483441][ T19] -> #0 (console_owner){-.-.}-{0:0}: [ 218.483455][ T19] check_prev_add+0xeb/0xe60 [ 218.483470][ T19] __lock_acquire+0x136c/0x1a40 [ 218.483486][ T19] lock_acquire+0x1b9/0x370 [ 218.483494][ T19] console_lock_spinning_enable+0x72/0x80 [ 218.483506][ T19] console_flush_one_record+0x739/0xe50 [ 218.483519][ T19] console_unlock+0x103/0x260 [ 218.483530][ T19] vprintk_emit+0x407/0x6b0 [ 218.483542][ T19] _printk+0xcf/0x110 [ 218.483551][ T19] __report_bug.cold+0x34/0x141 [ 218.483561][ T19] report_bug+0xb2/0x220 [ 218.483575][ T19] handle_bug+0x16a/0x2a0 [ 218.483591][ T19] exc_invalid_op+0x17/0x50 [ 218.483606][ T19] asm_exc_invalid_op+0x1a/0x20 [ 218.483616][ T19] update_rq_clock+0x40a/0xd20 [ 218.483627][ T19] __schedule+0x1e2d/0x6730 [ 218.483638][ T19] schedule+0xdd/0x2c0 [ 218.483650][ T19] smpboot_thread_fn+0x893/0xaa0 [ 218.483662][ T19] kthread+0x370/0x450 [ 218.483676][ T19] ret_from_fork+0x72b/0xd50 [ 218.483689][ T19] ret_from_fork_asm+0x1a/0x30 [ 218.483704][ T19] [ 218.483704][ T19] other info that might help us debug this: [ 218.483704][ T19] [ 218.483707][ T19] Chain exists of: [ 218.483707][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 218.483707][ T19] [ 218.483721][ T19] Possible unsafe locking scenario: [ 218.483721][ T19] [ 218.483724][ T19] CPU0 CPU1 [ 218.483727][ T19] ---- ---- [ 218.483730][ T19] lock(&rq->__lock); [ 218.483736][ T19] lock(&p->pi_lock); [ 218.483743][ T19] lock(&rq->__lock); [ 218.483750][ T19] lock(console_owner); [ 218.483756][ T19] [ 218.483756][ T19] *** DEADLOCK *** [ 218.483756][ T19] [ 218.483758][ T19] 3 locks held by migration/0/19: [ 218.483764][ T19] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 218.483793][ T19] #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 218.483815][ T19] #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 218.483841][ T19] [ 218.483841][ T19] stack backtrace: [ 218.483849][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.483864][ T19] Tainted: [L]=SOFTLOCKUP [ 218.483868][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.483874][ T19] Stopper: 0x0 <- 0x0 [ 218.483884][ T19] Call Trace: [ 218.483888][ T19] [ 218.483892][ T19] dump_stack_lvl+0x100/0x190 [ 218.483903][ T19] print_circular_bug.cold+0x178/0x1c7 [ 218.483922][ T19] check_noncircular+0x146/0x160 [ 218.483939][ T19] check_prev_add+0xeb/0xe60 [ 218.483956][ T19] __lock_acquire+0x136c/0x1a40 [ 218.483975][ T19] lock_acquire+0x1b9/0x370 [ 218.483984][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 218.483997][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 218.484011][ T19] console_lock_spinning_enable+0x72/0x80 [ 218.484024][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 218.484036][ T19] console_flush_one_record+0x739/0xe50 [ 218.484050][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 218.484065][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 218.484081][ T19] console_unlock+0x103/0x260 [ 218.484093][ T19] ? __pfx_console_unlock+0x10/0x10 [ 218.484107][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.484120][ T19] ? _printk+0xcf/0x110 [ 218.484130][ T19] vprintk_emit+0x407/0x6b0 [ 218.484143][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 218.484157][ T19] ? lock_acquire+0x1b9/0x370 [ 218.484166][ T19] _printk+0xcf/0x110 [ 218.484175][ T19] ? __pfx__printk+0x10/0x10 [ 218.484185][ T19] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 218.484197][ T19] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 218.484208][ T19] ? __report_bug.cold+0x24/0x141 [ 218.484218][ T19] ? __report_bug+0x2ab/0x440 [ 218.484233][ T19] __report_bug.cold+0x34/0x141 [ 218.484243][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.484255][ T19] ? __pfx___report_bug+0x10/0x10 [ 218.484270][ T19] ? pick_eevdf+0x229/0x860 [ 218.484284][ T19] ? find_held_lock+0x2b/0x80 [ 218.484297][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.484318][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.484334][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.484346][ T19] report_bug+0xb2/0x220 [ 218.484361][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.484372][ T19] handle_bug+0x16a/0x2a0 [ 218.484389][ T19] exc_invalid_op+0x17/0x50 [ 218.484405][ T19] asm_exc_invalid_op+0x1a/0x20 [ 218.484415][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 218.484429][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 218.484440][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 218.484449][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 218.484455][ T19] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580 [ 218.484462][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 218.484468][ T19] R10: ffff8880263f3007 R11: 00000032de7e3000 R12: ffffffff9121eb84 [ 218.484475][ T19] R13: ffff88802b33c4e0 R14: ffff888046dfca80 R15: ffff88802b23c198 [ 218.484485][ T19] ? update_rq_clock+0x9c/0xd20 [ 218.484498][ T19] __schedule+0x1e2d/0x6730 [ 218.484515][ T19] ? __pfx___schedule+0x10/0x10 [ 218.484527][ T19] ? find_held_lock+0x2b/0x80 [ 218.484540][ T19] ? schedule+0x225/0x2c0 [ 218.484554][ T19] schedule+0xdd/0x2c0 [ 218.484566][ T19] smpboot_thread_fn+0x893/0xaa0 [ 218.484580][ T19] ? kthread+0x13a/0x450 [ 218.484619][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.484632][ T19] kthread+0x370/0x450 [ 218.484646][ T19] ? __pfx_kthread+0x10/0x10 [ 218.484661][ T19] ret_from_fork+0x72b/0xd50 [ 218.484674][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 218.484688][ T19] ? __switch_to+0x800/0x10f0 [ 218.484705][ T19] ? __pfx_kthread+0x10/0x10 [ 218.484720][ T19] ret_from_fork_asm+0x1a/0x30 [ 218.484738][ T19] [ 218.579441][ T9729] 9pnet_fd: Insufficient options for proto=fd [ 218.580754][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 218.580766][ T19] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 218.857586][ T19] Modules linked in: [ 218.858854][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.862311][ T19] Tainted: [L]=SOFTLOCKUP [ 218.863798][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.866974][ T19] Stopper: 0x0 <- 0x0 [ 218.868348][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 218.870433][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 218.877753][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 218.879878][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 218.882628][ T19] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580 [ 218.885230][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 218.887948][ T19] R10: ffff8880263f3007 R11: 00000032de7e3000 R12: ffffffff9121eb84 [ 218.890697][ T19] R13: ffff88802b33c4e0 R14: ffff888046dfca80 R15: ffff88802b23c198 [ 218.893406][ T19] FS: 0000000000000000(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000 [ 218.896604][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.899232][ T19] CR2: 000055ceca11de98 CR3: 0000000070e93000 CR4: 0000000000352ef0 [ 218.902448][ T19] Call Trace: [ 218.903769][ T19] [ 218.904768][ T19] __schedule+0x1e2d/0x6730 [ 218.906248][ T19] ? __pfx___schedule+0x10/0x10 [ 218.907819][ T19] ? find_held_lock+0x2b/0x80 [ 218.909315][ T19] ? schedule+0x225/0x2c0 [ 218.910680][ T19] schedule+0xdd/0x2c0 [ 218.911930][ T19] smpboot_thread_fn+0x893/0xaa0 [ 218.913564][ T19] ? kthread+0x13a/0x450 [ 218.914913][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.916657][ T19] kthread+0x370/0x450 [ 218.917988][ T19] ? __pfx_kthread+0x10/0x10 [ 218.919510][ T19] ret_from_fork+0x72b/0xd50 [ 218.921005][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 218.922644][ T19] ? __switch_to+0x800/0x10f0 [ 218.924139][ T19] ? __pfx_kthread+0x10/0x10 [ 218.925627][ T19] ret_from_fork_asm+0x1a/0x30 [ 218.927182][ T19] [ 218.928201][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.930472][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.933821][ T19] Tainted: [L]=SOFTLOCKUP [ 218.935205][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.938336][ T19] Stopper: 0x0 <- 0x0 [ 218.939600][ T19] Call Trace: [ 218.940670][ T19] [ 218.941629][ T19] dump_stack_lvl+0x100/0x190 [ 218.943288][ T19] vpanic+0x552/0x970 [ 218.944558][ T19] ? __pfx_vpanic+0x10/0x10 [ 218.946083][ T19] ? lock_release+0x24d/0x310 [ 218.947629][ T19] panic+0xd1/0xe0 [ 218.948833][ T19] ? __pfx_panic+0x10/0x10 [ 218.950260][ T19] ? check_panic_on_warn+0x1f/0x90 [ 218.951924][ T19] check_panic_on_warn.cold+0x19/0x34 [ 218.953905][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.955607][ T19] __warn.cold+0x191/0x318 [ 218.957040][ T19] __report_bug+0x30f/0x440 [ 218.958714][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.960612][ T19] ? __pfx___report_bug+0x10/0x10 [ 218.962471][ T19] ? pick_eevdf+0x229/0x860 [ 218.964215][ T19] ? find_held_lock+0x2b/0x80 [ 218.965985][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.968122][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 218.969966][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.971470][ T19] report_bug+0xb2/0x220 [ 218.972890][ T19] ? update_rq_clock+0x40a/0xd20 [ 218.974447][ T19] handle_bug+0x16a/0x2a0 [ 218.975813][ T19] exc_invalid_op+0x17/0x50 [ 218.977278][ T19] asm_exc_invalid_op+0x1a/0x20 [ 218.978881][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 218.980644][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 218.986929][ T19] RSP: 0000:ffffc9000045fc28 EFLAGS: 00010046 [ 218.988863][ T19] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 218.991313][ T19] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580 [ 218.994257][ T19] RBP: ffffc9000045fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 218.997055][ T19] R10: ffff8880263f3007 R11: 00000032de7e3000 R12: ffffffff9121eb84 [ 218.999586][ T19] R13: ffff88802b33c4e0 R14: ffff888046dfca80 R15: ffff88802b23c198 [ 219.002064][ T19] ? update_rq_clock+0x9c/0xd20 [ 219.003838][ T19] __schedule+0x1e2d/0x6730 [ 219.005289][ T19] ? __pfx___schedule+0x10/0x10 [ 219.007124][ T19] ? find_held_lock+0x2b/0x80 [ 219.008982][ T19] ? schedule+0x225/0x2c0 [ 219.010360][ T19] schedule+0xdd/0x2c0 [ 219.011650][ T19] smpboot_thread_fn+0x893/0xaa0 [ 219.013235][ T19] ? kthread+0x13a/0x450 [ 219.014584][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 219.016282][ T19] kthread+0x370/0x450 [ 219.017605][ T19] ? __pfx_kthread+0x10/0x10 [ 219.019066][ T19] ret_from_fork+0x72b/0xd50 [ 219.020530][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 219.022142][ T19] ? __switch_to+0x800/0x10f0 [ 219.023651][ T19] ? __pfx_kthread+0x10/0x10 [ 219.025124][ T19] ret_from_fork_asm+0x1a/0x30 [ 219.026692][ T19] [ 219.028355][ T19] Kernel Offset: disabled [ 219.029733][ T19] Rebooting in 86400 seconds..