last executing test programs: 1m16.137453784s ago: executing program 1 (id=577): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m16.135644889s ago: executing program 1 (id=579): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x4) (async) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000200)) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000000002060102000000000000000000000000050004000200000034000780080009400000f2c50800124000000003060004404e2100000800124000000006050014000000000008001740000000080900020073797a300000000005000500356dae7d12a8690541636e0300000010000300686173683a69702c6d6163003c00078008000b400000000208001740000000030800134000000040080012400000ffff060004404e21000008000b40000000030800134000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="000000a6cd848ef5bc2736008100", 0xe, 0x4040400, &(0x7f0000000040)={0x11, 0x6, r4, 0x1, 0x3b, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) (async) sendto$packet(r5, &(0x7f00000005c0)="000000a6cd848ef5bc2736008100", 0xe, 0x4040400, &(0x7f0000000040)={0x11, 0x6, r4, 0x1, 0x3b, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) 1m16.051322489s ago: executing program 1 (id=580): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x8d, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) 1m16.051076105s ago: executing program 1 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) 1m15.983043168s ago: executing program 1 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x1f, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1-1\x00', 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000002c0)={r2, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x574, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x528, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x9f50f4e1b21c61bc}}, @TCA_MATCHALL_ACT={0x514, 0x2, [@m_mirred={0x148, 0x8, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x7, 0x3, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc96, 0xcb72, 0x3, 0xffff, 0x6}, 0x3}}]}, {0xda, 0x6, "c402e4b2714f1f9940acd91e364660412339ba49264e42aac512f4ef68afcb2584ddb23afb0fb82d6182c9b3c5191505335bb4a8a93a63d05116b4ed1bfba72542978cebc360430b863aaa1e46dc78b701a29ee5722666dab52faabc7cbed8f3181adbdc76f360a9ac3ff556ac220b2437ef631a72190cf500153e34948db8e88328c947eca6d6e18f86c5770cd568ae9c48ebc67a3d1d356390e964464a7f889a81580aef80a6df2cc15a7e6068bd8ebcca29d1ab80889e09d6cb062271a02d0180316fdc201ff3fb424b431addfe0bde2c4f5c7d50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x144, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x12a70000, 0xffffffffffffffff, 0x6551, 0x3}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x20000000, 0x6, 0x80}, @private=0xa010101, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x83f7, 0x10000000, 0x8, 0xfffffff9}, @local, @local}}]}, {0xa1, 0x6, "54bfd3460e6dc39c46d348ede4e17fdba999a9d518aa0cfe3f9da882a0c215516199f8957862fdab628ea45bc5370e8f2e7e2a8e4633342b194330391854f4a42a762701ae307df1c51dc9602139a687565097b4baf84a53b5ec0df1e724274a577f84b7b53b3b08c4c7e8fb34a19c45b5825400eec6ca19079d6c42c4066d1a8effc3be3bee7fd367cce81e106bd052e54cb71efd8c90bb15d42aefea"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x140, 0xe, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x5d9a, 0x10000000, 0x1, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x1, 0xe, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8f2, 0x3, 0x4, 0xa1e, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1133, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24ac, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0xffffffffffffffff}}]}, {0xa5, 0x6, "cf1f4f3c5054423592ec1ea87ea5abbf3c127480650cb4444f86040b6da367272282026ff839f628bc603e0751b0356bfecf9c673ddc50b7d162d30e786f6294bc9ea2ae459aca17b1d4dbef2e3f3fa6d429186fa04fb84ce6d19293cbf1d46390ccb2727c42fd9a36c80d7ed7d2c29c19a7231e0b17a02f3f3883a29cf21b0639895ba0c4dcf77336a86eb3f8bcaf63794dd71da0ff9ad7aad9fddaa6b3e9b0f6"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x88, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x9, 0x0, 0x3ff, 0x2}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x2f, 0x6, "8546ed4361936218b4f01fe1438ccca57676e8c95c3a90f2eab832af33fae03fa455b575712bc89b589f14"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xbc, 0x4, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x89, 0x0, 0x2, 0x1}, @multicast1, @empty}}]}, {0x6a, 0x6, "d2865a5495a2f272e3884e4fa454f4823ed2253616eb5bdab0226321359d64e3e90cb6f5383a5e01fb22db24f16c54b651a7625a4a834461d3a47753a4c6f0616fd5627d6a5b9d1681ed1e38fae98fe5711205d30d6bfdb12ce246aec355a4a67de72aa008de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}, @TCA_CHAIN={0x8, 0xb, 0xa6c}]}, 0x574}}, 0x4891) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7, 0x78, 0xfb, 0xff, 0x30000, [0x2, 0x4]}}) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) 1m15.491392189s ago: executing program 1 (id=585): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a07"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='3\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001e000000101020304"}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000357556804f4a2"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') unshare(0x2000600) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m15.483137333s ago: executing program 32 (id=585): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a07"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='3\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001e000000101020304"}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000357556804f4a2"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') unshare(0x2000600) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.455071748s ago: executing program 4 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc008045}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0xa0201, 0x0) fcntl$setstatus(r6, 0x4, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @loopback, 0x81}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1, 0x9, 0x5}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r7) r8 = socket(0x2, 0x2, 0x0) unshare(0x20400) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x3, 0xfffffffc, @private2}, 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='dummy_udc', 0x9) 7.231012426s ago: executing program 4 (id=932): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x100000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) sendfile(r6, r6, 0x0, 0x1002000ff) r7 = dup(r2) syz_ublk_setup_queues(r7, r1, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) 5.262151887s ago: executing program 4 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = epoll_create(0x7e2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) 4.911077392s ago: executing program 4 (id=947): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1093c1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000300000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES16=r0], 0x0, 0x0}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x1, 0x16b400) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1, r5}) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 3.052778494s ago: executing program 3 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x1f, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000002c0)={r3, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x574, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0x528, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x9f50f4e1b21c61bc}}, @TCA_MATCHALL_ACT={0x514, 0x2, [@m_mirred={0x148, 0x8, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x7, 0x3, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc96, 0xcb72, 0x3, 0xffff, 0x6}, 0x3}}]}, {0xda, 0x6, "c402e4b2714f1f9940acd91e364660412339ba49264e42aac512f4ef68afcb2584ddb23afb0fb82d6182c9b3c5191505335bb4a8a93a63d05116b4ed1bfba72542978cebc360430b863aaa1e46dc78b701a29ee5722666dab52faabc7cbed8f3181adbdc76f360a9ac3ff556ac220b2437ef631a72190cf500153e34948db8e88328c947eca6d6e18f86c5770cd568ae9c48ebc67a3d1d356390e964464a7f889a81580aef80a6df2cc15a7e6068bd8ebcca29d1ab80889e09d6cb062271a02d0180316fdc201ff3fb424b431addfe0bde2c4f5c7d50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x144, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x12a70000, 0xffffffffffffffff, 0x6551, 0x3}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x20000000, 0x6, 0x80}, @private=0xa010101, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x83f7, 0x10000000, 0x8, 0xfffffff9}, @local, @local}}]}, {0xa1, 0x6, "54bfd3460e6dc39c46d348ede4e17fdba999a9d518aa0cfe3f9da882a0c215516199f8957862fdab628ea45bc5370e8f2e7e2a8e4633342b194330391854f4a42a762701ae307df1c51dc9602139a687565097b4baf84a53b5ec0df1e724274a577f84b7b53b3b08c4c7e8fb34a19c45b5825400eec6ca19079d6c42c4066d1a8effc3be3bee7fd367cce81e106bd052e54cb71efd8c90bb15d42aefea"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x140, 0xe, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x5d9a, 0x10000000, 0x1, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x1, 0xe, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8f2, 0x3, 0x4, 0xa1e, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1133, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24ac, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0xffffffffffffffff}}]}, {0xa5, 0x6, "cf1f4f3c5054423592ec1ea87ea5abbf3c127480650cb4444f86040b6da367272282026ff839f628bc603e0751b0356bfecf9c673ddc50b7d162d30e786f6294bc9ea2ae459aca17b1d4dbef2e3f3fa6d429186fa04fb84ce6d19293cbf1d46390ccb2727c42fd9a36c80d7ed7d2c29c19a7231e0b17a02f3f3883a29cf21b0639895ba0c4dcf77336a86eb3f8bcaf63794dd71da0ff9ad7aad9fddaa6b3e9b0f6"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x88, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x9, 0x0, 0x3ff, 0x2}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x2f, 0x6, "8546ed4361936218b4f01fe1438ccca57676e8c95c3a90f2eab832af33fae03fa455b575712bc89b589f14"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xbc, 0x4, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x89, 0x0, 0x2, 0x1}, @multicast1, @empty}}]}, {0x6a, 0x6, "d2865a5495a2f272e3884e4fa454f4823ed2253616eb5bdab0226321359d64e3e90cb6f5383a5e01fb22db24f16c54b651a7625a4a834461d3a47753a4c6f0616fd5627d6a5b9d1681ed1e38fae98fe5711205d30d6bfdb12ce246aec355a4a67de72aa008de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}, @TCA_CHAIN={0x8, 0xb, 0xa6c}]}, 0x574}}, 0x4891) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7, 0x78, 0xfb, 0xff, 0x30000, [0x2, 0x4]}}) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) 2.708505869s ago: executing program 3 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x2000000000000054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00280e00ec00"}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000004c0)={0x3, 0x2, 0x2, 0x0, 0x6}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f00000001c0)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x0, 0xc, {0x0, 0x2710}, {0x3, 0x1, 0x4e, 0x5, 0xd, 0x6, "381c1d66"}, 0x101, 0x2, {0x0}, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x2, 0x8, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f000020d000/0x1000)=nil, 0x1000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000eb3000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f6621004", @ANYRES32, @ANYBLOB="8f0006"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x2400c000) 2.499648246s ago: executing program 0 (id=960): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x8}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xa5, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233bd00", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x38, 0x14, "3eccd8000000002000000010000000040100"}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/vkms/mydev/planes/plane0/type\x00', 0x1, 0x0) 2.268032408s ago: executing program 0 (id=961): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0xfff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010020000000000000007c0000007c000000020000000f0000000000000e000000000000000022400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000cfdffffff00000000000000090000000000000000000000090000001000000000000000090a8b00000000d94c8e1fb905b5885a7384204d829ec6243473890a7f5e03ec140e4e515d6f08323a"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010500004200000000e30b0000000c00000f02055dd618000000000490c000"/44], 0x0, 0x14}, 0x28) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(r0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x9a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r2, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.663837314s ago: executing program 2 (id=962): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000003c0)={0x3, 0x10, 0x7, 0x3, "3dcd4ed846e1e2edefd9b6eaa131640bbc9f793484a2a1cda1940471d3c8030a"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)="d6afb365", 0x4) 1.554035278s ago: executing program 4 (id=963): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xf4, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xcd, 0xac, "801cb299adb208a9824aa5eae95d1e76765bf2473e5f236ecede926f04b6ab1ad3d47f1faef5e693a8f6b8d50275c9fc8e9a18b3468651489197120e9aa76a24cd09bd345db2212b9b755952404a0f113c6dd0c839ceb2c94defd14d4b9aaafebc3eab19f6159d24fd4443053a9e5206f5bc3e3d415ca664fcf55c50097f4953aefb1df7299c7c42896461f9513fb178226e86891746290eee3ac361b40abb4fef44357f1204ec6bb84769b623dc20b70c7ef162d94ef5dc63d1ed266b0b733ddeb7317669e94c640a"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e00000000000000f8d654c7150ae5bb", 0x24) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x118) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b27b2811ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x1) 1.518502121s ago: executing program 3 (id=964): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x3, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000900)={0x12b4, 0x0, 0x5, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x294}, 0x2, 0x2, 0x3, 0x3, 0x5, 'syz0\x00', "b3038b612cba9fe09b88bb249d361ccaf699798958f6a82ec9ad429f8c5d7b27", "9cef1f9d90fe504e377eefc844e5a348d195a8a580bf9c1167c641ec01ab4861", [{0x6f, 0x8, {0x2, 0x8001}}, {0x7, 0x8, {0x2, 0x36}}, {0x6, 0x80, {0x2, 0x80000000}}, {0x8, 0x5, {0x0, 0x2}}, {0xe, 0xed3a, {0x1, 0x1}}, {0x2, 0x6, {0x2, 0xe6}}, {0x0, 0xfffc, {0x1, 0x3}}, {0xe, 0x7, {0x3, 0x3}}, {0x5, 0x7, {0x1, 0x5}}, {0x5, 0xd, {0x3, 0x2}}, {0x7, 0xf, {0x1, 0x8001}}, {0x7f, 0x2, {0x3, 0x2}}, {0x0, 0x2, {0x1, 0x2489}}, {0x2, 0x1, {0x0, 0x4}}, {0x6, 0x2, {0x1}}, {0x0, 0x1, {0x3, 0x3}}, {0x7, 0x8001, {0x1, 0x1ff}}, {0x8, 0xffff}, {0x9, 0x4, {0x0, 0x6}}, {0x0, 0x4, {0x0, 0x9}}, {0x401, 0x9, {0x0, 0x2c}}, {0xac3e, 0x800, {0x3, 0xfffffff9}}, {0x4, 0x3}, {0x6, 0x8, {0x7, 0x7fff}}, {0x3091, 0x9, {0x2, 0x6}}, {0x4, 0x0, {0x3, 0x5}}, {0x1, 0x5, {0x0, 0x400}}, {0x6a93, 0x0, {0x2, 0x8}}, {0x5, 0x3, {0x3, 0x3}}, {0x4, 0xffc0, {0x1, 0x3}}, {0xa254, 0x7fff, {0x3, 0x1}}, {0x64, 0x6, {0x2, 0xc}}, {0x7, 0xe, {0x2, 0x6}}, {0x9, 0x6191, {0x1, 0x6}}, {0x40, 0x3173, {0x1, 0x6}}, {0x3, 0x0, {0x2, 0x200}}, {0x9, 0x9, {0x0, 0xf1}}, {0x3, 0x1, {0x2, 0x3}}, {0x8000, 0x400, {0x2, 0x1ee8}}, {0xff, 0x3, {0x2, 0x40}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x80, 0xd, 0x4, 0x4, 0x20, 'syz0\x00', "893417656d34bf5b11724d4178472d7c91fc2161c9d6b4b75f2fcf6b9c027a74", "a80bd7e00f40d533e5a3f7a7ed76c424a7e9e90bbc175c996f1b9a9e927a8e39", [{0xef, 0x6, {0x1, 0x401}}, {0x101, 0x5, {0x3, 0x80}}, {0xf, 0x2, {0x1, 0x706f}}, {0x81, 0x8306, {0x2, 0x3b}}, {0x7, 0x89f7, {0x0, 0x1}}, {0x2, 0x4, {0x0, 0x8}}, {0x80, 0x2, {0x1, 0x8}}, {0x24c0, 0xd, {0x1, 0x40}}, {0xa, 0x3, {0x2, 0x8}}, {0x0, 0x8001, {0x2, 0x6}}, {0x596e, 0xa0ed, {0x3}}, {0x6c, 0x2798, {0x1, 0x5}}, {0x7, 0x2, {0x3, 0xa}}, {0xc4, 0x9, {0x1, 0xb2}}, {0x8001, 0x1, {0x1, 0x400}}, {0x6, 0xc326, {0x3, 0x1c818}}, {0xffc0, 0xec, {0x1, 0x5}}, {0x1, 0xe, {0x3, 0x8}}, {0x7, 0x6310, {0x0, 0xebbb}}, {0x43, 0x8, {0x3, 0x7}}, {0x6, 0x4, {0x2, 0x81}}, {0x3, 0x3, {0x1, 0xbe8}}, {0x1, 0x238, {0x3, 0x5}}, {0x477, 0x10, {0x0, 0xfffffffc}}, {0x5, 0xe03, {0x1, 0x200}}, {0x6, 0xffff, {0x1, 0x6}}, {0x7f, 0x1, {0x3, 0x8}}, {0x6, 0x9, {0x0, 0x81}}, {0x0, 0xeaf}, {0x8, 0xb7f2, {0x0, 0x1}}, {0xe, 0x5, {0x2, 0x7f74}}, {0xfffb, 0x800, {0x3, 0x200}}, {0x0, 0xe3, {0x0, 0xfffffffb}}, {0x7, 0x1, {0x2, 0x7}}, {0xcf2, 0x5, {0x0, 0x7a}}, {0x9, 0x0, {0x2, 0x1ff}}, {0x6, 0xd, {0x3, 0x401}}, {0xa, 0xfffb, {0x1, 0x7}}, {0x7, 0x3, {0x2, 0x9}}, {0x1, 0x4, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x5, 0x7f, 0x5fd1, 0x8001, 0xa, 'syz0\x00', "68040b2d2a873a129fb4aebd4773e59ee2f3a38f2b5ed8717f1016693d6f3f62", "a56d73cef0512203904308717602b1419c91564bffa2049a2be2ae96a2b8d541", [{0x9, 0xe}, {0x6, 0x4, {0x3, 0x7}}, {0x7fff, 0x9, {0x0, 0x8}}, {0x9, 0x4, {0x2, 0x2}}, {0x7fff, 0x3, {0x0, 0x2307}}, {0x4, 0x6, {0x1, 0xd}}, {0x4, 0x0, {0x0, 0x401}}, {0x2, 0x6, {0x0, 0x9b}}, {0x8, 0xe8e4, {0x1, 0x218}}, {0x1, 0x9, {0x1, 0x6}}, {0x0, 0xfe, {0x3, 0x637}}, {0x3, 0x2, {0x2, 0x8000}}, {0x2, 0x7bd, {0x3, 0x4}}, {0xe20, 0xc, {0x3, 0x6}}, {0xa638, 0x1000, {0x3, 0xfff}}, {0x1, 0x3, {0x0, 0x5}}, {0x4, 0xf001, {0x0, 0x2}}, {0x3, 0x7, {0x2, 0x9}}, {0x9, 0x40, {0x2, 0x1}}, {0x27a, 0x0, {0x2, 0x9}}, {0x4, 0x4, {0x3, 0xffff}}, {0xc, 0x4, {0x1, 0x5}}, {0x0, 0x4, {0x2, 0x6}}, {0x3, 0xd, {0x1, 0x472}}, {0x0, 0x2, {0x0, 0x7}}, {0x3, 0x0, {0x2, 0x8}}, {0xc, 0x3, {0x2, 0x200}}, {0x100, 0x1, {0x3, 0x8}}, {0x9, 0xc, {0x2, 0x8}}, {0xa55, 0xeb, {0x1, 0x5}}, {0x6, 0x9, {0x2, 0x8}}, {0x9, 0x40, {0x3, 0xe8}}, {0x3, 0x1ff, {0x0, 0x101}}, {0x6, 0xec, {0x2}}, {0x6, 0x9, {0x1, 0x2ca}}, {0x400, 0xe41c, {0x2, 0xfffffff7}}, {0x4, 0x1, {0x1}}, {0x6bd, 0x3, {0x0, 0x7}}, {0x9, 0x400, {0x2, 0xfffffe01}}, {0x5, 0x2, {0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xfffff801}, 0x8, 0x0, 0x7, 0x2, 0x21, 'syz1\x00', "a4c6d0ae1da194f45bedb1e03ee7358332ecc0f5af490332e41b75859a4c60ed", "a4f6ea3bfe1b41177eb0ca6283d8a0487d8b78b4a7bb306b5fd06419c56efbae", [{0x2000, 0x81, {0x0, 0x5}}, {0x3, 0x1ff, {0x0, 0xf}}, {0x3, 0x4, {0x4879d9f87c41e70e, 0x2}}, {0x40, 0x4, {0x1, 0x2}}, {0xf8f, 0x7, {0x0, 0x2}}, {0x5, 0xfeb, {0x3, 0x6}}, {0xfffe, 0x4, {0x2, 0x10}}, {0x1, 0x15c, {0x0, 0x2}}, {0x2, 0x2, {0x1, 0x5}}, {0x1, 0xfff, {0x3}}, {0xd, 0x5, {0x0, 0xd5f}}, {0x9, 0x1, {0x3, 0x3}}, {0x3, 0x0, {0x3, 0x5}}, {0x1ff, 0x79, {0x0, 0x5}}, {0xc2fe, 0x800, {0x1, 0x54}}, {0x3, 0x2, {0x1, 0x6}}, {0x6, 0x0, {0x0, 0xa}}, {0x2, 0x3, {0x3, 0x4}}, {0x8001, 0x1, {0x0, 0x10000}}, {0x3, 0xf, {0x0, 0x81}}, {0xf, 0x8, {0x0, 0x1}}, {0x8c9, 0x1de7, {0x3, 0x2}}, {0x2, 0x4, {0x1, 0x5}}, {0x6, 0x194, {0x1, 0x14000000}}, {0x3, 0xc373, {0x0, 0x7}}, {0x8000, 0x7, {0x1, 0x4e}}, {0x3, 0x8000, {0x0, 0x9}}, {0x9, 0xd, {0x3, 0x9}}, {0x1, 0x3, {0x3, 0x1ac9}}, {0x6, 0x4, {0x0, 0x9}}, {0x7b0b, 0x8, {0x3, 0x6}}, {0x8001, 0x1000, {0x0, 0x3}}, {0x6, 0x5, {0x3, 0x4}}, {0x8, 0x6, {0x2, 0x6}}, {0x4, 0xd965, {0x2, 0x53fb}}, {0x389f, 0x1ff, {0x2, 0x5}}, {0x0, 0x2, {0x1, 0x6}}, {0xdaf, 0x5, {0x1, 0x2}}, {0xff, 0xfff9, {0x2, 0x1}}, {0x1, 0xc, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x80000000}, 0x4, 0x1, 0x8, 0x81, 0x1b, 'syz1\x00', "da537dc826f19fc1f042deb3626c7b4cc0f36257072bf1d1494ecd72330fab97", "12bc3f4ea7ebed7f6d1c451bc792e71b3cf255881abdb6d148f9735a908f22c4", [{0x6, 0x8, {0x2, 0x127c6065}}, {0xc, 0x4, {0x0, 0xf7}}, {0x18, 0x3, {0x1, 0x4}}, {0x1, 0x69d, {0x0, 0x4d}}, {0x5, 0x0, {0x3, 0x1ff}}, {0xa407, 0x3, {0x1, 0x200}}, {0xad, 0xe, {0x1, 0x6}}, {0x9, 0x4, {0x1, 0x2}}, {0x5, 0x4, {0x2, 0x5}}, {0x5, 0x6, {0x1, 0x4}}, {0x7, 0x2, {0x0, 0x2}}, {0x0, 0x101, {0x1, 0x4}}, {0x61f6, 0x80, {0x1}}, {0x7, 0xa, {0x2, 0x80000000}}, {0x5, 0x6, {0x3, 0x6}}, {0x3, 0x3, {0x2, 0x5}}, {0xb82c, 0xfff3, {0x2}}, {0x3, 0x400, {0x3, 0x81}}, {0x2797, 0x7, {0x0, 0x8}}, {0x6b, 0x9c, {0x3, 0x2}}, {0xa, 0x1, {0x3, 0xfe}}, {0x200, 0xfffe, {0x0, 0x10001}}, {0x7, 0x5a, {0x3, 0xff}}, {0xfffd, 0x5, {0x1, 0x32d}}, {0x400, 0x9, {0x3, 0x7aa4}}, {0x6, 0x4, {0x3, 0x7}}, {0x7, 0x5, {0x0, 0x9}}, {0xffff, 0xd, {0x3, 0x5}}, {0x0, 0x2, {0x0, 0x4}}, {0x4, 0x8, {0x1, 0x81}}, {0xed9, 0x9, {0x2, 0xaa4}}, {0x1000, 0xb33, {0x0, 0xe00}}, {0x0, 0x5, {0x2, 0x80000000}}, {0x6, 0xfff9, {0x1, 0x237}}, {0x0, 0x1ff, {0x1}}, {0x2, 0x4e, {0x0, 0x1}}, {0x2, 0x9, {0x1, 0x70}}, {0x1, 0x4196, {0x1, 0xfffff49e}}, {0x7, 0x4, {0x0, 0x7}}, {0x47c, 0x8, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x9, 0x77, 0x40, 0x4, 0x1c, 'syz1\x00', "6e9d42e502aa610fafa785e031408c7427ac48c433d3b9ec50feb6c4ebd61056", "8e255a02e9413acfbf74c9fc7cd6b3300badd8f30517df0bac400896bf48e223", [{0x8, 0x4, {0x3, 0x9}}, {0x6, 0xd8, {0x1, 0xe}}, {0x3, 0x7, {0x3, 0x3}}, {0x6, 0x1, {0x3, 0x1}}, {0x3, 0x2, {0x1, 0x8}}, {0xd512, 0x7, {0x0, 0xad}}, {0x4, 0x80, {0x3, 0x8000}}, {0x4, 0x0, {0x3, 0x855}}, {0x4, 0x8, {0x0, 0x7}}, {0x100, 0xfffb, {0x1, 0x5}}, {0x81, 0x4, {0x2, 0x8}}, {0x0, 0x3, {0x0, 0xffff}}, {0x80, 0x81, {0x2}}, {0x6, 0xfff9, {0x2, 0xb2}}, {0xdecc, 0x5, {0x3, 0xb}}, {0x81, 0x0, {0x2, 0x8}}, {0xf, 0x6, {0x3, 0x7}}, {0x0, 0x3, {0x0, 0x5}}, {0x9, 0xce8, {0x2, 0x6}}, {0xbf6a, 0x1, {0x1, 0x6}}, {0x4, 0x0, {0x0, 0x1}}, {0x6, 0x3, {0x2, 0x3}}, {0x6, 0x4, {0x2, 0x1c1}}, {0x1000, 0x4, {0x1}}, {0xa0b, 0xfff, {0x1, 0x6}}, {0x3, 0x4, {0x2, 0x7f}}, {0xa130, 0x6, {0x2, 0x22c}}, {0x9, 0x7, {0x3, 0x4}}, {0x67a2, 0x2, {0x1, 0x6}}, {0xd9, 0x800, {0x1, 0x4}}, {0x4, 0xfff, {0x0, 0x40000000}}, {0x7, 0xfff4}, {0x101, 0x7, {0x1, 0xa7d5}}, {0x6, 0x8, {0x2, 0x6}}, {0x6, 0x7ff, {0x0, 0x1}}, {0x9, 0x400, {0x2, 0x150d0000}}, {0x5, 0x6, {0x3, 0x6}}, {0x5, 0xd, {0x3, 0x8}}, {0x6, 0x1, {0x0, 0x10000}}, {0x0, 0x0, {0x2, 0x42}}]}}}, {{0x254, 0x1, {{0x1}, 0x9c, 0x0, 0x0, 0x7, 0x1f, 'syz1\x00', "b0e0408ccf4c30eabdf775594d3e4d70a9ea63f6c844ba373e5221c43c933b16", "88787f4911ad415d7464d061770cde8de0ac29e03858306529d99ddba13b72d4", [{0xf, 0xa, {0x2}}, {0xfe00, 0xd}, {0x19d4, 0x6, {0x2, 0xfffffff1}}, {0x3, 0x400, {0x1, 0x2}}, {0x200, 0x7ff, {0x0, 0x9}}, {0x0, 0xfff9, {0x3, 0x2}}, {0xf, 0x5, {0x1, 0x400}}, {0xf, 0xd2, {0x3, 0x3ff}}, {0x10, 0x4, {0x1, 0x101}}, {0x8, 0x6, {0x1, 0x6}}, {0x902, 0x1, {0x1}}, {0x6, 0x4, {0x3, 0x80}}, {0xffff, 0x81, {0x1, 0x8}}, {0x2, 0x14, {0x3, 0x3}}, {0x8, 0xa913, {0x2, 0x2}}, {0x400, 0xe3, {0x2, 0x6}}, {0x6, 0x5, {0x1}}, {0x7, 0x10, {0x2, 0xb2ae}}, {0x10, 0x831}, {0x1, 0x40, {0x0, 0x401}}, {0x7, 0x3ff, {0x0, 0xfff}}, {0x7fff, 0xc121, {0x2, 0x3}}, {0x2, 0x9, {0x0, 0xd73}}, {0x8001, 0x6, {0x1, 0x8}}, {0xea23, 0xc, {0x3}}, {0x9, 0x1000, {0x2, 0x7f}}, {0x0, 0x5, {0x3}}, {0x3, 0x9, {0x2, 0xb42}}, {0x7, 0x7, {0x1, 0x7ff}}, {0x6, 0xff, {0x3, 0x7}}, {0x1, 0x4, {0x0, 0x6}}, {0x6, 0x8, {0x0, 0xf22}}, {0xac, 0x6, {0x1, 0x8}}, {0x5, 0x401, {0x3, 0x2}}, {0x8, 0x5c, {0x2, 0x8000}}, {0x7ff, 0x6, {0x3, 0x4}}, {0x8001, 0x200, {0x3, 0x4}}, {0x6, 0x4, {0x1, 0x3ff}}, {0x3, 0x2, {0x0, 0x2}}, {0x0, 0xfff7, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0xd67a}, 0x8, 0x7, 0x101, 0x81, 0x11, 'syz0\x00', "b4ea4079f8d5b1b64ffa1ad98b2e8b80b2fae78f4cde94c47531d4ea99b126f6", "e1d408bc980f2175f05f3169d91921ffe55201aa0255926a58718ff68bf067ec", [{0x2, 0x1, {0x0, 0x8000}}, {0x4, 0x0, {0x3, 0xcb06}}, {0x9d74, 0xb, {0x3}}, {0x0, 0x0, {0x3, 0x2}}, {0x8, 0x7, {0x2, 0xff}}, {0x100, 0x4, {0x1, 0x7e}}, {0x101, 0x0, {0x0, 0x9}}, {0x7, 0xfff, {0x2, 0x6a0123d9}}, {0x4, 0x2, {0x1, 0xfffffb6d}}, {0x3, 0xa, {0x2, 0x7}}, {0x4, 0x1, {0x2, 0x4}}, {0x9, 0x9, {0x3, 0x4037}}, {0x43, 0x1000, {0x0, 0xf6}}, {0x0, 0x9000, {0x2}}, {0x0, 0x7fff, {0x2, 0x3}}, {0x1, 0x0, {0x3, 0xc59}}, {0x2, 0x9, {0x3, 0x3}}, {0x401, 0x2c33, {0x1, 0x5}}, {0x7, 0x2, {0x1, 0x6}}, {0x4, 0x88, {0x2, 0x1}}, {0xc25d, 0xfff, {0x1, 0xf}}, {0xf30, 0x6, {0x3, 0x4}}, {0xabd, 0x101, {0x2, 0xb}}, {0x5, 0x0, {0x2, 0x2}}, {0xb, 0x2, {0x3, 0x6}}, {0x1000, 0x6, {0x1, 0x3}}, {0xfffa, 0x80, {0x1, 0xfffffffd}}, {0x0, 0x7, {0x0, 0xdb}}, {0x9, 0x1, {0x1, 0x5}}, {0xf, 0x0, {0x0, 0x2}}, {0xfffa, 0x1, {0x2, 0x7}}, {0x66d0, 0x16f5, {0x0, 0x3}}, {0x7ff, 0x7, {0x1, 0x800}}, {0x992b, 0x7, {0x1, 0x7f}}, {0x400, 0x4, {0x1, 0x1}}, {0x3, 0x5, {0x0, 0xb941}}, {0x1d1, 0x7, {0x0, 0x40}}, {0x3, 0x3, {0x2, 0xfffff001}}, {0x10, 0x13a, {0x0, 0x6}}, {0x1ff, 0x2, {0x2, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x86}, 0x4000001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000004c0)={r5, 0xe, 0x1, '9'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 1.518213769s ago: executing program 0 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff0000000000000000000000000000e2000010000000000000000020000000000007000000000000000000000000000000000004000d000000e80a000000000000000000000a0002003400000014000e00fe8000000000000000000000000000bb"], 0x100}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setresuid(0x0, 0xee00, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x4000, 0x0) write$P9_RSTATu(r2, &(0x7f0000000800)=ANY=[], 0x55) 1.517035309s ago: executing program 2 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) 1.381115785s ago: executing program 2 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0x4', 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "726b1605e7bab91d", "67a39e9f0f359c798aaa3b97630f25a7", "ae420e9b", "8550f65b20a68537"}, 0x28) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='freezer.state\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2e", 0x9}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(r3) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 1.380931433s ago: executing program 0 (id=968): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r0, 0x1d, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) 1.243323279s ago: executing program 3 (id=969): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4, &(0x7f0000000680)=""/240, 0xf0}, 0x12000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) write(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) write(r3, &(0x7f0000000200)='0\x00', 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}, {&(0x7f0000000200)="22ea7e01f370d458bc5f5da8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d1cf70127eda16f2c7017285d0e1b1dabc9ec2db03ed73c3145e66741edb84de748c1341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c9276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819deea491e2b0b1a275e2c1ac4ff8c3", 0xa8}], 0x2}, 0x8eec3816282631eb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "7f964030bf888197d65414276eba1e19c0a82cfb0d6cf9990a12900bc08c564f1b109f5135eda4021ee6f0fcf834ee1482b25123a8d629a3e06b02d72f72786394f6b07ef2c02d4cedd91c1da8b6f7e3fd1f8b168073f79df2591fe73e07cadc7d0a69cdbfe3165e145a6a41b5cab79dde1c854bb78279db2b5d7b45382e9023a29c0162a7db94528b7fec12b12948b070ce7dff07674616e0249aeef378579fb3a4084a3da6e9fab3449e4645ef91e79b6381b97570ebb38fbc6e9ffbb3048d98b61e4c45dbdcde719a73e8c0a075fd853b0fd6fa271d4a6ca585471599d2198d7ab5d5bda8600cb238386482c1674cacaed9aab43f2702e1e9b7c91c4e020a35ee635a2e48732e3beea670f5753ec83723b783dff33151a7f9d109ec2d2ce17cb1d761efb9a0d0460799af32c28306a44f87b4f6608e4c18cbd0407f59b5a4d60f10cc5c7cfb1e0b768bf314a1923597956977723dd02d362faea73d9a1739014b0a0fd1d9ddd2bef1c64cd1e1c13cb1806aa770be193eda9c4916f055fbed77d0773695cc7440aeaa7842847d9d29e66028a93c9f28127232c9b8ffd931ca4f72fc67b724aa332397bc222b209b3aba1bb83df0d05e34d3d5cbaa3c72f7948159c24edcb8bcda79ca7270cf8b99c18b2fe244bcefb59cb2209d80a0bf3ddaf3b6f43b36239d0c4f066b76c38195635a5cef4410e930798d04615ca33edd85a061e170c3e20c364f0d48742576e0b4281345a75309e67d6d8ba6adf6b7c4a3d9938cbaec0bb5d527e0b9f6cc3e69ad73b777f1bc303a1a87731c74da8bcd8279a1c5de46d14464e910af77e4ea601739a78f4ba73b93985ca08a0a9569f712ccd8c529fff3d4a6814b571d615bb3d8e22e46177bca72e8e44ffd86d82831dd4c50d19f9515c13824cb99414bde697e9fc8f31f0dbe6f54abb181a7b5fce1322097df1b6a6aeb16eb8e50716ff7bc2fe9da887ddaafc19d8d427ffa2af6fc184424e97821072f728f3d168075f30fd5b107a47ad05594e838f410ab9e60af3c5e8d928a205041401c9e334eaae96faea970b6fca37c3a7e31eaf45eee1a21490862a72deaf9e3e3bd2b4ba74b342678e8211b57e1ae959cf3bead43282a04796a47608a822fe75718e073664e6cb449dee86986e10a56227bad28cf909f58f728298d359a1d3cec53c0d89f3642d77a30534b7a1e6dd3264da0d9ccc6e7f495059d01bd941b69ce8703107f7fd3322f36835ba51c31447b9f5354434b8e3d3089ba8f36d11c9bb9ef7eff2f485c2ed52cd305c8002362da03f40c189a0082408db095509c09dd7bcb36a49548473278c78a0f51583a9722469a358d0c8731be7af3e95956b8817f8f538f50dceb33ae98afcc5a363a45090fd85306d670e086a6283e3a4644964292b03794283c89969d8636ce294863b473e5573328dcb3bf20a5d86d204eb05d15ed0c207e8955db65c0a098fe492eb7b889d6871943c8a7d1aa6ff7109d890e66652e7ccec2ec90a94d8b1c7a37cc9a78b66114258c46a800d324a0aa7f16a629e723eb512602b353176d9d1eca97c9f1b41c7bde14c777db12c40e5c2ba422349615ff43a69b1da94b4455c67a99d6592db0073744760bc3c23d48b0d2066c5c59492182b43bb1e701ab4c660c36222d0cf3d9bb15dfa876f2b24b9944874ceab36cf103fa18bce71cfb3c8b2fa1391b554139fe405afe518db30f442ce0186d9db897e9bf5f14edc10b6524c9a166cf8cd968790dc87ffe6a4e616ff8726ad5a9199ee440ee804e9a484bf8b69941f31457ec91096ea92d7ca1a038155f4f42c357c62ae50c9c99a922b31de2eb3da094e836177ba19aff4e39c19f2dbbbef4cf0a4b7a29187aaf76253f4da486c1037610cddc7efe4a1d3bd7ac6dbc78e838ab040cfd953af019b6cfc71de4fe48901d451105726f0b16fb44589702ae55f43d5c67af048cb099f769a5bdf2c797e0e1d93d294820056409d6c785aed1b1b7cd93fe73ec8d55f42c481f5307f582198429d9c0dbab63da7436456aa2f98ae205ab2a1c92900ffbc26cd1b86c6bd5ecc48032d8f7901e59e9da8f57f5fd283d2cd5c00d306f9081ad32cf4089a8806cc2e1032526efe9ce7cf7dc81bf8390e5cebc22c4a7e3f55303324e84d2d2765fe1c1b49f67807c31e4eae454d531657897a99f34c38236333ccdfadbcf37a5ea7750634e5ba386908303796b9e627a9030e5c5224a2a3a49cba970fce537cb9748d5e0bb5bafbfa2edb06b84e3e619723b0a390a66149cd0530a00f5d070eccd8fde2ce8b0555a95f124f015cd4213359d3ec49b5a4ed4ccb79343a2c6b967decbc476ab78ac5e5b08ee794347012efd0f5ea80015d8c952f02651fe5148496719e1b98aba958d2818cdf39f6aad1e693d707affc28eff7a48125510016cea3eff808a3ee30a6c21c0d0c9fc5d8f9f6b02c3c3d973153a699d3fa10af1cb5756ed330d04843c3253bff5e2a147f505dab5e364b860d8d7eb7ac95de8b8e2b09dd8a87738a34f5ae7064ecb930c1ebc2acbd2c4afb72468982c207613f60f4cbbb9d1a8e08fc1d3c3e74c1127bce8a543a20f3923ad6f90489be827430c0531076a985ed2eaca28a4972c18686f500c74b1e7ba21aadcfe59eb38a9221e25d92dc9279b43790f421872f44215541fb2af25560912f54dee04b8a441d2000ae3a81dd356403cf44d23057832705d84ad36e9163f9fc4f25bd480483c1dc90905a40ddc3a26ff60f5052a9d930d773981f56c25df4fc4aaae44f8e0ead79db23e3baf4e75ed6fcea4fabfa1aa57bf5761279b67308eca94a3638b658ebcc4f470814540ed0cfa797a434065c44fdba28325e9eca7fa92d9305f9cde49ea96c90f8a038fa33f64c3b24c22c03300e142c5b64802c40ac8b34b1c54d70738ffe20b81aafeaabc3fd57d5273bc786b111f4d789079ded94f1f4281f5b68c9bd03c556724a6346012973e0d3f786ae7c69deaffc38c5d06b6e01d2cd7e6b1eb3ae6afed36658622a2260de243cf8d7f53839d71d7695c5ec5af437ee66dcf124df9092a0089a464b57bdd72073210e0347a9b138ee2f6a16a773e19cc757517a7291bf60ccad29b4e83954884eccc2003e37b40af46e7a13a9b30490f2a92637d630710d3990e90a41f40a068e8f5b81ab1e7db7a74ead03b449a5b8d0243701027352cec1112a83a28efac5204a9d5bdf2f17fe0ed4003e4c4cb6b6991631698250a9c06a37761902002492d8f7eb398b4324cfa7d8f66ce643efb5e77d0356dcc81c437d340a71534d50bed1dd365c89e4e0d456ed81dd27a3f1b9114c6693768753aac9e7e621682730276d857d391d5160a4a895f9438ea83b8d79d6022ca763ac2a73bc4015610c7247ba37abe09f7107bc0fa143d460abf3a03bae2838ea03e56428049eb2099722acaf8948bfbf23cac3939ac52d446c3795b2e751ce5668105abedb5e16b931cd546e5dde567b49dccddc6eb7c784cdc80812e0eea45dd1044684b8960b17cb4a33e5240e6832f132d67ddab03dd9323f945aabbf6c3fd5a05afd0b427c58968a0d4c073a1f4be5d1f432bb1d69b95fd6ff48e2272dec396ff5c1b133f63dac9f508fd9edb4f191b76c2e6f33c0c3e64fa2917671b65d6f0e19b706bfe34735efe9d08ce908ccef41c2b67610b3bb99760717bda98593920934e337ad2974cbd7f805564a20cba8d5f275499103c46e20fe1c0c2ee9ca05f1a9aedc9c458eb36a5780a9e42648f2d83c56b468db4a22c1cfb83dc79a01478ba7a6ab75412c35c32f77b25f3a3dc19cfd02159990b621a68e1579364c8505961536d9abeea125403f1c5163bbad065459209f46cc189c0f3bcf7d018cb17a2d33263e88da2852f204f0ead616ee24ee8aec5a94f10f5fb9a110d648ddf8d5913b60b41617fbb062a2b558bef715e10e9e7a5721f9e03a335164ad71bca10b46ae915c7ff5931de825bc1ae25565a03464644bc4eda9423d9209a601c3f572aee10d076975c4cdecde21fd081cc4cb26b558641a742cfcfec00e078dfb7c2fbe02e3e109c342b65e9641a51988a4bb900808e365f9662b72711e46bfdc8165794039eb529313e900f9e5f735aa2ceed5a972953982896e7941c49400b0fe554645606135cc18aad193acfe8a518ef22be2852888ace51dfed47bde55c5c1817c56e4e846f1c7e649140392a243adf5ba3eab302d2a96dca2ba052e7e0b2f4930d81560a4a7c89ad3b9737b5da0fdb9262ce46a02e9862c032da32923c01ac389168f8b0cae9821fc692a599607f1c3a924c625e16a843346159a0727056f364bcd69d87ddb3bad9e91bf4303fcf67dd9130d5913f4c36b15fb069abf403669f6c91d0a46dca8e38612b6080e44b528591ccbbd4532b7f4623779d15937e2652623c0aad0630ab6fa4ac74826d9d14e13e0cdf14ac31329b5a78868d305b214b151b94ce9a395f58bf24b0c0bb16e38d197af6dac2689538b927057ad83193b089ca0327880b8794849debd9ccda030280cbb8124f1559ea1f95146742de398270f1a2241fd68cd15f43ac60f117e9783e19075fc0b6fe8d45510227c6c599f9f591b4775abedf1243363e944c70df785979c8e4bfeca9a5a9bf74b056ef88960ccd869bb3f2f594b7aeff2635181a7c09b2c191bb2c03eb011d260a62b0d97d8d00e7214828fc4626266fdc2c41bb38f6c6cb09486773ae96e0eb0cfb56713b0ff5196234c57c56016e5dcb1ad6524e4d313b20b562c629496f90ee6071a5653b9d0d1c530f31aa7179028d86f28f103908ae2a4b0ad3e085ef838f4c7d527fca54d3df6edd10b4f61b27ace38a5f679259d7e2a92f5c39795a85ccff1341d29deaf18d360f47631bd8f7874725e3fe060f0baa6a57db73956516ca908ed5e331bedc54467b7b424f3ae7acf28e973903ff2701bb828eb4e344afa929086f7e7bdccf3190fe460e2ca5c55dca95b3f4911ee44c9ff1a5732f8c764aa432c443cf5f8d24a5499ac3df78a719c9451146be5e56106a05d2e3dc75935c824e2fe0ea573631ad3a91952b3a474a44420c7c684002b9cab6f327e7780d508e21d4c9ba4dd01586d115af46cd96c61cd7e9d409569648fb9685ae30330099cdc70fe4b645e2050938828cbbef09f06e7cac38b29efc23c59644920411eb73e379564ce7d78f8cdd06e4bcfb7a1fc35fb45be4af9fe5122ca48e6f6560c71bb04a29cbf862fe44ad3867be64dadb6a185298d39e59be45b9b6556adbb9ee8b066e77453a11bc12da15c77f1f09e78368a57014ef11d388867816d5bbd6c7170713d9ad5598cdc23b1bdb4ed894046ac00c9589f971b7929926360035321f9d8e5e463cbe94466c57268629111a654324a734440f8771dd3afe33ba59f4e0e9f702c88237618376e7f7d7312688d685746cc66dfaf2b7f6e8acc8d7e72e620e10de3b010d1cb85d77a9c8375e260d59c06d9a2d4382318f022f77be6eba7eedb5a46df5a18ff14a3af02b3d5d2f5a36b1e843199678d79e320d2383aae2f96ca147fa393999bf454cc1dd6ab874ee18b59fb24d12b2e0d7f350b47a9de7861a19d1ef6adac9021ad8a9fa90ddc22ce1f2039877fd3383b3a77361b12ef4c83bdcbeb8d471ac761254ea61c6e4dd47747e957eb14de83b081daef64d6fa3993401bb243b68c3f14165962d0cf0e283aaa2667b6c072c7a77f1985455a85e61037e01df3374eaffeea1e08952d92db967c3715c4c4cca3eb0c4339a1c8f27e5f6d2f98a6603ebdcb858b54183"}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={r1, 0x0, 0xe5, 0x0, &(0x7f0000000000)="070d2de48e2f1ee5d7a6abd624d75512c42f9ea929fe12fef49dafc28747fd255b66873401de302a70ca3642d35ee24618107293478c6b97554ea1bc473e417203ba7959d3f81d84020dd3b8e41c284ddb1aaceb2c047fd6e3ab865b3b291b1ee2f5962e65f9cfaadddcc7af01d24ef108f0ee3cce1d4b31dc0a2fc2412ab2df7c655ab24a73179821eb155e7dac5fe7cefdc42ae4792eb4ee5c50474af0a42c9c9ba4681b67dde3766f2be01ce827b7fc382c89b3495cec547e8690ee6996254c09ca315f131e18923bd9bd781ed80eb65c19207c4883926dbff6fb0ca3fbe96e35b5dea5", 0x0, 0x1, 0x0, 0x57, 0x0, &(0x7f0000000200)="60b70533be3efe1c4330af25f4bd2e8762330600000094cffbad904f70aa2db1caffb4e5eaba708288003bcbd8a1c338afe31cf6c7fe3e3bf7555430ff2e3d761fed4849731b009db0d7049300"/87, 0x0, 0x2, 0x0, 0x6}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x5961, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r10, &(0x7f0000002180)=@IORING_OP_BIND=@ipv6={0x38, 0x54, 0x0, r2, 0x1c, &(0x7f0000002100)={{0xa, 0x4e22, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x1, {0x0, r11}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.060040083s ago: executing program 2 (id=970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xf4, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xcd, 0xac, "801cb299adb208a9824aa5eae95d1e76765bf2473e5f236ecede926f04b6ab1ad3d47f1faef5e693a8f6b8d50275c9fc8e9a18b3468651489197120e9aa76a24cd09bd345db2212b9b755952404a0f113c6dd0c839ceb2c94defd14d4b9aaafebc3eab19f6159d24fd4443053a9e5206f5bc3e3d415ca664fcf55c50097f4953aefb1df7299c7c42896461f9513fb178226e86891746290eee3ac361b40abb4fef44357f1204ec6bb84769b623dc20b70c7ef162d94ef5dc63d1ed266b0b733ddeb7317669e94c640a"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e00000000000000f8d654c7150ae5bb", 0x24) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x118) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b27b2811ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x1) 757.730617ms ago: executing program 3 (id=971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r6 = syz_clone(0x6000, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r6, 0x4007) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170900000000000000000100000008000900009ee63a0bcc0000007132741d529fba887a37cf8ea1ade5238edf46fc6b5c3ddc65c741e0a244ff4ad150d55fd83fde67d7621a889267e1b81cac3682b10d1bf0319b7c73d5baf2e86f585ac6ca13c51c6b172bb6c78aae502245c72d9254c145313aaafdb06afa4b7ac7051b69e6bd1329ec64e5253d4e446b0f7f45619562e8e785c1c4a5ed48000000"], 0x24}}, 0x40c0000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/211, 0xd3}, {&(0x7f00000006c0)=""/223, 0xdf}, {&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/127, 0x7f}], 0x7, &(0x7f0000000b80)=""/140, 0x8c}, 0x7}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/26, 0x1a}, {&(0x7f0000000c80)=""/6, 0x6}], 0x2, &(0x7f0000000d00)=""/59, 0x3b}, 0x200}, {{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000002100)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/110, 0x6e}, {&(0x7f0000001e40)=""/108, 0x6c}, {&(0x7f0000001ec0)=""/209, 0xd1}, {&(0x7f0000001fc0)=""/197, 0xc5}, {&(0x7f0000000140)=""/31, 0x1f}], 0x6, &(0x7f0000002140)=""/64, 0x40}, 0x1ff}], 0x3, 0x2061, &(0x7f0000002200)={0x0, 0x989680}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {0x0, 0x11}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 396.599169ms ago: executing program 4 (id=972): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1093c1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000300000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES16=r0], 0x0, 0x0}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x1, 0x16b400) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1, r5}) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 166.379837ms ago: executing program 0 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) 83.552321ms ago: executing program 3 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) setns(0xc9, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x21, 0xa, 0x101, 0x0, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) r1 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)={0x161000, 0x80, 0x1}, 0x18) setxattr(&(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)='\\*/*\x00', 0x5, 0x1) r2 = openat(r1, 0x0, 0x1, 0x85) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}], 0x2, 0x4050000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6(0xa, 0xa, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000071c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32=r9, @ANYRES16=r8, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="60f4eb3dc602d2e9d8ed46eb99569fdca6a2d6e38640ef8b7c4bb1ff72ea289242daad8c21c4616759e72d20cb9163c62821a5d0382b8654a57c112cac"], 0x32600) fchown(r5, r6, r8) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000300)) read(r3, &(0x7f0000000280)=""/49, 0x31) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r10}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r10, 0x40}, 0x8) r11 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r11, &(0x7f0000000680)='readonly', 0x8) 57.61243ms ago: executing program 2 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) socket(0x40000000015, 0x5, 0x0) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) 448.058µs ago: executing program 0 (id=976): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x24c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x220, 0x4, 0x0, 0x1, [{0x21c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x208, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9e44d22dfdef96fecf7082f0cb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "43cf4b9233dab27c305af78c8ee66e154a6b737c67bd"}, @NFTA_DATA_VALUE={0xf3, 0x1, "f3b8699fe96cd6d9a1e14e3398ebfe4bd00dc67834313e1823950655b95596d5818ab13f8732ac32ba9e3b4ee30dca67952bdadda9054bd5408615092b03eaedcebd336c61bf2526f64d307ce063a6499d7e342b408481d20bb64915476d84d3d31a305effda1799c7106129cfa6e6df8822260582b28b0e66a26f1f0fb701d2ab9a364d8429f07b5d0621823c7a576bf7c43cd81695e617023aba2b08a4d61e102175e9475c181eba86697a2ea2ec4bc2308f16fd3a958e6e4bef3676b4a2ac7c286d0275a3d77c9b94de02b356fd3d9221ad8c3702069e58b8a9f439a6f35c5b80325e4e726cb2fa06073f6bec20"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) write$rfkill(r2, &(0x7f0000000180)={0x9, 0x6, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000550000042cbd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="60000100", @ANYRES32=r3, @ANYBLOB="01000000ac1e01010000000000000000000000000800000020000100", @ANYRES32=r3, @ANYBLOB="00030300ff01000000000000000000000000000108000000"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) close(0x3) 0s ago: executing program 2 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff0000000000000000000000000000e2000010000000000000000020000000000007000000000000000000000000000000000004000d000000e80a000000000000000000000a0002003400000014000e00fe8000000000000000000000000000bb"], 0x100}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setresuid(0x0, 0xee00, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x4000, 0x0) write$P9_RSTATu(r2, &(0x7f0000000800)=ANY=[], 0x55) 0s ago: executing program 0 (id=979): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4, &(0x7f0000000680)=""/240, 0xf0}, 0x12000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) write(r4, &(0x7f0000000200)='0\x00', 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}, {&(0x7f0000000200)="22ea7e01f370d458bc5f5da8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d1cf70127eda16f2c7017285d0e1b1dabc9ec2db03ed73c3145e66741edb84de748c1341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c9276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819deea491e2b0b1a275e2c1ac4ff8c3", 0xa8}], 0x2}, 0x8eec3816282631eb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "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"}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={r1, 0x0, 0xe5, 0x0, &(0x7f0000000000)="070d2de48e2f1ee5d7a6abd624d75512c42f9ea929fe12fef49dafc28747fd255b66873401de302a70ca3642d35ee24618107293478c6b97554ea1bc473e417203ba7959d3f81d84020dd3b8e41c284ddb1aaceb2c047fd6e3ab865b3b291b1ee2f5962e65f9cfaadddcc7af01d24ef108f0ee3cce1d4b31dc0a2fc2412ab2df7c655ab24a73179821eb155e7dac5fe7cefdc42ae4792eb4ee5c50474af0a42c9c9ba4681b67dde3766f2be01ce827b7fc382c89b3495cec547e8690ee6996254c09ca315f131e18923bd9bd781ed80eb65c19207c4883926dbff6fb0ca3fbe96e35b5dea5", 0x0, 0x1, 0x0, 0x57, 0x0, &(0x7f0000000200)="60b70533be3efe1c4330af25f4bd2e8762330600000094cffbad904f70aa2db1caffb4e5eaba708288003bcbd8a1c338afe31cf6c7fe3e3bf7555430ff2e3d761fed4849731b009db0d7049300"/87, 0x0, 0x2, 0x0, 0x6}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x5961, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r11, &(0x7f0000002180)=@IORING_OP_BIND=@ipv6={0x38, 0x54, 0x0, r3, 0x1c, &(0x7f0000002100)={{0xa, 0x4e22, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x1, {0x0, r12}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ] usb 9-1: Manufacturer: syz [ 168.380055][ T6085] usb 9-1: SerialNumber: syz [ 168.793959][ T8083] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 168.939946][ T8057] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 168.956379][ T59] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 168.958740][ T59] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 168.980734][ T59] usb 5-1: USB disconnect, device number 31 [ 168.996478][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.005713][ T6085] legousbtower 9-1:14.57: interrupt endpoints not found [ 169.207260][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 169.727915][ T6085] legousbtower 9-1:14.228: interrupt endpoints not found [ 169.845648][ T6085] usb 9-1: USB disconnect, device number 2 [ 170.201469][ T34] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 170.353082][ T34] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.355620][ T34] usb 8-1: config 0 has no interface number 0 [ 170.357628][ T34] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 170.361196][ T34] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.365081][ T34] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.369834][ T34] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.372775][ T34] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.375299][ T34] usb 8-1: Product: syz [ 170.376612][ T34] usb 8-1: SerialNumber: syz [ 170.380148][ T34] usb 8-1: config 0 descriptor?? [ 170.384406][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 170.384421][ T5749] Bluetooth: hci2: command tx timeout [ 170.391691][ T34] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 170.392689][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 170.393881][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 170.394744][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input8 [ 170.459696][ T8107] nvme_fabrics: missing parameter 'transport=%s' [ 170.463934][ T8107] nvme_fabrics: missing parameter 'nqn=%s' [ 170.473440][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.610'. [ 170.605538][ C3] cm109_urb_ctl_callback: 3 callbacks suppressed [ 170.605553][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.610360][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.612819][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.615220][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.617615][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.619937][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.622455][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.624791][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.627166][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.629527][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.636963][ T34] usb 8-1: USB disconnect, device number 36 [ 170.638947][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 170.658847][ T34] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 170.722515][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 170.857527][ T8114] x_tables: duplicate underflow at hook 1 [ 170.862088][ T8114] hub 8-0:1.0: USB hub found [ 170.872448][ T8114] hub 8-0:1.0: 1 port detected [ 170.891481][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 170.905939][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.918636][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.931464][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.944487][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 170.953998][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.961017][ T10] usb 5-1: Product: syz [ 170.965751][ T10] usb 5-1: Manufacturer: syz [ 170.970399][ T10] usb 5-1: SerialNumber: syz [ 171.291468][ T59] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 171.399115][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 171.441460][ T59] usb 9-1: Using ep0 maxpacket: 32 [ 171.445733][ T59] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 171.449097][ T59] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 171.453238][ T59] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.457811][ T59] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 171.465851][ T59] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 171.469408][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.472298][ T59] usb 9-1: Product: syz [ 171.473619][ T59] usb 9-1: Manufacturer: syz [ 171.475194][ T59] usb 9-1: SerialNumber: syz [ 171.483894][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 171.488737][ T59] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input9 [ 171.701496][ T59] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 171.704279][ T59] (id 0x00) [ 171.751454][ T59] rc_core: IR keymap rc-imon-pad not found [ 171.753345][ T59] Registered IR keymap rc-empty [ 171.755009][ T59] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 171.760203][ T59] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 171.766555][ T8140] Invalid logical block size (4) [ 171.815279][ T8107] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 171.831319][ T10] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 171.833810][ T10] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 171.853013][ T10] usb 5-1: USB disconnect, device number 32 [ 171.872466][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.936138][ T59] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 171.942098][ T59] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input10 [ 171.950455][ T59] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:3> initialized [ 172.461585][ T5755] Bluetooth: hci2: command tx timeout [ 173.302661][ T3264] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 173.485599][ T3264] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 173.507589][ T3264] usb 8-1: config 0 has no interface number 0 [ 173.509509][ T3264] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 173.517683][ T3264] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.525515][ T3264] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 173.532619][ T3264] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 173.535577][ T3264] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 173.538054][ T3264] usb 8-1: Product: syz [ 173.539544][ T3264] usb 8-1: SerialNumber: syz [ 173.543323][ T3264] usb 8-1: config 0 descriptor?? [ 173.550025][ T3264] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 173.555933][ T3264] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input11 [ 173.805084][ T3264] usb 8-1: USB disconnect, device number 37 [ 173.806887][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.819419][ T3264] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 173.899000][ T88] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 173.901861][ T8170] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 174.057001][ T88] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.dis! [ 174.060302][ T8173] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.dis" [ 174.201468][ T59] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 174.212197][ T1042] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 174.361506][ T1042] usb 5-1: Using ep0 maxpacket: 8 [ 174.363302][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 174.366853][ T1042] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.370521][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.374226][ T1042] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.377105][ T59] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.380130][ T1042] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.383325][ T59] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.388812][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 174.392078][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.396053][ T1042] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 174.398939][ T59] usb 7-1: Product: syz [ 174.400326][ T59] usb 7-1: Manufacturer: syz [ 174.401878][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.404476][ T59] usb 7-1: SerialNumber: syz [ 174.406813][ T1042] usb 5-1: Product: syz [ 174.408225][ T1042] usb 5-1: Manufacturer: syz [ 174.409959][ T1042] usb 5-1: SerialNumber: syz [ 175.027201][ T8156] imon:send_packet: task interrupted [ 175.029347][ T8156] imon:send_packet: packet tx failed (-512) [ 175.032773][ T8156] imon:vfd_write: send packet #4 failed [ 175.042984][ T59] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 175.048730][ T59] usb 7-1: clock source 0 is not valid, cannot use [ 175.052159][ T59] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 175.054518][ T59] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 175.078775][ T59] usb 7-1: USB disconnect, device number 31 [ 175.115145][ T10] usb 9-1: USB disconnect, device number 3 [ 175.164384][ T1165] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 175.169059][ T8182] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 175.403047][ T8173] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 175.423332][ T1042] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 175.425644][ T1042] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 175.457534][ T1042] usb 5-1: USB disconnect, device number 33 [ 175.511685][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 175.661477][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 175.665691][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.670337][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.674279][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.680531][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 175.684765][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.687114][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'. [ 175.688134][ T10] usb 9-1: Product: syz [ 175.694020][ T10] usb 9-1: Manufacturer: syz [ 175.696042][ T10] usb 9-1: SerialNumber: syz [ 176.118421][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 176.405870][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.409903][ T10] usb 9-1: clock source 0 is not valid, cannot use [ 176.414351][ T10] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 176.418164][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.484014][ T10] usb 9-1: USB disconnect, device number 4 [ 176.494017][ T8220] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 176.496748][ T8220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.503402][ T8220] vhci_hcd vhci_hcd.0: Device attached [ 176.510033][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.525407][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 176.819692][ T8230] lo speed is unknown, defaulting to 1000 [ 177.450484][ T8214] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 177.552498][ T6116] usb 42-1: SetAddress Request (6) to port 0 [ 177.554631][ T6116] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 177.591274][ T8221] vhci_hcd: connection reset by peer [ 177.601471][ T5843] vhci_hcd vhci_hcd.2: stop threads [ 177.604226][ T5843] vhci_hcd vhci_hcd.2: release socket [ 177.608124][ T5843] vhci_hcd vhci_hcd.2: disconnect device [ 177.730667][ T1165] nvmet: connect request for invalid subsystem nqn.2014-! [ 177.734944][ T8237] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-" [ 177.991552][ T40] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 178.382286][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 178.564581][ T42] nvmet: connect request for invalid subsystem nqn.2014-! [ 178.566973][ T8274] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-" [ 178.798190][ T40] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.821453][ T1042] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 178.971446][ T1042] usb 5-1: Using ep0 maxpacket: 8 [ 178.974593][ T1042] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.978168][ T1042] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.982446][ T1042] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.987863][ T1042] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 178.990833][ T1042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.993780][ T1042] usb 5-1: Product: syz [ 178.995165][ T1042] usb 5-1: Manufacturer: syz [ 178.996788][ T1042] usb 5-1: SerialNumber: syz [ 179.171196][ T40] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.181527][ T40] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.190816][ T40] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 179.201435][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.203968][ T40] usb 9-1: Product: syz [ 179.205278][ T40] usb 9-1: Manufacturer: syz [ 179.206741][ T40] usb 9-1: SerialNumber: syz [ 179.511548][ T29] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 179.661788][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 179.665059][ T29] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 179.668397][ T29] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 179.675061][ T29] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.679934][ T29] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 179.687627][ T29] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 179.692158][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.695166][ T29] usb 7-1: Product: syz [ 179.696524][ T29] usb 7-1: Manufacturer: syz [ 179.698111][ T29] usb 7-1: SerialNumber: syz [ 179.705870][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 179.713595][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input12 [ 179.869239][ T8274] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 179.888581][ T1042] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 179.895033][ T1042] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 179.921477][ T29] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 179.924095][ T29] (id 0x00) [ 179.936643][ T1042] usb 5-1: USB disconnect, device number 34 [ 179.982566][ T29] rc_core: IR keymap rc-imon-pad not found [ 179.984480][ T29] Registered IR keymap rc-empty [ 179.986294][ T29] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 179.989485][ T29] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 180.133149][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 180.139044][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input13 [ 180.145418][ T29] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:32> initialized [ 180.151496][ T5755] Bluetooth: hci2: command 0x0405 tx timeout [ 180.228183][ T8237] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 180.246549][ T40] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 180.251261][ T40] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 180.276361][ T40] usb 9-1: USB disconnect, device number 5 [ 180.325231][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 180.468200][ T8293] sctp: [Deprecated]: syz.0.663 (pid 8293) Use of int in maxseg socket option. [ 180.468200][ T8293] Use struct sctp_assoc_value instead [ 180.631589][ T5849] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 180.663728][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 180.784282][ T5849] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 180.787302][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.789654][ T5849] usb 8-1: Product: syz [ 180.790912][ T5849] usb 8-1: Manufacturer: syz [ 180.792550][ T5849] usb 8-1: SerialNumber: syz [ 180.857779][ T1163] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 180.860949][ T8303] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 181.001643][ T1042] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 181.020489][ T8289] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .t an exit or jmp [ 181.020489][ T8289] processed 0 i [ 181.088997][ T5849] rtl8150 8-1:1.0: couldn't reset the device [ 181.090992][ T5849] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 181.099343][ T5849] usb 8-1: USB disconnect, device number 38 [ 181.121497][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 181.173638][ T1042] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.176360][ T1042] usb 5-1: config 0 has no interface number 0 [ 181.178367][ T1042] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 181.182143][ T1042] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.185643][ T1042] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.191713][ T1042] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.194639][ T1042] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.197316][ T1042] usb 5-1: Product: syz [ 181.198649][ T1042] usb 5-1: SerialNumber: syz [ 181.202432][ T1042] usb 5-1: config 0 descriptor?? [ 181.206075][ T1042] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 181.209197][ T1042] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input14 [ 181.271481][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 181.274534][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.277536][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.280232][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.284821][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 181.287497][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.289757][ T10] usb 9-1: Product: syz [ 181.290961][ T10] usb 9-1: Manufacturer: syz [ 181.292386][ T10] usb 9-1: SerialNumber: syz [ 181.442266][ C2] cm109_urb_ctl_callback: 34 callbacks suppressed [ 181.442290][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.446724][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.449109][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.451464][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.455182][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.457572][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.459810][ T1042] usb 5-1: USB disconnect, device number 35 [ 181.461785][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.461797][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 181.471745][ T1042] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 181.959175][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 181.962923][ T10] usb 9-1: clock source 0 is not valid, cannot use [ 181.965414][ T10] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 181.967890][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 181.988539][ T10] usb 9-1: USB disconnect, device number 6 [ 182.112462][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.125577][ T8316] imon:vfd_write: invalid payload size [ 182.621588][ T6116] usb 42-1: device descriptor read/8, error -110 [ 183.164736][ T8330] tipc: Started in network mode [ 183.166519][ T8330] tipc: Node identity 4, cluster identity 4711 [ 183.168615][ T8330] tipc: Node number set to 4 [ 183.278521][ T8333] netlink: 32 bytes leftover after parsing attributes in process `syz.3.674'. [ 183.302801][ T10] usb 7-1: USB disconnect, device number 32 [ 183.394013][ T8338] jffs2: notice: (8338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.552270][ T6116] usb usb42-port1: attempt power cycle [ 183.741478][ T5853] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 183.899640][ T5853] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.903868][ T5853] usb 8-1: not running at top speed; connect to a high speed hub [ 183.907573][ T5853] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 183.910234][ T5853] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 183.915239][ T8349] batman_adv: batadv0: Adding interface: dummy0 [ 183.917393][ T8349] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.925504][ T5853] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 183.929074][ T5853] usb 8-1: config 14 has no interface number 0 [ 183.931019][ T5853] usb 8-1: config 14 has no interface number 1 [ 183.933639][ T5853] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 183.937019][ T8349] batman_adv: batadv0: Interface activated: dummy0 [ 183.939568][ T5853] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 183.944014][ T5853] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.947327][ T5853] usb 8-1: config 14 interface 57 has no altsetting 0 [ 183.958259][ T8349] batadv0: mtu less than device minimum [ 183.962837][ T5853] usb 8-1: config 14 interface 228 has no altsetting 0 [ 183.967289][ T5853] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 183.968056][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.970162][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.970176][ T5853] usb 8-1: Product: syz [ 183.970184][ T5853] usb 8-1: Manufacturer: syz [ 183.970192][ T5853] usb 8-1: SerialNumber: syz [ 183.982019][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.985676][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.989540][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.993480][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.997131][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.000761][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.004481][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.008127][ T8349] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.114596][ T6116] usb usb42-port1: unable to enumerate USB device [ 184.472318][ T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 184.526985][ T8360] FAULT_INJECTION: forcing a failure. [ 184.526985][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 184.530957][ T8360] CPU: 2 UID: 0 PID: 8360 Comm: syz.0.684 Not tainted syzkaller #0 PREEMPT(full) [ 184.530972][ T8360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.530979][ T8360] Call Trace: [ 184.530984][ T8360] [ 184.530988][ T8360] dump_stack_lvl+0x100/0x190 [ 184.531010][ T8360] should_fail_ex.cold+0x5/0xa [ 184.531026][ T8360] should_failslab+0xc2/0x120 [ 184.531044][ T8360] __kmalloc_noprof+0xfc/0x820 [ 184.531060][ T8360] ? rfkill_alloc+0xb1/0x300 [ 184.531078][ T8360] rfkill_alloc+0xb1/0x300 [ 184.531093][ T8360] wiphy_new_nm+0x136a/0x21a0 [ 184.531114][ T8360] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 184.531133][ T8360] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 184.531149][ T8360] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 184.531168][ T8360] ieee80211_alloc_hw_nm+0x1afc/0x22e0 [ 184.531184][ T8360] ? __local_bh_enable_ip+0x9e/0x120 [ 184.531201][ T8360] mac80211_hwsim_new_radio+0x1de/0x64c0 [ 184.531223][ T8360] ? __asan_memset+0x23/0x50 [ 184.531236][ T8360] ? __nla_validate_parse+0x1e7/0x28b0 [ 184.531254][ T8360] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.531275][ T8360] hwsim_new_radio_nl+0xc6b/0x13f0 [ 184.531293][ T8360] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.531313][ T8360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 184.531332][ T8360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 184.531351][ T8360] genl_family_rcv_msg_doit+0x214/0x300 [ 184.531382][ T8360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.531396][ T8360] ? genl_get_cmd+0x3e7/0x760 [ 184.531414][ T8360] ? bpf_lsm_capable+0x9/0x10 [ 184.531428][ T8360] ? security_capable+0x80/0x260 [ 184.531442][ T8360] ? ns_capable+0xd2/0xf0 [ 184.531456][ T8360] genl_rcv_msg+0x560/0x800 [ 184.531473][ T8360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.531488][ T8360] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.531506][ T8360] ? __lock_acquire+0x49f/0x1a40 [ 184.531526][ T8360] netlink_rcv_skb+0x159/0x420 [ 184.531539][ T8360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.531555][ T8360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.531573][ T8360] ? netlink_deliver_tap+0x1ae/0xcc0 [ 184.531588][ T8360] genl_rcv+0x28/0x40 [ 184.531601][ T8360] netlink_unicast+0x585/0x850 [ 184.531616][ T8360] ? __pfx_netlink_unicast+0x10/0x10 [ 184.531637][ T8360] netlink_sendmsg+0x8b0/0xda0 [ 184.531652][ T8360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.531667][ T8360] ? apparmor_socket_sendmsg+0x15b/0x270 [ 184.531683][ T8360] ____sys_sendmsg+0xa4d/0xbe0 [ 184.531696][ T8360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.531710][ T8360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.531728][ T8360] ___sys_sendmsg+0x190/0x1e0 [ 184.531742][ T8360] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.531762][ T8360] ? find_held_lock+0x2b/0x80 [ 184.531801][ T8360] __sys_sendmsg+0x160/0x210 [ 184.531819][ T8360] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.531840][ T8360] ? __pfx_ksys_write+0x10/0x10 [ 184.531854][ T8360] __do_fast_syscall_32+0xe7/0x970 [ 184.531871][ T8360] ? lockdep_hardirqs_on+0x78/0x100 [ 184.531887][ T8360] do_fast_syscall_32+0x32/0x70 [ 184.531903][ T8360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.531918][ T8360] RIP: 0023:0xf709efec [ 184.531934][ T8360] Code: Unable to access opcode bytes at 0xf709efc2. [ 184.531940][ T8360] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 184.531951][ T8360] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 184.531957][ T8360] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.531964][ T8360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.531970][ T8360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.531976][ T8360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.531991][ T8360] [ 184.640525][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 184.645531][ T5853] legousbtower 8-1:14.57: interrupt endpoints not found [ 184.653956][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 184.673468][ T10] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 184.677133][ T10] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 184.680591][ T10] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 184.689251][ T10] usb 9-1: config 14 has no interface number 0 [ 184.693543][ T10] usb 9-1: config 14 has no interface number 1 [ 184.698929][ T10] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 184.707766][ T10] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 184.710259][ T8362] tipc: Started in network mode [ 184.714254][ T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.719877][ T8362] tipc: Node identity 4, cluster identity 4711 [ 184.720962][ T10] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.723591][ T8362] tipc: Node number set to 4 [ 184.727162][ T10] usb 9-1: config 14 interface 57 has no altsetting 0 [ 184.729058][ T8362] FAULT_INJECTION: forcing a failure. [ 184.729058][ T8362] name failslab, interval 1, probability 0, space 0, times 0 [ 184.732578][ T10] usb 9-1: config 14 interface 228 has no altsetting 0 [ 184.740881][ T8362] CPU: 2 UID: 0 PID: 8362 Comm: syz.0.686 Not tainted syzkaller #0 PREEMPT(full) [ 184.740896][ T8362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.740903][ T8362] Call Trace: [ 184.740909][ T8362] [ 184.740913][ T8362] dump_stack_lvl+0x100/0x190 [ 184.740932][ T8362] should_fail_ex.cold+0x5/0xa [ 184.740946][ T8362] should_failslab+0xc2/0x120 [ 184.740963][ T8362] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 184.740978][ T8362] ? __alloc_skb+0x140/0x710 [ 184.740998][ T8362] __alloc_skb+0x140/0x710 [ 184.741013][ T8362] ? __pfx___alloc_skb+0x10/0x10 [ 184.741032][ T8362] tipc_buf_acquire+0x26/0xe0 [ 184.741048][ T8362] named_prepare_buf+0x29/0x170 [ 184.741064][ T8362] tipc_named_publish+0x1f2/0x760 [ 184.741081][ T8362] tipc_nametbl_publish+0x17b/0x260 [ 184.741101][ T8362] tipc_net_finalize+0x126/0x180 [ 184.741112][ T8362] ? __pfx_tipc_net_finalize+0x10/0x10 [ 184.741123][ T8362] ? net_generic+0xea/0x2a0 [ 184.741134][ T8362] ? tipc_net_init.cold+0x5/0x90 [ 184.741148][ T8362] ? tipc_net_init+0xc6/0x100 [ 184.741159][ T8362] tipc_net_init.cold+0x4a/0x90 [ 184.741173][ T8362] __tipc_nl_net_set+0x413/0x590 [ 184.741185][ T8362] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 184.741195][ T8362] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.741211][ T8362] ? nla_put+0x101/0x140 [ 184.741226][ T8362] ? __nla_parse+0x40/0x60 [ 184.741241][ T8362] __tipc_nl_compat_doit+0x330/0x3d0 [ 184.741254][ T8362] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 184.741272][ T8362] ? bpf_lsm_capable+0x9/0x10 [ 184.741285][ T8362] ? security_capable+0x80/0x260 [ 184.741299][ T8362] tipc_nl_compat_doit+0x11e/0x290 [ 184.741312][ T8362] tipc_nl_compat_recv+0x7dc/0xc40 [ 184.741326][ T8362] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 184.741363][ T8362] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 184.741376][ T8362] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 184.741393][ T8362] ? trace_contention_end+0x126/0x160 [ 184.741406][ T8362] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 184.741426][ T8362] genl_family_rcv_msg_doit+0x214/0x300 [ 184.741443][ T8362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.741457][ T8362] ? genl_get_cmd+0x3e7/0x760 [ 184.741483][ T8362] ? ____sys_sendmsg+0xa4d/0xbe0 [ 184.741494][ T8362] ? ___sys_sendmsg+0x190/0x1e0 [ 184.741505][ T8362] ? __radix_tree_lookup+0x217/0x2b0 [ 184.741522][ T8362] genl_rcv_msg+0x560/0x800 [ 184.741539][ T8362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.741554][ T8362] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 184.741568][ T8362] ? __lock_acquire+0x49f/0x1a40 [ 184.741588][ T8362] netlink_rcv_skb+0x159/0x420 [ 184.741601][ T8362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.741616][ T8362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.741640][ T8362] ? netlink_deliver_tap+0x1ae/0xcc0 [ 184.741654][ T8362] genl_rcv+0x28/0x40 [ 184.741667][ T8362] netlink_unicast+0x585/0x850 [ 184.741682][ T8362] ? __pfx_netlink_unicast+0x10/0x10 [ 184.741699][ T8362] netlink_sendmsg+0x8b0/0xda0 [ 184.741714][ T8362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.741729][ T8362] ? apparmor_socket_sendmsg+0x15b/0x270 [ 184.741744][ T8362] ____sys_sendmsg+0xa4d/0xbe0 [ 184.741756][ T8362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.741769][ T8362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.741788][ T8362] ___sys_sendmsg+0x190/0x1e0 [ 184.741801][ T8362] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.741821][ T8362] ? find_held_lock+0x2b/0x80 [ 184.741843][ T8362] __sys_sendmsg+0x160/0x210 [ 184.741860][ T8362] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.741880][ T8362] ? __pfx_ksys_write+0x10/0x10 [ 184.741894][ T8362] __do_fast_syscall_32+0xe7/0x970 [ 184.741910][ T8362] ? lockdep_hardirqs_on+0x78/0x100 [ 184.741925][ T8362] do_fast_syscall_32+0x32/0x70 [ 184.741941][ T8362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.741957][ T8362] RIP: 0023:0xf709efec [ 184.741972][ T8362] Code: Unable to access opcode bytes at 0xf709efc2. [ 184.741977][ T8362] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 184.741988][ T8362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 184.741995][ T8362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.742001][ T8362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.742007][ T8362] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.742013][ T8362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.742027][ T8362] [ 184.754274][ T10] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 184.755211][ T8362] tipc: Publication distribution failure [ 184.901245][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.904029][ T10] usb 9-1: Product: syz [ 184.905451][ T10] usb 9-1: Manufacturer: syz [ 184.907014][ T10] usb 9-1: SerialNumber: syz [ 185.090788][ T88] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 185.096505][ T8369] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 185.226492][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 185.351529][ T5840] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 185.501653][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 185.504573][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.507868][ T5840] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.510683][ T5840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.515322][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 185.518178][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.520675][ T5840] usb 5-1: Product: syz [ 185.522462][ T5840] usb 5-1: Manufacturer: syz [ 185.524372][ T5840] usb 5-1: SerialNumber: syz [ 185.626389][ T10] legousbtower 9-1:14.57: interrupt endpoints not found [ 185.734931][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 185.762329][ T5853] legousbtower 8-1:14.228: interrupt endpoints not found [ 185.769114][ T5853] usb 8-1: USB disconnect, device number 39 [ 185.845137][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 185.882797][ T42] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 185.885610][ T8391] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 186.281482][ T5853] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 186.382273][ T10] legousbtower 9-1:14.228: get version request failed: -71 [ 186.385734][ T10] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 186.410835][ T8369] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 186.413523][ T10] usb 9-1: USB disconnect, device number 7 [ 186.437660][ T5840] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 186.440226][ T5840] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 186.489780][ T5840] usb 5-1: USB disconnect, device number 36 [ 186.871509][ T5853] usb 8-1: Using ep0 maxpacket: 8 [ 186.874932][ T5853] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.878570][ T5853] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.882477][ T5853] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.888508][ T5853] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 186.892967][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.895719][ T5853] usb 8-1: Product: syz [ 186.897038][ T5853] usb 8-1: Manufacturer: syz [ 186.898513][ T5853] usb 8-1: SerialNumber: syz [ 186.921588][ T10] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 186.928895][ T8400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'. [ 187.020675][ T8405] syzkaller0: entered promiscuous mode [ 187.022596][ T8405] syzkaller0: entered allmulticast mode [ 187.061659][ T8405] syzkaller0: tun_net_xmit 1 [ 187.073583][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.081457][ T10] usb 9-1: config 0 has no interface number 0 [ 187.084034][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 187.088610][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.093091][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.099198][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.111466][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.114921][ T10] usb 9-1: Product: syz [ 187.116672][ T10] usb 9-1: SerialNumber: syz [ 187.120609][ T10] usb 9-1: config 0 descriptor?? [ 187.126132][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 187.130819][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input15 [ 187.304889][ T8408] FAULT_INJECTION: forcing a failure. [ 187.304889][ T8408] name failslab, interval 1, probability 0, space 0, times 0 [ 187.315425][ T8408] CPU: 3 UID: 0 PID: 8408 Comm: syz.0.702 Not tainted syzkaller #0 PREEMPT(full) [ 187.315451][ T8408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.315462][ T8408] Call Trace: [ 187.315468][ T8408] [ 187.315477][ T8408] dump_stack_lvl+0x100/0x190 [ 187.315505][ T8408] should_fail_ex.cold+0x5/0xa [ 187.315527][ T8408] should_failslab+0xc2/0x120 [ 187.315553][ T8408] kmem_cache_alloc_noprof+0x91/0x6a0 [ 187.315574][ T8408] ? __pfx_map_id_range_down+0x10/0x10 [ 187.315601][ T8408] ? security_inode_alloc+0x3b/0x2c0 [ 187.315629][ T8408] security_inode_alloc+0x3b/0x2c0 [ 187.315652][ T8408] inode_init_always_gfp+0xc77/0xfb0 [ 187.315675][ T8408] alloc_inode+0x8e/0x250 [ 187.315699][ T8408] iget_locked+0x1d9/0x6d0 [ 187.315724][ T8408] ? __pfx_iget_locked+0x10/0x10 [ 187.315745][ T8408] ? kernfs_root+0xee/0x2a0 [ 187.315801][ T8408] ? kernfs_root+0xee/0x2a0 [ 187.315832][ T8408] kernfs_get_inode+0x46/0x470 [ 187.315860][ T8408] kernfs_iop_lookup+0x1a7/0x2d0 [ 187.315890][ T8408] __lookup_slow+0x155/0x320 [ 187.315916][ T8408] lookup_slow+0x50/0x70 [ 187.315946][ T8408] link_path_walk+0x1377/0x1cc0 [ 187.315982][ T8408] path_openat+0x1c9/0x4280 [ 187.316000][ T8408] ? kasan_save_track+0x14/0x30 [ 187.316021][ T8408] ? __kasan_slab_alloc+0x89/0x90 [ 187.316042][ T8408] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 187.316064][ T8408] ? do_sys_openat2+0xc7/0x1e0 [ 187.316096][ T8408] ? __pfx_path_openat+0x10/0x10 [ 187.316123][ T8408] do_file_open+0x20e/0x430 [ 187.316140][ T8408] ? __lock_acquire+0x49f/0x1a40 [ 187.316171][ T8408] ? __pfx_do_file_open+0x10/0x10 [ 187.316208][ T8408] ? _raw_spin_unlock+0x28/0x50 [ 187.316229][ T8408] ? alloc_fd+0x471/0x7a0 [ 187.316255][ T8408] do_sys_openat2+0x10f/0x1e0 [ 187.316279][ T8408] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.316306][ T8408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.316336][ T8408] __ia32_compat_sys_openat+0x12d/0x210 [ 187.316362][ T8408] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 187.316386][ T8408] ? fput+0x79/0x100 [ 187.316407][ T8408] ? ksys_write+0x1ac/0x250 [ 187.316423][ T8408] ? __pfx_ksys_write+0x10/0x10 [ 187.316445][ T8408] __do_fast_syscall_32+0xe7/0x970 [ 187.316471][ T8408] ? lockdep_hardirqs_on+0x78/0x100 [ 187.316496][ T8408] do_fast_syscall_32+0x32/0x70 [ 187.316521][ T8408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.316545][ T8408] RIP: 0023:0xf709efec [ 187.316568][ T8408] Code: Unable to access opcode bytes at 0xf709efc2. [ 187.316576][ T8408] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 187.316594][ T8408] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 187.316605][ T8408] RDX: 0000000000000002 RSI: 0000000000000045 RDI: 0000000000000000 [ 187.316615][ T8408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.316625][ T8408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.316635][ T8408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.316659][ T8408] [ 187.559623][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 187.853625][ T8391] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 187.876399][ T5853] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 187.878885][ T5853] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 187.908733][ T5853] usb 8-1: USB disconnect, device number 40 [ 187.938688][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.524148][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.527194][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.530222][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.533259][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.538544][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.541455][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.544304][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.547142][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.550032][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.552928][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.557174][ T10] usb 9-1: USB disconnect, device number 8 [ 188.559480][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 188.580985][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 188.584154][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.706'. [ 188.673653][ T42] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.dis! [ 188.676600][ T8429] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.dis" [ 188.793284][ T34] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 188.948712][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 188.951453][ T5840] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 189.111518][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 189.115303][ T5840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.118759][ T5840] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.121870][ T5840] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.126495][ T5840] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 189.129588][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.132267][ T5840] usb 7-1: Product: syz [ 189.133652][ T5840] usb 7-1: Manufacturer: syz [ 189.135114][ T5840] usb 7-1: SerialNumber: syz [ 189.456775][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 189.462789][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 189.465845][ T34] usb 8-1: can't read configurations, error -71 [ 189.537951][ T42] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 189.540914][ T8440] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 189.915726][ T8449] can0: slcan on ttyS3. [ 190.021038][ T8429] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 190.091502][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 190.230963][ T5840] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 190.251460][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 190.254979][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.258664][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.262285][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.267477][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 190.270653][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.274924][ T10] usb 9-1: Product: syz [ 190.276321][ T10] usb 9-1: Manufacturer: syz [ 190.277863][ T10] usb 9-1: SerialNumber: syz [ 190.378075][ T5840] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 190.415895][ T5840] usb 7-1: USB disconnect, device number 33 [ 190.432967][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.436759][ T8457] netlink: 48 bytes leftover after parsing attributes in process `syz.3.714'. [ 190.643582][ T8446] can0 (unregistered): slcan off ttyS3. [ 190.716147][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 190.808320][ T8482] batman_adv: batadv0: Adding interface: dummy0 [ 190.810462][ T8482] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.819357][ T8482] batman_adv: batadv0: Interface activated: dummy0 [ 191.001444][ T6114] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 191.126678][ T8440] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 191.144520][ T10] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 191.149011][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 191.153147][ T6114] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.158422][ T6114] usb 7-1: config 0 has no interface number 0 [ 191.160464][ T6114] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 191.171165][ T6114] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.179010][ T6114] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.185456][ T10] usb 9-1: USB disconnect, device number 9 [ 191.187621][ T6114] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.190798][ T6114] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.193817][ T6114] usb 7-1: Product: syz [ 191.196858][ T6114] usb 7-1: SerialNumber: syz [ 191.204029][ T6114] usb 7-1: config 0 descriptor?? [ 191.209204][ T6114] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 191.216614][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.225935][ T6114] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input16 [ 191.421267][ T10] usb 7-1: USB disconnect, device number 34 [ 191.421327][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 191.438412][ T10] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 191.627299][ T8487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 191.888289][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.893340][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.898804][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.909443][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.913154][ T8493] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 191.916554][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.921867][ T8493] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers [ 191.936459][ T8493] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 191.943150][ T8493] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 192.321498][ T5840] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 192.327184][ T88] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 192.331606][ T34] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 192.334431][ T8495] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 192.481428][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 192.486309][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.491491][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 192.492717][ T34] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.496699][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.499418][ T34] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.501645][ T5840] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.510138][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 192.510493][ T5840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.513244][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.519904][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 192.520929][ T34] usb 7-1: Product: syz [ 192.522856][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.527438][ T34] usb 7-1: Manufacturer: syz [ 192.531181][ T34] usb 7-1: SerialNumber: syz [ 192.531423][ T5840] usb 5-1: Product: syz [ 192.536450][ T5840] usb 5-1: Manufacturer: syz [ 192.537854][ T5840] usb 5-1: SerialNumber: syz [ 192.790582][ T1163] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.dis! [ 192.793605][ T8500] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.dis" [ 192.832488][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 193.356839][ T8502] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 193.710549][ T8539] Context (ID=0x10) not attached to queue pair (handle=0x0:0x2) [ 193.904514][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.906676][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.886010][ T34] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 195.888595][ T34] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 195.911530][ T34] usb 7-1: USB disconnect, device number 35 [ 195.913014][ T5840] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 195.917581][ T5840] usb 5-1: clock source 0 is not valid, cannot use [ 195.921246][ T5840] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 195.924978][ T5840] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 195.938043][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.729'. [ 195.972923][ T5840] usb 5-1: USB disconnect, device number 37 [ 196.007048][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 196.149678][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'. [ 196.170205][ T8553] net_ratelimit: 10 callbacks suppressed [ 196.170216][ T8553] openvswitch: netlink: Duplicate or invalid key (type 0). [ 196.175204][ T8553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 196.721509][ T29] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 196.741479][ T10] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 196.892990][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.893006][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 196.897318][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.900027][ T10] usb 9-1: config 0 has no interface number 0 [ 196.903139][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.905164][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 196.909120][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.912863][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.915661][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.919052][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.920368][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 196.922998][ T29] usb 8-1: config 0 descriptor?? [ 196.927911][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 196.932730][ T10] usb 9-1: Product: syz [ 196.934128][ T10] usb 9-1: SerialNumber: syz [ 196.937097][ T10] usb 9-1: config 0 descriptor?? [ 196.941055][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 196.945461][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input17 [ 197.092835][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.738'. [ 197.186660][ C0] cm109_urb_ctl_callback: 13 callbacks suppressed [ 197.186678][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.191234][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.193741][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.196231][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.199145][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.201772][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.204107][ T10] usb 9-1: USB disconnect, device number 10 [ 197.204167][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.208412][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 197.214009][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 197.299432][ T8573] Invalid logical block size (4) [ 197.337274][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.342695][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.345071][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.347364][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.349669][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.352205][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.354547][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.356847][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.359147][ T29] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 197.379764][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 197.536890][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 197.816716][ T8578] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 198.551197][ T8586] Invalid logical block size (4) [ 198.752468][ T8588] Bluetooth: MGMT ver 1.23 [ 198.924226][ T8593] JFS: discard option not supported on device [ 198.933085][ T8593] Mount JFS Failure: -22 [ 198.934718][ T8593] jfs_mount failed w/return code = -22 [ 199.235662][ T8605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.750'. [ 199.439698][ T24] usb 8-1: USB disconnect, device number 43 [ 199.826169][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 200.003109][ T8621] jffs2: notice: (8621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.213810][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 200.424781][ T8626] FAULT_INJECTION: forcing a failure. [ 200.424781][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.448967][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.756 Not tainted syzkaller #0 PREEMPT(full) [ 200.449006][ T8626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.449015][ T8626] Call Trace: [ 200.449019][ T8626] [ 200.449024][ T8626] dump_stack_lvl+0x100/0x190 [ 200.449042][ T8626] should_fail_ex.cold+0x5/0xa [ 200.449056][ T8626] _copy_to_user+0x32/0xd0 [ 200.449078][ T8626] simple_read_from_buffer+0xcb/0x170 [ 200.449098][ T8626] proc_fail_nth_read+0x1af/0x230 [ 200.449115][ T8626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.449131][ T8626] ? rw_verify_area+0xce/0x6d0 [ 200.449148][ T8626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.449163][ T8626] vfs_read+0x1e4/0xb40 [ 200.449175][ T8626] ? __pfx_vfs_read+0x10/0x10 [ 200.449184][ T8626] ? find_held_lock+0x2b/0x80 [ 200.449199][ T8626] ? __fget_files+0x215/0x3d0 [ 200.449213][ T8626] ? __fget_files+0x21f/0x3d0 [ 200.449227][ T8626] ksys_read+0x12a/0x250 [ 200.449237][ T8626] ? __pfx_ksys_read+0x10/0x10 [ 200.449251][ T8626] do_int80_emulation+0x14b/0x720 [ 200.449270][ T8626] asm_int80_emulation+0x1a/0x20 [ 200.449282][ T8626] RIP: 0023:0xf71d73eb [ 200.449291][ T8626] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 200.449302][ T8626] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 200.449314][ T8626] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 200.449321][ T8626] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 200.449342][ T8626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.449348][ T8626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.449355][ T8626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.449369][ T8626] [ 200.952767][ T5746] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 201.051902][ T34] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 201.106905][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 201.267049][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.271863][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.275179][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.279630][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.286624][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.297182][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.300843][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.306203][ T34] usb 5-1: Product: syz [ 201.309806][ T34] usb 5-1: Manufacturer: syz [ 201.386000][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 201.400995][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 201.481300][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 201.483557][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 202.065485][ T8665] block nbd0: shutting down sockets [ 203.437920][ T88] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 203.441092][ T8682] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 203.613209][ T10] usb 5-1: USB disconnect, device number 38 [ 203.677206][ T1165] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 203.680319][ T8686] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 203.761455][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 203.911462][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 203.915049][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.918626][ T24] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.921857][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.926971][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 203.930039][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.932945][ T24] usb 9-1: Product: syz [ 203.934545][ T24] usb 9-1: Manufacturer: syz [ 203.936073][ T24] usb 9-1: SerialNumber: syz [ 204.011514][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 204.171620][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 204.177491][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.186663][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 204.191507][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.196797][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 204.211455][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.214129][ T10] usb 5-1: Product: syz [ 204.215452][ T10] usb 5-1: Manufacturer: syz [ 204.216850][ T10] usb 5-1: SerialNumber: syz [ 204.262234][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 204.600235][ T8701] gre1: entered promiscuous mode [ 204.721332][ T8704] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 204.787188][ T8682] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 204.802959][ T24] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 204.806015][ T24] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 204.825234][ T24] usb 9-1: USB disconnect, device number 11 [ 205.091506][ T5853] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 205.226032][ T8686] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 205.238016][ T10] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 205.242162][ T10] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 205.252833][ T5853] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.255427][ T5853] usb 7-1: config 0 has no interface number 0 [ 205.257421][ T5853] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 205.260996][ T5853] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.264495][ T5853] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.268194][ T10] usb 5-1: USB disconnect, device number 39 [ 205.268908][ T5853] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 205.273617][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 205.276292][ T5853] usb 7-1: Product: syz [ 205.277629][ T5853] usb 7-1: SerialNumber: syz [ 205.287519][ T5853] usb 7-1: config 0 descriptor?? [ 205.296018][ T5853] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 205.328912][ T5853] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input18 [ 205.340308][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 205.515471][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.518707][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.521647][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.524194][ T5853] usb 7-1: USB disconnect, device number 36 [ 205.526644][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.526662][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 205.561886][ T5853] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 205.791895][ T10] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 205.944619][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 205.947565][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 205.950771][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 205.953564][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 205.956168][ T10] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 205.959421][ T10] usb 8-1: config 14 has no interface number 0 [ 205.961412][ T10] usb 8-1: config 14 has no interface number 1 [ 205.963378][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 205.966664][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 205.970376][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.976259][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 205.979588][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 205.981798][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 205.985462][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 205.988342][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.990798][ T10] usb 8-1: Product: syz [ 205.992301][ T10] usb 8-1: Manufacturer: syz [ 205.993794][ T10] usb 8-1: SerialNumber: syz [ 206.061952][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.788'. [ 206.153660][ T8732] gadgetfs: bound to dummy_udc driver [ 206.376861][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 206.473982][ T8740] FAULT_INJECTION: forcing a failure. [ 206.473982][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 206.479649][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.2.795 Not tainted syzkaller #0 PREEMPT(full) [ 206.479670][ T8740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.479704][ T8740] Call Trace: [ 206.479711][ T8740] [ 206.479717][ T8740] dump_stack_lvl+0x100/0x190 [ 206.479740][ T8740] should_fail_ex.cold+0x5/0xa [ 206.479759][ T8740] should_failslab+0xc2/0x120 [ 206.479780][ T8740] __kmalloc_noprof+0xfc/0x820 [ 206.479797][ T8740] ? trace_kmem_cache_alloc+0xdd/0x100 [ 206.479816][ T8740] ? __kasan_slab_alloc+0x89/0x90 [ 206.479835][ T8740] ? p9_fcall_init+0x101/0x420 [ 206.479861][ T8740] p9_fcall_init+0x101/0x420 [ 206.479883][ T8740] p9_tag_alloc+0x20d/0x860 [ 206.479906][ T8740] ? __pfx_p9_tag_alloc+0x10/0x10 [ 206.479925][ T8740] ? __kasan_kmalloc+0xaa/0xb0 [ 206.479942][ T8740] ? v9fs_fid_lookup+0x9a4/0xf50 [ 206.479961][ T8740] ? v9fs_xattr_handler_set+0x31/0x150 [ 206.479977][ T8740] ? __vfs_setxattr+0x175/0x1e0 [ 206.479990][ T8740] ? __vfs_setxattr_noperm+0x127/0x660 [ 206.480004][ T8740] ? __vfs_setxattr_locked+0x127/0x2b0 [ 206.480017][ T8740] ? vfs_setxattr+0x14a/0x390 [ 206.480030][ T8740] ? do_setxattr+0x145/0x180 [ 206.480043][ T8740] ? filename_setxattr+0x167/0x1d0 [ 206.480060][ T8740] p9_client_prepare_req+0x19b/0x4d0 [ 206.480083][ T8740] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 206.480108][ T8740] ? __lock_acquire+0x49f/0x1a40 [ 206.480134][ T8740] p9_client_rpc+0x1c4/0xd60 [ 206.480158][ T8740] ? __pfx_p9_client_rpc+0x10/0x10 [ 206.480181][ T8740] ? idr_alloc_u32+0x22b/0x320 [ 206.480205][ T8740] ? find_held_lock+0x2b/0x80 [ 206.480221][ T8740] ? find_held_lock+0x2b/0x80 [ 206.480238][ T8740] ? p9_fid_create+0x26d/0x460 [ 206.480259][ T8740] ? rcu_is_watching+0x12/0xc0 [ 206.480281][ T8740] p9_client_attach+0x153/0x2b0 [ 206.480297][ T8740] ? __pfx_p9_client_attach+0x10/0x10 [ 206.480310][ T8740] ? v9fs_fid_lookup+0x500/0xf50 [ 206.480331][ T8740] v9fs_fid_lookup+0x9a4/0xf50 [ 206.480349][ T8740] ? __pfx_v9fs_xattr_handler_set+0x10/0x10 [ 206.480365][ T8740] v9fs_xattr_handler_set+0x31/0x150 [ 206.480382][ T8740] __vfs_setxattr+0x175/0x1e0 [ 206.480399][ T8740] ? __pfx___vfs_setxattr+0x10/0x10 [ 206.480412][ T8740] ? generic_permission+0xae/0x800 [ 206.480436][ T8740] __vfs_setxattr_noperm+0x127/0x660 [ 206.480456][ T8740] __vfs_setxattr_locked+0x127/0x2b0 [ 206.480475][ T8740] vfs_setxattr+0x14a/0x390 [ 206.480492][ T8740] ? __pfx_vfs_setxattr+0x10/0x10 [ 206.480507][ T8740] ? mnt_get_write_access+0x52/0x2f0 [ 206.480527][ T8740] ? mnt_get_write_access+0x52/0x2f0 [ 206.480552][ T8740] do_setxattr+0x145/0x180 [ 206.480569][ T8740] filename_setxattr+0x167/0x1d0 [ 206.480585][ T8740] ? __pfx_filename_setxattr+0x10/0x10 [ 206.480602][ T8740] ? do_getname+0x191/0x390 [ 206.480622][ T8740] path_setxattrat+0x1ff/0x3b0 [ 206.480638][ T8740] ? __pfx_path_setxattrat+0x10/0x10 [ 206.480657][ T8740] ? rcu_read_lock_any_held+0x6a/0xa0 [ 206.480676][ T8740] ? find_held_lock+0x2b/0x80 [ 206.480711][ T8740] ? fput+0x79/0x100 [ 206.480727][ T8740] ? ksys_write+0x1ac/0x250 [ 206.480742][ T8740] __ia32_sys_setxattr+0xc4/0x140 [ 206.480758][ T8740] ? __do_fast_syscall_32+0x98/0x970 [ 206.480778][ T8740] ? lockdep_hardirqs_on+0x78/0x100 [ 206.480796][ T8740] __do_fast_syscall_32+0xe7/0x970 [ 206.480816][ T8740] ? lockdep_hardirqs_on+0x78/0x100 [ 206.480835][ T8740] do_fast_syscall_32+0x32/0x70 [ 206.480855][ T8740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.480874][ T8740] RIP: 0023:0xf7f58fec [ 206.480892][ T8740] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 206.480899][ T8740] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 206.480914][ T8740] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000080000300 [ 206.480923][ T8740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 206.480931][ T8740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.480939][ T8740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.480947][ T8740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.480966][ T8740] [ 206.617909][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 206.682832][ T8742] FAULT_INJECTION: forcing a failure. [ 206.682832][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.687059][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.0.794 Not tainted syzkaller #0 PREEMPT(full) [ 206.687073][ T8742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.687081][ T8742] Call Trace: [ 206.687086][ T8742] [ 206.687102][ T8742] dump_stack_lvl+0x100/0x190 [ 206.687122][ T8742] should_fail_ex.cold+0x5/0xa [ 206.687135][ T8742] _copy_to_user+0x32/0xd0 [ 206.687155][ T8742] simple_read_from_buffer+0xcb/0x170 [ 206.687176][ T8742] proc_fail_nth_read+0x1af/0x230 [ 206.687192][ T8742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.687209][ T8742] ? rw_verify_area+0xce/0x6d0 [ 206.687225][ T8742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.687241][ T8742] vfs_read+0x1e4/0xb40 [ 206.687253][ T8742] ? __pfx_vfs_read+0x10/0x10 [ 206.687262][ T8742] ? find_held_lock+0x2b/0x80 [ 206.687277][ T8742] ? __fget_files+0x215/0x3d0 [ 206.687290][ T8742] ? __fget_files+0x21f/0x3d0 [ 206.687304][ T8742] ksys_read+0x12a/0x250 [ 206.687315][ T8742] ? __pfx_ksys_read+0x10/0x10 [ 206.687329][ T8742] do_int80_emulation+0x14b/0x720 [ 206.687348][ T8742] asm_int80_emulation+0x1a/0x20 [ 206.687360][ T8742] RIP: 0023:0xf71d73eb [ 206.687370][ T8742] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 206.687381][ T8742] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 206.687392][ T8742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 206.687399][ T8742] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 206.687405][ T8742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.687412][ T8742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.687418][ T8742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.687432][ T8742] [ 206.941122][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 207.181044][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 207.190759][ T10] legousbtower 8-1:14.228: get version request failed: -71 [ 207.193092][ T10] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 207.202846][ T10] usb 8-1: USB disconnect, device number 44 [ 207.291911][ T8757] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 207.737931][ T8757] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 207.742836][ T8757] overlayfs: failed to look up (tracing) for ino (-66) [ 208.050030][ T8773] Invalid logical block size (63) [ 208.349979][ T8770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.806'. [ 208.819007][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 209.256358][ T8795] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 209.294010][ T8795] team0: Port device dummy0 added [ 210.206958][ T8800] loop5: detected capacity change from 0 to 6 [ 210.213807][ T8800] Dev loop5: unable to read RDB block 6 [ 210.216135][ T8800] loop5: unable to read partition table [ 210.218843][ T8800] loop5: partition table beyond EOD, truncated [ 210.220868][ T8800] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.231616][ T1165] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 210.244553][ T8797] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 210.321165][ T8801] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 210.326137][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 210.366599][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 210.423061][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.426683][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.431578][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.472423][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.479018][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.486312][ T8808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.490121][ T8808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.503950][ T8808] veth1_vlan: left promiscuous mode [ 210.507126][ T8808] veth0_vlan: left promiscuous mode [ 210.509756][ T8808] veth0_vlan: entered promiscuous mode [ 210.513035][ T8808] veth1_vlan: entered promiscuous mode [ 210.522262][ T8808] veth1_macvtap: left promiscuous mode [ 210.525000][ T8808] veth0_macvtap: left promiscuous mode [ 210.527465][ T8808] veth0_macvtap: entered promiscuous mode [ 210.530273][ T8808] veth1_macvtap: entered promiscuous mode [ 210.536149][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.541734][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.546372][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.549452][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.568167][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.570461][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.573928][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.576213][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.613194][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.617281][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.620520][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.623339][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.651484][ T40] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 210.672479][ T8815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'. [ 210.739551][ T8816] syz.4.820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 210.805646][ T40] usb 8-1: unable to get BOS descriptor or descriptor too short [ 210.809491][ T40] usb 8-1: not running at top speed; connect to a high speed hub [ 210.812822][ T40] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 210.815559][ T40] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 210.818198][ T40] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 210.821452][ T40] usb 8-1: config 14 has no interface number 0 [ 210.823385][ T40] usb 8-1: config 14 has no interface number 1 [ 210.825348][ T40] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 210.828841][ T40] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 210.832549][ T40] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.836004][ T40] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 210.839510][ T40] usb 8-1: config 14 interface 57 has no altsetting 0 [ 210.841717][ T40] usb 8-1: config 14 interface 228 has no altsetting 0 [ 210.845829][ T40] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 210.848806][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.851844][ T40] usb 8-1: Product: syz [ 210.853182][ T40] usb 8-1: Manufacturer: syz [ 210.854683][ T40] usb 8-1: SerialNumber: syz [ 211.529752][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 211.605134][ T8829] fuse: Unknown parameter 'J' [ 211.645856][ T8827] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 211.663554][ T8827] bridge_slave_0: default FDB implementation only supports local addresses [ 212.060421][ T40] legousbtower 8-1:14.57: interrupt endpoints not found [ 212.094289][ T40] legousbtower 8-1:14.228: get version request failed: -71 [ 212.103960][ T40] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 212.123067][ T40] usb 8-1: USB disconnect, device number 45 [ 212.357190][ T8844] Invalid logical block size (4) [ 213.584995][ T8857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.833'. [ 214.478020][ T104] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 214.481117][ T8868] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 214.601528][ T59] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 214.741721][ T40] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 214.751495][ T6085] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 214.773242][ T59] usb 9-1: unable to get BOS descriptor or descriptor too short [ 214.776226][ T59] usb 9-1: not running at top speed; connect to a high speed hub [ 214.779687][ T59] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.782656][ T59] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.785463][ T59] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 214.788651][ T59] usb 9-1: config 14 has no interface number 0 [ 214.790804][ T59] usb 9-1: config 14 has no interface number 1 [ 214.792956][ T59] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.796423][ T59] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 214.800188][ T59] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.803933][ T59] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 214.807511][ T59] usb 9-1: config 14 interface 57 has no altsetting 0 [ 214.809650][ T59] usb 9-1: config 14 interface 228 has no altsetting 0 [ 214.813744][ T59] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.816723][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.819395][ T59] usb 9-1: Product: syz [ 214.820766][ T59] usb 9-1: Manufacturer: syz [ 214.822461][ T59] usb 9-1: SerialNumber: syz [ 214.893187][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.895967][ T40] usb 5-1: not running at top speed; connect to a high speed hub [ 214.899711][ T40] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.902264][ T40] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.904725][ T40] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 214.907791][ T40] usb 5-1: config 14 has no interface number 0 [ 214.909661][ T40] usb 5-1: config 14 has no interface number 1 [ 214.911669][ T40] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.914909][ T40] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 214.918427][ T40] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.921492][ T6085] usb 8-1: Using ep0 maxpacket: 8 [ 214.921862][ T40] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 214.925605][ T6085] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.927515][ T40] usb 5-1: config 14 interface 57 has no altsetting 0 [ 214.931587][ T6085] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.933567][ T40] usb 5-1: config 14 interface 228 has no altsetting 0 [ 214.937137][ T6085] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.940671][ T40] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.945152][ T6085] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 214.945759][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.949360][ T6085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.949381][ T6085] usb 8-1: Product: syz [ 214.949394][ T6085] usb 8-1: Manufacturer: syz [ 214.949407][ T6085] usb 8-1: SerialNumber: syz [ 214.958695][ T40] usb 5-1: Product: syz [ 214.959987][ T40] usb 5-1: Manufacturer: syz [ 214.961447][ T40] usb 5-1: SerialNumber: syz [ 215.439490][ T59] legousbtower 9-1:14.57: interrupt endpoints not found [ 215.589190][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 215.640827][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 215.792699][ T8868] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 215.809677][ T6085] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 215.812359][ T6085] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 215.832457][ T6085] usb 8-1: USB disconnect, device number 46 [ 215.847779][ T6212] udevd[6212]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.101773][ T40] legousbtower 5-1:14.57: interrupt endpoints not found [ 216.106603][ T40] legousbtower 5-1:14.228: get version request failed: -71 [ 216.108946][ T40] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 216.116541][ T40] usb 5-1: USB disconnect, device number 40 [ 216.178256][ T59] legousbtower 9-1:14.228: get version request failed: -71 [ 216.180728][ T59] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 216.188563][ T59] usb 9-1: USB disconnect, device number 12 [ 216.900066][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 217.278742][ T8901] jffs2: notice: (8901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 217.635769][ T1165] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 217.638839][ T8911] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 218.111494][ T5967] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 218.294161][ T5967] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 218.297554][ T5967] usb 9-1: config 0 has no interface number 0 [ 218.300055][ T5967] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 218.304208][ T5967] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.307978][ T5967] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.312364][ T5967] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 218.315585][ T5967] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 218.318240][ T5967] usb 9-1: Product: syz [ 218.319583][ T5967] usb 9-1: SerialNumber: syz [ 218.326234][ T5967] usb 9-1: config 0 descriptor?? [ 218.330601][ T5967] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 218.334460][ T5967] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input19 [ 218.624339][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.626774][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.629198][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.631580][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.633972][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.636269][ T10] usb 9-1: USB disconnect, device number 13 [ 218.636322][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.640343][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 218.645326][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 218.701516][ T5967] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 218.863362][ T5967] usb 8-1: unable to get BOS descriptor or descriptor too short [ 218.866521][ T5967] usb 8-1: not running at top speed; connect to a high speed hub [ 218.873765][ T5967] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 218.876767][ T5967] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 218.879494][ T5967] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 218.883204][ T5967] usb 8-1: config 14 has no interface number 0 [ 218.885292][ T5967] usb 8-1: config 14 has no interface number 1 [ 218.887380][ T5967] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 218.890719][ T5967] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 218.894783][ T5967] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.898332][ T5967] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 218.901979][ T5967] usb 8-1: config 14 interface 57 has no altsetting 0 [ 218.904132][ T5967] usb 8-1: config 14 interface 228 has no altsetting 0 [ 218.908075][ T5967] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 218.910967][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.913674][ T5967] usb 8-1: Product: syz [ 218.914998][ T5967] usb 8-1: Manufacturer: syz [ 218.917126][ T5967] usb 8-1: SerialNumber: syz [ 218.927481][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 219.531451][ T10] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 219.587189][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 219.684125][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 219.686807][ T10] usb 9-1: config 0 has no interface number 0 [ 219.688914][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 219.692768][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.696348][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.701266][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 219.704765][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 219.707428][ T10] usb 9-1: Product: syz [ 219.708832][ T10] usb 9-1: SerialNumber: syz [ 219.712438][ T10] usb 9-1: config 0 descriptor?? [ 219.719205][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 219.725772][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input20 [ 219.956640][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 219.959092][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 219.961437][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 219.963780][ T10] usb 9-1: USB disconnect, device number 14 [ 219.965736][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 219.965748][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 219.979715][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 220.125453][ T5967] legousbtower 8-1:14.57: interrupt endpoints not found [ 220.138187][ T5967] legousbtower 8-1:14.228: get version request failed: -71 [ 220.143867][ T5967] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 220.150939][ T5967] usb 8-1: USB disconnect, device number 47 [ 220.160174][ T8945] jffs2: notice: (8945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.167442][ T42] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 220.167672][ T8942] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 220.296951][ T8949] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 220.340326][ T8949] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 220.343577][ T8949] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 220.345889][ T8949] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 220.349365][ T8949] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 220.366382][ T8949] pci 0000:00:01.0: Adding to iommu group 1 [ 220.372565][ T8949] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 220.374834][ T8949] pci 0000:00:01.0: vgaarb: bridge control possible [ 220.377051][ T8949] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 220.388904][ T8949] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 220.396776][ T8949] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 220.404433][ T8949] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 220.419507][ T8949] [drm] Found bochs VGA, ID 0xb0c5. [ 220.423253][ T8949] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 220.442529][ T6085] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 220.456938][ T8949] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 220.512320][ T8949] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 220.621428][ T6085] usb 7-1: Using ep0 maxpacket: 8 [ 220.624671][ T6085] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.628129][ T6085] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.634375][ T6085] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.641040][ T6085] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 220.645308][ T6085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.648460][ T6085] usb 7-1: Product: syz [ 220.649842][ T6085] usb 7-1: Manufacturer: syz [ 220.652039][ T6085] usb 7-1: SerialNumber: syz [ 220.682797][ T36] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 220.683585][ T8961] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 220.686951][ T8956] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 220.709984][ T8961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.717076][ T8961] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 220.732393][ T8961] netlink: 14 bytes leftover after parsing attributes in process `syz.4.864'. [ 220.756314][ T8961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.764205][ T8961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.775468][ T8961] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 220.782704][ T8961] bond0 (unregistering): Released all slaves [ 220.838312][ T8963] lo speed is unknown, defaulting to 1000 [ 220.886889][ T8961] syz.4.864: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.891831][ T8961] CPU: 3 UID: 0 PID: 8961 Comm: syz.4.864 Not tainted syzkaller #0 PREEMPT(full) [ 220.891859][ T8961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.891867][ T8961] Call Trace: [ 220.891878][ T8961] [ 220.891883][ T8961] dump_stack_lvl+0x100/0x190 [ 220.892021][ T8961] warn_alloc.cold+0x94/0xa8 [ 220.892040][ T8961] ? __pfx_warn_alloc+0x10/0x10 [ 220.892069][ T8961] ? __bfs+0x150/0x2a0 [ 220.892101][ T8961] ? sched_balance_rq+0x837/0x3b10 [ 220.892120][ T8961] __vmalloc_node_range_noprof+0x136c/0x1630 [ 220.892141][ T8961] ? __update_load_avg_cfs_rq+0x825/0xad0 [ 220.892158][ T8961] ? do_replace+0x1c6/0x490 [ 220.892221][ T8961] ? lock_acquire+0x1b9/0x370 [ 220.892239][ T8961] ? do_raw_spin_lock+0x128/0x260 [ 220.892252][ T8961] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.892266][ T8961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.892284][ T8961] ? __lock_acquire+0x49f/0x1a40 [ 220.892302][ T8961] ? __lock_acquire+0x49f/0x1a40 [ 220.892322][ T8961] ? do_replace+0x1c6/0x490 [ 220.892334][ T8961] __vmalloc_node_noprof+0xad/0xf0 [ 220.892351][ T8961] ? do_replace+0x1c6/0x490 [ 220.892366][ T8961] __vmalloc_noprof+0xa3/0x120 [ 220.892383][ T8961] ? __pfx___vmalloc_noprof+0x10/0x10 [ 220.892404][ T8961] do_replace+0x1c6/0x490 [ 220.892418][ T8961] ? __pfx_do_replace+0x10/0x10 [ 220.892435][ T8961] ? __lock_acquire+0x49f/0x1a40 [ 220.892460][ T8961] ? register_lock_class+0x40/0x560 [ 220.892473][ T8961] compat_do_replace+0x589/0x7a0 [ 220.892489][ T8961] ? __pfx_compat_do_replace+0x10/0x10 [ 220.892510][ T8961] ? bpf_lsm_capable+0x9/0x10 [ 220.892525][ T8961] ? security_capable+0x80/0x260 [ 220.892588][ T8961] do_ebt_set_ctl+0x3f4/0x4a0 [ 220.892604][ T8961] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 220.892619][ T8961] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 220.892637][ T8961] ? futex_wake+0x4ea/0x5e0 [ 220.892656][ T8961] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.892679][ T8961] nf_setsockopt+0x8d/0xf0 [ 220.892695][ T8961] ip_setsockopt+0xcb/0xf0 [ 220.892712][ T8961] tcp_setsockopt+0xa7/0x100 [ 220.892725][ T8961] smc_setsockopt+0x1b6/0xa40 [ 220.892778][ T8961] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.892798][ T8961] ? __pfx_smc_setsockopt+0x10/0x10 [ 220.892812][ T8961] ? aa_sock_opt_perm+0xfe/0x1b0 [ 220.892831][ T8961] ? __pfx_smc_setsockopt+0x10/0x10 [ 220.892844][ T8961] do_sock_setsockopt+0xf3/0x1d0 [ 220.892857][ T8961] __sys_setsockopt+0x119/0x190 [ 220.892875][ T8961] __ia32_sys_setsockopt+0xbc/0x160 [ 220.892890][ T8961] ? __do_fast_syscall_32+0x98/0x970 [ 220.892907][ T8961] ? lockdep_hardirqs_on+0x78/0x100 [ 220.892921][ T8961] __do_fast_syscall_32+0xe7/0x970 [ 220.892939][ T8961] do_fast_syscall_32+0x32/0x70 [ 220.892954][ T8961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.892970][ T8961] RIP: 0023:0xf7f44fec [ 220.892985][ T8961] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 220.893001][ T8961] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 220.893012][ T8961] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 220.893019][ T8961] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 220.893027][ T8961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.893033][ T8961] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.893039][ T8961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.893053][ T8961] [ 220.893098][ T8961] Mem-Info: [ 220.938229][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 220.939493][ T8961] active_anon:737 inactive_anon:6250 isolated_anon:0 [ 220.939493][ T8961] active_file:1716 inactive_file:13090 isolated_file:0 [ 220.939493][ T8961] unevictable:1761 dirty:378 writeback:0 [ 220.939493][ T8961] slab_reclaimable:6336 slab_unreclaimable:54690 [ 220.939493][ T8961] mapped:23944 shmem:2241 pagetables:1429 [ 220.939493][ T8961] sec_pagetables:305 bounce:0 [ 220.939493][ T8961] kernel_misc_reclaimable:0 [ 220.939493][ T8961] free:78607 free_pcp:11493 free_cma:0 [ 220.951589][ T29] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 221.018992][ T8961] Node 0 active_anon:4kB inactive_anon:28kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8416kB pagetables:1204kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 221.030353][ T8961] Node 1 active_anon:2948kB inactive_anon:24972kB active_file:6864kB inactive_file:52168kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:95752kB dirty:1612kB writeback:0kB shmem:7456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5640kB pagetables:4472kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 221.040807][ T8961] Node 0 DMA free:3152kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 221.050104][ T8961] lowmem_reserve[]: 0 280 280 280 280 [ 221.051893][ T8961] Node 0 DMA32 free:22072kB boost:4096kB min:16864kB low:20056kB high:23248kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:4kB inactive_anon:28kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:24kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:9216kB local_pcp:3028kB free_cma:0kB [ 221.061841][ T8961] lowmem_reserve[]: 0 0 0 0 0 [ 221.063405][ T8961] Node 1 DMA32 free:288648kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:2044KB active_anon:2948kB inactive_anon:24972kB active_file:6864kB inactive_file:52168kB unevictable:5536kB writepending:1612kB zspages:1648kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37448kB local_pcp:13784kB free_cma:0kB [ 221.073793][ T8961] lowmem_reserve[]: 0 0 0 0 0 [ 221.075402][ T8961] Node 0 DMA: 168*4kB (U) 8*8kB (U) 3*16kB (U) 18*32kB (U) 12*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3152kB [ 221.082046][ T8961] Node 0 DMA32: 246*4kB (UME) 52*8kB (UME) 36*16kB (UE) 82*32kB (UME) 29*64kB (UE) 10*128kB (U) 8*256kB (UM) 8*512kB (UM) 2*1024kB (U) 3*2048kB (UH) 0*4096kB = 22072kB [ 221.087378][ T8961] Node 1 DMA32: 17*4kB (MEH) 56*8kB (UMEH) 308*16kB (UEH) 607*32kB (UMEH) 425*64kB (UMEH) 280*128kB (UMEH) 131*256kB (UMEH) 66*512kB (UMH) 36*1024kB (UMH) 11*2048kB (UM) 18*4096kB (UM) = 288356kB [ 221.093497][ T8961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.096480][ T8961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.099366][ T8961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.102492][ T8961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.105730][ T8961] 17263 total pagecache pages [ 221.107276][ T8961] 193 pages in swap cache [ 221.108700][ T8961] Free swap = 121768kB [ 221.110068][ T8961] Total swap = 124996kB [ 221.111469][ T8961] 524155 pages RAM [ 221.112715][ T8961] 0 pages HighMem/MovableOnly [ 221.114252][ T8961] 211532 pages reserved [ 221.115634][ T8961] 0 pages cma reserved [ 221.121495][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 221.124420][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.127984][ T29] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.130926][ T29] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.138161][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 221.143720][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.146363][ T29] usb 8-1: Product: syz [ 221.147730][ T29] usb 8-1: Manufacturer: syz [ 221.149251][ T29] usb 8-1: SerialNumber: syz [ 221.341525][ T5746] Bluetooth: hci2: command 0x0405 tx timeout [ 221.514146][ T8974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 221.517382][ T8974] netlink: 'syz.4.867': attribute type 12 has an invalid length. [ 221.528830][ T8942] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 221.547953][ T6085] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 221.550291][ T6085] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 221.917026][ T6085] usb 7-1: USB disconnect, device number 37 [ 222.451721][ T8956] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 222.518519][ T8988] FAULT_INJECTION: forcing a failure. [ 222.518519][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 222.523327][ T8988] CPU: 3 UID: 0 PID: 8988 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 222.523343][ T8988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.523350][ T8988] Call Trace: [ 222.523355][ T8988] [ 222.523359][ T8988] dump_stack_lvl+0x100/0x190 [ 222.523379][ T8988] should_fail_ex.cold+0x5/0xa [ 222.523393][ T8988] should_failslab+0xc2/0x120 [ 222.523410][ T8988] __kmalloc_cache_noprof+0x91/0x6c0 [ 222.523423][ T8988] ? sctp_add_bind_addr+0xae/0x3e0 [ 222.523468][ T8988] sctp_add_bind_addr+0xae/0x3e0 [ 222.523485][ T8988] sctp_copy_local_addr_list+0x349/0x550 [ 222.523505][ T8988] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 222.523524][ T8988] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 222.523544][ T8988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.523563][ T8988] sctp_bind_addr_copy+0xe0/0x530 [ 222.523582][ T8988] sctp_connect_new_asoc+0x1c9/0x770 [ 222.523596][ T8988] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 222.523639][ T8988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.523656][ T8988] sctp_sendmsg+0x1743/0x22e0 [ 222.523671][ T8988] ? __pfx___might_resched+0x10/0x10 [ 222.523690][ T8988] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.523704][ T8988] ? aa_sk_perm+0x309/0xaa0 [ 222.523724][ T8988] ? __might_fault+0xc5/0x140 [ 222.523739][ T8988] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 222.523752][ T8988] ? __pfx_sctp_sendmsg+0x10/0x10 [ 222.523766][ T8988] inet_sendmsg+0x11c/0x140 [ 222.523785][ T8988] __sys_sendto+0x453/0x4e0 [ 222.523800][ T8988] ? __pfx_inet_sendmsg+0x10/0x10 [ 222.523816][ T8988] ? __pfx___sys_sendto+0x10/0x10 [ 222.523841][ T8988] ? fput+0x79/0x100 [ 222.523856][ T8988] ? ksys_write+0x1ac/0x250 [ 222.523868][ T8988] __ia32_sys_sendto+0xdd/0x1b0 [ 222.523882][ T8988] ? __do_fast_syscall_32+0x98/0x970 [ 222.523899][ T8988] ? lockdep_hardirqs_on+0x78/0x100 [ 222.523914][ T8988] __do_fast_syscall_32+0xe7/0x970 [ 222.523929][ T8988] ? lockdep_hardirqs_on+0x78/0x100 [ 222.523947][ T8988] do_fast_syscall_32+0x32/0x70 [ 222.523963][ T8988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.523977][ T8988] RIP: 0023:0xf7f58fec [ 222.523992][ T8988] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 222.523998][ T8988] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 222.524009][ T8988] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 222.524016][ T8988] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 222.524023][ T8988] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 222.524029][ T8988] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.524036][ T8988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.524049][ T8988] [ 222.634548][ T29] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 222.816024][ T29] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 222.846958][ T29] usb 8-1: USB disconnect, device number 48 [ 222.945757][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 222.952357][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.955381][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.974072][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 223.331453][ T6085] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 223.482942][ T6085] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 223.486056][ T6085] usb 7-1: config 0 has no interface number 0 [ 223.488409][ T6085] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 223.493002][ T6085] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.497282][ T6085] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.502883][ T6085] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 223.508333][ T6085] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 223.511319][ T6085] usb 7-1: Product: syz [ 223.512877][ T6085] usb 7-1: SerialNumber: syz [ 223.516995][ T6085] usb 7-1: config 0 descriptor?? [ 223.521625][ T6085] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 223.526278][ T6085] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input21 [ 223.643651][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 223.773538][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.775969][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.778329][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.780693][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.783052][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.785395][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.787467][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 223.790350][ T6085] usb 7-1: USB disconnect, device number 38 [ 223.802925][ T9018] Invalid logical block size (4) [ 223.812116][ T6085] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 224.020894][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 224.734779][ T9028] jffs2: notice: (9028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.086440][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 225.775525][ T9028] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.225587][ T9061] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 226.279426][ T9061] team0: Port device dummy0 added [ 226.293513][ T9057] lo speed is unknown, defaulting to 1000 [ 227.973044][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.977653][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.773825][ T9086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.898'. [ 229.364100][ T9106] jffs2: notice: (9106) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.366970][ T9108] FAULT_INJECTION: forcing a failure. [ 229.366970][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.374454][ T9108] CPU: 2 UID: 0 PID: 9108 Comm: syz.2.908 Not tainted syzkaller #0 PREEMPT(full) [ 229.374473][ T9108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.374483][ T9108] Call Trace: [ 229.374489][ T9108] [ 229.374496][ T9108] dump_stack_lvl+0x100/0x190 [ 229.374525][ T9108] should_fail_ex.cold+0x5/0xa [ 229.374547][ T9108] _copy_to_user+0x32/0xd0 [ 229.374591][ T9108] bpf_log_attr_finalize+0x169/0x1a0 [ 229.374611][ T9108] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 229.374651][ T9108] btf_new_fd+0x9c7/0x5bc0 [ 229.374670][ T9108] ? kernel_text_address+0x8d/0x100 [ 229.374711][ T9108] ? __pfx_btf_new_fd+0x10/0x10 [ 229.374734][ T9108] ? rcu_is_watching+0x12/0xc0 [ 229.374759][ T9108] ? apparmor_capable+0x1d7/0x4d0 [ 229.374782][ T9108] ? security_capable+0x80/0x260 [ 229.374803][ T9108] ? ns_capable+0xd2/0xf0 [ 229.374827][ T9108] __sys_bpf+0x1e5f/0x4e80 [ 229.374856][ T9108] ? __pfx___sys_bpf+0x10/0x10 [ 229.374875][ T9108] ? find_held_lock+0x2b/0x80 [ 229.374897][ T9108] ? get_pid_task+0xfc/0x250 [ 229.374918][ T9108] ? get_pid_task+0xfc/0x250 [ 229.374945][ T9108] ? proc_fail_nth_write+0x9f/0x220 [ 229.374983][ T9108] ? find_held_lock+0x2b/0x80 [ 229.375009][ T9108] ? rcu_read_lock_any_held+0x6a/0xa0 [ 229.375032][ T9108] ? find_held_lock+0x2b/0x80 [ 229.375053][ T9108] ? ksys_write+0x190/0x250 [ 229.375069][ T9108] ? ksys_write+0x190/0x250 [ 229.375105][ T9108] ? fput+0x79/0x100 [ 229.375128][ T9108] ? __ia32_sys_bpf+0xcc/0x170 [ 229.375148][ T9108] __ia32_sys_bpf+0xcc/0x170 [ 229.375167][ T9108] ? __do_fast_syscall_32+0x98/0x970 [ 229.375196][ T9108] __do_fast_syscall_32+0xe7/0x970 [ 229.375221][ T9108] ? lockdep_hardirqs_on+0x78/0x100 [ 229.375245][ T9108] do_fast_syscall_32+0x32/0x70 [ 229.375270][ T9108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.375294][ T9108] RIP: 0023:0xf7f58fec [ 229.375317][ T9108] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 229.375325][ T9108] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 229.375341][ T9108] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000300 [ 229.375351][ T9108] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.375359][ T9108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.375368][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.375377][ T9108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.375405][ T9108] [ 229.392104][ T9106] jffs2: warning: (9106) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 229.455853][ T9112] netlink: 48 bytes leftover after parsing attributes in process `syz.2.909'. [ 230.229153][ T9134] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 230.232028][ T9134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.240091][ T9134] vhci_hcd vhci_hcd.0: Device attached [ 230.287430][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.291516][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.345444][ T9144] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 230.371338][ T9146] jffs2: notice: (9146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.399500][ T9146] jffs2: warning: (9146) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 230.501518][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 230.503596][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 230.771452][ T5853] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 230.833820][ T9135] vhci_hcd: connection reset by peer [ 230.835777][ T5792] vhci_hcd vhci_hcd.3: stop threads [ 230.837507][ T5792] vhci_hcd vhci_hcd.3: release socket [ 230.839271][ T5792] vhci_hcd vhci_hcd.3: disconnect device [ 230.924072][ T5853] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.926679][ T5853] usb 9-1: config 0 has no interface number 0 [ 230.928630][ T5853] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 230.932472][ T5853] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.936222][ T5853] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.941929][ T5853] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.946184][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.948838][ T5853] usb 9-1: Product: syz [ 230.950205][ T5853] usb 9-1: SerialNumber: syz [ 230.967769][ T5853] usb 9-1: config 0 descriptor?? [ 230.978439][ T5853] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 230.985504][ T5853] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input22 [ 231.253916][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.254090][ T59] usb 9-1: USB disconnect, device number 15 [ 231.256122][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 231.281160][ T59] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 231.795826][ T9151] Set syz1 is full, maxelem 65536 reached [ 232.746448][ T9183] jffs2: notice: (9183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.800220][ T9183] jffs2: warning: (9183) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 232.804190][ T9186] FAULT_INJECTION: forcing a failure. [ 232.804190][ T9186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.810887][ T9186] CPU: 3 UID: 0 PID: 9186 Comm: syz.2.933 Not tainted syzkaller #0 PREEMPT(full) [ 232.810912][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.810936][ T9186] Call Trace: [ 232.810942][ T9186] [ 232.810949][ T9186] dump_stack_lvl+0x100/0x190 [ 232.810975][ T9186] should_fail_ex.cold+0x5/0xa [ 232.810998][ T9186] _copy_to_user+0x32/0xd0 [ 232.811029][ T9186] snd_pcm_ioctl_hw_params_compat+0x10a/0x2d0 [ 232.811071][ T9186] snd_pcm_ioctl_compat+0x4f3/0x850 [ 232.811093][ T9186] ? hook_file_ioctl_common+0x140/0x440 [ 232.811119][ T9186] ? __pfx_snd_pcm_ioctl_compat+0x10/0x10 [ 232.811145][ T9186] ? __fget_files+0x21f/0x3d0 [ 232.811168][ T9186] ? __pfx_snd_pcm_ioctl_compat+0x10/0x10 [ 232.811193][ T9186] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 232.811221][ T9186] __do_fast_syscall_32+0xe7/0x970 [ 232.811247][ T9186] ? lockdep_hardirqs_on+0x78/0x100 [ 232.811271][ T9186] do_fast_syscall_32+0x32/0x70 [ 232.811295][ T9186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.811317][ T9186] RIP: 0023:0xf7f58fec [ 232.811338][ T9186] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 232.811346][ T9186] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 232.811382][ T9186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c25c4110 [ 232.811399][ T9186] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.811409][ T9186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.811420][ T9186] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.811430][ T9186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.811453][ T9186] [ 233.649013][ T9200] jffs2: notice: (9200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.663961][ T9200] jffs2: warning: (9200) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 234.151647][ T34] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 234.253722][ T9215] jffs2: notice: (9215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.270224][ T9215] jffs2: warning: (9215) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 234.273280][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 234.333698][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 234.336931][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 234.340605][ T34] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 234.344014][ T34] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 234.347277][ T34] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 234.351018][ T34] usb 7-1: config 14 has no interface number 0 [ 234.353653][ T34] usb 7-1: config 14 has no interface number 1 [ 234.356051][ T34] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 234.360750][ T34] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 234.371046][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.379634][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 234.386193][ T34] usb 7-1: config 14 interface 57 has no altsetting 0 [ 234.389445][ T34] usb 7-1: config 14 interface 228 has no altsetting 0 [ 234.395663][ T34] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 234.398969][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.401947][ T34] usb 7-1: Product: syz [ 234.403580][ T34] usb 7-1: Manufacturer: syz [ 234.405418][ T34] usb 7-1: SerialNumber: syz [ 234.469387][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.472592][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.485928][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 235.053703][ T34] legousbtower 7-1:14.57: interrupt endpoints not found [ 235.570028][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 235.581718][ T29] usb 44-1: device descriptor read/8, error -110 [ 235.665729][ T9240] Invalid logical block size (4) [ 235.982177][ T29] usb usb44-port1: attempt power cycle [ 236.248849][ T34] legousbtower 7-1:14.228: get version request failed: -71 [ 236.501687][ T34] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 236.512353][ T34] usb 7-1: USB disconnect, device number 39 [ 236.596729][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 236.626000][ T9248] jffs2: notice: (9248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.668610][ T9248] jffs2: warning: (9248) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 236.800184][ T29] usb usb44-port1: unable to enumerate USB device [ 237.082519][ T9264] kernel profiling enabled (shift: 7) [ 237.184439][ T9266] jffs2: notice: (9266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.343193][ T9269] netlink: 512 bytes leftover after parsing attributes in process `syz.3.958'. [ 237.405589][ T9264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.208919][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 238.676094][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 239.347364][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 239.353884][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 239.550099][ T9320] veth0: entered promiscuous mode [ 239.552554][ T9320] veth0: left promiscuous mode [ 239.601051][ T9327] [ 239.602041][ T9327] ====================================================== [ 239.604873][ T9327] WARNING: possible circular locking dependency detected [ 239.607722][ T9327] syzkaller #0 Not tainted [ 239.609715][ T9327] ------------------------------------------------------ [ 239.612515][ T9327] syz.0.979/9327 is trying to acquire lock: [ 239.614871][ T9327] ffff88804c85e450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 239.618384][ T9327] [ 239.618384][ T9327] but task is already holding lock: [ 239.621302][ T9327] ffff8880218b4068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 239.621393][ T9327] [ 239.621393][ T9327] which lock already depends on the new lock. [ 239.621393][ T9327] [ 239.621399][ T9327] [ 239.621399][ T9327] the existing dependency chain (in reverse order) is: [ 239.621406][ T9327] [ 239.621406][ T9327] -> #4 (&subsys->lock){+.+.}-{4:4}: [ 239.621429][ T9327] lock_acquire+0x1b9/0x370 [ 239.621453][ T9327] __mutex_lock+0x1a4/0x1bd0 [ 239.621477][ T9327] nvmet_ns_device_path_store+0x57/0x1c0 [ 239.621495][ T9327] configfs_write_iter+0x302/0x4e0 [ 239.621512][ T9327] vfs_write+0x6ac/0x1050 [ 239.621526][ T9327] ksys_write+0x12a/0x250 [ 239.621540][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.621562][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.621583][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.621602][ T9327] [ 239.621602][ T9327] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 239.621626][ T9327] lock_acquire+0x1b9/0x370 [ 239.621649][ T9327] down_read+0x99/0x4c0 [ 239.621670][ T9327] configfs_write_iter+0x218/0x4e0 [ 239.621685][ T9327] vfs_write+0x6ac/0x1050 [ 239.621699][ T9327] ksys_write+0x12a/0x250 [ 239.621712][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.621733][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.621758][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.621778][ T9327] [ 239.621778][ T9327] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 239.621803][ T9327] lock_acquire+0x1b9/0x370 [ 239.621825][ T9327] __mutex_lock+0x1a4/0x1bd0 [ 239.621844][ T9327] configfs_read_iter+0x79/0x6f0 [ 239.621857][ T9327] __kernel_read+0x397/0xad0 [ 239.621870][ T9327] integrity_kernel_read+0x7e/0xb0 [ 239.621893][ T9327] ima_calc_file_hash_tfm+0x25e/0x350 [ 239.621913][ T9327] ima_calc_file_hash+0x1e3/0x380 [ 239.621932][ T9327] ima_collect_measurement+0x94f/0xb30 [ 239.621953][ T9327] process_measurement+0xdfe/0x2350 [ 239.621970][ T9327] ima_file_check+0xcc/0x120 [ 239.621987][ T9327] security_file_post_open+0xc4/0x210 [ 239.622007][ T9327] path_openat+0x985/0x4280 [ 239.622022][ T9327] do_file_open+0x20e/0x430 [ 239.622037][ T9327] do_sys_openat2+0x10f/0x1e0 [ 239.622057][ T9327] __ia32_compat_sys_openat+0x12d/0x210 [ 239.622078][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.622099][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.622118][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.622137][ T9327] [ 239.622137][ T9327] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 239.622160][ T9327] lock_acquire+0x1b9/0x370 [ 239.622182][ T9327] __mutex_lock+0x1a4/0x1bd0 [ 239.622202][ T9327] ima_path_truncate+0x10d/0x1c0 [ 239.622220][ T9327] security_path_truncate+0x1a1/0x280 [ 239.622238][ T9327] vfs_truncate+0x4ab/0x720 [ 239.622253][ T9327] ksys_truncate+0xee/0x190 [ 239.622268][ T9327] __ia32_compat_sys_truncate+0x56/0x80 [ 239.622283][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.622304][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.622325][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.622343][ T9327] [ 239.622343][ T9327] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 239.622369][ T9327] check_prev_add+0xeb/0xe60 [ 239.622390][ T9327] __lock_acquire+0x136c/0x1a40 [ 239.622412][ T9327] lock_acquire+0x1b9/0x370 [ 239.622434][ T9327] mnt_want_write+0x6f/0x410 [ 239.622456][ T9327] path_openat+0xad9/0x4280 [ 239.622471][ T9327] do_file_open+0x20e/0x430 [ 239.622486][ T9327] file_open_name+0x1c3/0x3e0 [ 239.622505][ T9327] filp_open+0x2e/0x50 [ 239.622523][ T9327] nvmet_file_ns_enable+0x95/0x420 [ 239.622547][ T9327] nvmet_ns_enable+0x35f/0x5d0 [ 239.622567][ T9327] nvmet_ns_enable_store+0x11e/0x160 [ 239.622583][ T9327] configfs_write_iter+0x302/0x4e0 [ 239.622598][ T9327] vfs_write+0x6ac/0x1050 [ 239.622612][ T9327] ksys_write+0x12a/0x250 [ 239.622625][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.622646][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.622667][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.622686][ T9327] [ 239.622686][ T9327] other info that might help us debug this: [ 239.622686][ T9327] [ 239.622691][ T9327] Chain exists of: [ 239.622691][ T9327] sb_writers#5 --> &p->frag_sem --> &subsys->lock [ 239.622691][ T9327] [ 239.622720][ T9327] Possible unsafe locking scenario: [ 239.622720][ T9327] [ 239.622725][ T9327] CPU0 CPU1 [ 239.622730][ T9327] ---- ---- [ 239.622734][ T9327] lock(&subsys->lock); [ 239.622745][ T9327] lock(&p->frag_sem); [ 239.622763][ T9327] lock(&subsys->lock); [ 239.622776][ T9327] rlock(sb_writers#5); [ 239.622792][ T9327] [ 239.622792][ T9327] *** DEADLOCK *** [ 239.622792][ T9327] [ 239.622796][ T9327] 6 locks held by syz.0.979/9327: [ 239.622806][ T9327] #0: ffff88804e0c57b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 239.622848][ T9327] #1: ffff888021e98450 (sb_writers#12){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 239.622889][ T9327] #2: ffff8880786a3680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 239.622927][ T9327] #3: ffff888026228270 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 239.622965][ T9327] #4: ffffffff8fd33748 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 239.623004][ T9327] #5: ffff8880218b4068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 239.623046][ T9327] [ 239.623046][ T9327] stack backtrace: [ 239.623055][ T9327] CPU: 2 UID: 0 PID: 9327 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) [ 239.623074][ T9327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.623085][ T9327] Call Trace: [ 239.623091][ T9327] [ 239.623098][ T9327] dump_stack_lvl+0x100/0x190 [ 239.623118][ T9327] print_circular_bug.cold+0x178/0x1c7 [ 239.623147][ T9327] check_noncircular+0x146/0x160 [ 239.623169][ T9327] ? __lock_acquire+0x49f/0x1a40 [ 239.623196][ T9327] check_prev_add+0xeb/0xe60 [ 239.623220][ T9327] __lock_acquire+0x136c/0x1a40 [ 239.623245][ T9327] ? try_to_unlazy+0x296/0x910 [ 239.623267][ T9327] lock_acquire+0x1b9/0x370 [ 239.623291][ T9327] ? path_openat+0xad9/0x4280 [ 239.623307][ T9327] ? __pfx___might_resched+0x10/0x10 [ 239.623334][ T9327] mnt_want_write+0x6f/0x410 [ 239.623356][ T9327] ? path_openat+0xad9/0x4280 [ 239.623372][ T9327] path_openat+0xad9/0x4280 [ 239.623390][ T9327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.623414][ T9327] ? __pfx_path_openat+0x10/0x10 [ 239.623429][ T9327] ? kasan_save_stack+0x30/0x50 [ 239.623448][ T9327] ? kasan_save_track+0x14/0x30 [ 239.623467][ T9327] ? __kasan_slab_alloc+0x89/0x90 [ 239.623485][ T9327] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 239.623505][ T9327] ? do_getname_kernel+0x5d/0x250 [ 239.623522][ T9327] ? filp_open+0x1d/0x50 [ 239.623570][ T9327] ? nvmet_file_ns_enable+0x95/0x420 [ 239.623595][ T9327] ? nvmet_ns_enable+0x35f/0x5d0 [ 239.623618][ T9327] do_file_open+0x20e/0x430 [ 239.623636][ T9327] ? __pfx_do_file_open+0x10/0x10 [ 239.623660][ T9327] ? rcu_is_watching+0x12/0xc0 [ 239.623682][ T9327] file_open_name+0x1c3/0x3e0 [ 239.623702][ T9327] ? __pfx_file_open_name+0x10/0x10 [ 239.623722][ T9327] ? do_getname_kernel+0x5d/0x250 [ 239.623741][ T9327] ? __asan_memcpy+0x3c/0x60 [ 239.623764][ T9327] ? do_getname_kernel+0x1be/0x250 [ 239.623787][ T9327] filp_open+0x2e/0x50 [ 239.623810][ T9327] nvmet_file_ns_enable+0x95/0x420 [ 239.623838][ T9327] nvmet_ns_enable+0x35f/0x5d0 [ 239.623858][ T9327] nvmet_ns_enable_store+0x11e/0x160 [ 239.623875][ T9327] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 239.623891][ T9327] ? configfs_write_iter+0x388/0x4e0 [ 239.623909][ T9327] configfs_write_iter+0x302/0x4e0 [ 239.623926][ T9327] vfs_write+0x6ac/0x1050 [ 239.623941][ T9327] ? __pfx_configfs_write_iter+0x10/0x10 [ 239.623958][ T9327] ? __pfx_vfs_write+0x10/0x10 [ 239.623971][ T9327] ? find_held_lock+0x2b/0x80 [ 239.623997][ T9327] ksys_write+0x12a/0x250 [ 239.624010][ T9327] ? __pfx_ksys_write+0x10/0x10 [ 239.624027][ T9327] __do_fast_syscall_32+0xe7/0x970 [ 239.624052][ T9327] do_fast_syscall_32+0x32/0x70 [ 239.624077][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.624098][ T9327] RIP: 0023:0xf709efec [ 239.624118][ T9327] Code: Unable to access opcode bytes at 0xf709efc2. [ 239.624127][ T9327] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 239.624146][ T9327] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 239.624159][ T9327] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.624170][ T9327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.624180][ T9327] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 239.624190][ T9327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.624204][ T9327] [ 239.638874][ T9327] nvmet: failed to open file ./file0: (-2) [ 239.646870][ T9329] jffs2: notice: (9329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.