last executing test programs: 15.769069625s ago: executing program 1 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES8=r6, @ANYRES32=r3, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb6, 0xbe, "acf6e219948e787b8affa5deb25e88aaf32c7c08d12e8b46819a79055cfdbc77fe0b5a24a3548e0818356c21969c8c9049dc8777578356ea454684489eda3ba82b568026a32b2775572e1b21111ea67d276542b66d415cfd48f4e57fa05be99fbaeb3100e25d13f6aef249a5cb6ca463531f8fae5f6e88890d479bfec10a77871ecdb420cddf6283128c2a66011ebfbc46b9c68a117a1f80e08ee0ed669a283afd752edad0da47bc49c2c4d5b0aa09e934ff"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x26004010}, 0x20000001) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r9, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 12.212114037s ago: executing program 1 (id=653): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x138, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x54}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x48}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2579}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x68, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x64, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xcbe}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xdba}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb0}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x20, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40110}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x138, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x54}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x48}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2579}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x68, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x64, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xcbe}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xdba}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb0}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x20, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40110}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0x40000) (async) 11.957126362s ago: executing program 1 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52", 0xa}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5", 0x85}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443", 0x67}], 0x3, 0x0, 0x0, 0x20040890}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r7 = syz_open_dev$sndpcmp(&(0x7f0000003700), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x4d58, 0x2c, 0x85083b630dbb386b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {0x6, 0x3}, {0x1, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4d1c, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_FW_POLICE={0x107c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5b4, 0x1, 0x8, 0x8, 0xff, {0x9, 0x1, 0x4, 0x2, 0x5, 0x3}, {0xe1, 0x0, 0x1, 0x0, 0x305, 0x80000000}, 0x8, 0x100, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0xa8f, 0x9, 0x3, 0x66, 0x6, 0x35d3, 0x4, 0x7, 0x6, 0x0, 0x3, 0x8, 0x5, 0x5, 0xf, 0x4, 0x0, 0x9, 0x2, 0xcd, 0xc, 0x3, 0x5, 0xfffffffe, 0x4, 0x401, 0x4, 0x3ff, 0x1, 0x3, 0x37, 0x22, 0x0, 0x8, 0x0, 0x222, 0x3, 0x10001, 0x401, 0x400, 0x5, 0x7, 0x0, 0x5, 0x7, 0x1, 0x8, 0xc, 0x6, 0x1ff, 0xfffffff7, 0xa, 0x80, 0x2, 0x8, 0x1, 0x3, 0x4, 0x4, 0x9, 0xe, 0x0, 0x8000, 0x10000, 0x10001, 0x400, 0x2, 0x1, 0x2, 0x60e1, 0x6, 0x1, 0xfe, 0x101, 0x0, 0x81, 0x1, 0x400, 0x400, 0x98a, 0x8, 0x6, 0x1, 0x7fffffff, 0x5, 0xa, 0x5, 0x2, 0x9, 0x2, 0x3, 0x83, 0x1ea, 0x2, 0x1, 0x1000, 0x9, 0xc, 0x6, 0x739, 0x80, 0x7c00, 0x1000, 0x6, 0x3, 0x4, 0x9, 0x60000, 0x7, 0x740e, 0xffffff81, 0xffffffff, 0x0, 0x7053, 0x6, 0x2, 0x80000001, 0x1, 0x100, 0xf, 0x0, 0x3, 0x7, 0x7, 0x4, 0x7ff, 0x8, 0x200, 0x1, 0xfffffff5, 0x400, 0x2, 0x6, 0x9, 0x9fd4, 0x4e, 0x4, 0x8, 0x3, 0xffffffff, 0xa11c, 0x6, 0x9, 0xafc, 0x313f, 0x3, 0xffffffff, 0x6, 0x10001, 0xfff, 0x0, 0x6, 0x9, 0xb53, 0x0, 0x8, 0x6, 0x8, 0x5, 0x5, 0x4, 0x5276, 0xbff3, 0xb, 0x4, 0x8000, 0xe5a5, 0x7, 0x17, 0x879d, 0x5, 0x0, 0x200, 0x6, 0x1, 0x4, 0x0, 0x8, 0x7, 0xc, 0x9, 0x81, 0x7, 0x5, 0xf42, 0x2, 0x0, 0x80000000, 0xfffffff3, 0xf, 0x2, 0x3, 0x7, 0x580, 0x8, 0x1, 0xb, 0x0, 0x7f, 0xfb, 0x4, 0x7f, 0x875, 0x6, 0x5, 0x0, 0x2, 0x0, 0x279, 0x9, 0x1, 0x6, 0x80000001, 0x85c, 0xc5ef, 0xd, 0xa504, 0x5, 0x5, 0xfff, 0x4, 0xd, 0x10, 0x5, 0x2, 0x9, 0x0, 0x7, 0xc, 0x158d, 0x8, 0x2, 0xffffffff, 0x9, 0x8ce, 0x5, 0xdb1, 0x562, 0x9, 0x401, 0x80000001, 0x6, 0x221d, 0x1, 0x9, 0x2, 0x8000, 0x7fffffff, 0x0, 0x9, 0x1, 0x9, 0xfff, 0x2ec]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe07}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x433, 0x4, 0x3, 0x38, 0x5, 0x3, 0x1, 0x5, 0x1ff, 0x2, 0x7, 0xfffffffb, 0x3, 0x8, 0xd5, 0x5, 0x1652, 0x0, 0x4, 0x9, 0x7ff, 0x800, 0xfffffffa, 0x59, 0x8, 0x4, 0x7, 0x6, 0x3, 0x8, 0x7fff, 0xfffffff7, 0x8, 0xb0f, 0xff, 0x5, 0x401, 0x1812, 0x101, 0x7, 0x7, 0x4, 0xb, 0x98, 0x5, 0x80000000, 0x6, 0x0, 0x6, 0x1, 0xe19, 0x3, 0xffffffba, 0x9, 0x2d67, 0x7, 0x5, 0xe, 0x100, 0x1ff, 0x6, 0x7fff, 0x5, 0x400, 0x101, 0x2, 0x7fffffff, 0x3, 0x0, 0x8001, 0x0, 0x7, 0x4, 0x5f6, 0x5, 0x7, 0x62d, 0x1, 0x93a, 0x0, 0x8, 0x5, 0x0, 0x39, 0xd98, 0xe, 0x9, 0x9, 0x400, 0x8, 0x4, 0x5, 0xfa34, 0x2, 0x2, 0x81, 0x8, 0x6, 0x1, 0x68, 0x7f, 0x400, 0x100, 0x1, 0x3, 0x7fffffff, 0x4, 0x9, 0x6, 0x7d773f59, 0x2e76, 0xf, 0x6, 0x8, 0x9, 0x0, 0xb8de, 0x9, 0x0, 0x1, 0x4, 0x4, 0xfe7, 0x8, 0x2, 0x2, 0x0, 0x4, 0x9, 0x7, 0x53b1, 0xc4, 0xf, 0x0, 0xf, 0x0, 0x7, 0xfffffffe, 0x8, 0x4, 0x1, 0xd, 0x6, 0x1, 0xa36f, 0x2, 0x5, 0xbca, 0x6, 0x7f, 0x0, 0x2, 0xc77, 0x6, 0x0, 0x3ff, 0x0, 0x3, 0x3, 0x620, 0x8, 0x5, 0x9, 0x4, 0x1, 0x401, 0x5, 0x5, 0xab, 0x1, 0x80, 0xffffff79, 0x7f, 0x80000001, 0x0, 0x1, 0x12, 0x6, 0x8, 0x64a, 0x8, 0x2, 0x9, 0x6, 0x8, 0x6, 0x9, 0x38, 0xd, 0x1, 0x8, 0x2, 0x0, 0x27, 0x5, 0x8, 0x3, 0xbc, 0x4, 0xb6, 0xc, 0x8, 0x401, 0x3, 0x2, 0x4, 0x802, 0x0, 0x84, 0xcf2, 0x1, 0x2, 0x1, 0xffff1f10, 0x22b00708, 0xf, 0x100, 0x99, 0xffffff7f, 0xf, 0x3, 0x9, 0x6, 0x4c, 0x12000, 0x9f69, 0x0, 0x4, 0x48a, 0x1, 0xc, 0x8, 0x1, 0x8000, 0x7, 0xdb, 0x8, 0x10, 0x5a, 0x100, 0x6, 0x5, 0x4ff34d0f, 0xb1, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x5, 0xfffffff7, 0x8, 0x7f, 0x4, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x7, 0x9, 0x1, 0x3, 0x200, 0x400, 0xa, 0x0, 0xffff, 0x3, 0x101, 0x6, 0x993, 0x8, 0x40, 0x1000, 0x3, 0x1, 0x7fffffff, 0x4, 0xc, 0xf1a2, 0xffffffff, 0x1, 0x0, 0x6, 0x8, 0x10000000, 0x6, 0x4c, 0x8, 0x2, 0x8, 0x9, 0x2, 0xfbe, 0x80000000, 0xffff0000, 0x6, 0x7a, 0xbd, 0x5e89, 0x5, 0xffff75f8, 0x2, 0xffffc620, 0xffff0001, 0xfffffff7, 0xd0f8, 0x0, 0x4, 0x4, 0x845, 0x80000001, 0x3ff, 0x5, 0xfffffd6f, 0x6, 0x6f9, 0xa0f, 0x81, 0x81, 0x807c, 0x10001, 0x400, 0x9, 0x4, 0x7, 0x1, 0x0, 0x8, 0x0, 0x3, 0xa, 0x0, 0x2f6933e9, 0x80, 0x5, 0x5, 0x3ff, 0x3, 0x7, 0x5, 0x2, 0x7, 0x1, 0x2, 0x5, 0x800, 0x10000, 0x1, 0x9, 0xb, 0x1, 0xb8, 0x4, 0x45f, 0x10, 0x1, 0x8, 0x6, 0x7, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x4, 0xfffffff8, 0x9, 0x18, 0xffff7fff, 0x2d5, 0x1, 0x4, 0x3, 0x6, 0xffffcff8, 0x4, 0x7, 0xdf5, 0x2, 0x2, 0x2, 0xfffff85a, 0x100, 0x10001, 0x7, 0xe23, 0x8, 0x2, 0x0, 0xd576, 0x0, 0x3, 0xe70, 0x80000001, 0x3, 0x4, 0x2, 0xfffffffb, 0x8, 0x1ff, 0x8000, 0x5, 0x3, 0x4, 0x40, 0x5, 0x7, 0x7, 0x3, 0x9, 0x401, 0x3, 0x8, 0x7, 0xec, 0x9, 0x2, 0x4, 0x10001, 0x7, 0x7, 0x81000, 0x2, 0x3, 0x3, 0x43, 0xb, 0x2, 0x1, 0xc96a, 0x22334a36, 0x7, 0x5, 0xb, 0x4, 0x67, 0x7f, 0xa259, 0x8, 0x4, 0xfffffff6, 0x8, 0x4, 0x1, 0xffff0001, 0xccb, 0x9, 0x5, 0x100, 0x9, 0x9, 0x7ff, 0x2, 0x3b1, 0x1000401, 0x81, 0x7, 0x40, 0x7, 0x42, 0x9, 0xe54, 0x5, 0xfffffe00, 0x1, 0x6, 0x9, 0x1, 0x9, 0x4, 0x2, 0x8, 0x1, 0x2, 0xb, 0x6, 0xfffffff8, 0x6, 0x9, 0x1, 0x400, 0x0, 0x6, 0xbc, 0x49, 0x6, 0x7, 0x5, 0xe67c, 0x5, 0x800, 0x7fffffff, 0x9, 0x8000, 0x2, 0xc, 0x2, 0x1000, 0x0, 0x8, 0xe, 0x10001, 0x57, 0x5, 0x3, 0x40, 0x8, 0x9, 0xe, 0x3, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff09, 0xd, 0x81, 0x2, 0x8, 0x7, 0x39, 0x3b, 0x40, 0xffffffd3, 0x134, 0x8, 0x1, 0x4, 0x3, 0xf1, 0x14, 0x94e8, 0x9, 0x3, 0x24a, 0x4, 0x1c, 0x10, 0x894, 0x6f74, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x8, 0x7, 0xea, 0x5, 0x1, 0x6, 0x7, 0x7, 0x71, 0xffffffff, 0x8, 0x2, 0x1, 0x3b34, 0x5a6, 0x0, 0x5, 0x2, 0x7, 0x17, 0x8, 0x3ff, 0x6, 0x9, 0x3, 0x4, 0xfffffffa, 0x4, 0x9, 0xc13, 0xe, 0x2, 0x7fffffff, 0xa, 0xe7, 0x0, 0x3, 0x9, 0x88, 0x7, 0x5, 0x7, 0x5, 0x2, 0xe00, 0xe, 0x7, 0x1, 0x19, 0xee0b, 0x0, 0x8, 0x3, 0xffffff80, 0x7, 0x3, 0x7, 0x0, 0xfffffffb, 0x0, 0x3ea3, 0x200, 0xff, 0x5, 0x0, 0xfffffff4, 0x8, 0x800, 0x2, 0x5, 0x3, 0x6, 0x2, 0xa, 0x8, 0x80, 0x4, 0x6, 0x13, 0x5, 0x3, 0xe9, 0x1f, 0x9, 0xffffffff, 0x98, 0x7, 0x10, 0x8, 0x200, 0x3, 0x10, 0x1ff, 0x6, 0xf03, 0x0, 0x3, 0x2ff1, 0x9, 0x7, 0x9, 0x0, 0x9a3, 0x9, 0x1e, 0x80000001, 0x100, 0x814e, 0xff, 0x9, 0x0, 0x40, 0x9, 0x11be, 0x6bb34a99, 0x0, 0x7, 0x4b7, 0x10000, 0x58, 0x8, 0x3, 0x8, 0xc, 0x328, 0x7, 0x2, 0x90, 0x5, 0xffffff7f, 0x4429, 0xe7, 0x7, 0x7fff, 0x2, 0x5, 0x3, 0x8001, 0x7, 0x7cd2, 0x10001, 0xfffff800, 0x8, 0x0, 0x3, 0x1, 0x2, 0x1000, 0x22, 0x3, 0x9, 0x6, 0x5, 0x4, 0x7, 0x2, 0x1, 0x1, 0x4d2, 0x9bf, 0x2, 0x3784, 0x6, 0x1, 0x8, 0x10001, 0xfffffff8, 0xffff6160, 0x22, 0xee, 0x6, 0x3b, 0x8001, 0x8, 0xfffffffd, 0x9, 0xfffffffa, 0xb5, 0x8, 0x0, 0x9831, 0x10d6, 0x7, 0x6, 0x5, 0x5, 0xfffffff9, 0x0, 0x4, 0x28000000, 0x8, 0xa, 0xbc09, 0x401, 0x879d, 0x9, 0x8, 0x1, 0x0, 0x8001, 0x9, 0x6, 0x400, 0x2, 0x1, 0x4bb, 0xe4e0, 0x7, 0x9, 0x0, 0x5, 0x7, 0x1, 0x0, 0xc7, 0x40, 0x3, 0x1, 0x1, 0x3, 0x5, 0x1000, 0x8, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_FW_ACT={0x11d4, 0x4, [@m_bpf={0x124, 0x19, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xe0cd, 0x7, 0x2, 0x48000000}, {0x0, 0x8, 0xf, 0x7}, {0x534, 0x1, 0x4, 0x6}, {0x3ff, 0x3, 0x6}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x99, 0x6, "f1242e3644c96793449f4341945b383c0551c488075d8556d766c15caf1d3b2571d525a288eb5fa8308b13b8897d9bffa1ca278836f8d436dfa0d3223165cb974f6eac0a736e7296957a686be11e70569844e169733389e5ccfcf1501f1e3b6960eda2a7676d571d8dde2859c5336c53bf5fd7fc258a69dc8c4d63c831aa88893d37a5f589a093007aedb2d8e32129799c69da033d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x1038, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}]}, {0x1004, 0x6, "f85049a3fccf4fdf4df321331c4d4d7ca7e819f59acc81af0e6d4927550876cc32838c13887a89d72ae311255a2d51b756df4a96b072d76e5f51aad82ef7ac9bf6ddbb93bd12e61ce49a0acb99269d1d17bac56acea5e800c1eb8682e223e7662d893420b5fea3190ee330c8645356863c8c1b57b50b6c10fcb8ead4effcf52a89fbf9f2bcf9852819d5b00b7a6b59b749dca3accab383ffe41346b81d45c704f035b5e5f03e142914b0f9e0fb54bd33250550f3375dbf1ab04c9726032507475111da52ae7a080dd04f05fe40a0afa5bcb7199af239d3d134d84d05d373fbae61998a2e5246da9ebcacf417d4b934ba4ba68582103384b99c99a33f4316bac2f937907d973b58e00aa4cdcbb8cfda2e6e436958a963005f9985539d990a04444c0f0dd447fa4a90bc898525b9c7627b0721626801c4ab2cbeb6b7af7129aee382796e5c542510d0ec8c8ae92489e97b1ae8021553494a833ad62d05decdb8c5edf25c97467a80bb42bb064dc52b96814af0f1c1ff6d3dc5af00085effa81dbe19802c5e994966a54d0209af5df7597b806161bb4f6b16c04d8babd5ad0356b9607a67b66454311fff86de6d41533d9b3acfd5880822a3e0c1641fa5ea6ec32fcaba80b85f187c3070499178907659912c1d0ecba3ce994476313ca7a5a80d06c2499641f4b86d4025f4372401f9fd648aeee6eef783f16228f9e4990d5d5ac8bac693375af454ad3239037d4280caf00b55ef2a61a4d9c6114798ec188cac6b2543549b93bab8feb30ea7167f044c61f56b473c32cdcdc51961d44b5e29a09f10c99f847a7dc47b6f91db234c611ee38c41a079f3a1bed8e181cd1a2d92cbe1cc648cffe4a32898765c0a4a532b4a60ad07e7f763c7298e298be25b553bf8c905d7047a3c884468a9c025628c5160739d6316ddd070b8c5f6f8da37a7099250583cf51fcd3687fa5b585645fc4b206d7325e5365b4d55f20b8508c09028ba6a246ff08b87ac3cb1c3f12c83f841f5ffbce61235c3cc2978e85b1d817485a0e38c2610cbc428f6b219263cb712ff5f56e266f661f477b852546bad5469c8feed9a3fd4d72c0bad061321dadfedca907fce0abaca951a0e05f9ca6006a34ac81b02e5a89ea569b1aa151645d98cc73169233edd47d5678cedd600137b8a7bb2aefb809a9a830c6b8a720d78a80492e4eb45954bafb7fe37601512d01e3a0723181b1cbe37b54b81c87cae4d85ea08c03a2435bc3563e502c21dc9f9a3545870966fbbdc2ff2ad58e617aeb09c23b8b600ea6740063fe8b4031e6070978c3b34e3ec0cc06a02e140a45181e1ffc19085ad395a51486918b9c2d1885e3513b4100d60d0bd2bb1db0997ad12d2ceec27aa045b1631eff8c572ebb2cb502c2c16ff0e7fe944ab7f2a71767af20b7a78ce012144eee25f37dbe8443ec4fceaba69b8bfd14a1d5bb52697b8d932d9eea8a76439bd70c8ddfad0ec6e6a32c6c54eb0fa5b394ec319e2114b7f4f8a43f07dfcdbf43811b04b6c3eae28db52beeb819acdf4b2ba7fd10043a7b1e20d25157587e03d9de16f911d746f948456a786055e5b9fb1d8cda6a30cab6a9a1890139f04f72e6d0b471fdb8e12930f159b66129774e67d79d150f01be3b5d0c5e079a8a1ba6602b7f70efcc0737147ecfa0ec6c358c7c989ebba8303632495fa84bcf8aa1ec0258d85b40cc0b922261e9b0f918d715111c55936eb91b0301edcd2b2615d14bd1548c721f3db6a3223906d2809e4f0afdb5f916d783d2d1babd72ddc7d8d899c7295c6151b38ef686e542ab2840b1e595d390eb096bfd6449c9509f835dad62be5b68178a80a18a33de2f26917621189a8adfc508a3682af5f97b6bf0744b0b7414c8487e50c8a34db6c0bb8761edf681b49dc757363f1c74e1809d1eae1f0b05ba91c7449b895fb1d8f628edd73757a7c71b99c9dca7b82b55e36955196de29aa6ba362c1b212a534fa1f335e671ffa1415a9ed898d3827aa55ef282d440098245bc0a7b77c09b9b6e3416af45b4fb5e79c517b1b684ae67fc094fea1aaaf9e5c1539a3b9bb6478366618bec41cc33adde3c43a008e8836d074a4861752c89687cdfbbc1bee53cefa1880270bd2f48378f177b9ce4bc282e0d42c91e1c0e4db161c65d0552c404b7c1b6fba17b17176a93200c9f75cdd41e95054eb4209b857b4af8277c85082a7cdfbca1cad46e837fca2e13254b2a2c6b510b0df91c1676d9fd99df415fc21347ab0c3e3d506522fa086f703b156830426e6e78486773f2457fda814515ca7308c4b03c33aa3a1c1fb7805d19ae1716f2df67e0a3641ac32eb454fb36c8939e5b57c2485464bf118776d8586730c32612f78ea9c2f395c580bc561152c37b51479684070c2fb38b352a42cc0ea5e2decc7dbf8b6f2d598ec97562e6ff08afcce3d27469a5dfd4961772abbddaf6525fe91c679b8c2bc4a30452503a0c91221984c6cdab71d8c38450f591eebd8fea42493db9128c8c538f63b70ff747942bd0a6edae3f2543987ad6502d6e9d4b951d64600d86865367296032ee70c8ab17e0360855fe679b45bc91d0ee56d097880a1839fad2c79c104fd7fc3c3d50dbfe4c5572238b9c3827143cd314716324217cd0ba88d40715fa3c4c5669b133ca1bef15950986b8fa5d19d5e65ad3fd327a044c59544399e11cf86787cf1aedcb384ae512060966d48ca54e0e795d9e9ee39997c6c3b2bc9f6023364fbf56a92fe410dcd3b3060ba0fa277a1e83ad4791dff042d823a2b51b3ac945c6f197679805a4a7b2a6ad629674f155e50f2cc396b0db22d74bc97303c26f3cc1a8c7d90c10a5af8b0fad81fe2b65f46ef138d2d0239cbed3b9507fb1e245da1d000d568e2b85a08d4468683177a1f928dec1bddc3283dca02d9849d04d7e4c39ea58fa43832873c5fbe9d842871507ac869e79b12e74f77050b7738414ae29718cb015b5c467ab903c7b8fe6d457deef67d9221d041c49a83b41a7aa85d885f33029c42738e94e97b62a5f2e2d64df7c630937019e2a842ae3cdb7548fd864de0dc758f56cf6d3f8fb2f17f8648cb2959af46607f7a39be01fff158d5b56a2e7edbaad50b22b3493f4f11321c26a2b95bffa6c1150267f3b5bfb6d7fa33f9744afc8c31204d8b4f304675cef375a70c6241b457eaef8841fa35a018d69a3b5bad045e557251c32e51f902e322549d6152a0008ac22239d2e34c29117b3ac124a7053fc5e316b3342eab570333d17702cd90eb3496ce8036018a385b1c041176c1fcdda5d9926664119d3781e6654e0e7e7c55f4ca37c34eb6178159cf59b7767e6932fabcab34bc52bc280371875a3bb504a400ff81da564b2c8f7e376480edee6af7d5dedaaf9f7d7608530156c28b361cd6559349d495c2e3c8dc6479d97bded3ba44ef1d432da294b68fd0111a94334de5ee0ff7530dedbc2cb28383c78eec2fbd054444d15cf7bbc373c918839c75940eededd82e5cd67fc070d6e0ec09546f3b4880075cb88c204e5ca998925e2189d0b3d26513219469e4869e79ed24fe101d67db9940a9a190a3e8e32b7b22f086ee4d8e0ccd2f697dc3f8e655b89956bd33fecbcff07402440739b4f2dba95f7c7e5dc4e743366f5afd0bafc72ee61b440a6b8fe14aaaa0d7b4a0ab326261688d3548b38cbfda20a9ce73a8d932699bfc0c17fe243073488e36630f2e9fa6890b96353488996f515ab74728cf282a3c8b6c87b85a89af9cd1b0a7f856f70dda0947bbfe1ba5b27802130d2be6196131c6c10f881b8533535f67f04db5f3a2e5c56ecd2c3e95483819ccf7dab2a9326034a942358ab057d5a6ba99f80072be0c7f508d4609de551011356bd15278b69e12d7817b82c2a9bf7b71a34623d7b239e8df552b294a0af5679697592fe5723b9718268340a4a3d385e96acf69a247d444709ce2145842a892e9789e4e59f9fd9b5cf96f42550c7e7aafe01f890e1498fd7f490132c3a534b91b016dae6726a6ebad9fab5037747ce429f08057d49027cf9bf45b172245e041f08a3be68d1066c7e3a89976ba11d4228cf0c8463b840a9b86ce3a38f713c072a0b19dd15247acc9d17a4be7bdc81ba95deb189fd1f6ba27c0025539908a3ad52ccdac09cdb80ab7af214d647fb64fb084f9727af598dd86ba8c464b6a3b4ad5b83649042b710b17bf2b7860fbe704611d3e7f34ee5f360534a9c30fe1fb846524f1fe79ee612803542e67f5a85ccb196537c194ddaed375686bca5017848c8758d61c209fb686f32cce726e56ec9fabf766a873c419bf2085281dd74e925fff386dee96f88f769149b5e1b4714ffd6c06b29121eacf8e0c894ad29d9f2c8c3feb86c00b926383d44500505eeb4fc68315c59aff0c88af769f8004be71cbdd616bc76a6e7cd2a04437778e9cc0c3d5832ad3b6b7087e97541572b567a5248e971b734680df91413d99519e2badfa57c7ab54a4797ab1c32a2695628f1d2c2219b40db34685ed3ac5924fe3a0e43162ee76d8ff0f6b3645400062ad0c3ea05f1d242cd3a4e39094e99db9b176beb2c98138c865e9abb57da24df3b312d04c41bba8460ea75e2aeaa38ced034dbf7dcd340d1d48f587c96a70be524a0ca8215ede26901ddaf50e749484f08650846ae3f478a58b10c2847bf5c0580d08b68e066ca3d11952a6244e6963bbb3ce2e23391999306d6154040ec61e90bec009816132d7d70409d789e1658d05cc94475fa8fee231aa98bdcc4b632970299a69e1b75c1a6ff48071481fc89c22c0a9624451c7cb3a300db5501611e1198be6de6956befbc9220fb1061af34d84b50a74249f3e773afc5594788ec0869b8462d1e1b373c918020ba0209c71c9d2e699039a114b0a356487d7acbcd5baee6605e5c4725279b1be8d1fd1fe28e89ad9681e12c3ec0eec720e28ed2c1ab8d8f2a88a7f256933d699b731577e4e1c98db71daebf69fa6c0e5df9d1951aaa5e22793d7f953fa01b92615ae91811a920cb6cac3f7d2e2d8980a1372d3942f20cb3bf18cce409c2bc2aab782ce9c3b2039b908efbaf024aa220508b1dd29821226cb94cab2895d0b97aa5cc27d0863f58685671cd49ac769996ce2b8aafe4ad15855e319d4e700d5ff51494e44c078319cde7f87088caec3c3e3b8993169a5f1baf90f3bc1448934bad0289d2be160c7c3cefd36dbd55c718cea0cdf3f12a33d2022543701648ac438458eb9184cd4c0d7f96fb19764c93864180f944f973cf2ce915765e1fb7c1274a3e05978f1f34c488a26c8bb479d263069c70cb725139b9d017e8dacaade60556c51a06a2bc66c57039fa2e147d0bed7501368f482a5e47e28f99efd04abac59076bccd8dee4fa88820bc43ae8c9d201c8924bf3d1817c4019f46b2315f60fab3ceea307bc32e9d141faa35550786490ac556cff71e92fd44b89553176986ab8ca64329c80b67015748a1197e7967b538d31262deec6b540932d897bb2c058877461f02c3f833a58a9d94efcc85fa6610f14cdca3981d13fa5950e8d74307fdd1589dde79acc60a488283374dbddbaa21c252dacf200f08683d77e980dad347696c296c0a5a0a80ab569b4e0ff46bc6ed1035b057b7645ea72625068f47e382de48957b418335eb377f39cb6a8c7b643825930708ad30dd82e68901f7a4266493f1acd27aa739750a875a32cea22195cab01ca2f2bb261f0b9d481565510e9c0e3f03405664c78ca182b93af480ee010e1de1789ad98d2608e67cf378d627b908fe864491cba1b55a837072e1024e281ba65db"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x74, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '%^@.]#!]#^\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x2f, 0x6, "3953dbbcd2e67565fedea3350fe88676eda0ab195f7647a1584e6d950b76f9feedce3e9be0d5460eb71f48"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_ACT={0x2228, 0x4, [@m_xt={0x6c, 0x11, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xd, 0x6, "7cfae05d87562316d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1030, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x74, 0x18, 0x0, 0x0, {{0xa}, {0x4}, {0x45, 0x6, "7fbb4ccb7214eec0fe0e0ddf809891392254e94e599686c891443fbaf58bb2180d9a7da5b0970b77e26f5d348fd345fe7ddb9b7c85ae71f991ed8b5e012f31dbce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1054, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x4, 0x6, 0x10000, 0xffffff00}, @local, @rand_addr=0x64010101, 0xffffff00}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x90, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x0, 0x4, 0xfffffffc}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x53, 0x6, 0xffffffffcffffffd, 0x6, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x9f29, 0x4, 0x9, 0xea85}, 0x28a448fd2ffec972, r5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_POLICE={0x86c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0xfffffa80, 0x8, 0x7, 0x5, 0x0, 0x0, 0x100, 0x3, 0x9, 0x200, 0x8, 0x7fff, 0x4, 0x4, 0xb, 0x4, 0xf, 0x2, 0x80000000, 0x1, 0xe0, 0xa, 0x101, 0x34c8, 0x8, 0x2, 0x3, 0x7, 0xd, 0xfff, 0x0, 0x4, 0x3, 0x0, 0x1, 0x84c, 0x7ff, 0xc, 0x9, 0xc9, 0x5, 0xe, 0x3, 0x800, 0x6, 0x7fffffff, 0x26, 0x1, 0x7, 0x401, 0xffe0, 0x2, 0x40, 0x0, 0x5, 0xc, 0xa, 0x7, 0x1, 0x4, 0x6, 0x0, 0x21, 0x0, 0x80000001, 0x3, 0x7, 0xfffff801, 0x3, 0xd5, 0x5, 0x3a1, 0x7, 0x5, 0x5, 0x7ff, 0x5, 0xf4d, 0x3e, 0x800, 0x3, 0x4, 0x3, 0xffffffff, 0x80000, 0x2, 0x9, 0x59, 0x3, 0x0, 0x3, 0x10, 0x8, 0xf, 0x80000001, 0x5, 0x6, 0x7, 0x1, 0x7, 0xa, 0x7fff, 0x7, 0x4, 0x101, 0x3, 0x3, 0x59f, 0x1, 0x10, 0x0, 0xb8700, 0x1, 0x8, 0x0, 0x2, 0x0, 0x0, 0xecd9, 0xfffffff8, 0x6, 0x8, 0x1, 0xb, 0xb44, 0x4, 0x9, 0x1, 0x6, 0x9, 0x101, 0x28, 0x9, 0x810, 0x0, 0x9, 0x5, 0x60000, 0x2, 0xc, 0x3, 0x6, 0x9, 0xffff, 0x36d, 0x9, 0x0, 0x3, 0x10, 0x3, 0x0, 0xf235, 0x9, 0x3, 0x80000001, 0xffffffff, 0xfffffc23, 0x7fffffff, 0x32b8, 0x4, 0x0, 0xfffffff9, 0x3f, 0x81, 0xe, 0x10, 0x2, 0x5, 0x7, 0x0, 0x0, 0x9, 0xc, 0x1, 0x800, 0x5, 0x9, 0x7fff, 0x0, 0x5, 0x2, 0x72d, 0x0, 0x2, 0x1000, 0x3, 0x56a3, 0xab7, 0x9, 0x1ff0, 0x3, 0x7fff, 0x4, 0x401, 0x100, 0x8, 0x5, 0x0, 0xd0d46f1, 0x2, 0x7, 0x1, 0xfffffff2, 0x3, 0x4, 0xffffffff, 0x1000, 0x5, 0x80, 0x5, 0x95e, 0x3, 0x403, 0x7, 0x0, 0x2, 0x3ff, 0xf, 0x6, 0x0, 0x6, 0xfffff15f, 0x4, 0xdd6, 0x8, 0xfffffffb, 0x3ff, 0x80000000, 0x10, 0x0, 0x4, 0xffffff81, 0x2, 0x6, 0x2c000000, 0x8, 0xbe, 0x1, 0x4, 0xea, 0x8, 0x1, 0x7ff, 0x2, 0x6, 0x7fff, 0x4, 0x3, 0x7fffffff, 0x81, 0x1ff, 0xdf, 0x7, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x7f, 0x6, 0x3, {0x5, 0x1, 0x5, 0x9, 0x2, 0x800}, {0x7, 0x2, 0x9, 0x3, 0x0, 0x80}, 0x1, 0x0, 0xffff8e30}}, @TCA_POLICE_RATE={0x404, 0x2, [0x862, 0x2, 0x1, 0xf8c9, 0x8, 0x1, 0x2, 0x0, 0x8, 0xcb85, 0x4, 0x8, 0x3, 0x7, 0xffffffff, 0x3, 0x4, 0xa, 0x49e7, 0x6, 0x9, 0x56d5, 0x0, 0x0, 0x40000, 0x1ae752ca, 0x3, 0xa, 0x9, 0xc76, 0x8, 0x8, 0x8, 0x9, 0x6, 0x6751, 0x80000001, 0x3ff, 0x98, 0x49, 0x1, 0x12, 0xc3c4, 0x5, 0x98, 0x8, 0xc, 0x1, 0xe, 0x0, 0x8, 0x3, 0x0, 0x1, 0x8, 0xfefffff7, 0xb, 0xfff, 0xffff1bcc, 0xfffffff8, 0x5, 0x1, 0x6, 0x5, 0xfffffffc, 0xe, 0x14, 0xa0, 0x81, 0x2c0, 0x9, 0x9, 0x80, 0x66fc, 0x4, 0x69, 0xac, 0x8e, 0x3, 0x3, 0x3ff, 0x5, 0x7f, 0x8102, 0x4, 0x3, 0x0, 0xc242, 0x67, 0x9, 0xa, 0x9, 0x10001, 0x90f, 0xd4a0, 0x80, 0x3, 0x6, 0x10000, 0x0, 0x7, 0x5, 0x2, 0x0, 0x6, 0xffffffff, 0x404, 0xd, 0x81, 0x8, 0xc44, 0x7, 0x3, 0x7, 0x2, 0x10000, 0xb, 0x7, 0x0, 0x4, 0x20b, 0x80000000, 0x0, 0x9, 0x2, 0x8, 0x3, 0x1ff, 0x80000000, 0x6, 0x76c, 0x13c, 0x2, 0x3, 0xfffffff9, 0x101, 0x2, 0x8, 0xe000000, 0x8, 0x3, 0x5, 0x9, 0xe, 0x9, 0xfffffffa, 0xd, 0xfffffff9, 0xfffffff7, 0xff, 0x2f8, 0x8, 0x5, 0x4, 0xffffffff, 0x7ff, 0x9, 0x3, 0x9587, 0x8, 0xcc06, 0x1, 0x6, 0x8, 0x5, 0x5, 0x1000, 0x800, 0x0, 0x1, 0x1, 0x80000001, 0x2f, 0xab, 0x4, 0x8, 0x9, 0x8, 0xd60, 0xfffffffd, 0x8, 0x2, 0x7, 0x5, 0x5, 0x8, 0x3, 0xfffffffb, 0x3e, 0x4, 0x3, 0x1, 0x800, 0xb26, 0x7, 0x7, 0xfffffff7, 0x7, 0x1, 0x1, 0xfff, 0x1, 0x5, 0x5, 0xa, 0x4, 0x700, 0x0, 0x5, 0x8, 0x6, 0x6, 0xf5, 0x5f, 0x5, 0xc, 0x7, 0xf3f, 0x3, 0x3, 0x3, 0x8, 0x9, 0xfffffff7, 0xdbe3145, 0xeb, 0x2, 0x100000, 0x1, 0x1, 0xb, 0xfffffff7, 0x9, 0x3, 0xbab, 0xb2, 0x6, 0x8, 0x6, 0x4, 0xfd045790, 0x0, 0xe, 0xb3b5, 0x7, 0x81, 0x5, 0x100, 0x3, 0x9, 0x5, 0xffff, 0x3, 0x3, 0x7fffffff, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4d58}}, 0x24040084) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000001340)="06b02b6c752a", 0x6) 10.23085787s ago: executing program 1 (id=664): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000140)=0x0) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, 0x0, r5, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000340)={0x0, 0x2439, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x2, 0x2, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf4c8, 0x0, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9af, 0x800, 0x0, 0x1000c4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) 8.553086034s ago: executing program 1 (id=670): ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000100)={0x0, 0xffff, &(0x7f0000000080)}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0xfffffffffffffeb8}, &(0x7f00000004c0)=[{}]) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2cd1"]) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0c02, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xa) 7.649484775s ago: executing program 1 (id=676): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x470}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00000c1000/0x2000)=nil, 0x2000}) 5.647889689s ago: executing program 3 (id=688): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = socket(0x2b, 0x1, 0x1) listen(r5, 0x5) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r11 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r11, r7, r8, r9, 0x0, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f0000000340)={0x0, 0x2439, 0x800, 0x2, 0x321, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x2, 0x2, 0x278, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf4c8, 0x0, 0x1, 0x321, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9af, 0x800, 0x0, 0x1000c4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) close(r4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890c, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 4.670077885s ago: executing program 3 (id=692): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) (async) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) (async) landlock_restrict_self(r0, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x1a, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x17}, 0x94) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000980)='norecovery') 4.139196506s ago: executing program 2 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x4}]}}}]}, 0x3c}}, 0x4000000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x8, 0xffffffffce63790a, 0xac7a, 0x7f, 0x4, 0x100000000, 0xc6eb, 0x4}, &(0x7f0000000040)={0x4, 0x4, 0x5, 0x8, 0x0, 0x8000000000000001, 0x6, 0x2}, &(0x7f0000000080)={0x5, 0x8, 0x8, 0x3, 0x4, 0x401, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xe, 0xfffffffb]}, 0x8}) 4.00868912s ago: executing program 2 (id=694): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.959986173s ago: executing program 2 (id=695): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x5, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="9109a81b13", 0x0, 0x0, 0x10012, 0x0, 0x0}) 3.959184434s ago: executing program 2 (id=696): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000040a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40fffffffc200004"], 0xb0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x59f9, 0x800, 0xfffffffd, 0x31c}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r10 = socket$inet6(0xa, 0x3, 0xff) r11 = dup2(r10, r10) syz_ublk_setup_queues(r4, r9, &(0x7f0000000540)={0x0, 0x162, 0x1, 0x3, 0xb2, 0x0, r11}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa04a, 0x0, 0x6, 0x273}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x104, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x4000, 0x2, 0xdf, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x48a, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r15, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x1, 0x9}}]}) ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) ioctl$KVM_IRQ_LINE_STATUS(r15, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.7287343s ago: executing program 3 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010500000000000000000002200000240002801400018008000100e000000108000200e00500010000000000100053800900010073797a3000"/72], 0x48}, 0x1, 0x0, 0x0, 0x4091}, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000f80)=[{&(0x7f0000000640)=""/171, 0xc4}, {&(0x7f0000000e80)=""/43}, {&(0x7f0000000f00)=""/74}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = eventfd(0x9) syz_open_pts(0xffffffffffffffff, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa500, 0x0) io_submit(0x0, 0x7, &(0x7f0000000e40)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f0000000580)="da9de7e9693ab76f594a6a9e92e0963bf2a84fec5831c83694ce3fb22d2855aa256b8e4b0e29c04cfef9b31781b96b723b382b224e0fe07cc3542de228995864c40c45345f3284ad24c9687d68", 0x4d, 0xffffffff}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000740)="2e25db014762188131f262872f2ee7710cf98ef1ab412ee60c9b70646afb17caa04b48694e7d698c267a84258c5da2c20d11eb2608ba754e77a77ed645647b8875b1876adef83d3a91ef20bb0ab453b8cb83cec027d5532746efbcc282090ffb27ac5c711a2930c00e88ebf9848dc2a7ccc51881fa39054cbf83bfa94b32989265fb472113853fe0be4bc505c336b0b29458c996d7a2c079092f5e0225d4e80c6eb5af665eeba05d8ed9451d4e8b1a7ff41f6253edcc14e3096a6f070a5e4fbc7a685273a96e63fa18d965180358e917ef4cccaaa8ad1dea32e2de9cc63071d02f58c082ae17ebf9bf", 0xe9, 0x3, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000880)="0969f520fcc8fa26c6fad8aa2989fee0d163879b878c34d24f1469bfc325513632da6cdf1b6218e5f9df312714070617914cf3028ca812dfe6a42b94b423bff2d191df7ca3a1784c42d85ddf43e57f24b49d07c3950f46c304ee21bf6f0eb7b854ece2c1306707b3bfcafdc332803cfb8465cd305cafc6f62743795d2bf87ddc5b1dede102ccbcfb1d9e4120030afa811cbf30", 0x93, 0x8, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000980)="7673d2cea212c6e9d6d504b370f61bdd44e8852d204bfcc69375daf31639e7a1140618f5b845536ef4388137ac3fcca587a7eac1d60c2c32e74d15b0e199912fce6782692267ecc41699e676641f99e54a5179e922c6b30ab99bbf3222245688c5ed6e42df5ea6df2b22a5f6c325082ad13af41ed5fb9f2cc985363ef0a139fbcb46612f9173edaeb81bea6b738a7fa97043fea04a99cb8ec565b4d157c85b387e67c7a248ed4bbc5e06b2ea6f0bda12a640592302d55301818319802523222793a8d0f6cef6c608491ce6b22d3cb972fef2a1c73489aaa9997128942b50ed6378db", 0xe2, 0x2, 0x0, 0x2}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x4f, r0, &(0x7f0000000b00)="61bbc36906d7b4698495399809db1b620f429e44c3dc771c1fcfe6666bfd489577c68fdf9fb05d8626f3b58dfba90e6948fe5650a1090045f9591b0a4566993e9fc15f868d300dcbd94c0912ecc29b9b833784a62c13be6798ac05057eaaee6b047858086acbc37cfe0980d11d3fd3e8d95fad14b316ad2efd0c92484c5d075b37ecf55d1a1bb5", 0x87, 0xd4, 0x0, 0x3}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000c00)="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", 0xfe, 0x4, 0x0, 0x0, r2}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f0000000d40)="955e2f0c25a3cbb2ffe21633c8c1af98109a488f02660bb308ad9f3d92face086dcc48094c2390672e0beaaf1792543c120e30c54b50db8428e78b87834d17e1044ce999321b10ad8d5a0389eeb3db7d3cd7ff7df397f697b813df3832cfabe1acc63d218f8d6718182f1a813ee5542eb8fcb83aa38643846a47cda0de32aaadaec9844517383fbb0253854e30e3d8a506ce60ae98fbdf96c3ee15ca34cbb91c6c09e76f77df721f1808bf7f7ef6a63dbc", 0xb1, 0xffffffffffff0000, 0x0, 0x1, r3}]) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) r5 = inotify_init1(0x800) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0xa0, 0xd, @MIDI_NOTEON=@note=0x23, 0x43, 0x4}) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000000180)={r2, 0x0, 0xb37, 0x2, 0x1, 0xf, [0x5, 0x7fffffffffffffef, 0x7, 0x6, 0x1, 0x7fffffffffffffff]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r7) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00082bbd7000fddbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="b693008b3283be15"], 0x24}, 0x1, 0x0, 0x0, 0x400c031}, 0x20044009) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r10, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffb8df25030000000c0009000200aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x806) r11 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r11, 0xc0cc5640, &(0x7f0000000040)={0x0, @vbi={0x7, 0x4, 0x2, 0x3231564e, [0x8001, 0x205], [0x1], 0x1}}) 3.616862658s ago: executing program 3 (id=699): syz_emit_ethernet(0x0, 0x0, 0x0) 3.528388039s ago: executing program 3 (id=700): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = socket(0x2b, 0x1, 0x1) listen(r5, 0x5) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r11 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r11, r7, r8, r9, 0x0, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f0000000340)={0x0, 0x2439, 0x800, 0x2, 0x321, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x2, 0x2, 0x278, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf4c8, 0x0, 0x1, 0x321, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9af, 0x800, 0x0, 0x1000c4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) close(r4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890c, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 2.990034246s ago: executing program 3 (id=701): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x43}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x80}, @mss={0x2, 0xff}, @timestamp, @window={0x3, 0x1, 0x202}, @mss={0x2, 0x6}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x1, @capture={0x0, 0x1, {0x62f9, 0x6}, 0xfffffff8, 0x40}}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000008e00)=0x9, 0x6a6f, 0x2) 2.147517647s ago: executing program 2 (id=707): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x43}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x80}, @mss={0x2, 0xff}, @timestamp, @window={0x3, 0x1, 0x202}, @mss={0x2, 0x6}, @window], 0x6) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x1, @capture={0x0, 0x1, {0x62f9, 0x6}, 0xfffffff8, 0x40}}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000008e00)=0x9, 0x6a6f, 0x2) 1.423184009s ago: executing program 0 (id=709): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = socket(0x2b, 0x1, 0x1) listen(r5, 0x5) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r11 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r11, r7, r8, r9, 0x0, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f0000000340)={0x0, 0x2439, 0x800, 0x2, 0x321, 0x0, r6}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x2, 0x2, 0x278, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf4c8, 0x0, 0x1, 0x321, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9af, 0x800, 0x0, 0x1000c4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) close(r4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890c, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 789.732914ms ago: executing program 2 (id=710): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x43}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x80}, @mss={0x2, 0xff}, @timestamp, @window={0x3, 0x1, 0x202}, @mss={0x2, 0x6}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000008e00)=0x9, 0x6a6f, 0x2) 499.979638ms ago: executing program 0 (id=711): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x4f, 0x1, 0x4, 0x0, {0x1c}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x8000) syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60cb289100202b00fe800000000000000000000000000000000000aa33000fc96500000000000000001890780400000000030000040000021b76fa712999624543ca24207e25f70a336b617a4c966d2b2cf6a115a4cb6a5e2e7108584d133d869aefa69fd353cee1745747e4115e3500"/151], 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) mmap$snddsp_control(&(0x7f0000002000/0x1000)=nil, 0x1002, 0x300000e, 0x13, r2, 0x82000000) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000840)='asymmetric\x00', &(0x7f0000001200)='i\xbd-U\xdda\x91\x154\x9a%\xda\xe2\r\xaf\x8b\xa7d:c\xbd\tB2e\x99\xbf-\xe6\xa7?I\xc6o\x03Z\'$\xf9\xf7\xb0\x93\xb0R\x868\xdd\xcb\xbc8\x9b\xcd3\x85\v\xa1\xf4\f%rt\xea(\x11\x97\x00\x15\x00\x00\x00\x00\x96\xd0\xe8X_\xa3\xfa#/\x9b\xa6\xeeO\x97W\xaa\xf6H\xe7$A0\x8a8\x819 j\xed\xcb\x11\xa5\x86!\xe8\x16\x89\xd3\xb7\xdc\x9d\xecH\xdeq\"\x1fa\x90\x14O\x12\xb2Q\xe8\xc86AJ\xc7U\x16\xef(6\x9b?\"2sa=\x00'/154) 188.399101ms ago: executing program 0 (id=712): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 70.078659ms ago: executing program 0 (id=713): r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x168943) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) userfaultfd(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0xfffa}}}, 0x24}}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6a, '\x00', r5}, 0x94) (async) syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa54c, 0x800, 0x1, 0x153}, 0x0, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x4000, 0x4) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000280)={{0xb}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioperm(0x8, 0x2, 0xdf) 69.934604ms ago: executing program 0 (id=714): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) 0s ago: executing program 0 (id=715): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000040a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40ffffff"], 0xb0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x59f9, 0x800, 0xfffffffd, 0x31c}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r10 = socket$inet6(0xa, 0x3, 0xff) r11 = dup2(r10, r10) syz_ublk_setup_queues(r4, r9, &(0x7f0000000540)={0x0, 0x162, 0x1, 0x3, 0xb2, 0x0, r11}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa04a, 0x0, 0x6, 0x273}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x104, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x4000, 0x2, 0xdf, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x2, 0x48a, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r15, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r15, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x1, 0x9}}]}) ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) ioctl$KVM_IRQ_LINE_STATUS(r15, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): face descriptor's value: 3 [ 158.386518][ T846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.390017][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.415946][ T6847] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.419103][ T6847] ata1.00: invalid service action 31 [ 158.516554][ T5843] Process accounting resumed [ 158.606458][ T846] usb 6-1: GET_CAPABILITIES returned 0 [ 158.608483][ T846] usbtmc 6-1:16.0: can't read capabilities [ 158.784716][ T6853] netlink: 'syz.0.227': attribute type 7 has an invalid length. [ 158.788547][ T6853] netlink: 'syz.0.227': attribute type 8 has an invalid length. [ 158.810173][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 158.814072][ T6835] usbtmc 6-1:16.0: Unable to send data, error -71 [ 158.817559][ T846] usb 6-1: USB disconnect, device number 3 [ 159.697711][ T5858] Process accounting resumed [ 159.741971][ T6873] __nla_validate_parse: 7 callbacks suppressed [ 159.751731][ T6873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.231'. [ 159.806807][ T6879] program syz.0.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.810275][ T6879] ata1.00: invalid service action 31 [ 160.682385][ T846] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.842169][ T846] usb 6-1: Using ep0 maxpacket: 8 [ 160.849707][ T846] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 160.852420][ T846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.855974][ T846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.859427][ T846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 160.863944][ T846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 160.867288][ T846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.871320][ T846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.874386][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.907131][ T6889] program syz.0.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.910866][ T6889] ata1.00: invalid service action 31 [ 160.916695][ T6889] wireguard: wg0: Could not create IPv4 socket [ 161.086905][ T846] usb 6-1: GET_CAPABILITIES returned 0 [ 161.090017][ T846] usbtmc 6-1:16.0: can't read capabilities [ 161.108750][ T6895] syzkaller0: entered promiscuous mode [ 161.111010][ T6895] syzkaller0: entered allmulticast mode [ 161.178602][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 161.200776][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 161.257129][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 161.287914][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 161.290996][ T6866] usbtmc 6-1:16.0: Unable to send data, error -71 [ 161.295762][ T846] usb 6-1: USB disconnect, device number 4 [ 161.401481][ T10] Process accounting resumed [ 161.636563][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 161.639609][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 161.758837][ T6910] ip6gretap0: entered promiscuous mode [ 161.821317][ T6910] syz_tun: entered promiscuous mode [ 161.858544][ T6910] debugfs: 'hsr1' already exists in 'hsr' [ 161.861078][ T6910] Cannot create hsr debugfs directory [ 161.911350][ T6913] fuse: Unknown parameter '0x000000000000000c' [ 162.664104][ T10] Process accounting resumed [ 162.917441][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'. [ 162.922601][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 162.935268][ T6924] overlayfs: missing 'lowerdir' [ 163.070525][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'. [ 163.074064][ T6928] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 163.077267][ T6928] netlink: 'syz.0.248': attribute type 8 has an invalid length. [ 163.079849][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 163.322500][ T846] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 163.482378][ T846] usb 7-1: Using ep0 maxpacket: 8 [ 163.490955][ T846] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 163.494991][ T846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 163.499606][ T846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.504472][ T846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 163.509010][ T846] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 163.513612][ T846] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.519527][ T846] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.524208][ T846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.625760][ T6943] netlink: 'syz.3.251': attribute type 7 has an invalid length. [ 163.629231][ T6943] netlink: 'syz.3.251': attribute type 8 has an invalid length. [ 163.736735][ T846] usb 7-1: GET_CAPABILITIES returned 0 [ 163.739040][ T846] usbtmc 7-1:16.0: can't read capabilities [ 163.937926][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 163.941595][ T6927] usbtmc 7-1:16.0: Unable to send data, error -71 [ 163.950608][ T846] usb 7-1: USB disconnect, device number 11 [ 164.232706][ T40] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 164.392276][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 164.396752][ T40] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 164.399781][ T40] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 164.403347][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.406904][ T40] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 164.410840][ T40] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 164.414742][ T40] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.419339][ T40] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.422340][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.462201][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.612197][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 164.616204][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 164.620338][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 164.631132][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.637855][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 164.645434][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 164.651956][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.661949][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.671486][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.700797][ T6962] fuse: Unknown parameter '0x000000000000000b' [ 164.713114][ T40] usb 8-1: GET_CAPABILITIES returned 0 [ 164.882145][ T40] usbtmc 8-1:16.0: can't read capabilities [ 164.977662][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 164.983476][ T10] usbtmc 5-1:16.0: can't read capabilities [ 165.128951][ T40] usb 8-1: USB disconnect, device number 14 [ 165.188149][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 165.191087][ T6956] usbtmc 5-1:16.0: Unable to send data, error -71 [ 165.194883][ T10] usb 5-1: USB disconnect, device number 7 [ 165.607810][ T6973] __nla_validate_parse: 5 callbacks suppressed [ 165.607825][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 165.865978][ T10] Process accounting resumed [ 165.952173][ T5843] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 165.964162][ T6982] syzkaller0: entered promiscuous mode [ 165.966318][ T6982] syzkaller0: entered allmulticast mode [ 166.092287][ T5843] usb 8-1: device descriptor read/64, error -71 [ 166.332383][ T5843] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 166.556029][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 166.560155][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 166.708219][ T5843] usb 8-1: device descriptor read/64, error -71 [ 167.326081][ T5843] usb usb8-port1: attempt power cycle [ 167.412674][ T7000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.268'. [ 167.581636][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 167.584383][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 167.612262][ T40] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 167.686503][ T5843] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 167.719218][ T5843] usb 8-1: device descriptor read/8, error -71 [ 167.782272][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 167.785886][ T40] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 167.789134][ T40] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 167.793433][ T40] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.797836][ T40] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 167.801292][ T40] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 167.804635][ T40] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.810156][ T40] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.813480][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.902148][ T5857] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.962469][ T5843] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 167.983270][ T5843] usb 8-1: device descriptor read/8, error -71 [ 168.022600][ T40] usb 7-1: GET_CAPABILITIES returned 0 [ 168.025137][ T40] usbtmc 7-1:16.0: can't read capabilities [ 168.072126][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 168.075147][ T5857] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 168.079190][ T5857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 168.083540][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.086728][ T5857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 168.090342][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 168.094231][ T5857] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.099402][ T5857] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.102625][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.103870][ T5843] usb usb8-port1: unable to enumerate USB device [ 168.223806][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 168.228176][ T6993] usbtmc 7-1:16.0: Unable to send data, error -71 [ 168.231850][ T40] usb 7-1: USB disconnect, device number 12 [ 168.309517][ T5857] usb 6-1: GET_CAPABILITIES returned 0 [ 168.312430][ T5857] usbtmc 6-1:16.0: can't read capabilities [ 168.404859][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 168.408356][ T7010] netlink: 'syz.0.270': attribute type 7 has an invalid length. [ 168.410900][ T7010] netlink: 'syz.0.270': attribute type 8 has an invalid length. [ 168.413286][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 168.510517][ C3] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 168.514388][ T7005] usbtmc 6-1:16.0: Unable to send data, error -71 [ 168.517585][ T40] usb 6-1: USB disconnect, device number 5 [ 169.381218][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 169.386272][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 169.408064][ T7016] overlayfs: missing 'lowerdir' [ 169.652173][ T7026] fuse: Unknown parameter '0x000000000000000b' [ 169.883230][ T7032] program syz.3.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.892435][ T7032] ata1.00: invalid service action 31 [ 170.626644][ T7014] program syz.0.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.637499][ T7014] ata1.00: invalid service action 31 [ 171.022188][ T7041] program syz.2.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.026973][ T7041] ata1.00: invalid service action 31 [ 171.032258][ T7041] wireguard: wg0: Could not create IPv4 socket [ 171.243750][ T7047] program syz.0.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.248118][ T7047] ata1.00: invalid service action 31 [ 171.261185][ T7047] wireguard: wg0: Could not create IPv4 socket [ 171.330615][ T7046] fuse: Unknown parameter '0x000000000000000c' [ 171.952152][ T5858] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 172.112642][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 172.115994][ T5858] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 172.122868][ T5858] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 172.127568][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.133506][ T5858] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 172.133550][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'. [ 172.137801][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.147606][ T5858] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.157167][ T5858] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.182256][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 172.187483][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 172.189782][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.234319][ T7061] overlayfs: missing 'lowerdir' [ 172.371311][ T5843] Process accounting resumed [ 172.483367][ T5858] usb 8-1: GET_CAPABILITIES returned 0 [ 172.486105][ T5858] usbtmc 8-1:16.0: can't read capabilities [ 172.683190][ T846] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 172.713652][ T55] usb 8-1: USB disconnect, device number 19 [ 173.582283][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 173.586113][ T846] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 173.630117][ T846] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 173.635536][ T846] usb 7-1: can't read configurations, error -61 [ 173.782848][ T846] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 173.917200][ T7076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.287'. [ 173.932138][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 173.934669][ T846] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 173.953413][ T846] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 173.961724][ T846] usb 7-1: can't read configurations, error -61 [ 173.967115][ T846] usb usb7-port1: attempt power cycle [ 173.977482][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 173.980886][ T7078] netlink: 'syz.0.288': attribute type 7 has an invalid length. [ 173.985663][ T7078] netlink: 'syz.0.288': attribute type 8 has an invalid length. [ 173.989128][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 174.098389][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 174.103264][ T7081] netlink: 'syz.1.290': attribute type 7 has an invalid length. [ 174.106242][ T7081] netlink: 'syz.1.290': attribute type 8 has an invalid length. [ 174.108876][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 174.114938][ T7081] syz_tun: entered promiscuous mode [ 174.118767][ T7081] syz_tun: left promiscuous mode [ 174.301527][ T7083] program syz.0.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.302261][ T846] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 174.305392][ T7083] ata1.00: invalid service action 31 [ 174.313772][ T7083] wireguard: wg0: Could not create IPv4 socket [ 174.322899][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 174.327094][ T846] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 174.333046][ T846] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 174.336566][ T846] usb 7-1: can't read configurations, error -61 [ 174.467156][ T7086] wireguard: wg0: Could not create IPv4 socket [ 174.472357][ T846] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 174.493125][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 174.499624][ T846] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 174.511637][ T846] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 174.526127][ T846] usb 7-1: can't read configurations, error -61 [ 174.542618][ T846] usb usb7-port1: unable to enumerate USB device [ 174.555540][ T7093] fuse: Unknown parameter '0x000000000000000b' [ 174.670588][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 174.676076][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 174.683993][ T7099] overlayfs: missing 'lowerdir' [ 174.779719][ T7103] program syz.3.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.783951][ T7103] ata1.00: invalid service action 31 [ 174.956967][ T7110] program syz.0.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.960074][ T7110] ata1.00: invalid service action 31 [ 174.974498][ T7110] wireguard: wg0: Could not create IPv4 socket [ 175.547709][ T5911] Process accounting resumed [ 175.602304][ T5858] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.745808][ T7119] netlink: 'syz.2.298': attribute type 7 has an invalid length. [ 175.752357][ T5858] usb 6-1: device descriptor read/64, error -71 [ 175.756337][ T7119] netlink: 'syz.2.298': attribute type 8 has an invalid length. [ 175.784885][ T7119] ip6gretap0: entered promiscuous mode [ 175.791759][ T7119] syz_tun: entered promiscuous mode [ 175.992341][ T5858] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.039171][ T7119] ip6gretap0: left promiscuous mode [ 176.064996][ T7121] netlink: 'syz.3.299': attribute type 7 has an invalid length. [ 176.068124][ T7121] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 176.078694][ T7119] syz_tun: left promiscuous mode [ 176.252508][ T5858] usb 6-1: device descriptor read/64, error -71 [ 176.367285][ T5858] usb usb6-port1: attempt power cycle [ 176.455825][ T7127] fuse: Unknown parameter '0x000000000000000b' [ 176.549613][ T7132] wireguard: wg0: Could not create IPv4 socket [ 176.605649][ T7134] overlayfs: missing 'lowerdir' [ 176.735589][ T5858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 176.752146][ T5836] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 176.754049][ T5858] usb 6-1: device descriptor read/8, error -71 [ 176.902258][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 176.907269][ T5836] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 176.911845][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 176.916179][ T7141] wireguard: wg0: Could not create IPv4 socket [ 176.916544][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.922925][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 176.926737][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 176.930653][ T5836] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.935435][ T5836] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.938531][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.012233][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 177.038997][ T5858] usb 6-1: device descriptor read/8, error -71 [ 177.153830][ T5858] usb usb6-port1: unable to enumerate USB device [ 177.159274][ T5836] usb 8-1: GET_CAPABILITIES returned 0 [ 177.161193][ T5836] usbtmc 8-1:16.0: can't read capabilities [ 177.274789][ T7143] __nla_validate_parse: 7 callbacks suppressed [ 177.274810][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 177.280817][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 177.288952][ T7143] overlayfs: missing 'lowerdir' [ 177.336416][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 177.354721][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 177.357899][ T7125] usbtmc 8-1:16.0: Unable to send data, error -71 [ 177.361182][ T5911] usb 8-1: USB disconnect, device number 20 [ 177.719312][ T29] Process accounting resumed [ 177.753317][ T5858] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.878856][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 177.912365][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 177.949716][ T5858] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 177.984832][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.020928][ T5858] usb 5-1: can't read configurations, error -61 [ 178.318498][ T5858] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.373258][ T5836] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 178.522502][ T5836] usb 7-1: device descriptor read/64, error -71 [ 178.562786][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 178.585635][ T5858] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 178.636884][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.650059][ T5858] usb 5-1: can't read configurations, error -61 [ 178.678838][ T5858] usb usb5-port1: attempt power cycle [ 178.773819][ T5836] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 178.913667][ T5836] usb 7-1: device descriptor read/64, error -71 [ 179.026262][ T5836] usb usb7-port1: attempt power cycle [ 179.085180][ T5858] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.138370][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 179.162924][ T5858] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 179.243339][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.260589][ T5858] usb 5-1: can't read configurations, error -61 [ 179.402487][ T5858] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.422499][ T5836] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 179.453469][ T5836] usb 7-1: device descriptor read/8, error -71 [ 179.464910][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 179.474909][ T5858] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 179.490134][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.495615][ T5858] usb 5-1: can't read configurations, error -61 [ 179.501689][ T5858] usb usb5-port1: unable to enumerate USB device [ 179.716555][ T5836] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 179.773698][ T5836] usb 7-1: device descriptor read/8, error -71 [ 180.132896][ T5836] usb usb7-port1: unable to enumerate USB device [ 180.247562][ T7169] fuse: Unknown parameter '0x000000000000000b' [ 180.446377][ T7163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.309'. [ 180.519671][ T7172] syzkaller0: entered promiscuous mode [ 180.524259][ T7172] syzkaller0: entered allmulticast mode [ 180.868523][ T7182] wireguard: wg0: Could not create IPv4 socket [ 180.938830][ T7183] program syz.1.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.949534][ T7183] ata1.00: invalid service action 31 [ 180.965593][ T7183] wireguard: wg0: Could not create IPv4 socket [ 181.219454][ T7191] wireguard: wg0: Could not create IPv4 socket [ 181.230952][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 181.236263][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 181.245365][ T7193] overlayfs: missing 'lowerdir' [ 181.602220][ T5857] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 181.768373][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 181.779183][ T5857] usb 8-1: Using ep0 maxpacket: 8 [ 181.783919][ T5857] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 181.787561][ T5857] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 182.174149][ T5858] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 182.206043][ T5857] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.243164][ T7210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.321'. [ 182.542908][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 182.561683][ T7213] syzkaller0: entered promiscuous mode [ 182.562440][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 182.564872][ T7213] syzkaller0: entered allmulticast mode [ 182.590221][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 182.596212][ T5858] usb 6-1: can't read configurations, error -61 [ 182.640873][ T5857] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 182.645760][ T5857] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 182.649669][ T5857] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.655072][ T5857] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.658185][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.722433][ T5858] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 182.785205][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 182.789194][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 182.820216][ T7215] overlayfs: missing 'lowerdir' [ 182.869361][ T5857] usb 8-1: GET_CAPABILITIES returned 0 [ 182.871223][ T5857] usbtmc 8-1:16.0: can't read capabilities [ 182.883762][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 182.888769][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 183.004615][ T7218] fuse: Unknown parameter '0x000000000000000c' [ 183.072262][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 183.083848][ C3] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 183.087978][ T7195] usbtmc 8-1:16.0: Unable to send data, error -71 [ 183.091396][ T5857] usb 8-1: USB disconnect, device number 21 [ 183.218694][ T5858] usb 6-1: can't read configurations, error -61 [ 183.222749][ T5858] usb usb6-port1: attempt power cycle [ 183.510681][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 183.515351][ T7220] netlink: 'syz.2.325': attribute type 7 has an invalid length. [ 183.519093][ T7220] netlink: 'syz.2.325': attribute type 8 has an invalid length. [ 183.522522][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 183.531568][ T7220] syz_tun: entered promiscuous mode [ 183.539568][ T7220] syz_tun: left promiscuous mode [ 183.562260][ T5858] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.583346][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 183.586463][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 183.591287][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 183.594830][ T5858] usb 6-1: can't read configurations, error -61 [ 183.727626][ T40] Process accounting resumed [ 183.859103][ T5858] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 183.876639][ T7227] program syz.2.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.883304][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 183.889103][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 183.890578][ T7227] ata1.00: invalid service action 31 [ 183.893455][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 183.898655][ T5858] usb 6-1: can't read configurations, error -61 [ 183.899720][ T7227] wireguard: wg0: Could not create IPv4 socket [ 183.901041][ T5858] usb usb6-port1: unable to enumerate USB device [ 184.158935][ T7237] wireguard: wg0: Could not create IPv4 socket [ 184.321177][ T7239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.330'. [ 184.435010][ T7242] fuse: Unknown parameter '0x000000000000000c' [ 184.559916][ T7244] syzkaller0: entered promiscuous mode [ 184.561762][ T7244] syzkaller0: entered allmulticast mode [ 184.723357][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 184.727323][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 184.735648][ T7246] overlayfs: missing 'lowerdir' [ 184.998945][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 185.004704][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 185.010116][ T7256] overlayfs: missing 'lowerdir' [ 185.225846][ T5858] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 185.342891][ T7262] program syz.0.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.346358][ T7262] ata1.00: invalid service action 31 [ 185.351845][ T7262] wireguard: wg0: Could not create IPv4 socket [ 185.372318][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 185.377017][ T5858] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 185.380928][ T5858] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 185.388394][ T5858] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.394382][ T5858] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 185.399510][ T5858] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.404088][ T5858] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.409438][ T5858] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.413653][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.902767][ T5858] usb 6-1: GET_CAPABILITIES returned 0 [ 185.904669][ T5858] usbtmc 6-1:16.0: can't read capabilities [ 186.109696][ T5858] usb 6-1: USB disconnect, device number 14 [ 186.452319][ T7265] program syz.3.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.456355][ T7265] ata1.00: invalid service action 31 [ 186.463085][ T7265] wireguard: wg0: Could not create IPv4 socket [ 186.694352][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.339'. [ 186.698463][ T7272] netlink: 'syz.0.339': attribute type 7 has an invalid length. [ 186.702217][ T7272] netlink: 'syz.0.339': attribute type 8 has an invalid length. [ 186.784036][ T5858] Process accounting resumed [ 187.357750][ T7288] netlink: 'syz.2.344': attribute type 7 has an invalid length. [ 187.360827][ T7288] netlink: 'syz.2.344': attribute type 8 has an invalid length. [ 187.373182][ T7288] syz_tun: entered promiscuous mode [ 187.376090][ T7288] syz_tun: left promiscuous mode [ 187.483194][ T5858] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 187.646296][ T7292] overlayfs: missing 'lowerdir' [ 187.652558][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 187.658081][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 187.663129][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 187.666435][ T5858] usb 6-1: can't read configurations, error -61 [ 187.745905][ T5857] Process accounting resumed [ 187.818570][ T5858] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 187.982565][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 187.985362][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 187.990575][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 187.994995][ T5858] usb 6-1: can't read configurations, error -61 [ 187.997505][ T5858] usb usb6-port1: attempt power cycle [ 188.186093][ T7310] program syz.3.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.189892][ T7310] ata1.00: invalid service action 31 [ 188.198407][ T7310] wireguard: wg0: Could not create IPv4 socket [ 188.342165][ T5858] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 188.363025][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 188.367984][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 188.378823][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 188.383364][ T5858] usb 6-1: can't read configurations, error -61 [ 188.404990][ T7309] __nla_validate_parse: 6 callbacks suppressed [ 188.405089][ T7309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.349'. [ 188.512350][ T5858] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 188.535188][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 188.538467][ T5858] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 188.552619][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 188.562391][ T5858] usb 6-1: can't read configurations, error -61 [ 188.575955][ T5858] usb usb6-port1: unable to enumerate USB device [ 190.422724][ T7337] program syz.2.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.427259][ T7337] ata1.00: invalid service action 31 [ 190.542269][ T5836] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 190.702314][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 190.716511][ T5836] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 190.720918][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 190.729274][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.740290][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 190.751592][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 190.758604][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.779500][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.790268][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.989956][ T7342] fuse: Unknown parameter '0x000000000000000b' [ 191.026360][ T5836] usb 6-1: GET_CAPABILITIES returned 0 [ 191.028196][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 191.171254][ T7350] program syz.3.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.177115][ T7350] ata1.00: invalid service action 31 [ 191.182399][ T7350] wireguard: wg0: Could not create IPv4 socket [ 191.232028][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 191.236026][ T7326] usbtmc 6-1:16.0: Unable to send data, error -71 [ 191.245099][ T5836] usb 6-1: USB disconnect, device number 19 [ 191.381204][ T7353] syzkaller0: entered promiscuous mode [ 191.384279][ T7353] syzkaller0: entered allmulticast mode [ 191.402614][ T5761] Bluetooth: hci0: command 0x0406 tx timeout [ 191.405797][ T5755] Bluetooth: hci3: command 0x0406 tx timeout [ 191.406523][ T5762] Bluetooth: hci1: command 0x0406 tx timeout [ 191.409773][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 191.419568][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 192.024405][ T5857] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.252132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.282278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 192.362306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 192.552122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.682832][ T5836] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 192.832273][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 192.839212][ T5836] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 192.844267][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 192.849785][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.857561][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 192.865098][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 192.871992][ T5836] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.882849][ T5836] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.889584][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.123432][ T5836] usb 8-1: GET_CAPABILITIES returned 0 [ 193.127814][ T5836] usbtmc 8-1:16.0: can't read capabilities [ 193.328769][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 193.333080][ T7368] usbtmc 8-1:16.0: Unable to send data, error -71 [ 193.336788][ T5822] usb 8-1: USB disconnect, device number 22 [ 194.162172][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 194.410555][ T7386] program syz.1.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.424987][ T7380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.368'. [ 194.425180][ T7386] ata1.00: invalid service action 31 [ 194.428515][ T5857] usb 5-1: device descriptor read/all, error -71 [ 194.477054][ T7387] wireguard: wg0: Could not create IPv4 socket [ 194.565951][ T7389] fuse: Unknown parameter '0x000000000000000b' [ 195.196465][ T7399] program syz.0.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.206541][ T7399] ata1.00: invalid service action 31 [ 195.218539][ T7399] wireguard: wg0: Could not create IPv4 socket [ 195.669482][ T7406] program syz.1.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.674392][ T7406] ata1.00: invalid service action 31 [ 195.690038][ T7406] wireguard: wg0: Could not create IPv4 socket [ 196.529680][ T7414] fuse: Unknown parameter '0x000000000000000a' [ 196.550833][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'. [ 196.555068][ T7416] netlink: 'syz.2.376': attribute type 7 has an invalid length. [ 196.558143][ T7416] netlink: 'syz.2.376': attribute type 8 has an invalid length. [ 196.560957][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 196.789824][ T7416] syz_tun: entered promiscuous mode [ 196.955766][ T7416] syz_tun: left promiscuous mode [ 197.258923][ T846] Process accounting resumed [ 198.118617][ T7436] program syz.3.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.123665][ T7436] ata1.00: invalid service action 31 [ 198.129350][ T7436] wireguard: wg0: Could not create IPv4 socket [ 199.397315][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.400516][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.009862][ T7449] fuse: Unknown parameter '0x000000000000000b' [ 200.642206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.704810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 201.078039][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 201.089758][ T7459] netlink: 'syz.3.390': attribute type 7 has an invalid length. [ 201.099961][ T7459] netlink: 'syz.3.390': attribute type 8 has an invalid length. [ 201.106643][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 201.243525][ T29] Process accounting resumed [ 202.159115][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.395'. [ 202.162735][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 202.174895][ T7473] overlayfs: missing 'lowerdir' [ 202.181045][ T7474] program syz.2.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.199634][ T7474] ata1.00: invalid service action 31 [ 202.215168][ T7474] wireguard: wg0: Could not create IPv4 socket [ 202.262629][ T7476] capability: warning: `syz.3.396' uses deprecated v2 capabilities in a way that may be insecure [ 202.466168][ T7484] input: syz1 as /devices/virtual/input/input5 [ 202.531004][ T7485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.397'. [ 202.905900][ T7496] syzkaller0: entered promiscuous mode [ 202.908503][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 202.908795][ T7496] syzkaller0: entered allmulticast mode [ 202.915002][ T7494] netlink: 'syz.1.401': attribute type 7 has an invalid length. [ 202.918525][ T7494] netlink: 'syz.1.401': attribute type 8 has an invalid length. [ 202.921412][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 203.044593][ T7494] syz_tun: entered promiscuous mode [ 203.069896][ T7494] syz_tun: left promiscuous mode [ 203.289908][ T40] Process accounting resumed [ 203.493198][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.404'. [ 203.501656][ T7501] netlink: 'syz.3.404': attribute type 7 has an invalid length. [ 203.510569][ T7501] netlink: 'syz.3.404': attribute type 8 has an invalid length. [ 203.515373][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 203.829866][ T846] Process accounting resumed [ 204.030954][ T7512] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.041100][ T7512] ata1.00: invalid service action 31 [ 204.046863][ T7513] syzkaller0: entered promiscuous mode [ 204.050710][ T7513] syzkaller0: entered allmulticast mode [ 204.064693][ T7512] wireguard: wg0: Could not create IPv4 socket [ 204.877446][ T7523] syzkaller0: entered promiscuous mode [ 204.879533][ T7523] syzkaller0: entered allmulticast mode [ 204.979056][ T7528] syzkaller0: entered promiscuous mode [ 204.981772][ T7528] syzkaller0: entered allmulticast mode [ 205.120163][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 205.129140][ T7534] netlink: 'syz.3.415': attribute type 7 has an invalid length. [ 205.134130][ T7534] netlink: 'syz.3.415': attribute type 8 has an invalid length. [ 205.280606][ T7537] netlink: 'syz.1.416': attribute type 7 has an invalid length. [ 205.284446][ T7537] netlink: 'syz.1.416': attribute type 8 has an invalid length. [ 205.329574][ T7537] syz_tun: entered promiscuous mode [ 205.455456][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.672585][ T7537] syz_tun: left promiscuous mode [ 205.822457][ T5911] usb 5-1: device descriptor read/64, error -71 [ 205.965135][ T5866] Process accounting resumed [ 206.238483][ T5911] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.382159][ T5911] usb 5-1: device descriptor read/64, error -71 [ 206.440810][ T7548] program syz.1.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.444582][ T7548] ata1.00: invalid service action 31 [ 206.448927][ T7548] wireguard: wg0: Could not create IPv4 socket [ 206.492669][ T5911] usb usb5-port1: attempt power cycle [ 206.842210][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.867444][ T5911] usb 5-1: device descriptor read/8, error -71 [ 206.920554][ T7555] syzkaller0: entered promiscuous mode [ 206.927735][ T7555] syzkaller0: entered allmulticast mode [ 207.123589][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 207.144184][ T5911] usb 5-1: device descriptor read/8, error -71 [ 207.148695][ T7565] __nla_validate_parse: 3 callbacks suppressed [ 207.148719][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 207.162249][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 207.184642][ T7565] ip6gretap0: entered promiscuous mode [ 207.188440][ T7565] syz_tun: entered promiscuous mode [ 207.192739][ T7565] debugfs: 'hsr1' already exists in 'hsr' [ 207.200591][ T7565] Cannot create hsr debugfs directory [ 207.253559][ T5911] usb usb5-port1: unable to enumerate USB device [ 207.548558][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 207.554857][ T7569] netlink: 'syz.1.427': attribute type 7 has an invalid length. [ 207.559026][ T7569] netlink: 'syz.1.427': attribute type 8 has an invalid length. [ 207.562366][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 208.083025][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 208.550274][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 208.553293][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 208.559072][ T7581] overlayfs: missing 'lowerdir' [ 208.593137][ T7582] FAULT_INJECTION: forcing a failure. [ 208.593137][ T7582] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.599333][ T7582] CPU: 3 UID: 0 PID: 7582 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 208.599361][ T7582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.599374][ T7582] Call Trace: [ 208.599384][ T7582] [ 208.599392][ T7582] dump_stack_lvl+0x100/0x190 [ 208.599414][ T7582] should_fail_ex.cold+0x5/0xa [ 208.599434][ T7582] _copy_from_iter+0x1f4/0x1690 [ 208.599461][ T7582] ? __asan_memset+0x23/0x50 [ 208.599482][ T7582] ? __pfx__copy_from_iter+0x10/0x10 [ 208.599512][ T7582] ? __pfx___alloc_skb+0x10/0x10 [ 208.599545][ T7582] netlink_sendmsg+0x808/0xda0 [ 208.599577][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.599605][ T7582] ? apparmor_socket_sendmsg+0x15b/0x270 [ 208.599637][ T7582] ____sys_sendmsg+0xa4d/0xbe0 [ 208.599661][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.599688][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.599716][ T7582] ? find_held_lock+0x2b/0x80 [ 208.599735][ T7582] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 208.599759][ T7582] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 208.599777][ T7582] ___sys_sendmsg+0x190/0x1e0 [ 208.599794][ T7582] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.599845][ T7582] ? irqentry_exit+0x24d/0xa00 [ 208.599880][ T7582] ? find_held_lock+0x2b/0x80 [ 208.599907][ T7582] __sys_sendmsg+0x160/0x210 [ 208.599921][ T7582] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.599942][ T7582] __do_fast_syscall_32+0xe7/0x970 [ 208.599953][ T7582] ? lockdep_hardirqs_on+0x78/0x100 [ 208.599972][ T7582] do_fast_syscall_32+0x32/0x70 [ 208.599983][ T7582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.600003][ T7582] RIP: 0023:0xf7f42fec [ 208.600022][ T7582] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 208.600027][ T7582] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 208.600039][ T7582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 208.600047][ T7582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.600053][ T7582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.600060][ T7582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.600066][ T7582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.600081][ T7582] [ 208.764658][ T5866] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 208.932519][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 208.939045][ T5866] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 208.964303][ T5866] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 208.970917][ T5866] usb 7-1: can't read configurations, error -61 [ 209.025425][ T7588] syzkaller0: entered promiscuous mode [ 209.033127][ T7588] syzkaller0: entered allmulticast mode [ 209.090581][ T7586] fuse: Unknown parameter '0x000000000000000b' [ 209.135016][ T5866] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 209.283275][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 209.297908][ T5866] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 209.329701][ T5866] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 209.363463][ T5866] usb 7-1: can't read configurations, error -61 [ 209.381069][ T5866] usb usb7-port1: attempt power cycle [ 209.764926][ T5866] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 209.804771][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 209.818374][ T5866] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 209.851283][ T5866] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 209.870962][ T5866] usb 7-1: can't read configurations, error -61 [ 210.002540][ T5866] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 210.033318][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 210.040166][ T5866] usb 7-1: too many configurations: 32, using maximum allowed: 8 [ 210.061131][ T5866] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 210.077084][ T5866] usb 7-1: can't read configurations, error -61 [ 210.088192][ T5866] usb usb7-port1: unable to enumerate USB device [ 210.145842][ T7600] program syz.1.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.149759][ T7600] ata1.00: invalid service action 31 [ 210.154553][ T7600] wireguard: wg0: Could not create IPv4 socket [ 210.442026][ T6778] Bluetooth: hci4: Frame reassembly failed (-84) [ 210.840587][ T7607] netlink: 156 bytes leftover after parsing attributes in process `syz.0.438'. [ 210.969677][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 211.070786][ T29] Process accounting resumed [ 211.487011][ T7624] syzkaller0: entered promiscuous mode [ 211.490578][ T7624] syzkaller0: entered allmulticast mode [ 211.612529][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 211.620575][ T7628] overlayfs: missing 'lowerdir' [ 211.695219][ T7630] fuse: Unknown parameter '0x000000000000000b' [ 211.752378][ T5866] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 211.902272][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 211.907792][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 211.910953][ T5866] usb 6-1: can't read configurations, error -61 [ 212.042227][ T5866] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 212.193476][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 212.197413][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 212.200026][ T5866] usb 6-1: can't read configurations, error -61 [ 212.202574][ T5866] usb usb6-port1: attempt power cycle [ 212.513735][ T5102] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 212.516562][ T5761] Bluetooth: hci4: command 0x1003 tx timeout [ 212.521513][ T7641] __nla_validate_parse: 1 callbacks suppressed [ 212.521535][ T7641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.448'. [ 212.544352][ T5866] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 212.575950][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 212.589407][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 212.598874][ T5866] usb 6-1: can't read configurations, error -61 [ 212.607978][ T7644] FAULT_INJECTION: forcing a failure. [ 212.607978][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.614548][ T7644] CPU: 3 UID: 0 PID: 7644 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 212.614577][ T7644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.614589][ T7644] Call Trace: [ 212.614600][ T7644] [ 212.614609][ T7644] dump_stack_lvl+0x100/0x190 [ 212.614639][ T7644] should_fail_ex.cold+0x5/0xa [ 212.614663][ T7644] _copy_from_iter+0x1f4/0x1690 [ 212.614696][ T7644] ? __asan_memset+0x23/0x50 [ 212.614716][ T7644] ? __pfx__copy_from_iter+0x10/0x10 [ 212.614743][ T7644] ? __pfx___alloc_skb+0x10/0x10 [ 212.614775][ T7644] netlink_sendmsg+0x808/0xda0 [ 212.614815][ T7644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.614849][ T7644] ? apparmor_socket_sendmsg+0x15b/0x270 [ 212.614885][ T7644] ____sys_sendmsg+0xa4d/0xbe0 [ 212.614912][ T7644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.614943][ T7644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.614981][ T7644] ___sys_sendmsg+0x190/0x1e0 [ 212.615013][ T7644] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.615055][ T7644] ? find_held_lock+0x2b/0x80 [ 212.615094][ T7644] __sys_sendmsg+0x160/0x210 [ 212.615117][ T7644] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.615147][ T7644] ? __pfx_ksys_write+0x10/0x10 [ 212.615183][ T7644] __do_fast_syscall_32+0xe7/0x970 [ 212.615203][ T7644] ? lockdep_hardirqs_on+0x78/0x100 [ 212.615235][ T7644] do_fast_syscall_32+0x32/0x70 [ 212.615254][ T7644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.615280][ T7644] RIP: 0023:0xf7f42fec [ 212.615302][ T7644] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 212.615310][ T7644] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 212.615328][ T7644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 212.615338][ T7644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.615347][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.615356][ T7644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.615365][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.615385][ T7644] [ 212.740485][ T5857] Process accounting resumed [ 212.808373][ T5866] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 212.833639][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 212.837936][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 212.841285][ T5866] usb 6-1: can't read configurations, error -61 [ 212.846745][ T5866] usb usb6-port1: unable to enumerate USB device [ 212.896544][ T7650] syzkaller0: entered promiscuous mode [ 212.898973][ T7650] syzkaller0: entered allmulticast mode [ 213.004213][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 213.008146][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 213.025312][ T7652] overlayfs: missing 'lowerdir' [ 213.097665][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.454'. [ 213.101889][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 213.116036][ T7654] overlayfs: missing 'lowerdir' [ 213.684329][ T7668] program syz.3.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.688102][ T7668] ata1.00: invalid service action 31 [ 213.693201][ T7668] wireguard: wg0: Could not create IPv4 socket [ 214.323551][ T7685] syzkaller0: entered promiscuous mode [ 214.326042][ T7685] syzkaller0: entered allmulticast mode [ 214.392388][ T40] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 214.451963][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 214.455757][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 214.461551][ T7687] overlayfs: missing 'lowerdir' [ 214.542200][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 214.546683][ T40] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 214.552331][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 214.558951][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.571622][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 214.577048][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.581326][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.589379][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.595230][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.808116][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 214.810503][ T40] usbtmc 6-1:16.0: can't read capabilities [ 214.841894][ T7695] program syz.2.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.852188][ T7695] ata1.00: invalid service action 31 [ 214.859993][ T7695] wireguard: wg0: Could not create IPv4 socket [ 215.017513][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.021486][ T7677] usbtmc 6-1:16.0: Unable to send data, error -71 [ 215.026144][ T55] usb 6-1: USB disconnect, device number 24 [ 216.026731][ T7717] program syz.1.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.030457][ T7717] ata1.00: invalid service action 31 [ 216.035247][ T7717] wireguard: wg0: Could not create IPv4 socket [ 217.328445][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 217.336566][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 217.348044][ T7723] ip6gretap0: entered promiscuous mode [ 217.357516][ T7723] syz_tun: entered promiscuous mode [ 217.362165][ T7723] debugfs: 'hsr1' already exists in 'hsr' [ 217.367166][ T7723] Cannot create hsr debugfs directory [ 217.470487][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'. [ 217.479985][ T7726] overlayfs: missing 'lowerdir' [ 218.458728][ T7737] fuse: Unknown parameter '0x000000000000000b' [ 218.493946][ T7743] fuse: Unknown parameter '0x000000000000000b' [ 218.502256][ T7742] __nla_validate_parse: 1 callbacks suppressed [ 218.502376][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.475'. [ 218.508943][ T7742] netlink: 'syz.2.475': attribute type 7 has an invalid length. [ 218.513548][ T7742] netlink: 'syz.2.475': attribute type 8 has an invalid length. [ 218.517258][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 218.865819][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'. [ 218.871563][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'. [ 218.903693][ T7746] overlayfs: missing 'lowerdir' [ 219.256015][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'. [ 219.262299][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 219.270151][ T7758] overlayfs: missing 'lowerdir' [ 219.610249][ T7761] program syz.1.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.617237][ T7761] ata1.00: invalid service action 31 [ 219.626892][ T7761] wireguard: wg0: Could not create IPv4 socket [ 219.896477][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 220.769689][ T7780] program syz.3.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.779937][ T7780] ata1.00: invalid service action 31 [ 220.793544][ T7780] wireguard: wg0: Could not create IPv4 socket [ 221.237162][ T7782] syzkaller0: entered promiscuous mode [ 221.239497][ T7782] syzkaller0: entered allmulticast mode [ 221.485161][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 221.490059][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 221.504131][ T5843] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 221.672440][ T5843] usb 7-1: Using ep0 maxpacket: 32 [ 221.679159][ T5843] usb 7-1: config index 0 descriptor too short (expected 12847, got 27) [ 221.683449][ T5843] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 221.689031][ T5843] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 221.695230][ T5843] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 221.704099][ T5843] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.982215][ T5866] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.143205][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 222.149354][ T5866] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 222.153004][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 222.158162][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.163852][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 222.169207][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 222.173551][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.179847][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.186682][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.404703][ T5866] usb 5-1: GET_CAPABILITIES returned 0 [ 222.407324][ T5866] usbtmc 5-1:16.0: can't read capabilities [ 222.503843][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.508997][ T5843] usb 7-1: Product: syz [ 222.511240][ T5843] usb 7-1: Manufacturer: syz [ 222.513597][ T5843] usb 7-1: SerialNumber: syz [ 222.644278][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 222.649283][ T7786] usbtmc 5-1:16.0: Unable to send data, error -71 [ 222.655071][ T55] usb 5-1: USB disconnect, device number 18 [ 222.776257][ T5843] usb 7-1: USB disconnect, device number 25 [ 222.902656][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 222.910823][ T7796] overlayfs: missing 'lowerdir' [ 223.003736][ T55] Process accounting resumed [ 223.393416][ T7807] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.397520][ T7807] ata1.00: invalid service action 31 [ 223.404361][ T7807] wireguard: wg0: Could not create IPv4 socket [ 223.814113][ T7816] __nla_validate_parse: 1 callbacks suppressed [ 223.814138][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 223.836790][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 223.842013][ T7818] program syz.0.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.849966][ T7818] ata1.00: invalid service action 31 [ 223.875724][ T7818] wireguard: wg0: Could not create IPv4 socket [ 223.944597][ T7820] program syz.2.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.954427][ T7820] ata1.00: invalid service action 31 [ 224.178505][ T5911] Process accounting resumed [ 224.901860][ T846] Process accounting resumed [ 226.106244][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 226.522689][ T5866] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 226.692261][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 226.713510][ T5866] usb 8-1: config index 0 descriptor too short (expected 12847, got 27) [ 226.723507][ T5866] usb 8-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 226.735210][ T5866] usb 8-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 226.742229][ T5836] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 226.747174][ T5866] usb 8-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 226.779367][ T5866] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 226.788886][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 226.799776][ T5866] usb 8-1: Product: syz [ 226.804688][ T5866] usb 8-1: Manufacturer: syz [ 226.811080][ T5866] usb 8-1: SerialNumber: syz [ 226.902250][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 226.906459][ T5836] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 226.910467][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 226.918273][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.922732][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 226.927408][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 226.933388][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.940085][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.944294][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.155369][ T5836] usb 6-1: GET_CAPABILITIES returned 0 [ 227.157989][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 227.370454][ T5836] usb 6-1: USB disconnect, device number 25 [ 227.832205][ T5843] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 228.012140][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 228.016318][ T5843] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 228.021651][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.027848][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.032520][ T5843] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.038090][ T5843] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.043178][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.150163][ T5866] usb 8-1: USB disconnect, device number 23 [ 228.254003][ T5843] usb 7-1: GET_CAPABILITIES returned 0 [ 228.256052][ T5843] usbtmc 7-1:16.0: can't read capabilities [ 228.323423][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 228.326413][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 228.454912][ T7855] FAULT_INJECTION: forcing a failure. [ 228.454912][ T7855] name failslab, interval 1, probability 0, space 0, times 1 [ 228.460192][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.2.509 Not tainted syzkaller #0 PREEMPT(full) [ 228.460211][ T7855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.460219][ T7855] Call Trace: [ 228.460226][ T7855] [ 228.460232][ T7855] dump_stack_lvl+0x100/0x190 [ 228.460250][ T7855] should_fail_ex.cold+0x5/0xa [ 228.460263][ T7855] should_failslab+0xc2/0x120 [ 228.460278][ T7855] __kmalloc_noprof+0xfc/0x820 [ 228.460291][ T7855] ? usb_alloc_urb+0x66/0xa0 [ 228.460309][ T7855] usb_alloc_urb+0x66/0xa0 [ 228.460325][ T7855] usbtmc_create_urb+0x13/0x150 [ 228.460339][ T7855] usbtmc_generic_write+0x289/0xb50 [ 228.460357][ T7855] usbtmc_ioctl+0x1976/0x2840 [ 228.460370][ T7855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.460387][ T7855] ? do_vfs_ioctl+0x226/0x13e0 [ 228.460402][ T7855] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 228.460415][ T7855] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 228.460432][ T7855] ? __fget_files+0x215/0x3d0 [ 228.460448][ T7855] ? hook_file_ioctl_common+0x140/0x440 [ 228.460464][ T7855] ? __fget_files+0x21f/0x3d0 [ 228.460481][ T7855] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 228.460494][ T7855] compat_ptr_ioctl+0x6e/0xa0 [ 228.460507][ T7855] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 228.460520][ T7855] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.460535][ T7855] __do_fast_syscall_32+0xe7/0x970 [ 228.460546][ T7855] ? lockdep_hardirqs_on+0x78/0x100 [ 228.460563][ T7855] do_fast_syscall_32+0x32/0x70 [ 228.460573][ T7855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.460589][ T7855] RIP: 0023:0xf7f93fec [ 228.460606][ T7855] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 228.460611][ T7855] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 228.460623][ T7855] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0145b0d [ 228.460631][ T7855] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.460637][ T7855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.460648][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.460654][ T7855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.460667][ T7855] [ 228.461988][ T5843] usb 7-1: USB disconnect, device number 26 [ 228.498753][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 228.553332][ T7866] overlayfs: missing 'lowerdir' [ 228.589398][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 228.670737][ T7869] program syz.0.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.678148][ T7869] ata1.00: invalid service action 31 [ 228.691744][ T7869] wireguard: wg0: Could not create IPv4 socket [ 228.794210][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 228.797790][ T7873] netlink: 'syz.1.513': attribute type 7 has an invalid length. [ 228.802246][ T7873] netlink: 'syz.1.513': attribute type 8 has an invalid length. [ 228.807415][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 230.491470][ T7890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 230.494565][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.507572][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 230.524703][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 230.547765][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 230.568956][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 230.807185][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 230.811145][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 230.819460][ T7898] overlayfs: missing 'lowerdir' [ 230.822268][ T5836] usb 42-1: SetAddress Request (2) to port 0 [ 230.827941][ T5836] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 230.970041][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 230.985140][ T7891] vhci_hcd: connection reset by peer [ 230.996191][ T5861] vhci_hcd vhci_hcd.2: stop threads [ 231.000658][ T5861] vhci_hcd vhci_hcd.2: release socket [ 231.014230][ T5861] vhci_hcd vhci_hcd.2: disconnect device [ 231.050665][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'. [ 231.063193][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 231.087835][ T7912] overlayfs: missing 'lowerdir' [ 231.092458][ T7913] program syz.3.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.096561][ T7913] ata1.00: invalid service action 31 [ 231.127112][ T7913] wireguard: wg0: Could not create IPv4 socket [ 231.141069][ T7902] netlink: 144 bytes leftover after parsing attributes in process `syz.0.523'. [ 231.300167][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.528'. [ 231.314446][ T7921] overlayfs: missing 'lowerdir' [ 231.448468][ T7916] program syz.1.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.462171][ T7916] ata1.00: invalid service action 31 [ 231.468433][ T7916] wireguard: wg0: Could not create IPv4 socket [ 231.480106][ T7928] program syz.0.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.483588][ T7928] ata1.00: invalid service action 31 [ 232.029889][ T7935] overlayfs: missing 'lowerdir' [ 232.612190][ T55] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 232.762199][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 232.767532][ T55] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 232.771859][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 232.776752][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 232.780945][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 232.786520][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 232.791585][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.799787][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.804500][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.016571][ T55] usb 8-1: GET_CAPABILITIES returned 0 [ 233.018881][ T55] usbtmc 8-1:16.0: can't read capabilities [ 233.223629][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 233.227552][ T7943] usbtmc 8-1:16.0: Unable to send data, error -71 [ 233.231598][ T55] usb 8-1: USB disconnect, device number 24 [ 233.273478][ T7952] program syz.1.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.279437][ T7952] ata1.00: invalid service action 31 [ 233.289087][ T7952] wireguard: wg0: Could not create IPv4 socket [ 233.559346][ T7954] fuse: Unknown parameter '0x000000000000000a' [ 233.766295][ T55] Process accounting resumed [ 234.002523][ T7960] fuse: Unknown parameter '0x000000000000000a' [ 234.293519][ T7964] program syz.2.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.307095][ T7964] ata1.00: invalid service action 31 [ 234.335371][ T7964] wireguard: wg0: Could not create IPv4 socket [ 234.979850][ T7970] program syz.3.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.989961][ T7970] ata1.00: invalid service action 31 [ 235.892679][ T5836] usb 42-1: device descriptor read/8, error -110 [ 236.146223][ T5843] Process accounting resumed [ 236.811147][ T7988] program syz.0.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.817152][ T5836] usb usb42-port1: attempt power cycle [ 236.819605][ T7988] ata1.00: invalid service action 31 [ 237.028474][ T7992] __nla_validate_parse: 5 callbacks suppressed [ 237.028491][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'. [ 237.035385][ T7992] netlink: 'syz.2.546': attribute type 7 has an invalid length. [ 237.040300][ T7992] netlink: 'syz.2.546': attribute type 8 has an invalid length. [ 237.044952][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 237.484777][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 237.705903][ T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 237.808882][ T5836] usb usb42-port1: unable to enumerate USB device [ 237.839637][ T8006] program syz.0.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.843198][ T8006] ata1.00: invalid service action 31 [ 237.846547][ T8006] wireguard: wg0: Could not create IPv4 socket [ 237.872489][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 237.937405][ T29] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 237.941673][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 237.946814][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.961072][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 237.967248][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 237.984304][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.008852][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.028387][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.275272][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 238.278333][ T29] usbtmc 6-1:16.0: can't read capabilities [ 238.476645][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 238.481090][ T7990] usbtmc 6-1:16.0: Unable to send data, error -71 [ 238.527222][ T29] usb 6-1: USB disconnect, device number 26 [ 238.586121][ T8013] fuse: Unknown parameter '0x000000000000000b' [ 238.759420][ T8018] FAULT_INJECTION: forcing a failure. [ 238.759420][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 238.766244][ T8018] CPU: 3 UID: 0 PID: 8018 Comm: syz.2.557 Not tainted syzkaller #0 PREEMPT(full) [ 238.766271][ T8018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.766281][ T8018] Call Trace: [ 238.766287][ T8018] [ 238.766295][ T8018] dump_stack_lvl+0x100/0x190 [ 238.766319][ T8018] should_fail_ex.cold+0x5/0xa [ 238.766339][ T8018] should_failslab+0xc2/0x120 [ 238.766359][ T8018] __kmalloc_noprof+0xfc/0x820 [ 238.766375][ T8018] ? rcu_is_watching+0x12/0xc0 [ 238.766394][ T8018] ? tomoyo_realpath_from_path+0xb6/0x690 [ 238.766418][ T8018] tomoyo_realpath_from_path+0xb6/0x690 [ 238.766443][ T8018] tomoyo_path_number_perm+0x23c/0x580 [ 238.766459][ T8018] ? tomoyo_path_number_perm+0x22e/0x580 [ 238.766477][ T8018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.766495][ T8018] ? get_pid_task+0x106/0x250 [ 238.766531][ T8018] ? find_held_lock+0x2b/0x80 [ 238.766549][ T8018] ? __fget_files+0x215/0x3d0 [ 238.766571][ T8018] ? hook_file_ioctl_common+0x140/0x440 [ 238.766587][ T8018] ? __fget_files+0x215/0x3d0 [ 238.766612][ T8018] ? __fget_files+0x21f/0x3d0 [ 238.766637][ T8018] security_file_ioctl_compat+0xd3/0x230 [ 238.766656][ T8018] __ia32_compat_sys_ioctl+0xc2/0x360 [ 238.766679][ T8018] __do_fast_syscall_32+0xe7/0x970 [ 238.766696][ T8018] ? lockdep_hardirqs_on+0x78/0x100 [ 238.766719][ T8018] do_fast_syscall_32+0x32/0x70 [ 238.766734][ T8018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.766754][ T8018] RIP: 0023:0xf7f93fec [ 238.766776][ T8018] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 238.766783][ T8018] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 238.766801][ T8018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 238.766811][ T8018] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.766820][ T8018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.766830][ T8018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 238.766839][ T8018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.766859][ T8018] [ 238.766867][ T8018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.084523][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 239.087749][ T8035] netlink: 'syz.2.560': attribute type 7 has an invalid length. [ 239.090285][ T8035] netlink: 'syz.2.560': attribute type 8 has an invalid length. [ 239.099567][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 244.420546][ T8062] FAULT_INJECTION: forcing a failure. [ 244.420546][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.425450][ T8062] CPU: 3 UID: 0 PID: 8062 Comm: syz.0.568 Not tainted syzkaller #0 PREEMPT(full) [ 244.425466][ T8062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.425473][ T8062] Call Trace: [ 244.425477][ T8062] [ 244.425482][ T8062] dump_stack_lvl+0x100/0x190 [ 244.425499][ T8062] should_fail_ex.cold+0x5/0xa [ 244.425512][ T8062] _copy_to_iter+0x1f3/0x1720 [ 244.425530][ T8062] ? __pfx__copy_to_iter+0x10/0x10 [ 244.425550][ T8062] simple_copy_to_iter+0x46/0x90 [ 244.425567][ T8062] __skb_datagram_iter+0x5c8/0x900 [ 244.425582][ T8062] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 244.425603][ T8062] skb_copy_datagram_iter+0xa1/0x250 [ 244.425620][ T8062] tcp_recvmsg_locked+0x2221/0x2a30 [ 244.425638][ T8062] ? do_raw_spin_lock+0x128/0x260 [ 244.425651][ T8062] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 244.425666][ T8062] ? __local_bh_enable_ip+0x9e/0x120 [ 244.425679][ T8062] tcp_recvmsg+0x141/0x630 [ 244.425692][ T8062] ? __pfx_tcp_recvmsg+0x10/0x10 [ 244.425706][ T8062] ? is_bpf_text_address+0x8a/0x1a0 [ 244.425724][ T8062] ? __pfx_tcp_recvmsg+0x10/0x10 [ 244.425736][ T8062] inet_recvmsg+0xd5/0x4c0 [ 244.425746][ T8062] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 244.425762][ T8062] ? __pfx_inet_recvmsg+0x10/0x10 [ 244.425773][ T8062] sock_recvmsg+0x1b8/0x220 [ 244.425789][ T8062] ____sys_recvmsg+0x21e/0x670 [ 244.425805][ T8062] ? __pfx_____sys_recvmsg+0x10/0x10 [ 244.425826][ T8062] ? __lock_acquire+0x49f/0x1a40 [ 244.425843][ T8062] ___sys_recvmsg+0x16a/0x1a0 [ 244.425859][ T8062] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.425885][ T8062] do_recvmmsg+0x54d/0x740 [ 244.425903][ T8062] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.425919][ T8062] ? find_held_lock+0x2b/0x80 [ 244.425931][ T8062] ? ksys_write+0x190/0x250 [ 244.425947][ T8062] ? ksys_write+0x190/0x250 [ 244.425967][ T8062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.425992][ T8062] __sys_recvmmsg+0x21f/0x270 [ 244.426005][ T8062] ? __pfx___sys_recvmmsg+0x10/0x10 [ 244.426018][ T8062] ? ksys_write+0x1ac/0x250 [ 244.426036][ T8062] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 244.426051][ T8062] ? __do_fast_syscall_32+0x98/0x970 [ 244.426061][ T8062] ? lockdep_hardirqs_on+0x78/0x100 [ 244.426108][ T8062] __do_fast_syscall_32+0xe7/0x970 [ 244.426117][ T8062] ? lockdep_hardirqs_on+0x78/0x100 [ 244.426134][ T8062] do_fast_syscall_32+0x32/0x70 [ 244.426144][ T8062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.426159][ T8062] RIP: 0023:0xf6ffefec [ 244.426175][ T8062] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 244.426180][ T8062] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 244.426192][ T8062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00 [ 244.426199][ T8062] RDX: 0000000000000256 RSI: 0000000000010022 RDI: 0000000000000000 [ 244.426205][ T8062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.426211][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.426217][ T8062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.426230][ T8062] [ 244.875991][ T846] IPVS: starting estimator thread 0... [ 244.912747][ T55] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 245.002204][ T8076] IPVS: using max 37 ests per chain, 88800 per kthread [ 245.005721][ T5857] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 245.082489][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 245.093380][ T55] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 245.100344][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 245.106859][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.112763][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 245.117440][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 245.121709][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.130771][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.134303][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.142210][ T5857] usb 8-1: device descriptor read/64, error -71 [ 245.341388][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 245.343608][ T55] usbtmc 5-1:16.0: can't read capabilities [ 245.392221][ T5857] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 245.521915][ T8082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.573'. [ 245.523504][ T5857] usb 8-1: device descriptor read/64, error -71 [ 245.542469][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 245.546581][ T8066] usbtmc 5-1:16.0: Unable to send data, error -71 [ 245.549734][ T55] usb 5-1: USB disconnect, device number 19 [ 245.604972][ T8087] ======================================================= [ 245.604972][ T8087] WARNING: The mand mount option has been deprecated and [ 245.604972][ T8087] and is ignored by this kernel. Remove the mand [ 245.604972][ T8087] option from the mount to silence this warning. [ 245.604972][ T8087] ======================================================= [ 245.626768][ T8087] FAULT_INJECTION: forcing a failure. [ 245.626768][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 245.631608][ T8087] CPU: 2 UID: 0 PID: 8087 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) [ 245.631625][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.631632][ T8087] Call Trace: [ 245.631639][ T8087] [ 245.631645][ T8087] dump_stack_lvl+0x100/0x190 [ 245.631663][ T8087] should_fail_ex.cold+0x5/0xa [ 245.631676][ T8087] should_failslab+0xc2/0x120 [ 245.631691][ T8087] __kmalloc_noprof+0xfc/0x820 [ 245.631704][ T8087] ? tomoyo_encode2+0xfb/0x3c0 [ 245.631721][ T8087] tomoyo_encode2+0xfb/0x3c0 [ 245.631737][ T8087] tomoyo_encode+0x29/0x50 [ 245.631750][ T8087] tomoyo_realpath_from_path+0x18c/0x690 [ 245.631767][ T8087] tomoyo_path_perm+0x276/0x460 [ 245.631780][ T8087] ? tomoyo_path_perm+0x262/0x460 [ 245.631792][ T8087] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 245.631803][ T8087] ? __pfx_stack_trace_save+0x10/0x10 [ 245.631818][ T8087] ? stack_depot_save_flags+0x27/0x9d0 [ 245.631834][ T8087] ? __lock_acquire+0x49f/0x1a40 [ 245.631852][ T8087] ? __kasan_slab_free+0x5f/0x80 [ 245.631865][ T8087] ? kmem_cache_free+0x127/0x6b0 [ 245.631882][ T8087] ? putname+0xb1/0x110 [ 245.631891][ T8087] ? user_path_at+0x46/0x60 [ 245.631917][ T8087] tomoyo_sb_umount+0x8c/0xd0 [ 245.631933][ T8087] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 245.631951][ T8087] security_sb_umount+0xc4/0x210 [ 245.631970][ T8087] path_umount+0x328/0x1260 [ 245.631990][ T8087] ? putname+0xb1/0x110 [ 245.632000][ T8087] ? __pfx_path_umount+0x10/0x10 [ 245.632017][ T8087] ? putname+0xb6/0x110 [ 245.632029][ T8087] __ia32_sys_umount+0x169/0x190 [ 245.632059][ T8087] ? __pfx___ia32_sys_umount+0x10/0x10 [ 245.632080][ T8087] __do_fast_syscall_32+0xe7/0x970 [ 245.632091][ T8087] ? lockdep_hardirqs_on+0x78/0x100 [ 245.632110][ T8087] do_fast_syscall_32+0x32/0x70 [ 245.632121][ T8087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.632135][ T8087] RIP: 0023:0xf7f93fec [ 245.632152][ T8087] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 245.632157][ T8087] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 245.632168][ T8087] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000002 [ 245.632175][ T8087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.632181][ T8087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.632198][ T8087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.632216][ T8087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.632231][ T8087] [ 245.633130][ T5857] usb usb8-port1: attempt power cycle [ 245.636091][ T8087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.972200][ T5857] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 245.994064][ T5857] usb 8-1: device descriptor read/8, error -71 [ 246.242252][ T5857] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 246.264197][ T5857] usb 8-1: device descriptor read/8, error -71 [ 246.373231][ T5857] usb usb8-port1: unable to enumerate USB device [ 247.355688][ T8097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.577'. [ 247.694972][ T8100] Bluetooth: hci4: Frame reassembly failed (-84) [ 247.754518][ T41] Bluetooth: hci4: Frame reassembly failed (-84) [ 247.758312][ T41] Bluetooth: hci4: Frame reassembly failed (-84) [ 249.070762][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880005b1c00: rx timeout, send abort [ 249.075913][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880005b1c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 249.724905][ T5102] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 249.921900][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.587'. [ 249.934163][ T8130] FAULT_INJECTION: forcing a failure. [ 249.934163][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.940791][ T8130] CPU: 2 UID: 0 PID: 8130 Comm: syz.3.587 Not tainted syzkaller #0 PREEMPT(full) [ 249.940818][ T8130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.940828][ T8130] Call Trace: [ 249.940837][ T8130] [ 249.940845][ T8130] dump_stack_lvl+0x100/0x190 [ 249.940871][ T8130] should_fail_ex.cold+0x5/0xa [ 249.940891][ T8130] strncpy_from_user+0x3b/0x2d0 [ 249.940917][ T8130] __do_sys_add_key+0xd4/0x460 [ 249.940945][ T8130] ? __pfx___do_sys_add_key+0x10/0x10 [ 249.940968][ T8130] ? fput+0x79/0x100 [ 249.940988][ T8130] ? syscall_user_dispatch+0x76/0x130 [ 249.941022][ T8130] __do_fast_syscall_32+0xe7/0x970 [ 249.941039][ T8130] ? lockdep_hardirqs_on+0x78/0x100 [ 249.941064][ T8130] do_fast_syscall_32+0x32/0x70 [ 249.941081][ T8130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.941102][ T8130] RIP: 0023:0xf7f42fec [ 249.941132][ T8130] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 249.941139][ T8130] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 249.941156][ T8130] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 249.941168][ T8130] RDX: 0000000080000000 RSI: 000000000000002c RDI: 00000000ffffffff [ 249.941177][ T8130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.941187][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.941198][ T8130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.941220][ T8130] [ 251.523535][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.589'. [ 251.528535][ T8139] netlink: 'syz.3.589': attribute type 7 has an invalid length. [ 251.536204][ T8139] netlink: 'syz.3.589': attribute type 8 has an invalid length. [ 251.544385][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 252.559976][ T8148] FAULT_INJECTION: forcing a failure. [ 252.559976][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 252.567074][ T8148] CPU: 3 UID: 0 PID: 8148 Comm: syz.0.592 Not tainted syzkaller #0 PREEMPT(full) [ 252.567103][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.567131][ T8148] Call Trace: [ 252.567138][ T8148] [ 252.567146][ T8148] dump_stack_lvl+0x100/0x190 [ 252.567197][ T8148] should_fail_ex.cold+0x5/0xa [ 252.567218][ T8148] should_failslab+0xc2/0x120 [ 252.567240][ T8148] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 252.567262][ T8148] ? __alloc_skb+0x140/0x710 [ 252.567284][ T8148] __alloc_skb+0x140/0x710 [ 252.567299][ T8148] ? __alloc_skb+0x5b7/0x710 [ 252.567315][ T8148] ? __pfx___alloc_skb+0x10/0x10 [ 252.567339][ T8148] mptcp_event_pm_listener+0x173/0x4b0 [ 252.567359][ T8148] ? tcp_release_cb_override+0x120/0x190 [ 252.567377][ T8148] ? __pfx_mptcp_event_pm_listener+0x10/0x10 [ 252.567398][ T8148] ? rcu_is_watching+0x12/0xc0 [ 252.567417][ T8148] ? trace_inet_sock_set_state+0x78/0x220 [ 252.567434][ T8148] mptcp_listen+0x40d/0x4c0 [ 252.567455][ T8148] ? __pfx_mptcp_listen+0x10/0x10 [ 252.567475][ T8148] ? apparmor_socket_listen+0xf2/0x1a0 [ 252.567499][ T8148] __sys_listen_socket+0x108/0x150 [ 252.567523][ T8148] __sys_listen+0xa7/0x130 [ 252.567546][ T8148] __ia32_sys_listen+0x53/0x80 [ 252.567569][ T8148] __do_fast_syscall_32+0xe7/0x970 [ 252.567584][ T8148] ? lockdep_hardirqs_on+0x78/0x100 [ 252.567608][ T8148] do_fast_syscall_32+0x32/0x70 [ 252.567623][ T8148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.567646][ T8148] RIP: 0023:0xf6ffefec [ 252.567669][ T8148] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 252.567675][ T8148] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016b [ 252.567693][ T8148] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000fffffffc [ 252.567703][ T8148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.567712][ T8148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.567722][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.567731][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.567753][ T8148] [ 253.316698][ T8159] program syz.1.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.341883][ T8159] ata1.00: invalid service action 31 [ 253.360661][ T8159] wireguard: wg0: Could not create IPv4 socket [ 253.577608][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 253.591488][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 253.596265][ T8164] program syz.3.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.612549][ T8164] ata1.00: invalid service action 31 [ 253.684074][ T8164] wireguard: wg0: Could not create IPv4 socket [ 254.345517][ T5911] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 254.563687][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 255.706395][ T5911] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 255.718914][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 255.737220][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 255.750849][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 255.768907][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 255.778952][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.795703][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.806295][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.831765][ T4052] Process accounting resumed [ 256.212592][ T5911] usb 6-1: GET_CAPABILITIES returned 0 [ 256.216599][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 257.629108][ T10] usb 6-1: USB disconnect, device number 27 [ 257.712290][ T5866] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.068119][ T8198] program syz.2.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.074695][ T8198] ata1.00: invalid service action 31 [ 258.079897][ T8198] wireguard: wg0: Could not create IPv4 socket [ 258.480096][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 258.486892][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 258.662341][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 258.671025][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 258.681260][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.685329][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.689520][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.696712][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.700992][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.719880][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 258.733023][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 258.956642][ T5866] usb 5-1: GET_CAPABILITIES returned 0 [ 258.958950][ T5866] usbtmc 5-1:16.0: can't read capabilities [ 259.011573][ T8217] program syz.2.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.015738][ T8217] ata1.00: invalid service action 31 [ 259.309390][ T8220] FAULT_INJECTION: forcing a failure. [ 259.309390][ T8220] name failslab, interval 1, probability 0, space 0, times 0 [ 259.318842][ T8220] CPU: 3 UID: 0 PID: 8220 Comm: syz.3.610 Not tainted syzkaller #0 PREEMPT(full) [ 259.318861][ T8220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.318869][ T8220] Call Trace: [ 259.318874][ T8220] [ 259.318878][ T8220] dump_stack_lvl+0x100/0x190 [ 259.318897][ T8220] should_fail_ex.cold+0x5/0xa [ 259.318911][ T8220] should_failslab+0xc2/0x120 [ 259.318926][ T8220] kmem_cache_alloc_noprof+0x91/0x6a0 [ 259.318939][ T8220] ? do_getname+0x35/0x390 [ 259.318954][ T8220] do_getname+0x35/0x390 [ 259.318967][ T8220] do_sys_openat2+0xc7/0x1e0 [ 259.318981][ T8220] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.318995][ T8220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.319020][ T8220] __ia32_compat_sys_openat+0x12d/0x210 [ 259.319034][ T8220] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 259.319051][ T8220] ? fput+0x79/0x100 [ 259.319062][ T8220] ? ksys_write+0x1ac/0x250 [ 259.319109][ T8220] ? __pfx_ksys_write+0x10/0x10 [ 259.319132][ T8220] __do_fast_syscall_32+0xe7/0x970 [ 259.319143][ T8220] ? lockdep_hardirqs_on+0x78/0x100 [ 259.319174][ T8220] do_fast_syscall_32+0x32/0x70 [ 259.319185][ T8220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.319200][ T8220] RIP: 0023:0xf7f42fec [ 259.319216][ T8220] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 259.319220][ T8220] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 259.319231][ T8220] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 259.319238][ T8220] RDX: 0000000000040242 RSI: 0000000000000001 RDI: 0000000000000000 [ 259.319244][ T8220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.319250][ T8220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.319257][ T8220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.319270][ T8220] [ 259.320740][ T8220] ALSA: mixer_oss: invalid OSS volume 'u' [ 259.885646][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 259.901140][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 260.111045][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'. [ 260.114846][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 260.163971][ T8241] netlink: 220 bytes leftover after parsing attributes in process `syz.3.616'. [ 260.169001][ T8241] netlink: 144 bytes leftover after parsing attributes in process `syz.3.616'. [ 260.307979][ T5866] usb 5-1: USB disconnect, device number 20 [ 260.499324][ T8249] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 260.835202][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.837924][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.024638][ T8236] Illegal XDP return value 8236 on prog (id 11) dev N/A, expect packet loss! [ 261.248890][ T8260] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.272207][ T8260] ata1.00: invalid service action 31 [ 261.283492][ T8260] wireguard: wg0: Could not create IPv4 socket [ 261.716906][ T5836] Process accounting resumed [ 261.923031][ C3] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 261.929433][ C3] sr 2:0:0:0: [sr0] tag#22 CDB: ATA command pass through(16) [ 261.932783][ C3] sr 2:0:0:0: [sr0] tag#22 CDB[00]: 85 36 b6 0b fa d6 6e 0d 02 27 75 e7 13 6f 4f 8e [ 261.936790][ C3] sr 2:0:0:0: [sr0] tag#22 CDB[10]: 31 ca 19 8f da 87 37 30 27 3a c9 36 ac 05 55 17 [ 263.463171][ T8296] netlink: 'syz.0.632': attribute type 7 has an invalid length. [ 263.467783][ T8296] netlink: 'syz.0.632': attribute type 8 has an invalid length. [ 263.696126][ T8306] program syz.2.637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.710261][ T8306] ata1.00: invalid service action 31 [ 263.734249][ T8306] wireguard: wg0: Could not create IPv4 socket [ 264.063504][ T5836] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 264.272474][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 264.287742][ T8324] program syz.1.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.297527][ T8324] ata1.00: invalid service action 31 [ 264.311686][ T8324] wireguard: wg0: Could not create IPv4 socket [ 264.313769][ T5836] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 264.318282][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 264.334714][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.339158][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 264.344247][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 264.348885][ T5836] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.354393][ T5836] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.358653][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.688203][ T5836] usb 8-1: GET_CAPABILITIES returned 0 [ 264.691967][ T5836] usbtmc 8-1:16.0: can't read capabilities [ 264.889979][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 264.895699][ T8301] usbtmc 8-1:16.0: Unable to send data, error -71 [ 264.903759][ T5836] usb 8-1: USB disconnect, device number 29 [ 265.124589][ T8330] __nla_validate_parse: 6 callbacks suppressed [ 265.124608][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 265.142169][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 265.240726][ T8333] program syz.0.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.245333][ T8333] ata1.00: invalid service action 31 [ 265.249711][ T8333] wireguard: wg0: Could not create IPv4 socket [ 265.654852][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 265.659511][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 265.664316][ T8340] overlayfs: missing 'lowerdir' [ 265.739959][ T8345] comedi: valid board names for 8255 driver are: [ 265.743654][ T8345] 8255 [ 265.744947][ T8345] comedi: valid board names for vmk80xx driver are: [ 265.750242][ T8345] vmk80xx [ 265.752010][ T8345] comedi: valid board names for usbduxsigma driver are: [ 265.760077][ T8345] usbduxsigma [ 265.761536][ T8345] comedi: valid board names for usbduxfast driver are: [ 265.764425][ T8345] usbduxfast [ 265.765762][ T8345] comedi: valid board names for usbdux driver are: [ 265.769277][ T8345] usbdux [ 265.770534][ T8345] comedi: valid board names for ni6501 driver are: [ 265.775800][ T8345] ni6501 [ 265.776977][ T8345] comedi: valid board names for dt9812 driver are: [ 265.779492][ T8345] dt9812 [ 265.780649][ T8345] comedi: valid board names for ni_labpc_cs driver are: [ 265.783434][ T8345] ni_labpc_cs [ 265.784781][ T8345] comedi: valid board names for ni_daq_700 driver are: [ 265.787455][ T8345] ni_daq_700 [ 265.788789][ T8345] comedi: valid board names for labpc_pci driver are: [ 265.791757][ T8345] labpc_pci [ 265.793470][ T8345] comedi: valid board names for adl_pci9118 driver are: [ 265.796350][ T8345] pci9118dg [ 265.797806][ T8345] pci9118hg [ 265.799225][ T8345] pci9118hr [ 265.800645][ T8345] comedi: valid board names for 8255_pci driver are: [ 265.803495][ T8345] 8255_pci [ 265.805000][ T8345] comedi: valid board names for s526 driver are: [ 265.808161][ T8345] s526 [ 265.809963][ T8345] comedi: valid board names for multiq3 driver are: [ 265.813664][ T8345] multiq3 [ 265.815060][ T8345] comedi: valid board names for pcmuio driver are: [ 265.817663][ T8345] pcmuio48 [ 265.819104][ T8345] pcmuio96 [ 265.820489][ T8345] comedi: valid board names for pcmmio driver are: [ 265.823233][ T8345] pcmmio [ 265.824501][ T8345] comedi: valid board names for pcmda12 driver are: [ 265.827189][ T8345] pcmda12 [ 265.828584][ T8345] comedi: valid board names for pcmad driver are: [ 265.831975][ T8345] pcmad12 [ 265.833741][ T8345] pcmad16 [ 265.835230][ T8345] comedi: valid board names for ni_labpc driver are: [ 265.838016][ T8345] lab-pc-1200 [ 265.839483][ T8345] lab-pc-1200ai [ 265.840976][ T8345] lab-pc+ [ 265.848095][ T8345] comedi: valid board names for atmio16 driver are: [ 265.851482][ T8345] atmio16 [ 265.853180][ T8345] atmio16d [ 265.854793][ T8345] comedi: valid board names for ni_at_ao driver are: [ 265.857492][ T8345] at-ao-6 [ 265.858794][ T8345] at-ao-10 [ 265.860129][ T8345] comedi: valid board names for ni_at_a2150 driver are: [ 265.863710][ T8345] ni_at_a2150 [ 265.865534][ T8345] comedi: valid board names for adq12b driver are: [ 265.868451][ T8345] adq12b [ 265.869996][ T8345] comedi: valid board names for mpc624 driver are: [ 265.874644][ T8345] mpc624 [ 265.876220][ T8345] comedi: valid board names for c6xdigio driver are: [ 265.878925][ T8345] c6xdigio [ 265.880280][ T8345] comedi: valid board names for aio_iiro_16 driver are: [ 265.883143][ T8345] aio_iiro_16 [ 265.884705][ T8345] comedi: valid board names for aio_aio12_8 driver are: [ 265.888058][ T8345] aio_aio12_8 [ 265.889818][ T8345] aio_ai12_8 [ 265.891414][ T8345] aio_ao12_4 [ 265.892918][ T8345] comedi: valid board names for fl512 driver are: [ 265.895598][ T8345] fl512 [ 265.896831][ T8345] comedi: valid board names for dmm32at driver are: [ 265.899668][ T8345] dmm32at [ 265.901046][ T8345] comedi: valid board names for dt282x driver are: [ 265.904925][ T8345] dt2821 [ 265.906701][ T8345] dt2821-f [ 265.908366][ T8345] dt2821-g [ 265.909916][ T8345] dt2823 [ 265.911284][ T8345] dt2824-pgh [ 265.912911][ T8345] dt2824-pgl [ 265.914391][ T8345] dt2825 [ 265.915669][ T8345] dt2827 [ 265.916949][ T8345] dt2828 [ 265.918215][ T8345] dt2829 [ 265.919508][ T8345] dt21-ez [ 265.921016][ T8345] dt23-ez [ 265.922411][ T8345] dt24-ez [ 265.923736][ T8345] dt24-ez-pgl [ 265.925385][ T8345] comedi: valid board names for dt2817 driver are: [ 265.929122][ T8345] dt2817 [ 265.930827][ T8345] comedi: valid board names for dt2815 driver are: [ 265.934874][ T8345] dt2815 [ 265.936120][ T8345] comedi: valid board names for dt2814 driver are: [ 265.938606][ T8345] dt2814 [ 265.939861][ T8345] comedi: valid board names for dt2811 driver are: [ 265.942360][ T8345] dt2811-pgh [ 265.943770][ T8345] dt2811-pgl [ 265.945429][ T8345] comedi: valid board names for dt2801 driver are: [ 265.948056][ T8345] dt2801 [ 265.949405][ T8345] comedi: valid board names for das6402 driver are: [ 265.958298][ T8345] das6402-12 [ 265.961948][ T8345] das6402-16 [ 265.963703][ T8345] comedi: valid board names for das1800 driver are: [ 265.966352][ T8345] das-1701st [ 265.967724][ T8345] das-1701st-da [ 265.969463][ T8345] das-1702st [ 265.970841][ T8345] das-1702st-da [ 265.974292][ T8345] das-1702hr [ 265.975691][ T8345] das-1702hr-da [ 265.977112][ T8345] das-1701ao [ 265.978463][ T8345] das-1702ao [ 265.980072][ T8345] das-1801st [ 265.981420][ T8345] das-1801st-da [ 265.982911][ T8345] das-1802st [ 265.984334][ T8345] das-1802st-da [ 265.985685][ T8345] das-1802hr [ 265.987070][ T8345] das-1802hr-da [ 265.988430][ T8345] das-1801hc [ 265.989675][ T8345] das-1802hc [ 265.991251][ T8345] das-1801ao [ 265.992919][ T8345] das-1802ao [ 265.994401][ T8345] comedi: valid board names for das800 driver are: [ 265.997129][ T8345] das-800 [ 265.998413][ T8345] cio-das800 [ 265.999813][ T8345] das-801 [ 266.001046][ T8345] cio-das801 [ 266.002693][ T8345] das-802 [ 266.003998][ T8345] cio-das802 [ 266.005450][ T8345] cio-das802/16 [ 266.007036][ T8345] comedi: valid board names for isa-das08 driver are: [ 266.009855][ T8345] isa-das08 [ 266.011297][ T8345] das08-pgm [ 266.013050][ T8345] das08-pgh [ 266.014509][ T8345] das08-pgl [ 266.015955][ T8345] das08-aoh [ 266.017383][ T8345] das08-aol [ 266.018805][ T8345] das08-aom [ 266.020220][ T8345] das08/jr-ao [ 266.021668][ T8345] das08jr-16-ao [ 266.023551][ T8345] pc104-das08 [ 266.025082][ T8345] das08jr/16 [ 266.026526][ T8345] comedi: valid board names for das16m1 driver are: [ 266.029324][ T8345] das16m1 [ 266.030692][ T8345] comedi: valid board names for dac02 driver are: [ 266.033733][ T8345] dac02 [ 266.034964][ T8345] comedi: valid board names for rti802 driver are: [ 266.037386][ T8345] rti802 [ 266.038538][ T8345] comedi: valid board names for rti800 driver are: [ 266.041008][ T8345] rti800 [ 266.042225][ T8345] rti815 [ 266.043426][ T8345] comedi: valid board names for pcm3724 driver are: [ 266.046136][ T8345] pcm3724 [ 266.047484][ T8345] comedi: valid board names for pcl818 driver are: [ 266.050073][ T8345] pcl818l [ 266.051368][ T8345] pcl818h [ 266.052711][ T8345] pcl818hd [ 266.053997][ T8345] pcl818hg [ 266.055381][ T8345] pcl818 [ 266.056854][ T8345] pcl718 [ 266.058098][ T8345] pcm3718 [ 266.059408][ T8345] comedi: valid board names for pcl816 driver are: [ 266.061939][ T8345] pcl816 [ 266.064304][ T8345] pcl814b [ 266.065688][ T8345] comedi: valid board names for pcl812 driver are: [ 266.068605][ T8345] pcl812 [ 266.072006][ T8345] pcl812pg [ 266.073595][ T8345] acl8112pg [ 266.076265][ T8345] acl8112dg [ 266.077918][ T8345] acl8112hg [ 266.079650][ T8345] a821pgl [ 266.081059][ T8345] a821pglnda [ 266.083357][ T8345] a821pgh [ 266.084745][ T8345] a822pgl [ 266.086056][ T8345] a822pgh [ 266.087368][ T8345] a823pgl [ 266.088769][ T8345] a823pgh [ 266.090354][ T8345] pcl813 [ 266.091985][ T8345] pcl813b [ 266.093787][ T8345] acl8113 [ 266.095697][ T8345] iso813 [ 266.097517][ T8345] acl8216 [ 266.098933][ T8345] a826pg [ 266.100647][ T8345] comedi: valid board names for pcl730 driver are: [ 266.103661][ T8345] pcl730 [ 266.104974][ T8345] iso730 [ 266.106244][ T8345] acl7130 [ 266.107586][ T8345] pcm3730 [ 266.108945][ T8345] pcl725 [ 266.110233][ T8345] p8r8dio [ 266.111844][ T8345] acl7225b [ 266.113334][ T8345] p16r16dio [ 266.114670][ T8345] pcl733 [ 266.115866][ T8345] pcl734 [ 266.118651][ T8345] opmm-1616-xt [ 266.120307][ T8345] pearl-mm-p [ 266.122143][ T8345] ir104-pbf [ 266.123669][ T8345] comedi: valid board names for pcl726 driver are: [ 266.126534][ T8345] pcl726 [ 266.127865][ T8345] pcl727 [ 266.129155][ T8345] pcl728 [ 266.130454][ T8345] acl6126 [ 266.131811][ T8345] acl6128 [ 266.133395][ T8345] comedi: valid board names for pcl724 driver are: [ 266.136071][ T8345] pcl724 [ 266.137357][ T8345] pcl722 [ 266.138615][ T8345] pcl731 [ 266.139880][ T8345] acl7122 [ 266.141146][ T8345] acl7124 [ 266.142490][ T8345] pet48dio [ 266.143971][ T8345] pcmio48 [ 266.145231][ T8345] onyx-mm-dio [ 266.146692][ T8345] comedi: valid board names for pcl711 driver are: [ 266.149294][ T8345] pcl711 [ 266.150508][ T8345] pcl711b [ 266.151811][ T8345] acl8112hg [ 266.153200][ T8345] acl8112dg [ 266.154821][ T8345] comedi: valid board names for amplc_pc263 driver are: [ 266.157553][ T8345] pc263 [ 266.158719][ T8345] comedi: valid board names for amplc_pc236 driver are: [ 266.161211][ T8345] pc36at [ 266.162411][ T8345] comedi: valid board names for amplc_dio200 driver are: [ 266.165369][ T8345] pc212e [ 266.166566][ T8345] pc214e [ 266.167769][ T8345] pc215e [ 266.168979][ T8345] pc218e [ 266.170261][ T8345] pc272e [ 266.171561][ T8345] comedi: valid board names for comedi_parport driver are: [ 266.174534][ T8345] comedi_parport [ 266.176278][ T8345] comedi: valid board names for comedi_test driver are: [ 266.179562][ T8345] comedi_test [ 266.181042][ T8345] comedi: valid board names for comedi_bond driver are: [ 266.183931][ T8345] comedi_bond [ 267.112842][ T8351] FAULT_INJECTION: forcing a failure. [ 267.112842][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 267.117803][ T8351] CPU: 3 UID: 0 PID: 8351 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(full) [ 267.117821][ T8351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.117829][ T8351] Call Trace: [ 267.117835][ T8351] [ 267.117841][ T8351] dump_stack_lvl+0x100/0x190 [ 267.117859][ T8351] should_fail_ex.cold+0x5/0xa [ 267.117873][ T8351] should_failslab+0xc2/0x120 [ 267.117888][ T8351] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 267.117902][ T8351] ? __alloc_skb+0x140/0x710 [ 267.117916][ T8351] __alloc_skb+0x140/0x710 [ 267.117926][ T8351] ? __alloc_skb+0x5b7/0x710 [ 267.117936][ T8351] ? __pfx___alloc_skb+0x10/0x10 [ 267.117947][ T8351] ? if_nlmsg_size+0x4b/0xd80 [ 267.117962][ T8351] rtmsg_ifinfo_build_skb+0x81/0x260 [ 267.117980][ T8351] rtmsg_ifinfo+0xa4/0x1b0 [ 267.117996][ T8351] netif_close_many+0x2fc/0x630 [ 267.118014][ T8351] ? __pfx_netif_close_many+0x10/0x10 [ 267.118032][ T8351] netif_close+0x17f/0x230 [ 267.118046][ T8351] ? __pfx_netif_close+0x10/0x10 [ 267.118060][ T8351] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.118074][ T8351] dev_close+0xaa/0x240 [ 267.118092][ T8351] lapbeth_device_event+0x458/0xd20 [ 267.118110][ T8351] notifier_call_chain+0x99/0x3f0 [ 267.118126][ T8351] call_netdevice_notifiers_info+0xbe/0x110 [ 267.118142][ T8351] __dev_close_many+0xff/0x710 [ 267.118157][ T8351] ? __pfx___dev_close_many+0x10/0x10 [ 267.118173][ T8351] ? __local_bh_enable_ip+0x9e/0x120 [ 267.118187][ T8351] __dev_change_flags+0x307/0x850 [ 267.118199][ T8351] ? __pfx___dev_change_flags+0x10/0x10 [ 267.118210][ T8351] ? lock_acquire+0x1b9/0x370 [ 267.118228][ T8351] netif_change_flags+0x8d/0x160 [ 267.118240][ T8351] dev_change_flags+0xba/0x260 [ 267.118255][ T8351] dev_ifsioc+0x1659/0x1f10 [ 267.118269][ T8351] ? __pfx_dev_ifsioc+0x10/0x10 [ 267.118279][ T8351] ? __pfx___mutex_lock+0x10/0x10 [ 267.118301][ T8351] ? dev_load+0x8e/0x240 [ 267.118310][ T8351] ? dev_load+0x8e/0x240 [ 267.118324][ T8351] dev_ioctl+0x342/0x1070 [ 267.118336][ T8351] sock_do_ioctl+0x1a0/0x280 [ 267.118351][ T8351] ? __pfx_sock_do_ioctl+0x10/0x10 [ 267.118368][ T8351] ? do_vfs_ioctl+0x226/0x13e0 [ 267.118383][ T8351] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.118398][ T8351] compat_sock_ioctl+0x568/0x760 [ 267.118416][ T8351] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 267.118431][ T8351] ? hook_file_ioctl_common+0x140/0x440 [ 267.118447][ T8351] ? __fget_files+0x21f/0x3d0 [ 267.118478][ T8351] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 267.118497][ T8351] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 267.118513][ T8351] __do_fast_syscall_32+0xe7/0x970 [ 267.118524][ T8351] ? lockdep_hardirqs_on+0x78/0x100 [ 267.118541][ T8351] do_fast_syscall_32+0x32/0x70 [ 267.118552][ T8351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.118567][ T8351] RIP: 0023:0xf7f42fec [ 267.118586][ T8351] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 267.118591][ T8351] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 267.118603][ T8351] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000008914 [ 267.118609][ T8351] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.118616][ T8351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.118622][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.118628][ T8351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.118642][ T8351] [ 269.260433][ T42] audit: type=1326 audit(1783411510.338:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.657" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x0 [ 269.271487][ T8379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.650'. [ 269.442355][ T846] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 269.592178][ T846] usb 6-1: Using ep0 maxpacket: 8 [ 269.596538][ T846] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 269.600053][ T846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 269.605308][ T846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 269.608774][ T846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 269.613744][ T846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 269.617847][ T846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.624340][ T846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.627396][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.848305][ T846] usb 6-1: GET_CAPABILITIES returned 0 [ 269.861351][ T846] usbtmc 6-1:16.0: can't read capabilities [ 270.052189][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 270.056300][ T8381] usbtmc 6-1:16.0: Unable to send data, error -71 [ 270.061197][ T846] usb 6-1: USB disconnect, device number 28 [ 270.204905][ T8418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 270.225407][ T8418] netlink: 'syz.3.661': attribute type 7 has an invalid length. [ 270.255086][ T8418] netlink: 'syz.3.661': attribute type 8 has an invalid length. [ 270.258588][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 270.477017][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.496180][ T5102] Bluetooth: hci2: ACL packet for unknown connection handle 713 [ 271.767904][ T8441] program syz.0.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.771584][ T8441] ata1.00: invalid service action 31 [ 271.779691][ T8441] wireguard: wg0: Could not create IPv4 socket [ 271.823384][ T846] Process accounting resumed [ 272.181852][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 272.185919][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 272.195815][ T8444] overlayfs: missing 'lowerdir' [ 272.557511][ T8447] mmap: syz.1.670 (8447) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.769456][ T5911] Process accounting resumed [ 272.770696][ T8447] warning: `syz.1.670' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 272.937698][ T8453] tracefs: Unknown parameter 'Ñ' [ 273.055354][ T8456] input: syz0 as /devices/virtual/input/input6 [ 273.864893][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'. [ 273.873306][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 273.947629][ T55] Process accounting resumed [ 273.992345][ T8486] overlayfs: missing 'lowerdir' [ 274.132880][ T8482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.675'. [ 274.505464][ T42] audit: type=1326 audit(1783411515.588:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 274.525796][ T42] audit: type=1326 audit(1783411515.598:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94017 code=0x7ffc0000 [ 274.528783][ T5102] Bluetooth: hci3: unexpected event for opcode 0x042c [ 274.539355][ T42] audit: type=1326 audit(1783411515.598:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 274.556374][ T42] audit: type=1326 audit(1783411515.598:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94017 code=0x7ffc0000 [ 274.567786][ T42] audit: type=1326 audit(1783411515.598:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 274.576122][ T42] audit: type=1326 audit(1783411515.598:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94017 code=0x7ffc0000 [ 274.583586][ T42] audit: type=1326 audit(1783411515.598:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 274.591459][ T42] audit: type=1326 audit(1783411515.598:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94017 code=0x7ffc0000 [ 274.600557][ T42] audit: type=1326 audit(1783411515.598:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 274.607744][ T42] audit: type=1326 audit(1783411515.598:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.2.683" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94017 code=0x7ffc0000 [ 275.322353][ T5858] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 275.331865][ T5858] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 275.510991][ T5866] Process accounting resumed [ 275.516928][ T8530] sd 0:0:0:0: PR command failed: 1026 [ 275.519457][ T8530] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 275.522882][ T8530] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 275.664773][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'. [ 275.669611][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 275.697167][ T8536] overlayfs: missing 'lowerdir' [ 277.050624][ T8550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.694'. [ 277.316381][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 277.323043][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 277.333214][ T8561] overlayfs: missing 'lowerdir' [ 277.337059][ T8560] process 'syz.0.697' launched '/dev/fd/11' with NULL argv: empty string added [ 277.402340][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 277.402529][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.402580][ T5858] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 277.539739][ T8558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.696'. [ 277.614421][ T40] Process accounting resumed [ 278.541631][ T8578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.703'. [ 278.664226][ T8580] ptrace attach of "/syz-executor exec"[5752] was attempted by ""[8580] [ 279.044807][ T8584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 279.047519][ T8584] overlayfs: failed to set xattr on upper [ 279.049829][ T8584] overlayfs: ...falling back to redirect_dir=nofollow. [ 279.054992][ T8584] overlayfs: ...falling back to index=off. [ 279.058068][ T8584] overlayfs: ...falling back to uuid=null. [ 279.060363][ T8584] overlayfs: ...falling back to xino=off. [ 279.063838][ T8584] overlayfs: conflicting lowerdir path [ 279.132266][ T4052] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 279.472226][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 279.472397][ T5858] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 279.477981][ T5858] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 279.732257][ T5866] Process accounting resumed [ 280.941994][ T8610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.712'. [ 281.470805][ T8624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.715'. [ 281.552249][ T5858] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 281.556183][ T5858] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 281.562739][ C3] ------------[ cut here ]------------ [ 281.565395][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 281.568215][ C3] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#3: swapper/3/0 [ 281.572260][ C3] Modules linked in: [ 281.574511][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 281.578488][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.582680][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 281.584961][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 43 d3 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 281.593843][ C3] RSP: 0000:ffffc900005e8be0 EFLAGS: 00010046 [ 281.596150][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a27894e [ 281.599139][ C3] RDX: ffff8880272e6970 RSI: ffffffff8aa989c0 RDI: ffffffff91258bf0 [ 281.602723][ C3] RBP: ffff8880513c4a58 R08: 0000000000000005 R09: 0000000000000000 [ 281.606821][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880272e6800 [ 281.610261][ C3] R13: 0000000000000000 R14: ffffffff81cebe40 R15: 0000000000000001 [ 281.613260][ C3] FS: 0000000000000000(0000) GS:ffff888096ef5000(0000) knlGS:0000000000000000 [ 281.616889][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.619956][ C3] CR2: 0000000080022000 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 281.624142][ C3] Call Trace: [ 281.625758][ C3] [ 281.627026][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.629535][ C3] call_timer_fn+0x19a/0x610 [ 281.631557][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 281.634028][ C3] ? find_held_lock+0x2b/0x80 [ 281.636240][ C3] ? sched_ttwu_pending+0x4d0/0x6f0 [ 281.638815][ C3] ? __run_timers+0x560/0xb00 [ 281.641033][ C3] ? __run_timers+0x560/0xb00 [ 281.643235][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.645735][ C3] __run_timers+0x570/0xb00 [ 281.647787][ C3] ? __pfx___run_timers+0x10/0x10 [ 281.649931][ C3] ? trace_csd_function_exit+0x73/0x1f0 [ 281.652463][ C3] ? asm_sysvec_call_function_single+0x1a/0x20 [ 281.655597][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 281.658122][ C3] run_timer_base+0x114/0x190 [ 281.660009][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 281.661975][ C3] run_timer_softirq+0x1a/0x50 [ 281.663539][ C3] handle_softirqs+0x1ea/0x9b0 [ 281.665234][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 281.667204][ C3] ? _raw_spin_unlock+0x28/0x50 [ 281.669380][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 281.671879][ C3] __irq_exit_rcu+0x162/0x210 [ 281.673835][ C3] irq_exit_rcu+0x9/0x30 [ 281.675508][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 281.677655][ C3] [ 281.678956][ C3] [ 281.680238][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.682506][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 281.684657][ C3] Code: 96 90 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 78 15 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 281.691173][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000202 [ 281.693194][ C3] RAX: 000000000041c719 RBX: ffff88801cbf2540 RCX: ffffffff8bb622d5 [ 281.696309][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a52ca RDI: ffffffff8c400080 [ 281.699943][ C3] RBP: ffffed100397e4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 281.702537][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 281.705129][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 281.707638][ C3] ? ct_kernel_exit+0x125/0x180 [ 281.709175][ C3] default_idle+0x9/0x10 [ 281.710520][ C3] default_idle_call+0x6c/0xb0 [ 281.712049][ C3] do_idle+0x3a7/0x5b0 [ 281.713398][ C3] ? __pfx_do_idle+0x10/0x10 [ 281.715081][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 281.717137][ C3] cpu_startup_entry+0x4f/0x60 [ 281.718831][ C3] start_secondary+0x21d/0x2d0 [ 281.720551][ C3] ? __pfx_start_secondary+0x10/0x10 [ 281.722352][ C3] common_startup_64+0x13e/0x158 [ 281.724035][ C3] [ 281.725033][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.727318][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 281.730187][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.733855][ C3] Call Trace: [ 281.735253][ C3] [ 281.736445][ C3] dump_stack_lvl+0x100/0x190 [ 281.738379][ C3] vpanic+0x552/0x970 [ 281.739658][ C3] ? __pfx_vpanic+0x10/0x10 [ 281.741092][ C3] panic+0xd1/0xe0 [ 281.742281][ C3] ? __pfx_panic+0x10/0x10 [ 281.743708][ C3] ? check_panic_on_warn+0x1f/0x90 [ 281.745379][ C3] check_panic_on_warn.cold+0x19/0x34 [ 281.747066][ C3] ? __queue_work+0xd2d/0x12b0 [ 281.748542][ C3] __warn.cold+0x191/0x318 [ 281.749955][ C3] __report_bug+0x30f/0x440 [ 281.751417][ C3] ? __queue_work+0xd2d/0x12b0 [ 281.753064][ C3] ? __pfx___report_bug+0x10/0x10 [ 281.755216][ C3] ? __pfx___resched_curr+0x10/0x10 [ 281.757541][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 281.759550][ C3] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 281.761853][ C3] ? look_up_lock_class+0x55/0x120 [ 281.763575][ C3] report_bug_entry+0xe1/0x290 [ 281.765156][ C3] ? __queue_work+0xd31/0x12b0 [ 281.767010][ C3] handle_bug+0x1cd/0x2a0 [ 281.768745][ C3] exc_invalid_op+0x17/0x50 [ 281.770537][ C3] asm_exc_invalid_op+0x1a/0x20 [ 281.772521][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 281.775313][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 43 d3 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 281.783957][ C3] RSP: 0000:ffffc900005e8be0 EFLAGS: 00010046 [ 281.786398][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a27894e [ 281.789498][ C3] RDX: ffff8880272e6970 RSI: ffffffff8aa989c0 RDI: ffffffff91258bf0 [ 281.792634][ C3] RBP: ffff8880513c4a58 R08: 0000000000000005 R09: 0000000000000000 [ 281.796639][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880272e6800 [ 281.800640][ C3] R13: 0000000000000000 R14: ffffffff81cebe40 R15: 0000000000000001 [ 281.803725][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.806033][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 281.808150][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.810485][ C3] call_timer_fn+0x19a/0x610 [ 281.812349][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 281.814421][ C3] ? find_held_lock+0x2b/0x80 [ 281.816463][ C3] ? sched_ttwu_pending+0x4d0/0x6f0 [ 281.819419][ C3] ? __run_timers+0x560/0xb00 [ 281.821938][ C3] ? __run_timers+0x560/0xb00 [ 281.824085][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.826339][ C3] __run_timers+0x570/0xb00 [ 281.828197][ C3] ? __pfx___run_timers+0x10/0x10 [ 281.830174][ C3] ? trace_csd_function_exit+0x73/0x1f0 [ 281.832372][ C3] ? asm_sysvec_call_function_single+0x1a/0x20 [ 281.834802][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 281.836760][ C3] run_timer_base+0x114/0x190 [ 281.838685][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 281.841463][ C3] run_timer_softirq+0x1a/0x50 [ 281.844569][ C3] handle_softirqs+0x1ea/0x9b0 [ 281.846782][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 281.848889][ C3] ? _raw_spin_unlock+0x28/0x50 [ 281.850832][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 281.853063][ C3] __irq_exit_rcu+0x162/0x210 [ 281.854961][ C3] irq_exit_rcu+0x9/0x30 [ 281.856709][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 281.859154][ C3] [ 281.860626][ C3] [ 281.862095][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.864977][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 281.867090][ C3] Code: 96 90 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 78 15 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 281.873551][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000202 [ 281.875538][ C3] RAX: 000000000041c719 RBX: ffff88801cbf2540 RCX: ffffffff8bb622d5 [ 281.878021][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a52ca RDI: ffffffff8c400080 [ 281.880795][ C3] RBP: ffffed100397e4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 281.885027][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 281.888177][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 281.890659][ C3] ? ct_kernel_exit+0x125/0x180 [ 281.892251][ C3] default_idle+0x9/0x10 [ 281.893622][ C3] default_idle_call+0x6c/0xb0 [ 281.895206][ C3] do_idle+0x3a7/0x5b0 [ 281.896520][ C3] ? __pfx_do_idle+0x10/0x10 [ 281.897999][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 281.899905][ C3] cpu_startup_entry+0x4f/0x60 [ 281.901439][ C3] start_secondary+0x21d/0x2d0 [ 281.903001][ C3] ? __pfx_start_secondary+0x10/0x10 [ 281.904865][ C3] common_startup_64+0x13e/0x158 [ 281.907052][ C3] [ 281.909778][ C3] Kernel Offset: disabled [ 281.911940][ C3] Rebooting in 86400 seconds..