last executing test programs: 8.28557418s ago: executing program 2 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xc67, 0x8, 0xa, 0x2, 0x0, 0x800824b}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100269d7000fddbdf25510000000cc323f5993bee0743ee08000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x90) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf255d0000000c009900000000002b0000000800a500010000002800a6800a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000800a500000000006400a6800a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000100005782dbd6fabdfa"], 0xbc}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) personality(0x500006) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}], {0x14, 0x10}}, 0x98}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x210, 0x2, @thr={0x0, 0x0}}) 6.993886379s ago: executing program 1 (id=666): r0 = openat$comedi(0xffffff9c, &(0x7f0000001a80)='/dev/comedi3\x00', 0x103400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000000240)={0x0, &(0x7f00000020c0)}) 6.986420559s ago: executing program 1 (id=668): r0 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe4) mount$cgroup(0x0, 0x0, &(0x7f0000000140), 0x200000, &(0x7f0000000540)={[{@cpuset_v2_mode}, {}, {@cpuset_v2_mode}], [{@uid_eq={'uid', 0x3d, r1}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0050ad8730f0b09d4f132fcd270b1b510f7fe82b5cff959472224b17de26803f7c8e7b596a97dc6bc7", @ANYRES64=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x2}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() socket$igmp(0x2, 0x3, 0x2) 5.964606987s ago: executing program 1 (id=673): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) r9 = dup(r7) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 5.878206388s ago: executing program 2 (id=674): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffe47, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0186405, &(0x7f0000001840)={0x4, 0x4, {}, {0xee01}, 0x6, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x20000000, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r10, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000004f00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000001ac0)=ANY=[@ANYBLOB="c80000004200000225bd7000fcdbdf2508003b000010000008001300", @ANYRES32, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc8}, {&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002d00000329bd7000ffdbdf25017b4d7f9862aa34d74802065e7871382a1d5925f41356bb88ce0d56f87f00002545ffb65605ea8a7a0cf30132b4aecaeba88a5f"], 0x30}, {&(0x7f0000000580)=ANY=[@ANYBLOB="a40100003d00000328bdfbffffdbdf252e01", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x1a4}], 0x3, &(0x7f0000004e80)=[@cred={{0x18, 0x1, 0x2, {r11, 0x0, r10}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x48, 0xc001}, 0x24004055) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000003ac0)={0x78, 0x0, 0x0, {0x5, 0x0, 0x0, {0x5, 0x4, 0x100, 0x0, 0x0, 0x6, 0x1, 0xffff78a2, 0x101, 0x0, 0x9, r9, r10, 0x9, 0xa0}}}, 0x78) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$int_in(r5, 0x5452, 0x0) r12 = syz_io_uring_setup(0x234, &(0x7f0000000100)={0x0, 0xa755, 0x40, 0xfffffffd, 0x20}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x28, 0x6, r2, 0x0, &(0x7f0000001880)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000001580)=""/164, 0xa4}, {&(0x7f0000001640)=""/159, 0x9f}, {&(0x7f0000001700)=""/242, 0xf2}, {&(0x7f00000019c0)=""/136, 0x88}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/42, 0x2a}], 0x7, &(0x7f00000018c0)=""/231, 0xe7}, 0x0, 0x100, 0x1, {0x2, r15}}) io_uring_enter(r12, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r12, 0xf517, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001800)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=ANY=[@ANYRESOCT], 0x57}, 0x1, 0x7}, 0x24008804) 5.225767153s ago: executing program 0 (id=676): r0 = openat$comedi(0xffffff9c, &(0x7f0000001a80)='/dev/comedi3\x00', 0x103400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000000240)={0x0, &(0x7f00000020c0)}) 5.224818732s ago: executing program 0 (id=677): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000dfffffffffffffff00000000de0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r6, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x214, 0xf0, 0x11, 0x148, 0xf0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@limit={{0x3c}, {0x10001, 0x2, 0xa, 0x8, 0x5, 0x4}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) 4.933517328s ago: executing program 2 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000c0601080000000000000000010000050900020073797a3000000500050001"], 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0) 4.933211978s ago: executing program 2 (id=681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.998079817s ago: executing program 2 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xc67, 0x8, 0xa, 0x2, 0x0, 0x800824b}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100269d7000fddbdf25510000000cc323f5993bee0743ee08000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x90) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf255d0000000c009900000000002b0000000800a500010000002800a6800a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000800a500000000006400a6800a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000100005782dbd6fabdfa"], 0xbc}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) personality(0x500006) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}], {0x14, 0x10}}, 0x98}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x210, 0x2, @thr={0x0, 0x0}}) 3.74591333s ago: executing program 1 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.742547389s ago: executing program 0 (id=684): socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) (async) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 3.154986806s ago: executing program 3 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000180)='./file2/file0\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000009000000000100000000388fbdd6539210c05821647311e04fbe7a7e76e7a462c7b46c42d65fdeb19b86bb51ef08a26d66c4821966c8977907", @ANYRES32=0x0, @ANYBLOB="7b15000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000a00)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000001c0)={"d4144cfd52197cd27fb4fe460e0ea2e9", 0x0, 0x0, {0x1, 0x3}, {0x8000000000000000, 0x1}, 0x81, [0x7, 0x8, 0x400, 0x1000, 0x0, 0x8, 0x8, 0x8, 0xd6e, 0x401, 0x9, 0xa4aa, 0x9, 0x7fffffff, 0x4, 0x1327aa60]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0000000120000042bbd7000fcdbdf25ff010000000000000000000000000001ac1e0101dbb5a2d20000004e24000d4e220008000020802c00"/68, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="040000000000000006000000000000000100000000000000030000000000000004000000000000000000000000000040050000000000000006000000000000000100000000000000c6000000000000000400000000000000020000000000000000000000b66b6e0000010000c200000008001f0004000000"], 0xc0}, 0x1, 0x0, 0x0, 0x44004}, 0x2002c014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) rt_sigsuspend(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000fb687efe2cee7f8700000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r5, r5], 0x0, 0x10, 0x10000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000087790000040000000300000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES32, @ANYRES8=r2], 0x50) 2.805414107s ago: executing program 0 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffff9c, 0x0, 0x80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0xa0402, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="debf0100e1000000440012800b000100627269646765000034000280050024000100000005002900010000000500250000000000060006000600000008001d008000009c283513870eb6d5071d2533e1c960de1f20113e7a4b558c4092e1941c4729e975225e8bb34c93798a575afd7c093fca0c828ee1371bb13da7990035555759a8052d016f92a17cd739876e0569890bab50"], 0x64}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xa1) keyctl$update(0x2, r4, &(0x7f0000000140)="c4", 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.80515077s ago: executing program 1 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x5, &(0x7f00000001c0)=':.#\'\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usbip_server_init(0x3) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf250d0000006c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673100000000000000000008000100", @ANYRES64=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e696376663000000000000000000000780001801400020065727370616e300000000000000000001400020076657468305f746f5f62617461647600140002006d6163766c616e3100000000000000000800030001000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="081943dbf4a0fd944da8"], 0xf8}, 0x1, 0x0, 0x0, 0x24}, 0x4004004) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0x8008330e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000400)=@default_ibss_ssid, 0x6, 0x0) tgkill(r0, r0, 0x25) 2.235379601s ago: executing program 3 (id=689): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffe47, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0186405, &(0x7f0000001840)={0x4, 0x4, {}, {0xee01}, 0x6, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x20000000, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r10, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000004f00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000001ac0)=ANY=[@ANYBLOB="c80000004200000225bd7000fcdbdf2508003b000010000008001300", @ANYRES32, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc8}, {&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002d00000329bd7000ffdbdf25017b4d7f9862aa34d74802065e7871382a1d5925f41356bb88ce0d56f87f00002545ffb65605ea8a7a0cf30132b4aecaeba88a5f"], 0x30}, {&(0x7f0000000580)=ANY=[@ANYBLOB="a40100003d00000328bdfbffffdbdf252e01", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x1a4}], 0x3, &(0x7f0000004e80)=[@cred={{0x18, 0x1, 0x2, {r11, 0x0, r10}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x48, 0xc001}, 0x24004055) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000003ac0)={0x78, 0x0, 0x0, {0x5, 0x0, 0x0, {0x5, 0x4, 0x100, 0x0, 0x0, 0x6, 0x1, 0xffff78a2, 0x101, 0x0, 0x9, r9, r10, 0x9, 0xa0}}}, 0x78) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$int_in(r5, 0x5452, 0x0) r12 = syz_io_uring_setup(0x234, &(0x7f0000000100)={0x0, 0xa755, 0x40, 0xfffffffd, 0x20}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x28, 0x6, r2, 0x0, &(0x7f0000001880)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000001580)=""/164, 0xa4}, {&(0x7f0000001640)=""/159, 0x9f}, {&(0x7f0000001700)=""/242, 0xf2}, {&(0x7f00000019c0)=""/136, 0x88}, {&(0x7f0000000180)}, {&(0x7f0000000200)=""/42, 0x2a}], 0x7, &(0x7f00000018c0)=""/231, 0xe7}, 0x0, 0x100, 0x1, {0x2, r15}}) io_uring_enter(r12, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r12, 0xf517, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001800)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=ANY=[@ANYRESOCT], 0x57}, 0x1, 0x7}, 0x24008804) 2.234892394s ago: executing program 0 (id=690): r0 = socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20008840) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_DISABLE_VHT={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "83d21840659167ee35462a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "2d54265f1d816342"}, @NL80211_ATTR_FILS_ERP_REALM={0x85, 0xfa, "b9bf739886c95b5f3d07d997c3c11343c4b85966cdd7cbd9b8b67defc05687687bfaa34bc9039096e09656e31bbd246c08e56acf04039862ae45b89615041438f3ae4540bcc5944ff71982d25b83a60d68d9332f9a7c2de6edb78621a9c4c18e620820811bfd15150d7b913fe96db86c65f2a5ae32dc86bb627c3fc3d16b2d5763"}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 1.455620861s ago: executing program 2 (id=691): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2800000003060108000000000000000002000003050001000700000009000200"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) r9 = dup(r7) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 1.265221171s ago: executing program 3 (id=692): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0x4, 0x8, 0xda, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) 1.255552863s ago: executing program 1 (id=693): socket$netlink(0x10, 0x3, 0x10) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0xbf09, 0x10100, 0x1, 0x35f}, 0x0, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x5, &(0x7f00000001c0)=':.#\'\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f00000002c0)="fd") sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="a15368e7e399f430f3bafc14c967eb9d5a4ada60493d76b8b9c28273b36272a20871009d7d8d9443793f371c434ac01c1f432d1d4a6d0bf9321f9e65458a65ec83c5be0e6ba5b727c8b5a61027bb0add6b24fa950262c160c089c86798ae11a905d637cbb2a06e170a753c62fed15085e6aa380675188c3f401cb2", 0x7b}, {&(0x7f00000004c0)="8b46b64411f6e7ad4e47f782d9996703f8f2f8b63bab5eef4aab5417dbe1d70e3ed9e577e49ec5bb16359c8873993ddb1adeb3f67998347b458d2be2319b3771d07b5ef8f85aa44c8584de80ab3098700190a4953cd2c23bd0f2a3a17a3ffab5860974", 0x63}], 0x2, &(0x7f0000000740)=[@rthdr_2292={{0x64, 0x29, 0x39, {0x84, 0xa, 0x2, 0x4, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, @private1]}}}, @hopopts={{0xe4, 0x29, 0x36, {0x2f, 0x19, '\x00', [@generic={0x2, 0xca, "bd0196cf02adfa3fcd10506b8b3d126019ab20e167d968abb5f3f24b364e4e6902c3478a8c30285a35f3b9566175cdc29405cd0a444713811bc35dc0d6e36ec84cc5eeeadeb23e5508986b9706639e0196b6455414117873415964e301028c0878954c17bfac5a41b74c70c8949bd7fd4daa3898fef3c39c9a33a5b3ebb11486e39ed257918280abd45710bb1dc1400872b9fcd7213e4e740b938952b3293b8021a170112172b324472104a25f22fa788e1584f3bafd531655825080d90a3a2ea81a5f8f10388298d38a"}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x2}}, @dontfrag={{0x10, 0x29, 0x3e, 0x5}}, @tclass={{0x10, 0x29, 0x43, 0x4}}, @flowinfo={{0x10, 0x29, 0xb, 0x3ff}}], 0x188}}], 0x2, 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f0000000400)=@sr0, 0x0, &(0x7f0000000300)='fuse\x00', 0x21000d, 0x0) 1.185230327s ago: executing program 3 (id=694): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0xffffffffffffffff, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) fcntl$getownex(r5, 0x10, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000740)="146fc8", 0x3, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone3(&(0x7f0000000780)={0x8000, &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000540), {0xa}, &(0x7f0000000680)=""/187, 0xbb, &(0x7f0000000580)=""/38, &(0x7f0000000740)}, 0x58) 80.642612ms ago: executing program 3 (id=695): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xce, &(0x7f0000000000)=0xa2, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) (fail_nth: 7) 451.12µs ago: executing program 0 (id=696): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10880}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (fail_nth: 6) 0s ago: executing program 3 (id=697): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) move_pages(r1, 0x2, &(0x7f00000006c0)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000700)=[0x7, 0xffffffff, 0x4, 0x1, 0x2, 0xffffffff, 0x5, 0x1, 0x8001, 0x10001], &(0x7f0000000740)=[0x0, 0x0], 0x4) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2}}) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) io_uring_enter(r6, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x70c, 0x1, {{0xd, 0x4, 0x1, 0x38, 0x34, 0x66, 0x0, 0x58, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x84, 0x0, 0x2, [0x6, 0x5bf, 0x8, 0xfffffffa]}, @timestamp_addr={0x44, 0xc, 0xed, 0x1, 0x9, [{@rand_addr=0x64010100, 0x800}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xf, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa9f6}, [@exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xda}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x40f00, 0x1, '\x00', r7, @fallback=0x1f, r0, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xe, 0x860, 0x7}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f00000005c0)=[{0x5, 0x5, 0x7, 0x7}, {0x4, 0x5, 0x4, 0xa}], 0x10, 0x5}, 0x94) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) chroot(&(0x7f0000000140)='./file0\x00') mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2 [ 85.510756][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 85.514386][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.517133][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.519800][ T34] usb 7-1: Product: syz [ 85.521274][ T34] usb 7-1: Manufacturer: syz [ 85.522702][ T34] usb 7-1: SerialNumber: syz [ 85.738409][ T34] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 86.143617][ T6520] usblp0:failed reading printer status (-32) [ 86.159082][ T6543] ======================================================= [ 86.159082][ T6543] WARNING: The mand mount option has been deprecated and [ 86.159082][ T6543] and is ignored by this kernel. Remove the mand [ 86.159082][ T6543] option from the mount to silence this warning. [ 86.159082][ T6543] ======================================================= [ 86.179496][ T6543] 9p: Bad value for 'rfdno' [ 86.224736][ T6548] netlink: 'syz.1.93': attribute type 25 has an invalid length. [ 86.245082][ T24] cfg80211: failed to load regulatory.db [ 86.461360][ T6029] usb 7-1: USB disconnect, device number 2 [ 86.473855][ T6029] usblp0: removed [ 88.319280][ T6607] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 88.321187][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.494281][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 88.520790][ T6607] random: crng reseeded on system resumption [ 88.604245][ T6616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.768589][ T56] usb 38-1: SetAddress Request (2) to port 0 [ 88.773845][ T56] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 89.233448][ T6609] vhci_hcd: connection reset by peer [ 89.237419][ T6081] vhci_hcd vhci_hcd.0: stop threads [ 89.239866][ T6081] vhci_hcd vhci_hcd.0: release socket [ 89.242259][ T6081] vhci_hcd vhci_hcd.0: disconnect device [ 89.439608][ T65] Bluetooth: hci4: command 0xfc11 tx timeout [ 89.439668][ T5948] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 89.607912][ T6627] binder: 6626:6627 ioctl c400941d 800004c0 returned -22 [ 90.327885][ T6011] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 90.477856][ T6011] usb 8-1: Using ep0 maxpacket: 16 [ 90.481938][ T6011] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.485644][ T6011] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.488877][ T6011] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.493010][ T6011] usb 8-1: config 1 interface 0 has no altsetting 0 [ 90.496844][ T6011] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.499879][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.502501][ T6011] usb 8-1: Product: syz [ 90.503901][ T6011] usb 8-1: Manufacturer: syz [ 90.505507][ T6011] usb 8-1: SerialNumber: syz [ 90.718959][ T6011] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 90.869541][ T6011] IPVS: starting estimator thread 0... [ 90.978529][ T6648] IPVS: using max 43 ests per chain, 103200 per kthread [ 91.123277][ T6637] usblp0:failed reading printer status (-32) [ 91.443703][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.112'. [ 91.538819][ T6411] usb 8-1: USB disconnect, device number 2 [ 91.546395][ T6411] usblp0: removed [ 91.687451][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 91.693394][ T40] audit: type=1326 audit(1768981950.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.2.114" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 92.195514][ T6673] FAULT_INJECTION: forcing a failure. [ 92.195514][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.201154][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 92.201176][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.201186][ T6673] Call Trace: [ 92.201192][ T6673] [ 92.201199][ T6673] dump_stack_lvl+0x16c/0x1f0 [ 92.201220][ T6673] should_fail_ex+0x512/0x640 [ 92.201241][ T6673] _copy_from_user+0x2e/0xd0 [ 92.201258][ T6673] video_usercopy+0x723/0x13e0 [ 92.201282][ T6673] ? __pfx___video_do_ioctl+0x10/0x10 [ 92.201304][ T6673] ? __pfx_video_usercopy+0x10/0x10 [ 92.201333][ T6673] ? hook_file_ioctl_common+0x144/0x410 [ 92.201357][ T6673] v4l2_ioctl+0x1bd/0x250 [ 92.201380][ T6673] ? fput+0x61/0xf0 [ 92.201397][ T6673] v4l2_compat_ioctl32+0x217/0x2e0 [ 92.201425][ T6673] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 92.201448][ T6673] __ia32_compat_sys_ioctl+0x242/0x370 [ 92.201472][ T6673] __do_fast_syscall_32+0xe8/0x680 [ 92.201492][ T6673] do_fast_syscall_32+0x32/0x80 [ 92.201509][ T6673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.201530][ T6673] RIP: 0023:0xf705d579 [ 92.201544][ T6673] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.201559][ T6673] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 92.201574][ T6673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 92.201584][ T6673] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.201594][ T6673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.201603][ T6673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.201612][ T6673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.201636][ T6673] [ 92.797376][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 92.951653][ T6684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 92.954335][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.957913][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 93.117136][ T6690] vhci_hcd: connection closed [ 93.119131][ T6081] vhci_hcd vhci_hcd.3: stop threads [ 93.123386][ T6081] vhci_hcd vhci_hcd.3: release socket [ 93.125916][ T6081] vhci_hcd vhci_hcd.3: disconnect device [ 93.138241][ T5997] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 93.594007][ T6696] fuse: Bad value for 'fd' [ 93.621497][ T6696] ptrace attach of ""[6697] was attempted by ""[6696] [ 93.837912][ T56] usb 38-1: device descriptor read/8, error -110 [ 94.229144][ T56] usb usb38-port1: attempt power cycle [ 94.513989][ T6661] delete_channel: no stack [ 94.558053][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.640714][ T6717] tmpfs: Bad value for 'mpol' [ 94.694886][ T6718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.707823][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 94.712042][ T34] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.716150][ T34] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.853750][ T6720] process 'syz.2.127' launched './file1' with NULL argv: empty string added [ 94.881429][ T56] usb usb38-port1: unable to enumerate USB device [ 94.883817][ T34] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.891504][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 94.898198][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.901790][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.906125][ T34] usb 5-1: Product: syz [ 94.907966][ T34] usb 5-1: Manufacturer: syz [ 94.912722][ T34] usb 5-1: SerialNumber: syz [ 95.133630][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 95.490899][ T6702] usblp0:failed reading printer status (-32) [ 95.496302][ T53] usb 5-1: USB disconnect, device number 4 [ 95.500770][ T53] usblp0: removed [ 95.608713][ T6733] ip6gre1: entered promiscuous mode [ 95.611097][ T6733] ip6gre1: entered allmulticast mode [ 95.935878][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 96.443131][ T6750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.010028][ T6773] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 98.026219][ T6773] batman_adv: batadv0: Adding interface: team0 [ 98.029483][ T6773] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.040353][ T6773] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.040376][ T6781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 98.046716][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.050560][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 98.078305][ T6781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.139'. [ 98.288710][ T56] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 98.739541][ T6782] vhci_hcd: connection reset by peer [ 98.742268][ T87] vhci_hcd vhci_hcd.2: stop threads [ 98.744555][ T87] vhci_hcd vhci_hcd.2: release socket [ 98.747892][ T87] vhci_hcd vhci_hcd.2: disconnect device [ 99.107908][ T6028] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.257992][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 99.413142][ T6028] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.416435][ T6028] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.428479][ T6028] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.432680][ T6028] usb 6-1: config 1 interface 0 has no altsetting 0 [ 99.442482][ T6028] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.447890][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.451231][ T6028] usb 6-1: Product: syz [ 99.453033][ T6028] usb 6-1: Manufacturer: syz [ 99.455000][ T6028] usb 6-1: SerialNumber: syz [ 99.700047][ T6804] openvswitch: netlink: Missing key (keys=40, expected=100) [ 99.723831][ T6028] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 100.128155][ T6792] usblp0:failed reading printer status (-32) [ 100.266549][ T6813] netlink: 'syz.0.146': attribute type 4 has an invalid length. [ 100.281397][ T6816] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 100.283630][ T6815] 9p: Bad value for 'wfdno' [ 100.294918][ T53] usb 6-1: USB disconnect, device number 4 [ 100.303081][ T53] usblp0: removed [ 100.706674][ T6825] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 100.709512][ T6825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.714249][ T6825] vhci_hcd vhci_hcd.0: Device attached [ 100.722888][ T6825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.150'. [ 101.215126][ T6841] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 101.217755][ T6841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.152'. [ 101.410139][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 101.494682][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 102.227757][ T6826] vhci_hcd: connection closed [ 102.236351][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 102.256748][ T1142] vhci_hcd vhci_hcd.2: release socket [ 102.258763][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 102.398838][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 102.417527][ T6857] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 102.421965][ T6857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.155'. [ 102.589989][ T6864] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 102.593044][ T6864] bond0: (slave wlan1): Opening slave failed [ 102.609095][ T6862] trusted_key: encrypted_key: master key parameter '' is invalid [ 102.645414][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.980186][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.160'. [ 103.033412][ T40] audit: type=1326 audit(1768981961.976:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 103.051567][ T40] audit: type=1326 audit(1768981961.986:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 103.064500][ T40] audit: type=1326 audit(1768981962.006:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 103.074114][ T40] audit: type=1326 audit(1768981962.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 103.097943][ T40] audit: type=1326 audit(1768981962.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 103.367983][ T6029] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 103.427884][ T56] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 103.547342][ T6890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 103.549352][ T6890] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.152783][ T6029] usb 6-1: Using ep0 maxpacket: 16 [ 104.169681][ T6029] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.174953][ T6029] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.178760][ T6890] vhci_hcd vhci_hcd.0: Device attached [ 104.181040][ T6029] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.196625][ T6029] usb 6-1: config 1 interface 0 has no altsetting 0 [ 104.222839][ T6029] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.226159][ T6029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.232108][ T6029] usb 6-1: Product: syz [ 104.264655][ T6029] usb 6-1: Manufacturer: syz [ 104.267572][ T6890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.164'. [ 104.277915][ T6029] usb 6-1: SerialNumber: syz [ 104.427862][ T5997] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 104.448425][ T6891] vhci_hcd: connection reset by peer [ 104.450370][ T4874] vhci_hcd vhci_hcd.3: stop threads [ 104.452232][ T4874] vhci_hcd vhci_hcd.3: release socket [ 104.453999][ T4874] vhci_hcd vhci_hcd.3: disconnect device [ 104.510551][ T6029] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 104.893610][ T6877] usblp0:failed reading printer status (-32) [ 105.035568][ T6029] usb 6-1: USB disconnect, device number 5 [ 105.039861][ T6029] usblp0: removed [ 105.082172][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 105.544531][ T6921] tipc: Started in network mode [ 105.546447][ T6921] tipc: Node identity 2aaa3b279f8f, cluster identity 4711 [ 105.549127][ T6921] tipc: Enabled bearer , priority 0 [ 105.555059][ T6919] tipc: Resetting bearer [ 105.630522][ T6922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 105.632637][ T6922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.635928][ T6922] vhci_hcd vhci_hcd.0: Device attached [ 105.639090][ T6922] random: crng reseeded on system resumption [ 105.765682][ T56] IPVS: starting estimator thread 0... [ 105.877885][ T6929] IPVS: using max 43 ests per chain, 103200 per kthread [ 105.927843][ T56] usb 38-1: SetAddress Request (6) to port 0 [ 105.930164][ T56] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 106.244610][ T6923] vhci_hcd: connection reset by peer [ 106.246557][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 106.249517][ T1141] vhci_hcd vhci_hcd.0: release socket [ 106.251356][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 106.847867][ T6938] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 106.850481][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.854535][ T6938] vhci_hcd vhci_hcd.0: Device attached [ 106.872141][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'. [ 107.007565][ T6919] tipc: Disabling bearer [ 107.014299][ T34] tipc: Node number set to 3039116071 [ 107.108275][ T6029] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 107.121458][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 107.148206][ T6946] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 107.494525][ T6939] vhci_hcd: connection reset by peer [ 107.497115][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 107.499044][ T1141] vhci_hcd vhci_hcd.1: release socket [ 107.500940][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 108.286891][ T6963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2799626000 (89588032000 ns) > initial count (68918506848 ns). Using initial count to start timer. [ 108.611414][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 108.807966][ T6411] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.967848][ T6411] usb 7-1: Using ep0 maxpacket: 16 [ 108.974457][ T6411] usb 7-1: config 0 has no interfaces? [ 108.978223][ T6411] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.982521][ T6411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.986143][ T6411] usb 7-1: SerialNumber: syz [ 108.991388][ T6979] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 108.994577][ T6411] usb 7-1: config 0 descriptor?? [ 109.211557][ T62] usb 7-1: USB disconnect, device number 3 [ 109.414470][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 109.507876][ T5997] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 110.284355][ T6991] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 110.817105][ T7002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 110.819230][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.823544][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 110.829088][ T7002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 110.957874][ T56] usb 38-1: device descriptor read/8, error -110 [ 111.320280][ T7003] vhci_hcd: connection closed [ 111.321161][ T46] vhci_hcd vhci_hcd.0: stop threads [ 111.325393][ T46] vhci_hcd vhci_hcd.0: release socket [ 111.327526][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 111.348426][ T56] usb usb38-port1: attempt power cycle [ 111.567828][ T6411] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 111.579387][ T7011] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 111.582174][ T7011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.195'. [ 111.647682][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 111.772791][ T7018] openvswitch: netlink: Missing key (keys=40, expected=100) [ 112.259861][ T6029] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 112.889357][ T56] usb usb38-port1: unable to enumerate USB device [ 113.444184][ T7046] openvswitch: netlink: Missing key (keys=40, expected=100) [ 114.182717][ T7051] bridge0: entered promiscuous mode [ 114.184672][ T7051] macvlan2: entered promiscuous mode [ 114.196383][ T5948] Bluetooth: unknown link type 170 [ 114.199124][ T5948] Bluetooth: hci0: connection err: -111 [ 114.356514][ T7055] netlink: 284 bytes leftover after parsing attributes in process `syz.0.208'. [ 114.424900][ T7061] FAULT_INJECTION: forcing a failure. [ 114.424900][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.430824][ T7061] CPU: 3 UID: 0 PID: 7061 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 114.430841][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.430849][ T7061] Call Trace: [ 114.430855][ T7061] [ 114.430861][ T7061] dump_stack_lvl+0x16c/0x1f0 [ 114.430882][ T7061] should_fail_ex+0x512/0x640 [ 114.430899][ T7061] _copy_to_user+0x32/0xd0 [ 114.430914][ T7061] simple_read_from_buffer+0xcb/0x170 [ 114.430931][ T7061] proc_fail_nth_read+0x197/0x240 [ 114.430954][ T7061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.430980][ T7061] ? rw_verify_area+0xcf/0x6c0 [ 114.431000][ T7061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.431018][ T7061] vfs_read+0x1e4/0xcf0 [ 114.431038][ T7061] ? __pfx___mutex_lock+0x10/0x10 [ 114.431057][ T7061] ? __pfx_vfs_read+0x10/0x10 [ 114.431074][ T7061] ? find_held_lock+0x2b/0x80 [ 114.431093][ T7061] ? __fget_files+0x20e/0x3c0 [ 114.431113][ T7061] ksys_read+0x12a/0x250 [ 114.431134][ T7061] ? __pfx_ksys_read+0x10/0x10 [ 114.431164][ T7061] __do_fast_syscall_32+0xe8/0x680 [ 114.431180][ T7061] do_fast_syscall_32+0x32/0x80 [ 114.431191][ T7061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.431205][ T7061] RIP: 0023:0xf705d579 [ 114.431213][ T7061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 114.431224][ T7061] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 114.431234][ T7061] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544d620 [ 114.431241][ T7061] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 114.431246][ T7061] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 114.431252][ T7061] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 114.431258][ T7061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.431272][ T7061] [ 116.079045][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 116.315827][ T7088] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 116.320066][ T7088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.215'. [ 117.141919][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 117.735162][ T6029] IPVS: starting estimator thread 0... [ 117.837961][ T7112] IPVS: using max 22 ests per chain, 52800 per kthread [ 117.911208][ T7117] FAULT_INJECTION: forcing a failure. [ 117.911208][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 117.915388][ T7117] CPU: 3 UID: 0 PID: 7117 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT(full) [ 117.915403][ T7117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.915409][ T7117] Call Trace: [ 117.915413][ T7117] [ 117.915418][ T7117] dump_stack_lvl+0x16c/0x1f0 [ 117.915432][ T7117] should_fail_ex+0x512/0x640 [ 117.915445][ T7117] ? fs_reclaim_acquire+0xae/0x150 [ 117.915463][ T7117] should_failslab+0xc2/0x120 [ 117.915479][ T7117] kmem_cache_alloc_noprof+0x83/0x770 [ 117.915492][ T7117] ? __pfx_map_id_range_down+0x10/0x10 [ 117.915507][ T7117] ? security_inode_alloc+0x3b/0x2b0 [ 117.915522][ T7117] ? security_inode_alloc+0x3b/0x2b0 [ 117.915532][ T7117] security_inode_alloc+0x3b/0x2b0 [ 117.915544][ T7117] inode_init_always_gfp+0xced/0x1040 [ 117.915563][ T7117] alloc_inode+0x86/0x240 [ 117.915574][ T7117] new_inode+0x22/0x1c0 [ 117.915587][ T7117] proc_pid_make_inode+0x22/0x160 [ 117.915601][ T7117] proc_pident_instantiate+0x85/0x310 [ 117.915614][ T7117] proc_pident_lookup+0x1f5/0x270 [ 117.915630][ T7117] __lookup_slow+0x251/0x460 [ 117.915642][ T7117] ? __pfx___lookup_slow+0x10/0x10 [ 117.915665][ T7117] lookup_slow+0x50/0x70 [ 117.915677][ T7117] link_path_walk+0x12d8/0x1c70 [ 117.915696][ T7117] path_openat+0x1bd/0x3140 [ 117.915710][ T7117] ? __do_fast_syscall_32+0xe8/0x680 [ 117.915721][ T7117] ? do_fast_syscall_32+0x32/0x80 [ 117.915735][ T7117] ? __pfx_path_openat+0x10/0x10 [ 117.915752][ T7117] ? __lock_acquire+0x436/0x2890 [ 117.915764][ T7117] do_filp_open+0x20b/0x470 [ 117.915780][ T7117] ? __pfx_do_filp_open+0x10/0x10 [ 117.915800][ T7117] ? __pfx_kfree_link+0x10/0x10 [ 117.915816][ T7117] ? _raw_spin_unlock+0x28/0x50 [ 117.915831][ T7117] ? alloc_fd+0x471/0x7d0 [ 117.915850][ T7117] do_sys_openat2+0x121/0x290 [ 117.915862][ T7117] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.915875][ T7117] ? __fget_files+0x20e/0x3c0 [ 117.915892][ T7117] __ia32_compat_sys_openat+0x16d/0x210 [ 117.915905][ T7117] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.915917][ T7117] ? ksys_write+0x1ac/0x250 [ 117.915933][ T7117] ? do_user_addr_fault+0x843/0x1370 [ 117.915949][ T7117] __do_fast_syscall_32+0xe8/0x680 [ 117.915961][ T7117] do_fast_syscall_32+0x32/0x80 [ 117.915971][ T7117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.915989][ T7117] RIP: 0023:0xf7f84579 [ 117.915997][ T7117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.916007][ T7117] RSP: 002b:00000000f54764f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 117.916017][ T7117] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7267de9 [ 117.916023][ T7117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7416ff4 [ 117.916028][ T7117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.916034][ T7117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.916039][ T7117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.916052][ T7117] [ 118.161698][ T7123] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 118.164021][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.167279][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 118.203114][ T7123] random: crng reseeded on system resumption [ 118.236998][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 118.354421][ T7134] 9pnet_fd: Insufficient options for proto=fd [ 118.437808][ T5997] usb 38-1: SetAddress Request (10) to port 0 [ 118.440703][ T5997] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 118.680578][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 118.683560][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'. [ 118.799420][ T7124] vhci_hcd: connection reset by peer [ 118.801486][ T4874] vhci_hcd vhci_hcd.0: stop threads [ 118.803689][ T4874] vhci_hcd vhci_hcd.0: release socket [ 118.808783][ T4874] vhci_hcd vhci_hcd.0: disconnect device [ 118.931752][ T7144] bridge0: port 3(erspan0) entered blocking state [ 118.934333][ T7144] bridge0: port 3(erspan0) entered disabled state [ 118.939112][ T7144] erspan0: entered allmulticast mode [ 118.948500][ T7144] erspan0: entered promiscuous mode [ 118.952013][ T7144] bridge0: port 3(erspan0) entered blocking state [ 118.954170][ T7144] bridge0: port 3(erspan0) entered forwarding state [ 118.969797][ T7144] erspan0: left allmulticast mode [ 118.971585][ T7144] erspan0: left promiscuous mode [ 118.974963][ T7144] bridge0: port 3(erspan0) entered disabled state [ 119.691347][ T7156] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.694247][ T7156] overlayfs: failed to set xattr on upper [ 119.696106][ T7156] overlayfs: ...falling back to redirect_dir=nofollow. [ 119.698081][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.699829][ T7156] overlayfs: ...falling back to metacopy=off. [ 119.703147][ T7156] overlayfs: ...falling back to index=off. [ 119.705569][ T7156] overlayfs: ...falling back to uuid=null. [ 119.800572][ T7161] openvswitch: netlink: Missing key (keys=40, expected=100) [ 119.817617][ T5948] Bluetooth: hci3: link tx timeout [ 119.819758][ T5948] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 119.823309][ T5948] Bluetooth: hci3: link tx timeout [ 119.824999][ T5948] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.847864][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 119.851310][ T34] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.854716][ T34] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.860144][ T34] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.865636][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 119.870549][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 119.874252][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.904268][ T34] usb 5-1: Product: syz [ 119.906650][ T34] usb 5-1: Manufacturer: syz [ 119.909106][ T34] usb 5-1: SerialNumber: syz [ 119.985055][ T7163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.037556][ T7163] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 120.125811][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 120.136974][ T7167] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 120.506989][ T7147] usblp0:failed reading printer status (-32) [ 120.538115][ T6411] usb 5-1: USB disconnect, device number 5 [ 120.550289][ T6411] usblp0: removed [ 121.170437][ T6411] hid-generic 0401:0200:0002.0002: item fetching failed at offset 2/215 [ 121.216403][ T7179] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 121.219805][ T7179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.228566][ T6411] hid-generic 0401:0200:0002.0002: probe with driver hid-generic failed with error -22 [ 121.313373][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.838131][ T5948] Bluetooth: hci3: command 0x0406 tx timeout [ 122.798252][ T7209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 122.800372][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.803292][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 122.821797][ T7209] random: crng reseeded on system resumption [ 122.927014][ T7218] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.188119][ T62] usb 42-1: SetAddress Request (2) to port 0 [ 123.190868][ T62] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.517832][ T5997] usb 38-1: device descriptor read/8, error -110 [ 123.807345][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 123.872127][ T7241] FAULT_INJECTION: forcing a failure. [ 123.872127][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 123.876646][ T7241] CPU: 3 UID: 0 PID: 7241 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(full) [ 123.876661][ T7241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.876667][ T7241] Call Trace: [ 123.876672][ T7241] [ 123.876678][ T7241] dump_stack_lvl+0x16c/0x1f0 [ 123.876693][ T7241] should_fail_ex+0x512/0x640 [ 123.876705][ T7241] ? __kmalloc_noprof+0xca/0x910 [ 123.876718][ T7241] should_failslab+0xc2/0x120 [ 123.876734][ T7241] __kmalloc_noprof+0xeb/0x910 [ 123.876745][ T7241] ? __vb2_queue_alloc+0x23e/0x1280 [ 123.876761][ T7241] ? __vb2_queue_alloc+0x23e/0x1280 [ 123.876772][ T7241] __vb2_queue_alloc+0x23e/0x1280 [ 123.876786][ T7241] ? __kmalloc_noprof+0x35d/0x910 [ 123.876810][ T7241] vb2_core_reqbufs+0xa90/0xfe0 [ 123.876832][ T7241] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 123.876863][ T7241] __vb2_init_fileio+0x3f1/0x1100 [ 123.876882][ T7241] ? vb2_fop_read+0xe6/0x3e0 [ 123.876905][ T7241] __vb2_perform_fileio+0x9c2/0x1660 [ 123.876930][ T7241] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 123.876952][ T7241] ? import_ubuf+0x1b6/0x220 [ 123.876973][ T7241] vb2_fop_read+0x215/0x3e0 [ 123.876996][ T7241] v4l2_read+0x229/0x360 [ 123.877020][ T7241] ? __pfx_v4l2_read+0x10/0x10 [ 123.877037][ T7241] vfs_readv+0x5c1/0x8b0 [ 123.877055][ T7241] ? __pfx_vfs_readv+0x10/0x10 [ 123.877068][ T7241] ? find_held_lock+0x2b/0x80 [ 123.877090][ T7241] ? __fget_files+0x20e/0x3c0 [ 123.877109][ T7241] ? do_preadv+0x1a6/0x270 [ 123.877121][ T7241] do_preadv+0x1a6/0x270 [ 123.877134][ T7241] ? __pfx_do_preadv+0x10/0x10 [ 123.877153][ T7241] ? do_user_addr_fault+0x843/0x1370 [ 123.877168][ T7241] __do_fast_syscall_32+0xe8/0x680 [ 123.877180][ T7241] do_fast_syscall_32+0x32/0x80 [ 123.877191][ T7241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.877204][ T7241] RIP: 0023:0xf7fb5579 [ 123.877213][ T7241] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.877223][ T7241] RSP: 002b:00000000f548555c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 123.877232][ T7241] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000740 [ 123.877238][ T7241] RDX: 0000000000000001 RSI: 0000000080000001 RDI: 0000000000003f7a [ 123.877244][ T7241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.877250][ T7241] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.877255][ T7241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.877268][ T7241] [ 123.974739][ T7210] vhci_hcd: connection reset by peer [ 123.977358][ T63] vhci_hcd vhci_hcd.2: stop threads [ 123.978646][ T5997] usb usb38-port1: attempt power cycle [ 123.979619][ T63] vhci_hcd vhci_hcd.2: release socket [ 123.988687][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 124.201046][ T7253] syzkaller1: entered promiscuous mode [ 124.203464][ T7253] syzkaller1: entered allmulticast mode [ 124.256994][ T7250] syz.1.254 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 124.368480][ T6011] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.398035][ T5948] Bluetooth: hci3: command 0x0406 tx timeout [ 124.517941][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 124.522844][ T6011] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 124.525420][ T6011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.538079][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.542338][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.545982][ T6011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.553901][ T6011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.558261][ T5997] usb usb38-port1: unable to enumerate USB device [ 124.560743][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.776468][ T6011] usb 5-1: GET_CAPABILITIES returned 0 [ 124.779207][ T6011] usbtmc 5-1:16.0: can't read capabilities [ 125.122243][ T7248] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 125.141610][ T24] usb 5-1: USB disconnect, device number 6 [ 125.385451][ T7278] IPv6: sit1: Disabled Multicast RS [ 125.772720][ T7291] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.774763][ T7291] overlayfs: failed to set xattr on upper [ 125.776417][ T7291] overlayfs: ...falling back to redirect_dir=nofollow. [ 125.778476][ T7291] overlayfs: ...falling back to index=off. [ 125.780139][ T7291] overlayfs: ...falling back to uuid=null. [ 125.868021][ T7286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 125.870062][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.872531][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 125.875823][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.264'. [ 125.977258][ T7295] vhci_hcd: connection closed [ 125.977435][ T63] vhci_hcd vhci_hcd.1: stop threads [ 125.981539][ T63] vhci_hcd vhci_hcd.1: release socket [ 125.983285][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 126.259835][ T7311] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 126.262430][ T7311] netlink: 224 bytes leftover after parsing attributes in process `syz.0.267'. [ 126.451781][ T7315] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 126.454473][ T7315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.269'. [ 126.472454][ T7317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 126.474585][ T7317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.514441][ T7317] vhci_hcd vhci_hcd.0: Device attached [ 126.609347][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 126.757915][ T34] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 127.217937][ T7320] vhci_hcd: connection reset by peer [ 127.220100][ T63] vhci_hcd vhci_hcd.1: stop threads [ 127.221897][ T63] vhci_hcd vhci_hcd.1: release socket [ 127.223664][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 127.375339][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 128.237905][ T62] usb 42-1: device descriptor read/8, error -110 [ 128.760233][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 128.876677][ T62] usb usb42-port1: attempt power cycle [ 129.241594][ T7352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.442355][ T24] libceph: connect (1)[c::]:6789 error -101 [ 129.447327][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 129.573019][ T7362] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.575285][ T7362] overlayfs: failed to set xattr on upper [ 129.577137][ T7362] overlayfs: ...falling back to redirect_dir=nofollow. [ 129.579438][ T7362] overlayfs: ...falling back to index=off. [ 129.581226][ T7362] overlayfs: ...falling back to uuid=null. [ 129.708328][ T24] libceph: connect (1)[c::]:6789 error -101 [ 129.710538][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 130.050632][ T7353] ceph: No mds server is up or the cluster is laggy [ 130.078306][ T62] usb usb42-port1: unable to enumerate USB device [ 130.235457][ T7366] syzkaller0: entered promiscuous mode [ 130.237234][ T7366] syzkaller0: entered allmulticast mode [ 130.988318][ T40] audit: type=1326 audit(1768981989.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 130.997929][ T40] audit: type=1326 audit(1768981989.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.005385][ T40] audit: type=1326 audit(1768981989.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.013133][ T40] audit: type=1326 audit(1768981989.936:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.020583][ T40] audit: type=1326 audit(1768981989.936:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.027474][ T40] audit: type=1326 audit(1768981989.936:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.034707][ T40] audit: type=1326 audit(1768981989.936:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.042284][ T40] audit: type=1326 audit(1768981989.936:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.050283][ T40] audit: type=1326 audit(1768981989.936:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.056997][ T40] audit: type=1326 audit(1768981989.936:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.1.286" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 131.150166][ T7386] random: crng reseeded on system resumption [ 131.170503][ T7390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 131.172677][ T7390] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.175195][ T7390] vhci_hcd vhci_hcd.0: Device attached [ 131.182190][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.284'. [ 131.303714][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 131.351788][ T7391] vhci_hcd: connection closed [ 131.352164][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 131.357166][ T1141] vhci_hcd vhci_hcd.0: release socket [ 131.361486][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 131.407840][ T62] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 131.410665][ T62] usb 37-1: enqueue for inactive port 0 [ 131.487926][ T62] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 131.688520][ T7401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.690792][ T7401] overlayfs: failed to set xattr on upper [ 131.692689][ T7401] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.694835][ T7401] overlayfs: ...falling back to index=off. [ 131.696660][ T7401] overlayfs: ...falling back to uuid=null. [ 131.937923][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 132.496249][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 133.339743][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 133.400079][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.315443][ T7446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.317841][ T7446] overlayfs: failed to set xattr on upper [ 134.319846][ T7446] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.322069][ T7446] overlayfs: ...falling back to index=off. [ 134.323953][ T7446] overlayfs: ...falling back to uuid=null. [ 134.752421][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 135.249580][ T7473] openvswitch: netlink: Missing key (keys=40, expected=100) [ 135.407789][ T6029] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.557797][ T6029] usb 5-1: Using ep0 maxpacket: 16 [ 135.562126][ T6029] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.565480][ T6029] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.569915][ T6029] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.576180][ T6029] usb 5-1: config 1 interface 0 has no altsetting 0 [ 135.582384][ T6029] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.587106][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.592975][ T6029] usb 5-1: Product: syz [ 135.594628][ T6029] usb 5-1: Manufacturer: syz [ 135.596304][ T6029] usb 5-1: SerialNumber: syz [ 135.816150][ T6029] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 135.929288][ T7477] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.178158][ T7467] usblp0:failed reading printer status (-32) [ 136.203722][ T6029] usb 5-1: USB disconnect, device number 7 [ 136.206411][ T7489] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.208395][ T6029] usblp0: removed [ 136.271230][ T7491] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.274114][ T7491] overlayfs: failed to set xattr on upper [ 136.276055][ T7491] overlayfs: ...falling back to redirect_dir=nofollow. [ 136.285230][ T7491] overlayfs: ...falling back to index=off. [ 136.289618][ T7491] overlayfs: ...falling back to uuid=null. [ 136.978974][ T7502] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 136.981670][ T7502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.318'. [ 137.440623][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.442850][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.963004][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 138.665695][ T7524] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.669115][ T7524] overlayfs: failed to set xattr on upper [ 138.671828][ T7524] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.674677][ T7524] overlayfs: ...falling back to index=off. [ 138.677064][ T7524] overlayfs: ...falling back to uuid=null. [ 138.729659][ T7526] : renamed from bond0 (while UP) [ 139.038089][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.124229][ T7540] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 139.126783][ T7540] netlink: 224 bytes leftover after parsing attributes in process `syz.3.330'. [ 139.187879][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 139.192715][ T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.196813][ T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.201773][ T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.206982][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 139.213488][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.217322][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.221328][ T24] usb 6-1: Product: syz [ 139.222949][ T24] usb 6-1: Manufacturer: syz [ 139.225726][ T24] usb 6-1: SerialNumber: syz [ 139.434651][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 139.903535][ T7529] usblp0:failed reading printer status (-32) [ 139.929600][ T53] usb 6-1: USB disconnect, device number 6 [ 139.934147][ T53] usblp0: removed [ 140.080749][ T7558] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 140.082874][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.089311][ T7558] vhci_hcd vhci_hcd.0: Device attached [ 140.095739][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 140.106705][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 140.257092][ T7562] binder: 7561:7562 ioctl c0306201 80000080 returned -14 [ 140.327895][ T6011] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 140.505327][ T7568] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.508149][ T7568] overlayfs: failed to set xattr on upper [ 140.509983][ T7568] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.512249][ T7568] overlayfs: ...falling back to index=off. [ 140.514112][ T7568] overlayfs: ...falling back to uuid=null. [ 140.684476][ T7559] vhci_hcd: connection reset by peer [ 140.686780][ T87] vhci_hcd vhci_hcd.0: stop threads [ 140.688681][ T87] vhci_hcd vhci_hcd.0: release socket [ 140.690742][ T87] vhci_hcd vhci_hcd.0: disconnect device [ 140.694365][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 141.363164][ T7583] FAULT_INJECTION: forcing a failure. [ 141.363164][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.369710][ T7583] CPU: 3 UID: 0 PID: 7583 Comm: syz.1.339 Not tainted syzkaller #0 PREEMPT(full) [ 141.369758][ T7583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.369768][ T7583] Call Trace: [ 141.369775][ T7583] [ 141.369782][ T7583] dump_stack_lvl+0x16c/0x1f0 [ 141.369805][ T7583] should_fail_ex+0x512/0x640 [ 141.369831][ T7583] _copy_from_user+0x2e/0xd0 [ 141.369851][ T7583] get_compat_msghdr+0xa7/0x170 [ 141.369875][ T7583] ? __pfx_get_compat_msghdr+0x10/0x10 [ 141.369908][ T7583] ___sys_sendmsg+0x1ae/0x1d0 [ 141.369934][ T7583] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.369969][ T7583] ? find_held_lock+0x2b/0x80 [ 141.370007][ T7583] __sys_sendmsg+0x16d/0x220 [ 141.370032][ T7583] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.370072][ T7583] ? do_user_addr_fault+0x843/0x1370 [ 141.370100][ T7583] __do_fast_syscall_32+0xe8/0x680 [ 141.370121][ T7583] do_fast_syscall_32+0x32/0x80 [ 141.370139][ T7583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.370160][ T7583] RIP: 0023:0xf7fb5579 [ 141.370174][ T7583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.370189][ T7583] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.370206][ T7583] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001880 [ 141.370216][ T7583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.370225][ T7583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.370235][ T7583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.370244][ T7583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.370268][ T7583] [ 141.926171][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 141.926183][ T40] audit: type=1326 audit(1768982000.866:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.340" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 142.272314][ T7595] FAULT_INJECTION: forcing a failure. [ 142.272314][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.277962][ T7595] CPU: 3 UID: 0 PID: 7595 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 142.277989][ T7595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.277999][ T7595] Call Trace: [ 142.278004][ T7595] [ 142.278011][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 142.278033][ T7595] should_fail_ex+0x512/0x640 [ 142.278057][ T7595] _copy_from_user+0x2e/0xd0 [ 142.278076][ T7595] get_compat_msghdr+0xa7/0x170 [ 142.278102][ T7595] ? __pfx_get_compat_msghdr+0x10/0x10 [ 142.278131][ T7595] ___sys_sendmsg+0x1ae/0x1d0 [ 142.278156][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.278191][ T7595] ? find_held_lock+0x2b/0x80 [ 142.278229][ T7595] __sys_sendmsg+0x16d/0x220 [ 142.278253][ T7595] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.278287][ T7595] ? do_user_addr_fault+0x843/0x1370 [ 142.278312][ T7595] __do_fast_syscall_32+0xe8/0x680 [ 142.278332][ T7595] do_fast_syscall_32+0x32/0x80 [ 142.278350][ T7595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.278370][ T7595] RIP: 0023:0xf705d579 [ 142.278384][ T7595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.278399][ T7595] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 142.278415][ T7595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 142.278425][ T7595] RDX: 00000000040000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.278435][ T7595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.278444][ T7595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.278454][ T7595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.278477][ T7595] [ 143.028999][ T7622] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 143.046809][ T7624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 143.048915][ T7624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.052544][ T7624] vhci_hcd vhci_hcd.0: Device attached [ 143.078901][ T7624] random: crng reseeded on system resumption [ 143.338499][ T6134] usb 42-1: SetAddress Request (6) to port 0 [ 143.338574][ T6134] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 143.404890][ T7631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 143.404908][ T7631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.405058][ T7631] vhci_hcd vhci_hcd.0: Device attached [ 145.163916][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 145.586535][ T6011] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 145.914047][ T7625] vhci_hcd: connection reset by peer [ 145.920436][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 145.923224][ T1141] vhci_hcd vhci_hcd.2: release socket [ 145.925989][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 146.111207][ T7632] vhci_hcd: connection closed [ 146.111548][ T46] vhci_hcd vhci_hcd.0: stop threads [ 146.115282][ T46] vhci_hcd vhci_hcd.0: release socket [ 146.117123][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 146.674454][ T7674] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 146.677928][ T7674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.360'. [ 146.858564][ T6061] usb usb38-port1: attempt power cycle [ 146.980207][ T7680] openvswitch: netlink: Missing key (keys=40, expected=100) [ 147.219589][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 147.419592][ T6061] usb usb38-port1: unable to enumerate USB device [ 148.452185][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 149.557791][ T6134] usb 42-1: device descriptor read/8, error -110 [ 149.711242][ T7722] 9pnet_fd: p9_fd_create_tcp (7722): problem binding to privport [ 149.884486][ T7729] FAULT_INJECTION: forcing a failure. [ 149.884486][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 149.891436][ T7729] CPU: 2 UID: 0 PID: 7729 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) [ 149.891453][ T7729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.891459][ T7729] Call Trace: [ 149.891463][ T7729] [ 149.891468][ T7729] dump_stack_lvl+0x16c/0x1f0 [ 149.891482][ T7729] should_fail_ex+0x512/0x640 [ 149.891495][ T7729] ? fs_reclaim_acquire+0xae/0x150 [ 149.891513][ T7729] should_failslab+0xc2/0x120 [ 149.891529][ T7729] __kmalloc_noprof+0xeb/0x910 [ 149.891541][ T7729] ? tomoyo_encode2+0x100/0x3e0 [ 149.891558][ T7729] ? tomoyo_encode2+0x100/0x3e0 [ 149.891571][ T7729] tomoyo_encode2+0x100/0x3e0 [ 149.891587][ T7729] tomoyo_encode+0x29/0x50 [ 149.891600][ T7729] tomoyo_mount_acl+0x144/0x850 [ 149.891614][ T7729] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 149.891632][ T7729] ? kernel_text_address+0x8d/0x100 [ 149.891643][ T7729] ? __lock_acquire+0x436/0x2890 [ 149.891657][ T7729] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 149.891671][ T7729] ? arch_stack_walk+0xa6/0x100 [ 149.891697][ T7729] ? tomoyo_domain+0xba/0x150 [ 149.891706][ T7729] ? tomoyo_profile+0x47/0x60 [ 149.891716][ T7729] tomoyo_mount_permission+0x16d/0x420 [ 149.891729][ T7729] ? tomoyo_mount_permission+0x14f/0x420 [ 149.891743][ T7729] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 149.891765][ T7729] security_sb_mount+0x9b/0x260 [ 149.891778][ T7729] path_mount+0x158/0x23a0 [ 149.891788][ T7729] ? rcu_is_watching+0x12/0xc0 [ 149.891804][ T7729] ? __pfx_path_mount+0x10/0x10 [ 149.891814][ T7729] ? kmem_cache_free+0x2d8/0x770 [ 149.891827][ T7729] ? putname+0xf5/0x1a0 [ 149.891839][ T7729] ? putname+0xf5/0x1a0 [ 149.891850][ T7729] ? __ia32_sys_mount+0x291/0x310 [ 149.891859][ T7729] __ia32_sys_mount+0x291/0x310 [ 149.891870][ T7729] ? __pfx___ia32_sys_mount+0x10/0x10 [ 149.891881][ T7729] ? do_user_addr_fault+0x843/0x1370 [ 149.891896][ T7729] __do_fast_syscall_32+0xe8/0x680 [ 149.891908][ T7729] do_fast_syscall_32+0x32/0x80 [ 149.891919][ T7729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.891931][ T7729] RIP: 0023:0xf70dd579 [ 149.891940][ T7729] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.891950][ T7729] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 149.891959][ T7729] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000100 [ 149.891966][ T7729] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000080000300 [ 149.891971][ T7729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.891977][ T7729] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.891982][ T7729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.891995][ T7729] [ 150.000527][ T6134] usb usb42-port1: attempt power cycle [ 150.292755][ T7738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.381'. [ 150.640099][ T6134] usb usb42-port1: unable to enumerate USB device [ 151.190781][ T7713] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 151.193067][ T7713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.195973][ T7744] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 151.198883][ T7744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.202851][ T7713] vhci_hcd vhci_hcd.0: Device attached [ 151.205419][ T7744] vhci_hcd vhci_hcd.0: Device attached [ 151.264951][ T7752] fuse: Bad value for 'user_id' [ 151.266749][ T7752] fuse: Bad value for 'user_id' [ 151.274645][ T7752] 9p: Bad value for 'wfdno' [ 151.443936][ T7745] vhci_hcd: connection closed [ 151.444220][ T87] vhci_hcd vhci_hcd.3: stop threads [ 151.448539][ T87] vhci_hcd vhci_hcd.3: release socket [ 151.456003][ T7746] vhci_hcd: connection closed [ 151.463963][ T87] vhci_hcd vhci_hcd.3: disconnect device [ 151.474579][ T87] vhci_hcd vhci_hcd.3: stop threads [ 151.476833][ T87] vhci_hcd vhci_hcd.3: release socket [ 151.477937][ T53] usb 44-1: SetAddress Request (2) to port 0 [ 151.481771][ T87] vhci_hcd vhci_hcd.3: disconnect device [ 151.488954][ T53] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 151.518050][ T53] usb 44-1: enqueue for inactive port 0 [ 151.802425][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 152.131768][ T53] usb usb44-port1: attempt power cycle [ 153.334852][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 153.349098][ T53] usb usb44-port1: unable to enumerate USB device [ 153.431717][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 153.952121][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 154.047890][ T6061] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.218247][ T6061] usb 5-1: Using ep0 maxpacket: 16 [ 154.221303][ T6061] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.224992][ T6061] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.228795][ T6061] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.233081][ T6061] usb 5-1: config 1 interface 0 has no altsetting 0 [ 154.236956][ T6061] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.240407][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.243114][ T6061] usb 5-1: Product: syz [ 154.244503][ T6061] usb 5-1: Manufacturer: syz [ 154.246144][ T6061] usb 5-1: SerialNumber: syz [ 154.518210][ T7824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 154.520519][ T7824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.523205][ T7824] vhci_hcd vhci_hcd.0: Device attached [ 154.532567][ T6061] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 154.758281][ T62] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 154.941220][ T7814] usblp0:failed reading printer status (-32) [ 155.995295][ T53] usb 5-1: USB disconnect, device number 8 [ 156.002769][ T53] usblp0: removed [ 156.138732][ T7842] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 156.141607][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.145079][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 156.728042][ T6134] usb 42-1: SetAddress Request (10) to port 0 [ 156.731068][ T6134] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 156.916662][ T7825] vhci_hcd: connection reset by peer [ 156.929841][ T7842] random: crng reseeded on system resumption [ 156.951385][ T63] vhci_hcd vhci_hcd.1: stop threads [ 156.953083][ T63] vhci_hcd vhci_hcd.1: release socket [ 156.955313][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 157.385855][ T7843] vhci_hcd: connection reset by peer [ 157.388481][ T63] vhci_hcd vhci_hcd.2: stop threads [ 157.390637][ T63] vhci_hcd vhci_hcd.2: release socket [ 157.392571][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 157.860384][ T7851] FAULT_INJECTION: forcing a failure. [ 157.860384][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 157.865876][ T7851] CPU: 2 UID: 0 PID: 7851 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 157.865899][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.865909][ T7851] Call Trace: [ 157.865915][ T7851] [ 157.865923][ T7851] dump_stack_lvl+0x16c/0x1f0 [ 157.865945][ T7851] should_fail_ex+0x512/0x640 [ 157.865965][ T7851] ? __kvmalloc_node_noprof+0x129/0xa40 [ 157.865990][ T7851] should_failslab+0xc2/0x120 [ 157.866012][ T7851] __kvmalloc_node_noprof+0x14a/0xa40 [ 157.866032][ T7851] ? __might_fault+0xe3/0x190 [ 157.866048][ T7851] ? __might_fault+0x13b/0x190 [ 157.866064][ T7851] ? xt_alloc_table_info+0x43/0xa0 [ 157.866087][ T7851] ? xt_alloc_table_info+0x43/0xa0 [ 157.866102][ T7851] xt_alloc_table_info+0x43/0xa0 [ 157.866119][ T7851] compat_do_replace+0x1ea/0x520 [ 157.866141][ T7851] ? __pfx_compat_do_replace+0x10/0x10 [ 157.866161][ T7851] ? sockopt_release_sock+0x52/0x60 [ 157.866185][ T7851] ? __local_bh_enable_ip+0xa4/0x120 [ 157.866217][ T7851] ? bpf_lsm_capable+0x9/0x10 [ 157.866238][ T7851] ? security_capable+0x7e/0x260 [ 157.866257][ T7851] do_ip6t_set_ctl+0x5ed/0xbc0 [ 157.866274][ T7851] ? find_held_lock+0x2b/0x80 [ 157.866295][ T7851] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 157.866315][ T7851] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 157.866339][ T7851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.866359][ T7851] ? __pfx___might_resched+0x10/0x10 [ 157.866390][ T7851] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 157.866411][ T7851] nf_setsockopt+0x8d/0xf0 [ 157.866429][ T7851] ipv6_setsockopt+0x135/0x170 [ 157.866452][ T7851] tcp_setsockopt+0xa7/0x100 [ 157.866473][ T7851] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.866490][ T7851] do_sock_setsockopt+0xf3/0x1d0 [ 157.866518][ T7851] __sys_setsockopt+0x120/0x1a0 [ 157.866545][ T7851] __ia32_sys_setsockopt+0xbc/0x160 [ 157.866563][ T7851] ? __do_fast_syscall_32+0x9a/0x680 [ 157.866580][ T7851] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.866595][ T7851] __do_fast_syscall_32+0xe8/0x680 [ 157.866614][ T7851] do_fast_syscall_32+0x32/0x80 [ 157.866651][ T7851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.866672][ T7851] RIP: 0023:0xf7f84579 [ 157.866685][ T7851] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.866700][ T7851] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 157.866715][ T7851] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 157.866725][ T7851] RDX: 0000000000000040 RSI: 0000000080000b40 RDI: 0000000000000440 [ 157.866734][ T7851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.866743][ T7851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.866752][ T7851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.866775][ T7851] [ 157.867123][ T7851] comedi comedi2: ni_at_a2150: a I/O base address must be specified [ 158.076386][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 158.113179][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.414'. [ 159.237508][ T7883] syz_tun: entered promiscuous mode [ 159.243462][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 159.247073][ T7883] syz_tun: left promiscuous mode [ 159.284324][ T7885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 159.286518][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.292432][ T7885] vhci_hcd vhci_hcd.0: Device attached [ 159.660822][ T7895] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.663922][ T7895] overlayfs: failed to set xattr on upper [ 159.666451][ T7895] overlayfs: ...falling back to redirect_dir=nofollow. [ 159.669710][ T7895] overlayfs: ...falling back to index=off. [ 159.672253][ T7895] overlayfs: ...falling back to uuid=null. [ 159.735767][ T6029] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 159.939413][ T62] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 160.016509][ T7887] vhci_hcd: connection reset by peer [ 160.018657][ T4874] vhci_hcd vhci_hcd.0: stop threads [ 160.020984][ T4874] vhci_hcd vhci_hcd.0: release socket [ 160.023439][ T4874] vhci_hcd vhci_hcd.0: disconnect device [ 160.319227][ T7910] openvswitch: netlink: Missing key (keys=40, expected=100) [ 160.631095][ T7915] warning: `syz.1.428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.590171][ T7915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.592348][ T7915] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 161.624091][ T7938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.626358][ T7938] overlayfs: failed to set xattr on upper [ 161.628285][ T7938] overlayfs: ...falling back to redirect_dir=nofollow. [ 161.630480][ T7938] overlayfs: ...falling back to index=off. [ 161.632392][ T7938] overlayfs: ...falling back to uuid=null. [ 161.639835][ T7915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.641772][ T7915] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 161.782482][ T7915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.784429][ T7915] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 161.877388][ T6134] usb 42-1: device descriptor read/8, error -110 [ 161.999964][ T7937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.004030][ T7937] overlayfs: failed to set xattr on upper [ 162.006415][ T7937] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.009241][ T7937] overlayfs: ...falling back to index=off. [ 162.011658][ T7937] overlayfs: ...falling back to uuid=null. [ 162.484717][ T6134] usb usb42-port1: attempt power cycle [ 162.562890][ T7946] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.565404][ T7946] overlayfs: failed to set xattr on upper [ 162.567209][ T7946] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.573468][ T7946] overlayfs: ...falling back to index=off. [ 162.575843][ T7946] overlayfs: ...falling back to uuid=null. [ 162.594540][ T7951] openvswitch: netlink: Missing key (keys=40, expected=100) [ 163.078276][ T6134] usb usb42-port1: unable to enumerate USB device [ 164.932745][ T6029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 165.112680][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.119639][ T7974] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.019034][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 166.149117][ T7996] openvswitch: netlink: Missing key (keys=40, expected=100) [ 167.117881][ T5948] Bluetooth: hci4: command 0xfc11 tx timeout [ 167.897905][ T65] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 168.264778][ T8010] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 168.283626][ T8010] bond1: entered promiscuous mode [ 168.286087][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.471361][ T8015] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 168.474280][ T8015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.454'. [ 168.736331][ T8021] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 168.738611][ T8021] overlayfs: failed to set xattr on upper [ 168.740559][ T8021] overlayfs: ...falling back to redirect_dir=nofollow. [ 168.742671][ T8021] overlayfs: ...falling back to index=off. [ 168.744517][ T8021] overlayfs: ...falling back to uuid=null. [ 168.916914][ T8026] ubi31: attaching mtd0 [ 168.920645][ T8026] ubi31: scanning is finished [ 168.922296][ T8026] ubi31: empty MTD device detected [ 168.971846][ T8026] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 168.974245][ T8026] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 168.976927][ T8026] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 168.979888][ T8026] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 168.982937][ T8026] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 168.985990][ T8026] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 168.989846][ T8026] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 519779984 [ 168.993387][ T8026] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 168.998561][ T8029] ubi31: background thread "ubi_bgt31d" started, PID 8029 [ 169.048387][ T40] audit: type=1326 audit(1768982027.996:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.061522][ T40] audit: type=1326 audit(1768982027.996:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.073420][ T40] audit: type=1326 audit(1768982027.996:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.080660][ T40] audit: type=1326 audit(1768982028.006:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.087390][ T40] audit: type=1326 audit(1768982028.006:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.103655][ T40] audit: type=1326 audit(1768982028.046:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=443 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.110646][ T40] audit: type=1326 audit(1768982028.056:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.118003][ T40] audit: type=1326 audit(1768982028.056:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.126390][ T40] audit: type=1326 audit(1768982028.066:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.152683][ T40] audit: type=1326 audit(1768982028.086:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 169.459232][ T8042] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.461733][ T8042] overlayfs: failed to set xattr on upper [ 169.463537][ T8042] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.465686][ T8042] overlayfs: ...falling back to index=off. [ 169.467548][ T8042] overlayfs: ...falling back to uuid=null. [ 169.861965][ T8051] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 169.864108][ T8051] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 169.866965][ T8051] vhci_hcd vhci_hcd.0: Device attached [ 169.875291][ T8051] random: crng reseeded on system resumption [ 170.147992][ T6011] usb 38-1: SetAddress Request (18) to port 0 [ 170.150022][ T6011] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 170.509681][ T8052] vhci_hcd: connection reset by peer [ 170.511672][ T46] vhci_hcd vhci_hcd.0: stop threads [ 170.513341][ T46] vhci_hcd vhci_hcd.0: release socket [ 170.515366][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 170.673566][ T8067] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 170.676379][ T8067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.466'. [ 171.060488][ T8075] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 171.063005][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.469'. [ 171.201498][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 172.023706][ T8087] overlayfs: failed to resolve './file0': -2 [ 174.118279][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 175.251804][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 175.842187][ T6011] usb 38-1: device descriptor read/8, error -110 [ 176.275750][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 176.279306][ T8126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 176.279616][ T8148] random: crng reseeded on system resumption [ 176.281510][ T8126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.290590][ T8126] vhci_hcd vhci_hcd.0: Device attached [ 176.397011][ T6011] usb usb38-port1: attempt power cycle [ 176.724166][ T8149] vhci_hcd: connection closed [ 176.724468][ T46] vhci_hcd vhci_hcd.3: stop threads [ 176.728269][ T46] vhci_hcd vhci_hcd.3: release socket [ 176.730780][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 176.768524][ T10] usb 44-1: enqueue for inactive port 0 [ 176.845866][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.849268][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.902813][ T8128] dummy0: left allmulticast mode [ 176.955494][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.965133][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.199753][ T6011] usb usb38-port1: unable to enumerate USB device [ 177.258587][ T10] usb usb44-port1: attempt power cycle [ 177.290194][ T8164] FAULT_INJECTION: forcing a failure. [ 177.290194][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.295253][ T8164] CPU: 3 UID: 0 PID: 8164 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 177.295274][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.295284][ T8164] Call Trace: [ 177.295290][ T8164] [ 177.295297][ T8164] dump_stack_lvl+0x16c/0x1f0 [ 177.295318][ T8164] should_fail_ex+0x512/0x640 [ 177.295340][ T8164] _copy_to_user+0x32/0xd0 [ 177.295360][ T8164] simple_read_from_buffer+0xcb/0x170 [ 177.295383][ T8164] proc_fail_nth_read+0x197/0x240 [ 177.295409][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.295434][ T8164] ? rw_verify_area+0xcf/0x6c0 [ 177.295454][ T8164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.295475][ T8164] vfs_read+0x1e4/0xcf0 [ 177.295497][ T8164] ? __pfx___mutex_lock+0x10/0x10 [ 177.295515][ T8164] ? __pfx_vfs_read+0x10/0x10 [ 177.295533][ T8164] ? find_held_lock+0x2b/0x80 [ 177.295559][ T8164] ? __fget_files+0x20e/0x3c0 [ 177.295587][ T8164] ksys_read+0x12a/0x250 [ 177.295607][ T8164] ? __pfx_ksys_read+0x10/0x10 [ 177.295627][ T8164] ? do_user_addr_fault+0x843/0x1370 [ 177.295650][ T8164] __do_fast_syscall_32+0xe8/0x680 [ 177.295668][ T8164] do_fast_syscall_32+0x32/0x80 [ 177.295684][ T8164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.295702][ T8164] RIP: 0023:0xf705d579 [ 177.295714][ T8164] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.295734][ T8164] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 177.295750][ T8164] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d620 [ 177.295760][ T8164] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 177.295769][ T8164] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 177.295778][ T8164] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 177.295786][ T8164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.295808][ T8164] [ 177.420205][ T8128] macvlan2: left promiscuous mode [ 177.454372][ T6223] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.458255][ T6223] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.461228][ T6223] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.464248][ T6223] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.659749][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 177.711946][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.715470][ T8174] batadv_slave_0: entered promiscuous mode [ 177.725905][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 177.734863][ T8170] fuse: Bad value for 'user_id' [ 177.737025][ T8170] fuse: Bad value for 'user_id' [ 177.818782][ T10] usb usb44-port1: unable to enumerate USB device [ 177.968011][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.970589][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.987967][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 178.012743][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.020317][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.105517][ T6223] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.112141][ T6223] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.116273][ T6223] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.121481][ T6223] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.157946][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 178.160966][ T54] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 178.164420][ T54] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 178.168720][ T54] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.168929][ T8181] input: syz1 as /devices/virtual/input/input10 [ 178.172380][ T54] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 178.182122][ T54] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 178.185455][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.189867][ T54] usb 6-1: Product: syz [ 178.191988][ T54] usb 6-1: Manufacturer: syz [ 178.193765][ T54] usb 6-1: SerialNumber: syz [ 178.206357][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 178.211142][ T54] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11 [ 178.405052][ T54] imon:send_packet: packet tx failed (-71) [ 178.419576][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 178.423279][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 178.427848][ T54] imon 6-1:155.0: panel buttons/knobs setup failed [ 178.430074][ T54] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 178.432760][ T54] (id 0x00) [ 178.497842][ T54] rc_core: IR keymap rc-imon-pad not found [ 178.499929][ T54] Registered IR keymap rc-empty [ 178.501632][ T54] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 178.504991][ T54] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 178.508952][ T54] imon:send_packet: packet tx failed (-71) [ 178.527884][ T54] imon 6-1:155.0: remote input dev register failed [ 178.530232][ T54] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 178.566782][ T8189] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 178.569838][ T8189] netlink: 224 bytes leftover after parsing attributes in process `syz.0.495'. [ 178.571254][ T54] imon 6-1:155.0: unable to initialize intf0, err 0 [ 178.575170][ T54] imon:imon_probe: failed to initialize context! [ 178.577544][ T54] imon 6-1:155.0: unable to register, err -19 [ 178.582765][ T54] usb 6-1: USB disconnect, device number 7 [ 179.034902][ T8204] Invalid logical block size (53355) [ 179.738015][ T8215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 179.740108][ T8215] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.742892][ T8215] vhci_hcd vhci_hcd.0: Device attached [ 179.760326][ T8215] random: crng reseeded on system resumption [ 179.921272][ T8220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.007867][ T54] usb 42-1: SetAddress Request (14) to port 0 [ 180.010553][ T54] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 180.063797][ T8228] 9p: Bad value for 'sq' [ 180.067614][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 180.075337][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.505'. [ 180.450527][ T8236] openvswitch: netlink: Missing key (keys=40, expected=100) [ 180.717318][ T8216] vhci_hcd: connection reset by peer [ 180.732758][ T46] vhci_hcd vhci_hcd.2: stop threads [ 180.734737][ T46] vhci_hcd vhci_hcd.2: release socket [ 180.737086][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 181.678320][ T8243] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.680595][ T8243] overlayfs: failed to set xattr on upper [ 181.682536][ T8243] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.684707][ T8243] overlayfs: ...falling back to index=off. [ 181.686743][ T8243] overlayfs: ...falling back to uuid=null. [ 182.104015][ T8247] bridge0: port 3(erspan0) entered blocking state [ 182.106992][ T8247] bridge0: port 3(erspan0) entered disabled state [ 182.109428][ T8247] erspan0: entered allmulticast mode [ 182.114206][ T8247] erspan0: entered promiscuous mode [ 182.124313][ T8247] erspan0: left allmulticast mode [ 182.126248][ T8247] erspan0: left promiscuous mode [ 182.128580][ T8247] bridge0: port 3(erspan0) entered disabled state [ 182.757025][ T8255] bridge0: port 3(erspan0) entered blocking state [ 182.760314][ T8255] bridge0: port 3(erspan0) entered disabled state [ 182.764189][ T8255] erspan0: entered allmulticast mode [ 182.770053][ T8255] erspan0: entered promiscuous mode [ 182.791827][ T8255] erspan0: left allmulticast mode [ 182.793583][ T8255] erspan0: left promiscuous mode [ 182.795744][ T8255] bridge0: port 3(erspan0) entered disabled state [ 183.392687][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 183.625771][ T8267] openvswitch: netlink: Missing key (keys=40, expected=100) [ 184.236597][ T8274] openvswitch: netlink: Missing key (keys=40, expected=100) [ 184.542844][ T8280] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.545114][ T8280] overlayfs: failed to set xattr on upper [ 184.546979][ T8280] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.549230][ T8280] overlayfs: ...falling back to index=off. [ 184.551112][ T8280] overlayfs: ...falling back to uuid=null. [ 185.117841][ T54] usb 42-1: device descriptor read/8, error -110 [ 185.269224][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.272099][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.275532][ T4874] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.279929][ T4874] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.283269][ T8287] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 185.311527][ T8288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 185.314318][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.325498][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 185.354302][ T8290] vhci_hcd: connection closed [ 185.354637][ T46] vhci_hcd vhci_hcd.3: stop threads [ 185.359653][ T46] vhci_hcd vhci_hcd.3: release socket [ 185.362099][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 185.423906][ T8296] vlan2: entered promiscuous mode [ 185.425959][ T8296] vlan2: entered allmulticast mode [ 185.427677][ T8296] hsr_slave_1: entered allmulticast mode [ 185.588093][ T54] usb usb42-port1: attempt power cycle [ 186.158345][ T54] usb usb42-port1: unable to enumerate USB device [ 186.314357][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 186.316585][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.319343][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 186.567833][ T6411] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 186.938640][ T8309] vhci_hcd: connection reset by peer [ 186.940608][ T6223] vhci_hcd vhci_hcd.2: stop threads [ 186.942302][ T6223] vhci_hcd vhci_hcd.2: release socket [ 186.944688][ T6223] vhci_hcd vhci_hcd.2: disconnect device [ 187.074866][ T8313] mmap: syz.1.526 (8313) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.278263][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 187.447848][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.564216][ T8330] bridge0: port 3(erspan0) entered blocking state [ 187.566545][ T8330] bridge0: port 3(erspan0) entered disabled state [ 187.570263][ T8330] erspan0: entered allmulticast mode [ 187.576855][ T8330] erspan0: entered promiscuous mode [ 187.579713][ T8330] bridge0: port 3(erspan0) entered blocking state [ 187.581818][ T8330] bridge0: port 3(erspan0) entered forwarding state [ 187.597870][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 187.600843][ T54] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.603028][ T8330] erspan0: left allmulticast mode [ 187.604308][ T54] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.605800][ T8330] erspan0: left promiscuous mode [ 187.609443][ T54] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.611093][ T8330] bridge0: port 3(erspan0) entered disabled state [ 187.614802][ T54] usb 6-1: config 1 interface 0 has no altsetting 0 [ 187.620731][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.624075][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.626703][ T54] usb 6-1: Product: syz [ 187.628391][ T54] usb 6-1: Manufacturer: syz [ 187.629970][ T54] usb 6-1: SerialNumber: syz [ 187.847430][ T54] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 188.210661][ T8322] usblp0:failed reading printer status (-32) [ 188.254270][ T6029] usb 6-1: USB disconnect, device number 8 [ 188.265184][ T6029] usblp0: removed [ 188.793440][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.534'. [ 188.796294][ T8343] netlink: 6 bytes leftover after parsing attributes in process `syz.3.534'. [ 188.863120][ T8349] FAULT_INJECTION: forcing a failure. [ 188.863120][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.867999][ T8349] CPU: 3 UID: 0 PID: 8349 Comm: syz.2.535 Not tainted syzkaller #0 PREEMPT(full) [ 188.868014][ T8349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.868031][ T8349] Call Trace: [ 188.868037][ T8349] [ 188.868041][ T8349] dump_stack_lvl+0x16c/0x1f0 [ 188.868057][ T8349] should_fail_ex+0x512/0x640 [ 188.868072][ T8349] _copy_from_user+0x2e/0xd0 [ 188.868085][ T8349] get_user_ifreq+0x116/0x1c0 [ 188.868103][ T8349] compat_sock_ioctl+0x3f6/0x730 [ 188.868115][ T8349] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 188.868126][ T8349] ? hook_file_ioctl_common+0x144/0x410 [ 188.868142][ T8349] ? __fget_files+0x20e/0x3c0 [ 188.868156][ T8349] ? fput+0x60/0xf0 [ 188.868170][ T8349] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 188.868180][ T8349] __ia32_compat_sys_ioctl+0x242/0x370 [ 188.868195][ T8349] __do_fast_syscall_32+0xe8/0x680 [ 188.868208][ T8349] do_fast_syscall_32+0x32/0x80 [ 188.868218][ T8349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.868232][ T8349] RIP: 0023:0xf70dd579 [ 188.868240][ T8349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.868250][ T8349] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 188.868262][ T8349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 188.868269][ T8349] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.868275][ T8349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.868281][ T8349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.868286][ T8349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.868300][ T8349] [ 188.990469][ T8351] netlink: 'syz.2.537': attribute type 30 has an invalid length. [ 189.139774][ T8357] loop5: detected capacity change from 0 to 7 [ 189.267356][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.538'. [ 189.292498][ T8359] team0 (unregistering): Port device team_slave_0 removed [ 189.296765][ T8359] team0 (unregistering): Port device team_slave_1 removed [ 189.439633][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.443028][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.449376][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.452427][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.457764][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.460803][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.474824][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.478386][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.484220][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.487511][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.496283][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.500451][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.607951][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.611801][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.614970][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.619042][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.691433][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.695466][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.707829][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.711460][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.717343][ T8357] ldm_validate_partition_table(): Disk read failed. [ 189.725197][ T8357] Dev loop5: unable to read RDB block 0 [ 189.731056][ T8357] loop5: unable to read partition table [ 189.733378][ T8357] loop5: partition table beyond EOD, truncated [ 189.741572][ T8357] loop_reread_partitions: partition scan of loop5 (ʖxs) failed (rc=-5) [ 189.912652][ T5352] ldm_validate_partition_table(): Disk read failed. [ 189.915030][ T5352] Dev loop5: unable to read RDB block 0 [ 189.917056][ T5352] loop5: unable to read partition table [ 189.919395][ T5352] loop5: partition table beyond EOD, truncated [ 190.147824][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 190.147836][ T40] audit: type=1326 audit(1768982049.036:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.168949][ T40] audit: type=1326 audit(1768982049.036:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.186059][ T40] audit: type=1326 audit(1768982049.036:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.204682][ T40] audit: type=1326 audit(1768982049.066:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.219916][ T40] audit: type=1326 audit(1768982049.066:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.229968][ T40] audit: type=1326 audit(1768982049.066:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.296417][ T40] audit: type=1326 audit(1768982049.236:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.305416][ T40] audit: type=1326 audit(1768982049.236:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.1.540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 190.453600][ T8383] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 190.455647][ T8383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.463733][ T8383] vhci_hcd vhci_hcd.0: Device attached [ 190.589808][ T8383] random: crng reseeded on system resumption [ 190.777868][ T24] usb 44-1: SetAddress Request (10) to port 0 [ 190.779898][ T24] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 191.078079][ T8405] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 191.080633][ T8405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.116295][ T8405] vhci_hcd vhci_hcd.0: Device attached [ 191.357923][ T6011] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 191.435771][ T8384] vhci_hcd: connection reset by peer [ 191.439499][ T46] vhci_hcd vhci_hcd.3: stop threads [ 191.441812][ T46] vhci_hcd vhci_hcd.3: release socket [ 191.444419][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 191.667942][ T6411] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 192.085533][ T8406] vhci_hcd: connection reset by peer [ 192.087564][ T63] vhci_hcd vhci_hcd.0: stop threads [ 192.091078][ T63] vhci_hcd vhci_hcd.0: release socket [ 192.092817][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 192.270690][ T8415] netlink: zone id is out of range [ 192.272453][ T8415] netlink: zone id is out of range [ 192.274258][ T8415] netlink: zone id is out of range [ 192.276421][ T8415] netlink: zone id is out of range [ 192.278754][ T8415] netlink: zone id is out of range [ 192.282384][ T8415] netlink: set zone limit has 8 unknown bytes [ 192.418234][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 192.654560][ T8433] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 192.657362][ T8433] netlink: 224 bytes leftover after parsing attributes in process `syz.2.551'. [ 192.661309][ T8430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 192.663348][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.665874][ T8430] vhci_hcd vhci_hcd.0: Device attached [ 192.937828][ T34] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 193.261172][ T8431] vhci_hcd: connection reset by peer [ 193.263597][ T63] vhci_hcd vhci_hcd.1: stop threads [ 193.265236][ T63] vhci_hcd vhci_hcd.1: release socket [ 193.267428][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 193.574831][ T8447] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.694211][ T8448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.696634][ T8448] overlayfs: failed to set xattr on upper [ 193.699039][ T8448] overlayfs: ...falling back to redirect_dir=nofollow. [ 193.701360][ T8448] overlayfs: ...falling back to index=off. [ 193.703179][ T8448] overlayfs: ...falling back to uuid=null. [ 193.841303][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 193.923839][ T8449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 193.925916][ T8449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.003764][ T8449] vhci_hcd vhci_hcd.0: Device attached [ 194.012922][ T8452] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 194.277870][ T6061] usb 42-1: SetAddress Request (18) to port 0 [ 194.279856][ T6061] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 194.999109][ T8450] vhci_hcd: connection reset by peer [ 195.002242][ T63] vhci_hcd vhci_hcd.2: stop threads [ 195.004073][ T63] vhci_hcd vhci_hcd.2: release socket [ 195.005993][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 195.656742][ T8476] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 195.675597][ T8476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.563'. [ 195.760045][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 195.997930][ T24] usb 44-1: device descriptor read/8, error -110 [ 196.389174][ T24] usb usb44-port1: attempt power cycle [ 196.467946][ T6011] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 197.009614][ T24] usb usb44-port1: unable to enumerate USB device [ 198.038449][ T8491] Falling back ldisc for ttyS3. [ 198.087892][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 198.522605][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'. [ 198.526761][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'. [ 198.880628][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.882935][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.359081][ T6061] usb 42-1: device descriptor read/8, error -110 [ 199.760367][ T6061] usb usb42-port1: attempt power cycle [ 200.062840][ T8537] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 200.065362][ T8537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.575'. [ 200.125016][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 200.700593][ T6061] usb usb42-port1: unable to enumerate USB device [ 201.340637][ T8558] loop7: detected capacity change from 0 to 7 [ 201.377677][ T40] audit: type=1326 audit(1768982060.316:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.1.580" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7fc00000 [ 201.531020][ T8572] FAULT_INJECTION: forcing a failure. [ 201.531020][ T8572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.536144][ T8572] CPU: 3 UID: 0 PID: 8572 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT(full) [ 201.536164][ T8572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.536174][ T8572] Call Trace: [ 201.536179][ T8572] [ 201.536186][ T8572] dump_stack_lvl+0x16c/0x1f0 [ 201.536204][ T8572] should_fail_ex+0x512/0x640 [ 201.536224][ T8572] _copy_from_user+0x2e/0xd0 [ 201.536241][ T8572] get_compat_msghdr+0xa7/0x170 [ 201.536270][ T8572] ? __pfx_get_compat_msghdr+0x10/0x10 [ 201.536296][ T8572] ___sys_sendmsg+0x1ae/0x1d0 [ 201.536318][ T8572] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.536345][ T8572] ? find_held_lock+0x2b/0x80 [ 201.536377][ T8572] __sys_sendmsg+0x16d/0x220 [ 201.536396][ T8572] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.536428][ T8572] __do_fast_syscall_32+0xe8/0x680 [ 201.536444][ T8572] do_fast_syscall_32+0x32/0x80 [ 201.536458][ T8572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.536475][ T8572] RIP: 0023:0xf705d579 [ 201.536486][ T8572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.536500][ T8572] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 201.536513][ T8572] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 201.536522][ T8572] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.536530][ T8572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.536537][ T8572] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 201.536545][ T8572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.536565][ T8572] [ 201.867910][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.027862][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 202.035895][ T24] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.042281][ T24] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.046448][ T24] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.052233][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 202.057539][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.066075][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.071526][ T24] usb 5-1: Product: syz [ 202.073636][ T24] usb 5-1: Manufacturer: syz [ 202.075606][ T24] usb 5-1: SerialNumber: syz [ 202.149271][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 202.329425][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 202.502768][ T6061] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 202.566716][ T6061] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 202.616211][ T8592] fido_id[8592]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.634751][ T8594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 202.636938][ T8594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 202.640367][ T8594] vhci_hcd vhci_hcd.0: Device attached [ 202.805202][ T8602] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 202.807851][ T8602] netlink: 224 bytes leftover after parsing attributes in process `syz.1.590'. [ 202.918164][ T10] usb 42-1: SetAddress Request (22) to port 0 [ 202.920217][ T10] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 202.970569][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 203.173470][ T8596] vhci_hcd: connection reset by peer [ 203.176489][ T63] vhci_hcd vhci_hcd.2: stop threads [ 203.180044][ T63] vhci_hcd vhci_hcd.2: release socket [ 203.182570][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 203.767766][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 203.917952][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 203.925287][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 203.930694][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.938146][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.940780][ T24] usb 6-1: Product: syz [ 203.942301][ T24] usb 6-1: Manufacturer: syz [ 203.943807][ T24] usb 6-1: SerialNumber: syz [ 203.957303][ T24] usb 6-1: config 0 descriptor?? [ 203.963052][ T8609] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 203.966807][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 203.972609][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 203.986174][ T8620] openvswitch: netlink: Missing key (keys=40, expected=100) [ 204.419058][ T8622] overlayfs: failed to resolve './file2': -2 [ 204.419501][ T8625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.044611][ T8641] openvswitch: netlink: Missing key (keys=40, expected=100) [ 205.246983][ T8643] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 205.249889][ T8643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.602'. [ 206.170135][ T8657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 206.172286][ T8657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.175050][ T8657] vhci_hcd vhci_hcd.0: Device attached [ 206.457845][ T24] usb 44-1: SetAddress Request (14) to port 0 [ 206.459917][ T24] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 206.628053][ T6061] usb 6-1: USB disconnect, device number 9 [ 206.649494][ T8661] /dev/sr0: Can't open blockdev [ 206.850626][ T8658] vhci_hcd: connection reset by peer [ 206.852717][ T4874] vhci_hcd vhci_hcd.3: stop threads [ 206.854602][ T4874] vhci_hcd vhci_hcd.3: release socket [ 206.856387][ T4874] vhci_hcd vhci_hcd.3: disconnect device [ 207.519570][ T8575] usblp0:failed reading printer status (-110) [ 207.530204][ T8668] FAULT_INJECTION: forcing a failure. [ 207.530204][ T8668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.535906][ T8668] CPU: 3 UID: 0 PID: 8668 Comm: syz.3.609 Not tainted syzkaller #0 PREEMPT(full) [ 207.535930][ T8668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.535941][ T8668] Call Trace: [ 207.535948][ T8668] [ 207.535956][ T8668] dump_stack_lvl+0x16c/0x1f0 [ 207.535978][ T8668] should_fail_ex+0x512/0x640 [ 207.536003][ T8668] _copy_from_user+0x2e/0xd0 [ 207.536024][ T8668] kstrtouint_from_user+0xd6/0x1d0 [ 207.536048][ T8668] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 207.536071][ T8668] ? __lock_acquire+0x436/0x2890 [ 207.536101][ T8668] proc_fail_nth_write+0x83/0x220 [ 207.536119][ T8668] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.536143][ T8668] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.536159][ T8668] vfs_write+0x2a0/0x11d0 [ 207.536185][ T8668] ? __pfx___mutex_lock+0x10/0x10 [ 207.536205][ T8668] ? __pfx_vfs_write+0x10/0x10 [ 207.536242][ T8668] ? find_held_lock+0x2b/0x80 [ 207.536270][ T8668] ? __fget_files+0x20e/0x3c0 [ 207.536302][ T8668] ksys_write+0x12a/0x250 [ 207.536325][ T8668] ? __pfx_ksys_write+0x10/0x10 [ 207.536356][ T8668] __do_fast_syscall_32+0xe8/0x680 [ 207.536377][ T8668] do_fast_syscall_32+0x32/0x80 [ 207.536395][ T8668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.536423][ T8668] RIP: 0023:0xf7f84579 [ 207.536438][ T8668] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 207.536455][ T8668] RSP: 002b:00000000f5476590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 207.536471][ T8668] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5476620 [ 207.536482][ T8668] RDX: 0000000000000001 RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 207.536492][ T8668] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 207.536501][ T8668] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 207.536510][ T8668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.536536][ T8668] [ 207.549489][ T6411] usb 5-1: USB disconnect, device number 9 [ 207.707957][ T6411] usblp0: removed [ 208.813380][ T10] usb 42-1: device descriptor read/8, error -110 [ 208.827498][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.612'. [ 209.120300][ T8671] overlayfs: failed to resolve './file2': -2 [ 209.139118][ T8680] FAULT_INJECTION: forcing a failure. [ 209.139118][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 209.144369][ T8680] CPU: 1 UID: 0 PID: 8680 Comm: syz.0.613 Not tainted syzkaller #0 PREEMPT(full) [ 209.144392][ T8680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.144401][ T8680] Call Trace: [ 209.144407][ T8680] [ 209.144414][ T8680] dump_stack_lvl+0x16c/0x1f0 [ 209.144438][ T8680] should_fail_ex+0x512/0x640 [ 209.144458][ T8680] ? fs_reclaim_acquire+0xae/0x150 [ 209.144484][ T8680] should_failslab+0xc2/0x120 [ 209.144510][ T8680] __kmalloc_noprof+0xeb/0x910 [ 209.144528][ T8680] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 209.144558][ T8680] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 209.144580][ T8680] tomoyo_realpath_from_path+0xc2/0x6e0 [ 209.144610][ T8680] tomoyo_check_open_permission+0x2ab/0x3c0 [ 209.144633][ T8680] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 209.144678][ T8680] ? do_raw_spin_lock+0x12c/0x2b0 [ 209.144707][ T8680] tomoyo_file_open+0x6b/0x90 [ 209.144723][ T8680] security_file_open+0x84/0x1e0 [ 209.144746][ T8680] do_dentry_open+0x597/0x1590 [ 209.144774][ T8680] ? security_inode_permission+0xbf/0x260 [ 209.144797][ T8680] vfs_open+0x82/0x3f0 [ 209.144820][ T8680] path_openat+0x2078/0x3140 [ 209.144852][ T8680] ? __pfx_path_openat+0x10/0x10 [ 209.144882][ T8680] ? __lock_acquire+0x436/0x2890 [ 209.144901][ T8680] do_filp_open+0x20b/0x470 [ 209.144926][ T8680] ? __pfx_do_filp_open+0x10/0x10 [ 209.144984][ T8680] ? _raw_spin_unlock+0x28/0x50 [ 209.145008][ T8680] ? alloc_fd+0x471/0x7d0 [ 209.145038][ T8680] do_sys_openat2+0x121/0x290 [ 209.145058][ T8680] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.145081][ T8680] ? __fget_files+0x20e/0x3c0 [ 209.145128][ T8680] __ia32_compat_sys_openat+0x16d/0x210 [ 209.145156][ T8680] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 209.145173][ T8680] ? ksys_write+0x1ac/0x250 [ 209.145199][ T8680] ? do_user_addr_fault+0x843/0x1370 [ 209.145232][ T8680] __do_fast_syscall_32+0xe8/0x680 [ 209.145253][ T8680] do_fast_syscall_32+0x32/0x80 [ 209.145270][ T8680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.145290][ T8680] RIP: 0023:0xf705d579 [ 209.145304][ T8680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 209.145319][ T8680] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 209.145336][ T8680] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001a80 [ 209.145348][ T8680] RDX: 0000000000103400 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.145359][ T8680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.145367][ T8680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 209.145375][ T8680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.145418][ T8680] [ 209.145544][ T8680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.198389][ T10] usb usb42-port1: attempt power cycle [ 209.256406][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 209.304278][ T8685] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 209.888991][ T10] usb usb42-port1: unable to enumerate USB device [ 210.066341][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 210.210928][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 210.462707][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 211.517868][ T24] usb 44-1: device descriptor read/8, error -110 [ 211.909727][ T24] usb usb44-port1: attempt power cycle [ 212.488502][ T24] usb usb44-port1: unable to enumerate USB device [ 212.590644][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.628'. [ 213.171024][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 213.238108][ T8751] Invalid logical block size (1536) [ 213.773167][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 214.032062][ T8762] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.035501][ T8762] overlayfs: failed to set xattr on upper [ 214.037927][ T8762] overlayfs: ...falling back to redirect_dir=nofollow. [ 214.040411][ T8762] overlayfs: ...falling back to index=off. [ 214.042900][ T8762] overlayfs: ...falling back to uuid=null. [ 215.187253][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 215.191574][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 215.335366][ T8781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 215.516458][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 215.613268][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 215.758719][ T8785] /dev/sr0: Can't open blockdev [ 217.000494][ T40] audit: type=1326 audit(1768982075.946:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.3.648" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84579 code=0x0 [ 217.197856][ T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 217.236221][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 217.337832][ T54] usb 5-1: device descriptor read/64, error -71 [ 217.577888][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.707904][ T54] usb 5-1: device descriptor read/64, error -71 [ 217.818083][ T54] usb usb5-port1: attempt power cycle [ 218.177767][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.198277][ T54] usb 5-1: device descriptor read/8, error -71 [ 218.447836][ T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.468382][ T54] usb 5-1: device descriptor read/8, error -71 [ 218.578078][ T54] usb usb5-port1: unable to enumerate USB device [ 219.724817][ T8837] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 219.727642][ T8837] overlayfs: failed to set xattr on upper [ 219.729857][ T8837] overlayfs: ...falling back to redirect_dir=nofollow. [ 219.732263][ T8837] overlayfs: ...falling back to index=off. [ 219.734200][ T8837] overlayfs: ...falling back to uuid=null. [ 219.956130][ T8844] FAULT_INJECTION: forcing a failure. [ 219.956130][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 219.962664][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.0.659 Not tainted syzkaller #0 PREEMPT(full) [ 219.962688][ T8844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.962699][ T8844] Call Trace: [ 219.962705][ T8844] [ 219.962711][ T8844] dump_stack_lvl+0x16c/0x1f0 [ 219.962754][ T8844] should_fail_ex+0x512/0x640 [ 219.962779][ T8844] ? kmem_cache_alloc_noprof+0x62/0x770 [ 219.962799][ T8844] should_failslab+0xc2/0x120 [ 219.962822][ T8844] kmem_cache_alloc_noprof+0x83/0x770 [ 219.962840][ T8844] ? security_file_alloc+0x34/0x2b0 [ 219.962864][ T8844] ? security_file_alloc+0x34/0x2b0 [ 219.962882][ T8844] security_file_alloc+0x34/0x2b0 [ 219.962906][ T8844] init_file+0x93/0x4c0 [ 219.962924][ T8844] alloc_empty_file_noaccount+0x3d/0xd0 [ 219.962943][ T8844] alloc_file_pseudo_noaccount+0x13a/0x230 [ 219.962962][ T8844] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 219.962984][ T8844] ? iput+0x35/0x40 [ 219.963002][ T8844] bdev_file_open_by_dev+0x143/0x210 [ 219.963026][ T8844] swsusp_check+0x72/0x4a0 [ 219.963052][ T8844] software_resume+0x6f/0x560 [ 219.963072][ T8844] resume_store+0x247/0x490 [ 219.963091][ T8844] ? __pfx_resume_store+0x10/0x10 [ 219.963118][ T8844] ? find_held_lock+0x2b/0x80 [ 219.963142][ T8844] ? __pfx_resume_store+0x10/0x10 [ 219.963161][ T8844] kobj_attr_store+0x58/0x80 [ 219.963179][ T8844] ? __pfx_kobj_attr_store+0x10/0x10 [ 219.963194][ T8844] sysfs_kf_write+0xf2/0x150 [ 219.963213][ T8844] kernfs_fop_write_iter+0x3af/0x570 [ 219.963235][ T8844] ? __pfx_sysfs_kf_write+0x10/0x10 [ 219.963255][ T8844] vfs_write+0x7d3/0x11d0 [ 219.963278][ T8844] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 219.963305][ T8844] ? __pfx_vfs_write+0x10/0x10 [ 219.963332][ T8844] ? find_held_lock+0x2b/0x80 [ 219.963367][ T8844] ksys_write+0x12a/0x250 [ 219.963387][ T8844] ? __pfx_ksys_write+0x10/0x10 [ 219.963409][ T8844] ? do_user_addr_fault+0x843/0x1370 [ 219.963433][ T8844] __do_fast_syscall_32+0xe8/0x680 [ 219.963452][ T8844] do_fast_syscall_32+0x32/0x80 [ 219.963469][ T8844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.963489][ T8844] RIP: 0023:0xf705d579 [ 219.963501][ T8844] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.963518][ T8844] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 219.963535][ T8844] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 219.963547][ T8844] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.963556][ T8844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.963566][ T8844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 219.963576][ T8844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.963603][ T8844] [ 220.009306][ T8845] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 220.073673][ T8845] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 220.103360][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 221.476246][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 221.919644][ T8888] FAULT_INJECTION: forcing a failure. [ 221.919644][ T8888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.924022][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.0.671 Not tainted syzkaller #0 PREEMPT(full) [ 221.924037][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.924044][ T8888] Call Trace: [ 221.924049][ T8888] [ 221.924053][ T8888] dump_stack_lvl+0x16c/0x1f0 [ 221.924067][ T8888] should_fail_ex+0x512/0x640 [ 221.924083][ T8888] _copy_from_user+0x2e/0xd0 [ 221.924096][ T8888] __sys_bpf+0x248/0x4980 [ 221.924109][ T8888] ? __pfx___sys_bpf+0x10/0x10 [ 221.924118][ T8888] ? find_held_lock+0x2b/0x80 [ 221.924135][ T8888] ? find_held_lock+0x2b/0x80 [ 221.924152][ T8888] ? __mutex_unlock_slowpath+0x161/0x790 [ 221.924171][ T8888] ? fput+0x70/0xf0 [ 221.924181][ T8888] ? ksys_write+0x1ac/0x250 [ 221.924196][ T8888] ? __pfx_ksys_write+0x10/0x10 [ 221.924217][ T8888] __ia32_sys_bpf+0x76/0xe0 [ 221.924227][ T8888] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.924237][ T8888] __do_fast_syscall_32+0xe8/0x680 [ 221.924249][ T8888] do_fast_syscall_32+0x32/0x80 [ 221.924259][ T8888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.924273][ T8888] RIP: 0023:0xf705d579 [ 221.924282][ T8888] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.924292][ T8888] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 221.924302][ T8888] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 221.924308][ T8888] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.924314][ T8888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.924319][ T8888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.924325][ T8888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.924338][ T8888] [ 222.395615][ T8891] pim6reg: entered allmulticast mode [ 222.600643][ T8901] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 222.609316][ T8901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.673'. [ 222.716200][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 222.926354][ T40] audit: type=1326 audit(1768982081.536:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8890 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 223.029913][ T40] audit: type=1326 audit(1768982081.796:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8890 comm="syz.0.672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 223.431811][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 223.525965][ T8924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 223.528082][ T8924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.530997][ T8924] vhci_hcd vhci_hcd.0: Device attached [ 223.817857][ T6061] usb 44-1: SetAddress Request (18) to port 0 [ 223.820398][ T6061] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 224.348893][ T8925] vhci_hcd: connection reset by peer [ 224.352082][ T63] vhci_hcd vhci_hcd.3: stop threads [ 224.369261][ T63] vhci_hcd vhci_hcd.3: release socket [ 224.381915][ T63] vhci_hcd vhci_hcd.3: disconnect device [ 224.407055][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 225.247658][ T8948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.318914][ T8948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.686'. [ 226.017874][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 226.156403][ T8957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 226.158498][ T8957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.161117][ T8957] vhci_hcd vhci_hcd.0: Device attached [ 226.164849][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 226.397843][ T10] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 226.484163][ T8958] vhci_hcd: connection reset by peer [ 226.486732][ T6081] vhci_hcd vhci_hcd.1: stop threads [ 226.489299][ T6081] vhci_hcd vhci_hcd.1: release socket [ 226.491738][ T6081] vhci_hcd vhci_hcd.1: disconnect device [ 226.507880][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 226.667913][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 226.678575][ T54] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.682413][ T54] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.685480][ T54] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.689710][ T54] usb 5-1: config 1 interface 0 has no altsetting 0 [ 226.693407][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.696355][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.699072][ T54] usb 5-1: Product: syz [ 226.700421][ T54] usb 5-1: Manufacturer: syz [ 226.701958][ T54] usb 5-1: SerialNumber: syz [ 226.911698][ T54] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 227.215872][ T8961] usblp0:failed reading printer status (-32) [ 227.317447][ T8980] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 227.320039][ T8980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.691'. [ 227.718328][ T6411] usb 5-1: USB disconnect, device number 14 [ 227.721677][ T6411] usblp0: removed [ 227.769280][ T8984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 227.771329][ T8984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.773997][ T8984] vhci_hcd vhci_hcd.0: Device attached [ 228.307924][ T8985] vhci_hcd: connection closed [ 228.333175][ T6223] vhci_hcd vhci_hcd.1: stop threads [ 228.337476][ T6223] vhci_hcd vhci_hcd.1: release socket [ 228.358677][ T6223] vhci_hcd vhci_hcd.1: disconnect device [ 228.379601][ T8990] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 228.385278][ T8990] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 228.389256][ T8990] CPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) [ 228.393308][ T8990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.397672][ T8990] RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 [ 228.399974][ T8990] Code: 89 d5 53 89 f3 c1 e3 10 e8 8c ed 71 f6 0f b7 c5 4c 89 ea 44 8d 78 07 83 c0 04 48 c1 ea 03 09 c3 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 e8 0f cb 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 [ 228.407540][ T8990] RSP: 0018:ffffc900038cf238 EFLAGS: 00010202 [ 228.409953][ T8990] RAX: dffffc0000000000 RBX: 0000000000010008 RCX: ffffc900038cf290 [ 228.413047][ T8990] RDX: 0000000000000000 RSI: ffffffff8b4c7434 RDI: 0000000000000000 [ 228.416147][ T8990] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 228.419218][ T8990] R10: 0000000000001000 R11: 000000000000001e R12: ffffc900038cf290 [ 228.422323][ T8990] R13: 0000000000000000 R14: 0000000000000004 R15: 000000000000000b [ 228.425422][ T8990] FS: 0000000000000000(0000) GS:ffff8880979f6000(0063) knlGS:00000000f544db40 [ 228.429083][ T8990] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 228.431876][ T8990] CR2: 00000000f544cfac CR3: 000000006a9f4000 CR4: 0000000000352ef0 [ 228.435127][ T8990] Call Trace: [ 228.436497][ T8990] [ 228.437691][ T8990] ife_encode_meta_u32+0x153/0x180 [ 228.439695][ T8990] ? __pfx_ife_encode_meta_u32+0x10/0x10 [ 228.442057][ T8990] ? ife_encode+0x199/0x650 [ 228.443963][ T8990] ? __pfx_skbmark_encode+0x10/0x10 [ 228.446128][ T8990] tcf_ife_act+0x1022/0x1de0 [ 228.448065][ T8990] ? __pfx_tcf_ife_act+0x10/0x10 [ 228.450162][ T8990] ? fred_int80_emulation+0x3a0/0x450 [ 228.452344][ T8990] ? __pfx_tcf_ife_act+0x10/0x10 [ 228.454276][ T8990] tcf_action_exec+0x1c0/0xa20 [ 228.456209][ T8990] mall_classify+0x1a0/0x2a0 [ 228.458097][ T8990] ? __pfx_mall_classify+0x10/0x10 [ 228.460166][ T8990] tcf_classify+0x7f2/0x1380 [ 228.462042][ T8990] multiq_enqueue+0xe0/0x510 [ 228.463887][ T8990] ? __pfx_multiq_enqueue+0x10/0x10 [ 228.465951][ T8990] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.468076][ T8990] dev_qdisc_enqueue+0x45/0x250 [ 228.470042][ T8990] __dev_queue_xmit+0x2998/0x46c0 [ 228.472086][ T8990] ? __might_fault+0xe3/0x190 [ 228.474064][ T8990] ? __might_fault+0x13b/0x190 [ 228.475970][ T8990] ? __pfx___dev_queue_xmit+0x10/0x10 [ 228.478097][ T8990] ? _copy_from_iter+0x161/0x16c0 [ 228.480103][ T8990] ? packet_parse_headers+0x79a/0xb10 [ 228.482301][ T8990] ? packet_parse_headers+0x7a6/0xb10 [ 228.484463][ T8990] ? packet_parse_headers+0x21d/0xb10 [ 228.486587][ T8990] ? __pfx_packet_parse_headers+0x10/0x10 [ 228.488834][ T8990] ? skb_copy_datagram_from_iter+0x4f0/0x740 [ 228.491262][ T8990] ? dev_get_by_index+0x17c/0x380 [ 228.493337][ T8990] packet_xmit+0x23e/0x350 [ 228.495167][ T8990] packet_sendmsg+0x26e3/0x54a0 [ 228.497165][ T8990] ? __lock_acquire+0x436/0x2890 [ 228.499187][ T8990] ? aa_sk_perm+0x2f2/0xae0 [ 228.501063][ T8990] ? __pfx_packet_sendmsg+0x10/0x10 [ 228.503179][ T8990] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.505197][ T8990] ? find_held_lock+0x2b/0x80 [ 228.507172][ T8990] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 228.509733][ T8990] ____sys_sendmsg+0xa5d/0xc30 [ 228.511768][ T8990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.514010][ T8990] ? get_compat_msghdr+0x11a/0x170 [ 228.516174][ T8990] ___sys_sendmsg+0x134/0x1d0 [ 228.518176][ T8990] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.520371][ T8990] ? find_held_lock+0x2b/0x80 [ 228.522423][ T8990] __sys_sendmsg+0x16d/0x220 [ 228.524386][ T8990] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.526166][ T8990] ? do_user_addr_fault+0x843/0x1370 [ 228.527827][ T8990] __do_fast_syscall_32+0xe8/0x680 [ 228.529569][ T8990] do_fast_syscall_32+0x32/0x80 [ 228.531234][ T8990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.533243][ T8990] RIP: 0023:0xf705d579 [ 228.534543][ T8990] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.540558][ T8990] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 228.543179][ T8990] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 228.545785][ T8990] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.548684][ T8990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.551639][ T8990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.554552][ T8990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.557118][ T8990] [ 228.558109][ T8990] Modules linked in: [ 228.559432][ T8990] ---[ end trace 0000000000000000 ]--- [ 228.561184][ T8990] RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 [ 228.562976][ T8990] Code: 89 d5 53 89 f3 c1 e3 10 e8 8c ed 71 f6 0f b7 c5 4c 89 ea 44 8d 78 07 83 c0 04 48 c1 ea 03 09 c3 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 e8 0f cb 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 [ 228.569022][ T8990] RSP: 0018:ffffc900038cf238 EFLAGS: 00010202 [ 228.570950][ T8990] RAX: dffffc0000000000 RBX: 0000000000010008 RCX: ffffc900038cf290 [ 228.573452][ T8990] RDX: 0000000000000000 RSI: ffffffff8b4c7434 RDI: 0000000000000000 [ 228.575909][ T8990] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 228.578424][ T8990] R10: 0000000000001000 R11: 000000000000001e R12: ffffc900038cf290 [ 228.580939][ T8990] R13: 0000000000000000 R14: 0000000000000004 R15: 000000000000000b [ 228.583353][ T8990] FS: 0000000000000000(0000) GS:ffff8880979f6000(0063) knlGS:00000000f544db40 [ 228.586064][ T8990] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 228.588207][ T8990] CR2: 00000000f544cfac CR3: 000000006a9f4000 CR4: 0000000000352ef0 [ 228.590682][ T8990] Kernel panic - not syncing: Fatal exception in interrupt [ 228.593620][ T8990] Kernel Offset: disabled [ 228.594952][ T8990] Rebooting in 86400 seconds..