last executing test programs: 13.522168091s ago: executing program 1 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) 12.216539702s ago: executing program 1 (id=1416): socket$inet6_sctp(0xa, 0x801, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 11.95318516s ago: executing program 2 (id=1417): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 8.816509338s ago: executing program 3 (id=1422): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000340)=0x3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000440)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) chdir(0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) 8.814098823s ago: executing program 1 (id=1423): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r2}) sendto$inet6(r4, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000480), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 8.809307661s ago: executing program 0 (id=1424): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.557180142s ago: executing program 2 (id=1425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.309456031s ago: executing program 0 (id=1426): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 7.193291619s ago: executing program 2 (id=1427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.179297033s ago: executing program 3 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) 7.110034502s ago: executing program 1 (id=1429): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c040) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x7, 0x7) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x3fae613b, 0x54c3) syz_emit_ethernet(0x182, &(0x7f0000001900)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080047b801740065000003069078ac141413ac1414bb890f2dac1414bbac14143be0000001830bfeac1414aaac1414bb01008307d70a010102830bf00a01010100000000070bdd64010101ac1414bb94040000940988ee18e1bf4d2c00004e244e23", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="4100a200907801010402080a0000000900000009020e7d854cfe7620496ccf8d14660002047f00fe08f989f30f5844131299c5e9404242699d4f7667ed0bd037e6000000eb8718944920b18586c8bc8e5194a214acdd78994244c12a9260d550a40b23785c040aa13b7295dfc11a8fa167d36b184951e6542953dcc782b935e6efca6a8f125bccf3cca586de457cf3122c2600af4cdfb2604ff1a4e9884fe5f945e1f746935cc07cbc47691a8acb47a917b0d2b6cfb27d321884143f6d7c62391edb24908d35cc419d"], 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0x8c) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @private1, 0x26d8468e}}}, &(0x7f0000000480)=0x84) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_open_dev$amidi(&(0x7f0000000380), 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$cgroup_type(r5, &(0x7f0000000080), 0x2, 0x0) 5.954688302s ago: executing program 3 (id=1430): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="140000001400", 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x9, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0xf801, 0x5, 0x3, 0x1, 'syz0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.9498425s ago: executing program 0 (id=1438): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850800005200000085000000500000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, 0x0, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r8, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 5.949528574s ago: executing program 1 (id=1431): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) getpid() ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 5.949323837s ago: executing program 2 (id=1432): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) 4.537045305s ago: executing program 0 (id=1433): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc4af6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 4.192268983s ago: executing program 1 (id=1434): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ptrace$peekuser(0x3, r5, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 3.266646439s ago: executing program 3 (id=1435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.315374352s ago: executing program 3 (id=1436): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.34392789s ago: executing program 2 (id=1437): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0xa5, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x153, 0x20000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) recvmmsg(r3, &(0x7f0000000b80), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 1.304286052s ago: executing program 3 (id=1439): bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x10d801) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b40)={0x2, 0x2, {0x4, @struct={0x80000001, 0x871}, r2, 0xa, 0x3, 0x3, 0x2, 0x3, 0x8, @usage=0x4, 0x1, 0x2, [0xb, 0xa8, 0x7, 0x1, 0x5fc34efe, 0x7ab]}, {0x8000000, @struct={0x6, 0x7}, 0x0, 0x8000, 0x7, 0x81, 0xffffffffffffffd2, 0x400, 0x1c, @struct={0x820}, 0x2, 0x400, [0x566e, 0x2, 0x7fffffffffffffff, 0x7, 0xa00, 0x7]}, {0xffffffff7fffffff, @usage=0xfffffffffffffff1, 0x0, 0x0, 0x6d, 0x9, 0x6, 0x1, 0x12, @usage=0x3, 0x800, 0x1, [0x6, 0x401, 0x0, 0x2, 0x6, 0x8]}, {0x0, 0x3, 0x188}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r3, &(0x7f00000001c0)=[{{0x77359400}, 0x4, 0x4, 0x9}], 0xfffffffffffffe58) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000000004) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000040)=0x2, 0x4) r4 = getpid() sched_rr_get_interval(r4, &(0x7f0000000180)) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) ioprio_set$pid(0x2, r4, 0x6000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8242, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000080)='7', 0x1) write$char_usb(r8, &(0x7f0000000100)='V^', 0x2) syz_usb_disconnect(r7) 1.167195114s ago: executing program 0 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 221.892284ms ago: executing program 2 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) 0s ago: executing program 0 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) kernel console output (not intermixed with test programs): T8332] ? ip_set_sockfn_get+0x18e/0xd20 [ 245.121030][ T8332] ip_set_sockfn_get+0x18e/0xd20 [ 245.121076][ T8332] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 245.121113][ T8332] ? nf_sockopt_find.isra.0+0x222/0x290 [ 245.121144][ T8332] nf_getsockopt+0x7c/0xe0 [ 245.121167][ T8332] ip_getsockopt+0x192/0x1e0 [ 245.121186][ T8332] ? __pfx_ip_getsockopt+0x10/0x10 [ 245.121202][ T8332] ? __pfx_futex_hash+0x10/0x10 [ 245.121227][ T8332] raw_getsockopt+0x4d/0x1f0 [ 245.121250][ T8332] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 245.121264][ T8332] do_sock_getsockopt+0x50a/0x6e0 [ 245.121277][ T8332] ? __lock_acquire+0x49f/0x1a40 [ 245.121299][ T8332] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.121313][ T8332] ? percpu_counter_add_batch+0xb9/0x230 [ 245.121339][ T8332] ? find_held_lock+0x2b/0x80 [ 245.121358][ T8332] ? __fget_files+0x21f/0x3d0 [ 245.121384][ T8332] __sys_getsockopt+0x133/0x1d0 [ 245.121405][ T8332] ? __ia32_sys_getsockopt+0xbc/0x160 [ 245.121423][ T8332] __ia32_sys_getsockopt+0xbc/0x160 [ 245.121440][ T8332] ? __do_fast_syscall_32+0x98/0x970 [ 245.121465][ T8332] ? lockdep_hardirqs_on+0x78/0x100 [ 245.121481][ T8332] __do_fast_syscall_32+0xe7/0x970 [ 245.121500][ T8332] do_fast_syscall_32+0x32/0x70 [ 245.121516][ T8332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.121531][ T8332] RIP: 0023:0xf7f54fec [ 245.121549][ T8332] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 245.121554][ T8332] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 245.121565][ T8332] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 245.121572][ T8332] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 245.121579][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.121586][ T8332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.121597][ T8332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.121618][ T8332] [ 245.121801][ T8332] Mem-Info: [ 245.310980][ T8332] active_anon:9378 inactive_anon:80 isolated_anon:0 [ 245.310980][ T8332] active_file:1957 inactive_file:50172 isolated_file:0 [ 245.310980][ T8332] unevictable:1768 dirty:2781 writeback:0 [ 245.310980][ T8332] slab_reclaimable:7372 slab_unreclaimable:57118 [ 245.310980][ T8332] mapped:28129 shmem:5626 pagetables:1108 [ 245.310980][ T8332] sec_pagetables:303 bounce:0 [ 245.310980][ T8332] kernel_misc_reclaimable:0 [ 245.310980][ T8332] free:30906 free_pcp:12637 free_cma:0 [ 245.330537][ T8332] Node 0 active_anon:24kB inactive_anon:36kB active_file:0kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:224kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8660kB pagetables:1384kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 245.344332][ T8332] Node 1 active_anon:37488kB inactive_anon:284kB active_file:7828kB inactive_file:200452kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:112488kB dirty:10900kB writeback:0kB shmem:20968kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:5208kB pagetables:3048kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 245.358938][ T8332] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:404kB local_pcp:44kB free_cma:0kB [ 245.395135][ T8332] lowmem_reserve[]: 0 280 280 280 280 [ 245.398144][ T8332] Node 0 DMA32 free:15816kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:36kB active_file:0kB inactive_file:236kB unevictable:1536kB writepending:224kB zspages:12kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:10868kB local_pcp:3712kB free_cma:0kB [ 245.414786][ T8332] lowmem_reserve[]: 0 0 0 0 0 [ 245.417223][ T8332] Node 1 DMA32 free:105740kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37540kB inactive_anon:284kB active_file:7828kB inactive_file:200452kB unevictable:5536kB writepending:10900kB zspages:1804kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:39028kB local_pcp:14736kB free_cma:0kB [ 245.431560][ T8332] lowmem_reserve[]: 0 0 0 0 0 [ 245.485571][ T8332] Node 0 DMA: 47*4kB (U) 9*8kB (UM) 3*16kB (U) 1*32kB (U) 3*64kB (UM) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2068kB [ 245.491873][ T8332] Node 0 DMA32: 254*4kB (UME) 142*8kB (UME) 60*16kB (UME) 81*32kB (UME) 40*64kB (UME) 15*128kB (UME) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 15816kB [ 245.501273][ T8332] Node 1 DMA32: 39*4kB (UE) 239*8kB (UME) 547*16kB (UM) 121*32kB (UME) 155*64kB (UME) 61*128kB (UME) 44*256kB (UME) 31*512kB (UME) 27*1024kB (UME) 7*2048kB (UM) 1*4096kB (U) = 105636kB [ 245.511019][ T8332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.515968][ T8332] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 245.520004][ T8332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.524906][ T8332] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 245.528987][ T8332] 55233 total pagecache pages [ 245.531021][ T8332] 311 pages in swap cache [ 245.532994][ T8332] Free swap = 121664kB [ 245.536315][ T8332] Total swap = 124996kB [ 245.538012][ T8332] 524155 pages RAM [ 245.539392][ T8332] 0 pages HighMem/MovableOnly [ 245.540949][ T8332] 211535 pages reserved [ 245.542605][ T8332] 0 pages cma reserved [ 246.540381][ T5757] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 246.544282][ T5757] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 247.633348][ T8364] lo: entered allmulticast mode [ 248.706636][ T8363] lo: left allmulticast mode [ 249.573703][ T5891] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 249.724544][ T5891] usb 7-1: Using ep0 maxpacket: 32 [ 249.728126][ T5891] usb 7-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.734231][ T5891] usb 7-1: config 1 interface 0 has no altsetting 0 [ 249.744786][ T5891] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 249.752212][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.759836][ T5891] usb 7-1: Manufacturer: 䓳嫈ížî²…㨭톰喯鬜ᶂ를ﭠ簥í’ᄷሚë馛둜ê­ë¶³æŠ±ç—»é¼›äžŒà½í‚±ë°å·¸í”šè‚›ã©šà …è¹å²šâªé‹Ÿã¼•ã¨£ë³§â˜¿çŸ‡è­•îŸ‡äŽ±ã±ŸÊ¾ä½½é»†ä‚ä­§è‰Œå´ºã¾ºîº˜ã·¨æ¸‹á˜€ã©³à¶‚ä‘³ã—’êž­á‰Ÿî¡½ë³ [ 249.777944][ T5891] usb 7-1: SerialNumber: à ¬ [ 250.217634][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 250.222400][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 250.384716][ T5891] usbhid 7-1:1.0: can't add hid device: -71 [ 250.386772][ T5891] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 250.400375][ T5891] usb 7-1: USB disconnect, device number 10 [ 250.465122][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 250.468368][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 250.944894][ T8392] gadgetfs: bound to dummy_udc driver [ 251.193287][ T40] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 251.345145][ T40] usb 7-1: config 2 has an invalid interface number: 43 but max is 0 [ 251.348421][ T40] usb 7-1: config 2 has no interface number 0 [ 251.350901][ T40] usb 7-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 251.355223][ T40] usb 7-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 251.359331][ T40] usb 7-1: config 2 interface 43 has no altsetting 0 [ 251.365478][ T40] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 251.369276][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.372537][ T40] usb 7-1: Product: syz [ 251.374771][ T40] usb 7-1: Manufacturer: syz [ 251.376782][ T40] usb 7-1: SerialNumber: syz [ 251.386801][ T8392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.390357][ T8392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.556081][ T40] ums-usbat 7-1:2.43: USB Mass Storage device detected [ 252.562761][ T40] ums-usbat 7-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 252.627588][ T40] ums-usbat 7-1:2.43: probe with driver ums-usbat failed with error -5 [ 252.636343][ T40] usb 7-1: USB disconnect, device number 11 [ 253.184692][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 253.188811][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 253.994274][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.997911][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.054363][ T8412] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.281167][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 254.287259][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 254.292964][ T8419] netlink: 'syz.0.619': attribute type 13 has an invalid length. [ 254.296817][ T8419] netlink: 'syz.0.619': attribute type 14 has an invalid length. [ 254.320995][ T8421] gfs2: error -5 reading superblock [ 254.432666][ T8425] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 254.439618][ T8425] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 254.476535][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 254.481908][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 254.983923][ T40] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 255.144919][ T40] usb 7-1: config 0 has no interfaces? [ 255.146823][ T40] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 255.149953][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.155577][ T40] usb 7-1: config 0 descriptor?? [ 255.536243][ T5829] usb 7-1: USB disconnect, device number 12 [ 255.989170][ T8451] IPv4: Oversized IP packet from 127.202.26.0 [ 256.060372][ T8453] [U]  [ 256.885483][ T8462] netlink: 'syz.1.623': attribute type 63 has an invalid length. [ 257.635713][ T8467] __nla_validate_parse: 2 callbacks suppressed [ 257.635731][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 257.640879][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 257.771474][ T8465] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 257.915629][ T5748] Bluetooth: hci4: command 0xfc11 tx timeout [ 257.915962][ T5757] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 258.236198][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 258.239048][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 258.352565][ T8481] netlink: 'syz.2.627': attribute type 21 has an invalid length. [ 258.358150][ T8481] netlink: 128 bytes leftover after parsing attributes in process `syz.2.627'. [ 258.362477][ T8481] netlink: 'syz.2.627': attribute type 4 has an invalid length. [ 258.366169][ T8481] netlink: 'syz.2.627': attribute type 3 has an invalid length. [ 258.369685][ T8481] netlink: 3 bytes leftover after parsing attributes in process `syz.2.627'. [ 258.720353][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 258.723442][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 258.760512][ T5757] Bluetooth: hci0: unexpected subevent 0x18 length: 30 > 19 [ 258.765998][ T5757] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 259.397532][ T8502] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 259.399764][ T8502] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 260.718894][ T8516] tmpfs: Unknown parameter 'nr_blhcks' [ 261.567323][ T8522] binder: 8521:8522 ioctl c00c6211 0 returned -14 [ 264.458598][ T8549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.648929][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 264.652544][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 264.684368][ T8549] md: could not open device unknown-block(1,0). [ 264.745341][ T8551] md: pers->run() failed ... [ 264.837418][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 264.845792][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 264.949184][ T8567] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 264.953710][ T8566] read descriptors [ 264.977750][ T5742] ffs_data_put(): freeing [ 265.817747][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 265.820837][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 266.117578][ T8583] vlan2: entered allmulticast mode [ 266.120794][ T8583] bond0: entered allmulticast mode [ 266.122580][ T8583] bond_slave_0: entered allmulticast mode [ 266.125510][ T8583] bond_slave_1: entered allmulticast mode [ 266.757806][ T8590] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 268.143915][ T40] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 268.305437][ T40] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 268.309249][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.328583][ T8610] IPv4: Oversized IP packet from 127.202.26.0 [ 268.525909][ T40] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 268.528128][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 268.531036][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 270.314614][ T5748] Bluetooth: hci4: command 0xfc11 tx timeout [ 270.315302][ T5757] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 271.894353][ T8635] overlay: Unknown parameter '/' [ 271.896997][ T8635] netlink: zone id is out of range [ 271.898664][ T8635] netlink: zone id is out of range [ 271.900405][ T8635] netlink: zone id is out of range [ 271.909044][ T8635] input: syz0 as /devices/virtual/input/input14 [ 272.773310][ T8636] vlan3: entered allmulticast mode [ 272.784305][ T8636] bond0: entered allmulticast mode [ 272.797944][ T8636] bond_slave_0: entered allmulticast mode [ 272.816892][ T8636] bond_slave_1: entered allmulticast mode [ 272.956261][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 272.963595][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 273.737720][ T8655] binder: 8654:8655 ioctl c00c6211 0 returned -14 [ 274.005869][ T5891] usb 6-1: USB disconnect, device number 19 [ 276.293491][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 276.466832][ T8685] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 276.697649][ T8689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.895209][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 276.898913][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 276.913301][ T8689] md: could not open device unknown-block(1,0). [ 277.041209][ T8690] md: pers->run() failed ... [ 277.619371][ T8705] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.713160][ T5829] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 277.912756][ T5829] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 277.922929][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.314530][ T5829] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 279.440220][ T8724] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 279.468099][ T8724] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 279.471533][ T8724] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 279.476032][ T8724] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 279.486316][ T8724] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 279.582211][ T8724] pci 0000:00:01.0: Adding to iommu group 1 [ 279.699995][ T8724] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 279.702975][ T8724] pci 0000:00:01.0: vgaarb: bridge control possible [ 279.705738][ T8724] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 279.804300][ T8724] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 279.807396][ T8724] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 279.811407][ T8724] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 279.881483][ T8724] [drm] Found bochs VGA, ID 0xb0c5. [ 279.884002][ T8724] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 279.927723][ T8724] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 280.257197][ T8724] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 281.612229][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 281.615777][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 282.066500][ T8754] kAFS: unable to lookup cell 'ÿ' [ 282.184660][ T8755] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 282.908249][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 282.911707][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 283.083080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 283.932490][ T5829] usb 7-1: USB disconnect, device number 13 [ 284.539777][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 284.539797][ T43] audit: type=1800 audit(1786045883.322:818): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="zoned" dev="configfs" ino=23179 res=0 errno=0 [ 284.562041][ T43] audit: type=1800 audit(1786045883.342:819): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="memory_backed" dev="configfs" ino=23181 res=0 errno=0 [ 284.579532][ T43] audit: type=1800 audit(1786045883.362:820): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="zone_nr_conv" dev="configfs" ino=23182 res=0 errno=0 [ 284.587729][ T43] audit: type=1800 audit(1786045883.362:821): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="power" dev="configfs" ino=23183 res=0 errno=0 [ 286.247252][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 286.254637][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 287.369147][ T8813] kAFS: unable to lookup cell 'ÿ' [ 287.602311][ T8813] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 287.774199][ T8819] macvlan3: entered allmulticast mode [ 287.789605][ T8819] batman_adv: batadv0: Adding interface: macvlan3 [ 287.791809][ T8819] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.800279][ T8819] batman_adv: batadv0: Interface activated: macvlan3 [ 289.083364][ T8831] udc dummy_udc.0: failed to start g1: -19 [ 289.199596][ T8831] UDC core: g1: couldn't find an available UDC or it's busy [ 289.839854][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 289.851718][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 290.978758][ T8861] kAFS: unable to lookup cell 'ÿ' [ 291.174374][ T8862] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 291.327937][ T43] audit: type=1800 audit(1786045890.112:822): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.730" name="zoned" dev="configfs" ino=22247 res=0 errno=0 [ 291.346747][ T43] audit: type=1800 audit(1786045890.122:823): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.730" name="memory_backed" dev="configfs" ino=22248 res=0 errno=0 [ 291.354862][ T8865] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 291.364652][ T43] audit: type=1800 audit(1786045890.132:824): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.730" name="zone_nr_conv" dev="configfs" ino=22249 res=0 errno=0 [ 291.382050][ T43] audit: type=1800 audit(1786045890.132:825): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.730" name="power" dev="configfs" ino=22250 res=0 errno=0 [ 291.887021][ T8877] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 291.889350][ T8877] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 292.019006][ T8879] udc dummy_udc.0: failed to start g1: -19 [ 292.026439][ T8879] UDC core: g1: couldn't find an available UDC or it's busy [ 292.279893][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 292.286752][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 293.627250][ T8909] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 294.070922][ T8916] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 294.084220][ T8916] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 294.094295][ T8916] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 294.102656][ T8916] 8021q: adding VLAN 0 to HW filter on device eth0 [ 294.113149][ T8916] 8021q: adding VLAN 0 to HW filter on device eth1 [ 294.125934][ T8916] 8021q: adding VLAN 0 to HW filter on device eth2 [ 294.139240][ T8916] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.147568][ T8916] vlan2: left allmulticast mode [ 294.149734][ T8916] bond0: left allmulticast mode [ 294.151831][ T8916] bond_slave_0: left allmulticast mode [ 294.154721][ T8916] bond_slave_1: left allmulticast mode [ 294.163550][ T5820] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.167077][ T5820] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.169665][ T5820] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.172249][ T5820] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.366807][ T8918] read descriptors [ 294.388652][ T5750] ffs_data_put(): freeing [ 294.572365][ T8922] lo: entered allmulticast mode [ 294.596816][ T43] audit: type=1800 audit(1786045893.382:826): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.745" name="zoned" dev="configfs" ino=23294 res=0 errno=0 [ 294.611610][ T43] audit: type=1800 audit(1786045893.392:827): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.745" name="memory_backed" dev="configfs" ino=23295 res=0 errno=0 [ 294.618412][ T43] audit: type=1800 audit(1786045893.392:828): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.745" name="zone_nr_conv" dev="configfs" ino=23296 res=0 errno=0 [ 294.621276][ T8924] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 294.626440][ T43] audit: type=1800 audit(1786045893.392:829): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.745" name="power" dev="configfs" ino=23297 res=0 errno=0 [ 294.704970][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 294.711488][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 294.731520][ T8922] lo: left allmulticast mode [ 294.848636][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 294.851328][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 294.862379][ T8934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.073387][ T8934] md: could not open device unknown-block(1,0). [ 295.124340][ T8934] md: pers->run() failed ... [ 295.377395][ T8942] udc dummy_udc.0: failed to start g1: -19 [ 295.385198][ T8942] UDC core: g1: couldn't find an available UDC or it's busy [ 295.446064][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 295.448950][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 295.501833][ T8949] read descriptors [ 295.520594][ T5743] ffs_data_put(): freeing [ 295.569565][ T8944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 295.614263][ T8956] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 295.618887][ T8956] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 295.778421][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 295.784109][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 296.678879][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 296.682468][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 296.690975][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 296.696165][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 297.547400][ T8984] read descriptors [ 297.574826][ T5743] ffs_data_put(): freeing [ 297.665838][ T8988] kAFS: unable to lookup cell 'ÿ' [ 297.785925][ T9000] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 298.293492][ T8994] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 299.274460][ T9021] read descriptors [ 299.321977][ T5750] ffs_data_put(): freeing [ 299.879437][ T9044] kAFS: unable to lookup cell 'ÿ' [ 299.962439][ T9045] netlink: 'syz.0.787': attribute type 10 has an invalid length. [ 300.706986][ T43] audit: type=1800 audit(1786045899.492:830): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="zoned" dev="configfs" ino=24214 res=0 errno=0 [ 300.720700][ T43] audit: type=1800 audit(1786045899.502:831): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="memory_backed" dev="configfs" ino=24215 res=0 errno=0 [ 300.733670][ T43] audit: type=1800 audit(1786045899.502:832): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="zone_nr_conv" dev="configfs" ino=24216 res=0 errno=0 [ 300.742137][ T9054] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 300.747569][ T43] audit: type=1800 audit(1786045899.502:833): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="power" dev="configfs" ino=24217 res=0 errno=0 [ 300.899989][ T9052] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 300.920502][ T9060] __nla_validate_parse: 8 callbacks suppressed [ 300.920573][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 300.936094][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 301.318572][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 301.321373][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 301.909088][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 301.912082][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 302.641627][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 302.644941][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 302.743317][ T9085] ehci-pci 0000:00:1d.7: remove, state 1 [ 302.745951][ T9085] usb usb1: USB disconnect, device number 1 [ 302.750811][ T9085] usb 1-1: USB disconnect, device number 2 [ 302.857361][ T9085] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 302.920976][ T9089] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 303.123585][ T8045] usb 2-1: new full-speed USB device number 3 using uhci_hcd [ 303.305636][ T8045] usb 2-1: not running at top speed; connect to a high speed hub [ 303.330301][ T8045] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 303.336581][ T8045] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 303.341350][ T8045] usb 2-1: Product: QEMU USB Tablet [ 303.345127][ T8045] usb 2-1: Manufacturer: QEMU [ 303.347556][ T8045] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 303.407291][ T8045] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input15 [ 303.504759][ T8045] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 303.537565][ T9086] usb 2-1: USB disconnect, device number 3 [ 303.588079][ T43] audit: type=1800 audit(1786045902.372:834): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.802" name="zoned" dev="configfs" ino=24326 res=0 errno=0 [ 303.633334][ T43] audit: type=1800 audit(1786045902.412:835): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.802" name="memory_backed" dev="configfs" ino=24327 res=0 errno=0 [ 303.651921][ T43] audit: type=1800 audit(1786045902.432:836): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.802" name="zone_nr_conv" dev="configfs" ino=24328 res=0 errno=0 [ 303.692715][ T43] audit: type=1800 audit(1786045902.472:837): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.802" name="power" dev="configfs" ino=24329 res=0 errno=0 [ 303.702305][ T9099] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 303.811946][ T9100] fido_id[9100]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 303.950373][ T9086] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 303.969969][ T9086] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 303.995554][ T9086] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 304.016469][ T9086] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 304.050956][ T9086] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 304.055261][ T9086] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 304.058791][ T9086] usb usb1: Product: EHCI Host Controller [ 304.061337][ T9086] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 304.066256][ T9086] usb usb1: SerialNumber: 0000:00:1d.7 [ 304.288176][ T9086] hub 1-0:1.0: USB hub found [ 304.303320][ T9086] hub 1-0:1.0: 6 ports detected [ 304.504571][ T9086] hub 2-0:1.0: USB hub found [ 304.511555][ T9086] hub 2-0:1.0: 2 ports detected [ 304.621880][ T9086] hub 3-0:1.0: USB hub found [ 304.628936][ T9086] hub 3-0:1.0: 2 ports detected [ 304.723165][ T5532] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 304.971005][ T9086] hub 4-0:1.0: USB hub found [ 304.980007][ T9086] hub 4-0:1.0: 2 ports detected [ 305.422864][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 305.426343][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 305.715354][ T5532] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 306.166574][ T5532] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 306.679056][ T5532] usb 1-1: Product: QEMU USB Tablet [ 306.680921][ T5532] usb 1-1: Manufacturer: QEMU [ 306.990188][ T5532] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 307.050509][ T5532] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input16 [ 307.180503][ T5532] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 307.211030][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 307.218040][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 307.369597][ T43] audit: type=1800 audit(1786045906.152:838): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="zoned" dev="configfs" ino=25651 res=0 errno=0 [ 307.383288][ T43] audit: type=1800 audit(1786045906.162:839): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="memory_backed" dev="configfs" ino=25652 res=0 errno=0 [ 307.392395][ T43] audit: type=1800 audit(1786045906.172:840): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="zone_nr_conv" dev="configfs" ino=24798 res=0 errno=0 [ 307.404706][ T43] audit: type=1800 audit(1786045906.182:841): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="power" dev="configfs" ino=24799 res=0 errno=0 [ 307.416287][ T9137] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 307.463159][ T5532] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 307.615472][ T5532] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 307.619378][ T5532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.849658][ T5532] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 308.174026][ T43] audit: type=1800 audit(1786045906.962:842): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="zoned" dev="configfs" ino=25663 res=0 errno=0 [ 308.185247][ T43] audit: type=1800 audit(1786045906.972:843): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="memory_backed" dev="configfs" ino=25664 res=0 errno=0 [ 308.191885][ T43] audit: type=1800 audit(1786045906.972:844): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="zone_nr_conv" dev="configfs" ino=26636 res=0 errno=0 [ 308.196764][ T9141] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 308.199493][ T43] audit: type=1800 audit(1786045906.972:845): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.823" name="power" dev="configfs" ino=26637 res=0 errno=0 [ 310.571302][ T9163] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.650234][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 311.653687][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 313.244274][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 313.248372][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 313.368474][ T8045] usb 8-1: USB disconnect, device number 9 [ 315.219564][ T9218] ehci-pci 0000:00:1d.7: remove, state 1 [ 315.228941][ T9218] usb usb1: USB disconnect, device number 1 [ 315.231617][ T9218] usb 1-1: USB disconnect, device number 2 [ 315.333634][ T9221] syzkaller0: entered promiscuous mode [ 315.336396][ T9221] syzkaller0: entered allmulticast mode [ 315.516899][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 315.519825][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 315.562533][ T9218] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 315.788692][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 315.791846][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 315.794678][ T9220] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 315.800242][ T9220] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 315.814417][ T9220] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 315.833335][ T9220] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 315.838838][ T9220] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 315.842821][ T9220] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 315.846628][ T9220] usb usb1: Product: EHCI Host Controller [ 315.848577][ T9220] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 315.850893][ T9220] usb usb1: SerialNumber: 0000:00:1d.7 [ 315.863927][ T9220] hub 1-0:1.0: USB hub found [ 315.865879][ T9220] hub 1-0:1.0: 6 ports detected [ 315.904561][ T9220] hub 2-0:1.0: USB hub found [ 315.909077][ T9220] hub 2-0:1.0: 2 ports detected [ 315.943997][ T9220] hub 3-0:1.0: USB hub found [ 315.947983][ T9220] hub 3-0:1.0: 2 ports detected [ 315.987248][ T9220] hub 4-0:1.0: USB hub found [ 315.989715][ T9220] hub 4-0:1.0: 2 ports detected [ 316.153255][ T8045] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 316.338100][ T8045] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 316.341112][ T8045] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 316.344513][ T8045] usb 1-1: Product: QEMU USB Tablet [ 316.346398][ T8045] usb 1-1: Manufacturer: QEMU [ 316.347980][ T8045] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 316.369339][ T8045] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input17 [ 316.437258][ T8045] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 316.714833][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.726862][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.398158][ T9266] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.438994][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 319.441543][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 319.584101][ T9266] md: could not open device unknown-block(1,0). [ 319.588474][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 319.591948][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 319.628625][ T9266] md: pers->run() failed ... [ 320.368243][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 320.371266][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 320.886916][ T9296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 321.084558][ T9296] md: could not open device unknown-block(1,0). [ 321.155606][ T9296] md: pers->run() failed ... [ 322.377154][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 322.380001][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 323.231662][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 323.243069][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 324.130368][ T9348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.145334][ T9348] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 325.021192][ T9363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 325.246243][ T9363] md: could not open device unknown-block(1,0). [ 325.367529][ T9363] md: pers->run() failed ... [ 325.685633][ T9380] __nla_validate_parse: 2 callbacks suppressed [ 325.685661][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'. [ 325.696153][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'. [ 326.394669][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 326.398702][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 326.594339][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 326.597536][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 326.731258][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 326.740026][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 326.987410][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 326.990715][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 327.415520][ T9409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.701441][ T9413] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.705937][ T9409] md: could not open device unknown-block(1,0). [ 327.882974][ T9409] md: pers->run() failed ... [ 328.896128][ T9444] netlink: 'syz.3.895': attribute type 4 has an invalid length. [ 329.598714][ T9453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.619152][ T9455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.824085][ T9455] md: could not open device unknown-block(1,0). [ 329.857413][ T9455] md: pers->run() failed ... [ 331.143305][ T9472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 331.463567][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 333.249971][ T9511] __nla_validate_parse: 4 callbacks suppressed [ 333.249986][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 333.260256][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 334.088250][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 334.093845][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 334.157332][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 334.160593][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 334.200913][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 334.203980][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 348.877849][ T9551] openvswitch: netlink: Duplicate key (type 6). [ 350.427908][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 350.431891][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 350.506350][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 350.547636][ T9575] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 350.552854][ T9575] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 351.350040][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 351.360489][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 351.799718][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 351.803225][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 352.492313][ T9614] openvswitch: netlink: Duplicate key (type 6). [ 360.784982][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 360.788397][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 360.947854][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 360.952013][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 361.395744][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 361.400697][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 361.848521][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 361.855906][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 364.624950][ T9685] openvswitch: netlink: Duplicate key (type 6). [ 365.607188][ T9701] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 366.647762][ T9712] batadv_slave_1: entered promiscuous mode [ 366.649880][ T9712] macvlan2: entered allmulticast mode [ 366.651600][ T9712] batadv_slave_1: entered allmulticast mode [ 366.662018][ T9712] batman_adv: batadv0: Adding interface: macvlan2 [ 366.664118][ T9712] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.674439][ T9712] batman_adv: batadv0: Interface activated: macvlan2 [ 367.638199][ T9713] syz.2.946 (9713): drop_caches: 2 [ 367.685284][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 367.689422][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 368.024205][ T9729] program syz.1.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.151293][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 368.156301][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 368.203222][ T41] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 368.584184][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 368.591320][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 368.605300][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.615516][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.623138][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.634382][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.639340][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.654227][ T9729] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 368.654310][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 368.699816][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 368.702425][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 368.705293][ T9729] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 368.710305][ T9729] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 368.716222][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 368.719652][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 368.724446][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 368.726758][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 368.730571][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.736086][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.739753][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.743592][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.747151][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.751152][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 368.754699][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 368.757007][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 368.760470][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.764899][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.769607][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.774164][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.774731][ T9729] pci 0000:00:01.0: Adding to iommu group 1 [ 368.778992][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.786367][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 368.793269][ T41] usb 7-1: string descriptor 0 read error: -22 [ 368.795958][ T41] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 368.799988][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.809558][ T9729] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 368.811810][ T9729] pci 0000:00:01.0: vgaarb: bridge control possible [ 368.813933][ T9729] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 368.822906][ T41] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 368.830438][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 368.834937][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 368.851737][ T9729] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 368.972169][ T9729] [drm] Found bochs VGA, ID 0xb0c5. [ 368.973904][ T9729] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 369.082112][ T9729] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 369.338080][ T9729] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 369.781639][ T40] usb 7-1: USB disconnect, device number 14 [ 375.880405][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 375.883266][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 378.161957][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.164748][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.719079][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 379.721961][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 380.830751][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 380.833952][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 381.701092][ T9866] dvmrp8: entered allmulticast mode [ 386.197315][ T9896] syz.3.998 (9896): drop_caches: 2 [ 386.215393][ T9897] openvswitch: netlink: Duplicate key (type 6). [ 386.513681][ T10] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 386.666729][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 386.670241][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 386.679138][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.686613][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.691788][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.698385][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.705279][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 386.711043][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 386.718920][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 386.722396][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 386.729468][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.735340][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.740701][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.746681][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.751959][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 386.767463][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 386.773891][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 386.776801][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 386.781692][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.787531][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.792515][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.797456][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.801117][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 386.808645][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 386.820292][ T10] usb 8-1: string descriptor 0 read error: -22 [ 386.822399][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 386.825961][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.838300][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 387.106401][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 387.109342][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 387.391814][ T41] usb 8-1: USB disconnect, device number 10 [ 387.932347][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 387.935868][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 388.775473][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 388.778461][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 389.854169][ T5828] IPVS: starting estimator thread 0... [ 389.964110][ T9936] IPVS: using max 43 ests per chain, 103200 per kthread [ 391.679118][ T9942] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 392.817347][ T9955] syz.0.1013 (9955): drop_caches: 2 [ 392.853782][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 393.245141][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 393.248434][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 393.458633][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 393.462286][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 393.704037][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 393.707780][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 394.843106][ T9982] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 394.845726][ T9982] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1025'. [ 396.278615][T10005] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 396.888467][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 396.895308][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 397.819644][T10009] xt_connbytes: Forcing CT accounting to be enabled [ 397.822677][T10009] Cannot find del_set index 0 as target [ 397.992846][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 409.313594][T10060] syz.2.1030 (10060): drop_caches: 2 [ 409.653341][ T41] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 409.819748][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 409.823363][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 409.828429][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.834982][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.840172][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.844970][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.849838][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 409.856412][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 409.862201][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 409.865965][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 409.870131][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.874521][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.878386][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.884860][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.889692][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 409.897571][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 409.903164][ T41] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 409.906279][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 409.910841][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.916470][ T41] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.921884][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.927389][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.936507][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 409.945874][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 409.955067][ T41] usb 7-1: string descriptor 0 read error: -22 [ 409.961001][ T41] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 409.970482][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.046823][ T41] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 410.385173][ T5828] usb 7-1: USB disconnect, device number 15 [ 412.748731][T10081] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 412.997487][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 413.001576][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 413.844751][T10093] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.947549][T10093] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 414.113170][T10098] xt_connbytes: Forcing CT accounting to be enabled [ 414.116135][T10098] Cannot find del_set index 0 as target [ 414.463172][ T5828] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 414.657414][ T5828] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 414.666783][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.950231][ T5828] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 416.450397][T10116] program syz.0.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.777861][T10116] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 416.892524][T10116] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 416.897902][T10116] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 416.902653][T10116] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 416.913221][T10116] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 416.954695][T10116] pci 0000:00:01.0: Adding to iommu group 1 [ 417.025252][T10116] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 417.027451][T10116] pci 0000:00:01.0: vgaarb: bridge control possible [ 417.029519][T10116] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 417.055233][T10116] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 417.061633][T10116] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 417.076217][T10116] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 417.146111][T10116] [drm] Found bochs VGA, ID 0xb0c5. [ 417.153728][T10116] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 417.183990][T10116] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 417.238245][T10116] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 417.908721][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 417.912950][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 418.914249][T10134] syz.0.1047: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 418.919729][T10134] CPU: 2 UID: 0 PID: 10134 Comm: syz.0.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.919765][T10134] Tainted: [L]=SOFTLOCKUP [ 418.919770][T10134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.919779][T10134] Call Trace: [ 418.919825][T10134] [ 418.919833][T10134] dump_stack_lvl+0x100/0x190 [ 418.919937][T10134] warn_alloc.cold+0x94/0xa8 [ 418.919967][T10134] ? __pfx_warn_alloc+0x10/0x10 [ 418.920002][T10134] ? find_held_lock+0x2b/0x80 [ 418.920032][T10134] ? mark_held_locks+0x40/0x70 [ 418.920056][T10134] __vmalloc_node_range_noprof+0x136c/0x1630 [ 418.920078][T10134] ? __schedule+0x126e/0x6730 [ 418.920143][T10134] ? ip_set_sockfn_get+0x18e/0xd20 [ 418.920186][T10134] ? __lock_acquire+0x49f/0x1a40 [ 418.920207][T10134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 418.920230][T10134] ? rcu_is_watching+0x12/0xc0 [ 418.920253][T10134] ? ip_set_sockfn_get+0x18e/0xd20 [ 418.920291][T10134] __vmalloc_node_noprof+0xad/0xf0 [ 418.920313][T10134] ? ip_set_sockfn_get+0x18e/0xd20 [ 418.920334][T10134] ip_set_sockfn_get+0x18e/0xd20 [ 418.920356][T10134] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 418.920378][T10134] ? nf_sockopt_find.isra.0+0x222/0x290 [ 418.920398][T10134] nf_getsockopt+0x7c/0xe0 [ 418.920416][T10134] ip_getsockopt+0x192/0x1e0 [ 418.920435][T10134] ? __pfx_ip_getsockopt+0x10/0x10 [ 418.920451][T10134] ? __pfx_futex_hash+0x10/0x10 [ 418.920479][T10134] raw_getsockopt+0x4d/0x1f0 [ 418.920500][T10134] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 418.920520][T10134] do_sock_getsockopt+0x50a/0x6e0 [ 418.920534][T10134] ? __lock_acquire+0x49f/0x1a40 [ 418.920555][T10134] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 418.920567][T10134] ? percpu_counter_add_batch+0xb9/0x230 [ 418.920629][T10134] ? find_held_lock+0x2b/0x80 [ 418.920648][T10134] ? __fget_files+0x21f/0x3d0 [ 418.920672][T10134] __sys_getsockopt+0x133/0x1d0 [ 418.920695][T10134] ? __ia32_sys_getsockopt+0xbc/0x160 [ 418.920711][T10134] __ia32_sys_getsockopt+0xbc/0x160 [ 418.920726][T10134] ? __do_fast_syscall_32+0x98/0x970 [ 418.920742][T10134] ? lockdep_hardirqs_on+0x78/0x100 [ 418.920759][T10134] __do_fast_syscall_32+0xe7/0x970 [ 418.920779][T10134] do_fast_syscall_32+0x32/0x70 [ 418.920799][T10134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.920814][T10134] RIP: 0023:0xf7fb2fec [ 418.920830][T10134] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 418.920855][T10134] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 418.920868][T10134] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 418.920877][T10134] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 418.920884][T10134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.920892][T10134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 418.920900][T10134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.920915][T10134] [ 418.920938][T10134] Mem-Info: [ 419.049030][T10134] active_anon:5703 inactive_anon:152 isolated_anon:0 [ 419.049030][T10134] active_file:1957 inactive_file:33303 isolated_file:0 [ 419.049030][T10134] unevictable:1768 dirty:645 writeback:0 [ 419.049030][T10134] slab_reclaimable:6479 slab_unreclaimable:66113 [ 419.049030][T10134] mapped:24396 shmem:2269 pagetables:1029 [ 419.049030][T10134] sec_pagetables:306 bounce:0 [ 419.049030][T10134] kernel_misc_reclaimable:0 [ 419.049030][T10134] free:39029 free_pcp:12877 free_cma:0 [ 419.066732][T10134] Node 0 active_anon:32kB inactive_anon:12kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8296kB pagetables:1304kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 419.079811][T10134] Node 1 active_anon:22780kB inactive_anon:596kB active_file:7828kB inactive_file:133204kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:97556kB dirty:2580kB writeback:0kB shmem:7540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5172kB pagetables:2812kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 419.102434][T10134] Node 0 DMA free:2044kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:572kB local_pcp:140kB free_cma:0kB [ 419.114383][T10134] lowmem_reserve[]: 0 280 280 280 280 [ 419.117774][T10134] Node 0 DMA32 free:15068kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:12kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:12584kB local_pcp:3876kB free_cma:0kB [ 419.130033][T10134] lowmem_reserve[]: 0 0 0 0 0 [ 419.135467][T10134] Node 1 DMA32 free:139004kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22780kB inactive_anon:596kB active_file:7828kB inactive_file:133204kB unevictable:5536kB writepending:2580kB zspages:1632kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38128kB local_pcp:8608kB free_cma:0kB [ 419.150688][T10134] lowmem_reserve[]: 0 0 0 0 0 [ 419.175442][T10134] Node 0 DMA: 69*4kB (U) 11*8kB (UM) 3*16kB (U) 5*32kB (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2044kB [ 419.181829][T10134] Node 0 DMA32: 39*4kB (UME) 68*8kB (ME) 40*16kB (ME) 95*32kB (UME) 45*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 0*2048kB 0*4096kB = 15068kB [ 419.189417][T10134] Node 1 DMA32: 799*4kB (ME) 724*8kB (UME) 286*16kB (UME) 392*32kB (UME) 237*64kB (UME) 112*128kB (UME) 90*256kB (UME) 44*512kB (UME) 21*1024kB (UME) 4*2048kB (M) 2*4096kB (M) = 139068kB [ 419.196142][T10134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.199368][T10134] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 419.202514][T10134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.206080][T10134] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 419.209275][T10134] 38003 total pagecache pages [ 419.210929][T10134] 477 pages in swap cache [ 419.212554][T10134] Free swap = 121356kB [ 419.214326][T10134] Total swap = 124996kB [ 419.216208][T10134] 524155 pages RAM [ 419.218104][T10134] 0 pages HighMem/MovableOnly [ 419.219900][T10134] 211535 pages reserved [ 419.221506][T10134] 0 pages cma reserved [ 420.044068][T10148] xt_connbytes: Forcing CT accounting to be enabled [ 420.050554][T10148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.677711][ T5829] usb 8-1: USB disconnect, device number 11 [ 420.980572][T10155] program syz.0.1051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.477190][T10155] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 421.504187][T10155] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 421.507449][T10155] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 421.510926][T10155] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 421.518847][T10155] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 421.579429][T10155] pci 0000:00:01.0: Adding to iommu group 1 [ 421.617226][T10155] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 421.619417][T10155] pci 0000:00:01.0: vgaarb: bridge control possible [ 421.621802][T10155] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 421.636189][T10155] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 421.639191][T10155] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 421.646211][T10155] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 421.695676][T10155] [drm] Found bochs VGA, ID 0xb0c5. [ 421.697504][T10155] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 421.831011][T10155] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 421.970051][T10155] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 425.185624][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 425.190099][T10191] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 425.192669][T10191] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 425.406617][T10194] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 425.408773][T10194] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.419497][T10194] vhci_hcd vhci_hcd.0: Device attached [ 425.513181][ T41] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 425.515653][T10194] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 425.675916][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 425.678792][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.705965][ T5829] usb 42-1: SetAddress Request (2) to port 0 [ 425.715705][ T5829] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 425.888324][ T41] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 426.450144][T10195] vhci_hcd: connection reset by peer [ 426.453455][ T12] vhci_hcd vhci_hcd.2: stop threads [ 426.455132][ T12] vhci_hcd vhci_hcd.2: release socket [ 426.460381][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 427.599542][T10231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 427.710660][T10231] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 427.974931][T10237] UDC core: g1: couldn't find an available UDC or it's busy [ 430.803223][ T5829] usb 42-1: device descriptor read/8, error -110 [ 431.195814][ T5829] usb usb42-port1: attempt power cycle [ 431.361381][ T8045] usb 8-1: USB disconnect, device number 12 [ 431.615743][T10255] program syz.1.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.866064][T10255] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 432.927015][T10255] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 432.929589][T10255] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 432.931819][T10255] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 432.934997][T10255] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 432.995227][T10255] pci 0000:00:01.0: Adding to iommu group 1 [ 433.008103][T10255] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 433.010233][T10255] pci 0000:00:01.0: vgaarb: bridge control possible [ 433.012230][T10255] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 433.050552][T10255] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 433.056452][T10255] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 433.060184][T10255] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 433.073275][T10255] [drm] Found bochs VGA, ID 0xb0c5. [ 433.075510][T10255] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 433.089233][ T5829] usb usb42-port1: unable to enumerate USB device [ 433.106443][T10255] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 433.393653][T10255] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 435.123448][ T40] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 435.311045][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 435.322023][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.613645][ T40] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 439.597189][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.599939][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.145759][T10314] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 441.101910][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 441.106431][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 441.163205][ T5829] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 441.333692][ T5829] usb 8-1: Using ep0 maxpacket: 32 [ 441.345959][ T5829] usb 8-1: config 0 has no interfaces? [ 441.351869][ T5829] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 441.363892][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 441.374363][ T5829] usb 8-1: Product: syz [ 441.379583][ T5829] usb 8-1: Manufacturer: syz [ 441.385037][ T5829] usb 8-1: SerialNumber: syz [ 441.464603][ T5829] usb 8-1: config 0 descriptor?? [ 441.593714][ T10] usb 7-1: USB disconnect, device number 16 [ 443.543845][ T43] audit: type=1800 audit(1786046041.832:846): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1095" name="file0" dev="overlay" ino=1467 res=0 errno=0 [ 444.210765][ T846] usb 8-1: USB disconnect, device number 13 [ 447.310588][T10371] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 448.081355][ T43] audit: type=1800 audit(1786046046.742:847): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1106" name="file0" dev="overlay" ino=1596 res=0 errno=0 [ 448.324348][T10371] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 448.952926][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 448.958505][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 448.997708][T10385] udc dummy_udc.0: failed to start g1: -19 [ 449.015153][T10385] UDC core: g1: couldn't find an available UDC or it's busy [ 449.019303][T10392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 449.105191][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 449.108381][T10392] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 449.110815][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 449.994251][T10402] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 450.141536][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 450.152622][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 451.440388][T10416] syz.3.1105: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 451.446122][T10416] CPU: 3 UID: 0 PID: 10416 Comm: syz.3.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.446168][T10416] Tainted: [L]=SOFTLOCKUP [ 451.446174][T10416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.446187][T10416] Call Trace: [ 451.446245][T10416] [ 451.446254][T10416] dump_stack_lvl+0x100/0x190 [ 451.446381][T10416] warn_alloc.cold+0x94/0xa8 [ 451.446411][T10416] ? __pfx_warn_alloc+0x10/0x10 [ 451.446451][T10416] ? __lock_acquire+0x49f/0x1a40 [ 451.446522][T10416] __vmalloc_node_range_noprof+0x136c/0x1630 [ 451.446558][T10416] ? lock_acquire+0x1b9/0x370 [ 451.446587][T10416] ? ip_set_sockfn_get+0x18e/0xd20 [ 451.446668][T10416] ? __lock_acquire+0x49f/0x1a40 [ 451.446695][T10416] ? trace_contention_end+0x126/0x160 [ 451.446717][T10416] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 451.446744][T10416] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 451.446774][T10416] ? rcu_is_watching+0x12/0xc0 [ 451.446806][T10416] ? ip_set_sockfn_get+0x18e/0xd20 [ 451.446830][T10416] __vmalloc_node_noprof+0xad/0xf0 [ 451.446856][T10416] ? ip_set_sockfn_get+0x18e/0xd20 [ 451.446888][T10416] ip_set_sockfn_get+0x18e/0xd20 [ 451.446918][T10416] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 451.446948][T10416] ? nf_sockopt_find.isra.0+0x222/0x290 [ 451.446973][T10416] nf_getsockopt+0x7c/0xe0 [ 451.446997][T10416] ip_getsockopt+0x192/0x1e0 [ 451.447025][T10416] ? __pfx_ip_getsockopt+0x10/0x10 [ 451.447049][T10416] ? find_held_lock+0x2b/0x80 [ 451.447077][T10416] raw_getsockopt+0x4d/0x1f0 [ 451.447103][T10416] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 451.447131][T10416] do_sock_getsockopt+0x50a/0x6e0 [ 451.447150][T10416] ? __lock_acquire+0x49f/0x1a40 [ 451.447180][T10416] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 451.447206][T10416] ? find_held_lock+0x2b/0x80 [ 451.447233][T10416] ? __fget_files+0x21f/0x3d0 [ 451.447291][T10416] __sys_getsockopt+0x133/0x1d0 [ 451.447324][T10416] ? __ia32_sys_getsockopt+0xbc/0x160 [ 451.447349][T10416] __ia32_sys_getsockopt+0xbc/0x160 [ 451.447374][T10416] ? __do_fast_syscall_32+0x98/0x970 [ 451.447434][T10416] ? lockdep_hardirqs_on+0x78/0x100 [ 451.447463][T10416] __do_fast_syscall_32+0xe7/0x970 [ 451.447490][T10416] do_fast_syscall_32+0x32/0x70 [ 451.447517][T10416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.447540][T10416] RIP: 0023:0xf7fd8fec [ 451.447563][T10416] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 451.447596][T10416] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 451.447615][T10416] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 451.447627][T10416] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 451.447638][T10416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.447649][T10416] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 451.447659][T10416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.447683][T10416] [ 451.447845][T10416] Mem-Info: [ 451.596115][T10416] active_anon:5662 inactive_anon:151 isolated_anon:0 [ 451.596115][T10416] active_file:1957 inactive_file:32821 isolated_file:0 [ 451.596115][T10416] unevictable:1768 dirty:424 writeback:0 [ 451.596115][T10416] slab_reclaimable:6494 slab_unreclaimable:66170 [ 451.596115][T10416] mapped:24445 shmem:2285 pagetables:1067 [ 451.596115][T10416] sec_pagetables:307 bounce:0 [ 451.596115][T10416] kernel_misc_reclaimable:0 [ 451.596115][T10416] free:29554 free_pcp:9295 free_cma:0 [ 451.613163][T10416] Node 0 active_anon:28kB inactive_anon:12kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8060kB pagetables:1304kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 451.629467][T10416] Node 1 active_anon:22620kB inactive_anon:592kB active_file:7828kB inactive_file:131276kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:97752kB dirty:1696kB writeback:0kB shmem:7604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4956kB pagetables:2964kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 451.641888][T10416] Node 0 DMA free:2028kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 451.655905][T10416] lowmem_reserve[]: 0 280 280 280 280 [ 451.658023][T10416] Node 0 DMA32 free:16908kB boost:2048kB min:14816kB low:18008kB high:21200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:12kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:2252kB local_pcp:0kB free_cma:0kB [ 451.668490][T10416] lowmem_reserve[]: 0 0 0 0 0 [ 451.670426][T10416] Node 1 DMA32 free:99280kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22620kB inactive_anon:592kB active_file:7828kB inactive_file:131276kB unevictable:5536kB writepending:1696kB zspages:1632kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:34476kB local_pcp:13524kB free_cma:0kB [ 451.683448][T10416] lowmem_reserve[]: 0 0 0 0 0 [ 451.686513][T10416] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (M) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2028kB [ 451.696189][T10416] Node 0 DMA32: 11*4kB (UME) 64*8kB (UME) 28*16kB (UME) 57*32kB (UME) 42*64kB (ME) 23*128kB (UME) 5*256kB (ME) 8*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 16908kB [ 451.703499][T10416] Node 1 DMA32: 454*4kB (UM) 361*8kB (U) 131*16kB (UE) 274*32kB (UME) 161*64kB (UME) 61*128kB (UME) 54*256kB (UME) 17*512kB (UME) 8*1024kB (UM) 13*2048kB (UM) 2*4096kB (M) = 99216kB [ 451.721488][T10416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.725909][T10416] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 451.729999][T10416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.734050][T10416] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 451.738093][T10416] 37537 total pagecache pages [ 451.740447][T10416] 477 pages in swap cache [ 451.742346][T10416] Free swap = 121356kB [ 451.744434][T10416] Total swap = 124996kB [ 451.746512][T10416] 524155 pages RAM [ 451.748316][T10416] 0 pages HighMem/MovableOnly [ 451.750363][T10416] 211535 pages reserved [ 451.752212][T10416] 0 pages cma reserved [ 454.353929][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 454.357029][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 457.728084][T10500] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 457.778438][T10500] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1126'. [ 458.024532][T10506] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 458.036570][T10506] File: /dev/nullb0 PID: 10506 Comm: syz.0.1128 [ 458.201458][T10508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 458.203660][T10508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 458.207239][T10508] vhci_hcd vhci_hcd.0: Device attached [ 458.228479][T10508] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 458.493838][ T5532] usb 44-1: SetAddress Request (2) to port 0 [ 458.495990][ T5532] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 458.577064][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 458.580757][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 458.954126][T10509] vhci_hcd: connection reset by peer [ 458.972054][ T5554] vhci_hcd vhci_hcd.3: stop threads [ 458.980826][ T5554] vhci_hcd vhci_hcd.3: release socket [ 458.988940][ T5554] vhci_hcd vhci_hcd.3: disconnect device [ 462.790000][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 462.794701][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 463.051941][T10579] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 463.084630][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 463.088140][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 463.088605][T10574] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 463.365267][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 463.370388][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 463.444040][T10563] ceph: No mds server is up or the cluster is laggy [ 464.049454][ T5532] usb 44-1: device descriptor read/8, error -110 [ 464.186342][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 464.190937][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 464.384195][T10588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 464.388727][T10588] overlayfs: failed to set xattr on upper [ 464.403139][T10588] overlayfs: ...falling back to redirect_dir=nofollow. [ 464.407715][T10588] overlayfs: ...falling back to index=off. [ 464.409691][T10588] overlayfs: ...falling back to uuid=null. [ 464.490810][ T5532] usb usb44-port1: attempt power cycle [ 464.555778][T10588] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 465.157805][ T5532] usb usb44-port1: unable to enumerate USB device [ 466.725503][ T5748] Bluetooth: hci0: command 0x0401 tx timeout [ 466.730836][ T5757] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 468.110058][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 468.113248][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 469.624424][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 469.628012][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 469.975290][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 470.138780][ T10] usb 6-1: config 0 has no interfaces? [ 470.149779][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 470.154616][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 470.159137][ T10] usb 6-1: Product: syz [ 470.164674][ T10] usb 6-1: Manufacturer: syz [ 470.166476][ T10] usb 6-1: SerialNumber: syz [ 470.169844][T10642] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 470.207299][ T10] usb 6-1: config 0 descriptor?? [ 470.239135][T10642] : entered promiscuous mode [ 470.263584][ T846] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 470.423142][ T846] usb 8-1: Using ep0 maxpacket: 8 [ 470.427265][ T846] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 470.430708][ T846] usb 8-1: config 179 has no interface number 0 [ 470.433406][ T846] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 470.437756][ T846] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 470.442225][ T846] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.446976][ T846] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 470.451684][ T846] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.457010][ T846] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 470.460261][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.471685][T10646] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 470.888115][T10654] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 470.891318][T10654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 470.895987][T10654] vhci_hcd vhci_hcd.0: Device attached [ 470.919786][T10654] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 471.183111][ T5532] usb 38-1: SetAddress Request (2) to port 0 [ 471.185139][ T5532] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 471.197937][T10646] syzkaller1: entered promiscuous mode [ 471.206961][T10646] syzkaller1: entered allmulticast mode [ 471.473598][T10656] vhci_hcd: connection reset by peer [ 471.479038][ T5554] vhci_hcd vhci_hcd.0: stop threads [ 471.481397][ T5554] vhci_hcd vhci_hcd.0: release socket [ 471.487031][ T5554] vhci_hcd vhci_hcd.0: disconnect device [ 472.008002][ T846] usb 8-1: USB disconnect, device number 14 [ 472.008114][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 472.008153][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 472.690244][ T8045] usb 6-1: USB disconnect, device number 20 [ 474.919318][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 474.922643][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 475.133158][ T8045] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 475.303441][ T8045] usb 8-1: Using ep0 maxpacket: 16 [ 475.322435][ T8045] usb 8-1: unable to get BOS descriptor or descriptor too short [ 475.334948][ T8045] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.345822][ T8045] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.363195][ T8045] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 475.368328][ T8045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.371648][ T8045] usb 8-1: Product: syz [ 475.378213][ T8045] usb 8-1: Manufacturer: syz [ 475.380651][ T8045] usb 8-1: SerialNumber: syz [ 475.861534][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.866216][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.233529][ T5532] usb 38-1: device descriptor read/8, error -110 [ 476.282827][ T8045] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 476.291086][ T8045] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 476.328934][ T8045] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 476.334489][ T8045] usb 8-1: USB disconnect, device number 15 [ 476.352508][T10050] udevd[10050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.548055][T10723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.633679][ T5532] usb usb38-port1: attempt power cycle [ 476.792199][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 476.798585][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 477.213702][ T5532] usb usb38-port1: unable to enumerate USB device [ 478.422782][T10746] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 479.828900][T10754] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 479.848148][T10754] : entered promiscuous mode [ 479.933401][T10760] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 479.936233][T10760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 479.950473][T10760] vhci_hcd vhci_hcd.0: Device attached [ 480.055025][T10760] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 480.543908][ T5532] usb 38-1: SetAddress Request (6) to port 0 [ 480.547514][ T5532] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 481.266285][ T5757] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 481.752261][T10762] vhci_hcd: connection reset by peer [ 481.764616][ T12] vhci_hcd vhci_hcd.0: stop threads [ 481.766439][ T12] vhci_hcd vhci_hcd.0: release socket [ 481.786938][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 481.869645][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 481.872939][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 482.526574][T10782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'. [ 482.589436][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1190'. [ 483.245847][ T5757] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 485.673262][ T5532] usb 38-1: device descriptor read/8, error -110 [ 486.219474][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 486.228374][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 486.242003][ T5532] usb usb38-port1: attempt power cycle [ 486.713225][ T8045] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 486.835361][ T5532] usb usb38-port1: unable to enumerate USB device [ 486.883075][ T8045] usb 6-1: Using ep0 maxpacket: 16 [ 486.888159][ T8045] usb 6-1: unable to get BOS descriptor or descriptor too short [ 486.893414][ T8045] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.898031][ T8045] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.904974][ T8045] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 486.908839][ T8045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.912551][ T8045] usb 6-1: Product: syz [ 486.915764][ T8045] usb 6-1: Manufacturer: syz [ 486.917798][ T8045] usb 6-1: SerialNumber: syz [ 487.141725][T10818] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 487.144683][T10818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.149348][T10818] vhci_hcd vhci_hcd.0: Device attached [ 487.194083][T10818] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 487.443225][ T5829] usb 42-1: SetAddress Request (6) to port 0 [ 487.445915][ T5829] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 487.643055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 487.649120][T10824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.673133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 487.687613][T10824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.769177][T10819] vhci_hcd: connection reset by peer [ 487.771913][ T12] vhci_hcd vhci_hcd.2: stop threads [ 487.776724][ T12] vhci_hcd vhci_hcd.2: release socket [ 487.781848][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 488.705543][ T8045] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 489.638913][ T8045] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 490.206015][ T8045] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 490.213414][ T8045] usb 6-1: USB disconnect, device number 21 [ 490.231073][T10050] udevd[10050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.826367][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 490.830220][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 490.935492][T10856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1209'. [ 491.325059][T10860] netlink: 'syz.3.1208': attribute type 2 has an invalid length. [ 491.373981][T10860] : entered promiscuous mode [ 491.737565][T10868] SQUASHFS error: Failed to read block 0x0: -5 [ 491.745524][T10868] unable to read squashfs_super_block [ 492.253699][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 492.416633][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 492.555430][ T10] usb 7-1: config 0 has no interfaces? [ 492.599799][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 492.625212][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 492.642878][ T10] usb 7-1: Product: syz [ 492.660835][ T10] usb 7-1: Manufacturer: syz [ 492.685411][ T10] usb 7-1: SerialNumber: syz [ 492.847160][ T5829] usb 42-1: device descriptor read/8, error -110 [ 493.218397][ T10] usb 7-1: config 0 descriptor?? [ 493.797541][ T5829] usb usb42-port1: attempt power cycle [ 493.809927][T10900] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 493.812751][T10900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.866078][T10900] vhci_hcd vhci_hcd.0: Device attached [ 494.134399][ T5828] usb 44-1: SetAddress Request (6) to port 0 [ 494.137298][ T5828] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 494.179026][T10900] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 494.374261][ T5829] usb usb42-port1: unable to enumerate USB device [ 494.683876][T10902] vhci_hcd: connection reset by peer [ 494.688767][ T5554] vhci_hcd vhci_hcd.3: stop threads [ 494.694414][ T5554] vhci_hcd vhci_hcd.3: release socket [ 494.697510][ T5554] vhci_hcd vhci_hcd.3: disconnect device [ 494.884427][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 494.888828][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 494.981324][ T5891] usb 7-1: USB disconnect, device number 17 [ 496.040708][T10933] syzkaller0: entered promiscuous mode [ 496.042562][T10933] syzkaller0: entered allmulticast mode [ 498.214645][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 498.217798][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 499.269629][ T5828] usb 44-1: device descriptor read/8, error -110 [ 499.675856][ T5828] usb usb44-port1: attempt power cycle [ 500.416263][ T5828] usb usb44-port1: unable to enumerate USB device [ 501.076572][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.078630][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.269348][T11009] gadgetfs: bound to dummy_udc driver [ 503.641583][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 503.681801][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 504.731617][T11024] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 505.305664][T11031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 505.391436][T11028] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 505.463477][ T5828] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 505.625886][ T5828] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 506.337572][ T5828] usb 8-1: config 1 has no interface number 0 [ 506.480911][ T5828] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 506.488127][ T5828] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 506.492280][ T5828] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.501757][ T5828] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 506.504764][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.507750][ T5828] usb 8-1: Product: syz [ 506.509091][ T5828] usb 8-1: Manufacturer: syz [ 506.510609][ T5828] usb 8-1: SerialNumber: syz [ 506.522038][T11030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 506.642429][T11042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.660107][T11042] kvm: pic: level sensitive irq not supported [ 506.660855][T11042] kvm: pic: non byte read [ 506.670707][T11042] kvm: pic: level sensitive irq not supported [ 506.671442][T11042] kvm: pic: non byte read [ 506.687518][T11042] kvm: pic: level sensitive irq not supported [ 506.688288][T11042] kvm: pic: non byte read [ 506.695872][T11042] kvm: pic: level sensitive irq not supported [ 506.697047][T11042] kvm: pic: non byte read [ 506.705139][T11042] kvm: pic: level sensitive irq not supported [ 506.705696][T11042] kvm: pic: non byte read [ 507.737201][T11054] SQUASHFS error: Failed to read block 0x0: -5 [ 507.739292][T11054] unable to read squashfs_super_block [ 507.800535][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 507.804672][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 508.682196][ T5828] usb 8-1: Error in usbnet_get_endpoints (-71) [ 508.716352][ T5828] usb 8-1: USB disconnect, device number 16 [ 509.579422][T11078] 9p: p9: multiple sources not supported [ 510.660051][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 511.668572][T11099] picdev_write: 9 callbacks suppressed [ 511.668589][T11099] kvm: pic: non byte write [ 511.679945][T11099] kvm: pic: non byte write [ 511.682937][T11099] kvm: pic: non byte write [ 511.704478][T11099] kvm: pic: non byte write [ 511.706865][T11099] kvm: pic: non byte write [ 511.709163][T11099] kvm: pic: non byte write [ 511.711397][T11099] kvm: pic: non byte write [ 511.714375][T11099] kvm: pic: non byte write [ 511.716670][T11099] kvm: pic: non byte write [ 511.718894][T11099] kvm: pic: non byte write [ 511.870991][T11107] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 511.873741][T11107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.888999][T11107] vhci_hcd vhci_hcd.0: Device attached [ 511.941074][T11107] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 512.170930][ T5828] usb 44-1: SetAddress Request (10) to port 0 [ 512.195043][ T5828] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 512.333118][ T8045] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 512.531941][ T8045] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 512.536536][ T8045] usb 7-1: config 1 has no interface number 0 [ 512.540549][ T8045] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 512.550483][ T8045] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 512.577624][ T8045] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.596972][ T8045] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 512.600090][ T8045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.602688][ T8045] usb 7-1: Product: syz [ 512.605604][ T8045] usb 7-1: Manufacturer: syz [ 512.607192][ T8045] usb 7-1: SerialNumber: syz [ 512.654009][T11115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 512.810084][T11108] vhci_hcd: connection reset by peer [ 512.812250][ T12] vhci_hcd vhci_hcd.3: stop threads [ 512.817818][ T12] vhci_hcd vhci_hcd.3: release socket [ 512.824509][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 514.760940][ T8045] usb 7-1: Error in usbnet_get_endpoints (-71) [ 514.829204][ T8045] usb 7-1: USB disconnect, device number 18 [ 516.109953][T11128] Process accounting resumed [ 516.242896][T11139] SQUASHFS error: Failed to read block 0x0: -5 [ 516.245339][T11139] unable to read squashfs_super_block [ 517.273126][ T5828] usb 44-1: device descriptor read/8, error -110 [ 517.478396][T11152] picdev_write: 15 callbacks suppressed [ 517.478417][T11152] kvm: pic: non byte write [ 517.485204][T11152] kvm: pic: non byte write [ 517.488632][T11152] kvm: pic: non byte write [ 517.491665][T11152] kvm: pic: non byte write [ 517.496040][T11152] kvm: pic: non byte write [ 517.499245][T11152] kvm: pic: non byte write [ 517.502471][T11152] kvm: pic: non byte write [ 517.507636][T11152] kvm: pic: non byte write [ 517.510973][T11152] kvm: pic: non byte write [ 517.515330][T11152] kvm: pic: non byte write [ 517.598835][T11156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 517.616212][T11156] kvm: pic: level sensitive irq not supported [ 517.616816][T11156] kvm: pic: non byte read [ 517.625140][T11156] kvm: pic: level sensitive irq not supported [ 517.626375][T11156] kvm: pic: non byte read [ 517.633277][T11156] kvm: pic: level sensitive irq not supported [ 517.633706][T11156] kvm: pic: non byte read [ 517.640964][T11156] kvm: pic: level sensitive irq not supported [ 517.641916][T11156] kvm: pic: non byte read [ 517.647930][T11156] kvm: pic: level sensitive irq not supported [ 517.648281][T11156] kvm: pic: non byte read [ 517.653317][T11156] kvm: pic: level sensitive irq not supported [ 517.653709][T11156] kvm: pic: non byte read [ 517.686485][ T5828] usb usb44-port1: attempt power cycle [ 519.202890][ T5828] usb usb44-port1: unable to enumerate USB device [ 520.107258][T11170] Process accounting resumed [ 522.110557][T11195] gadgetfs: bound to dummy_udc driver [ 523.104852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 523.424935][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 523.457905][T11206] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 523.485911][T11206] kvm: pic: level sensitive irq not supported [ 523.486890][T11206] kvm: pic: non byte read [ 523.492304][T11206] kvm: pic: level sensitive irq not supported [ 523.492632][T11206] kvm: pic: non byte read [ 523.498010][T11206] kvm: pic: level sensitive irq not supported [ 523.498275][T11206] kvm: pic: non byte read [ 523.504624][T11206] kvm: pic: level sensitive irq not supported [ 523.504893][T11206] kvm: pic: non byte read [ 523.509732][T11206] kvm: pic: level sensitive irq not supported [ 523.510349][T11206] kvm: pic: non byte read [ 523.518914][T11206] kvm: pic: level sensitive irq not supported [ 523.519434][T11206] kvm: pic: non byte read [ 523.525450][T11206] kvm: pic: level sensitive irq not supported [ 523.525925][T11206] kvm: pic: non byte read [ 523.531118][T11206] kvm: pic: level sensitive irq not supported [ 523.531759][T11206] kvm: pic: non byte read [ 524.987175][T11246] Process accounting resumed [ 525.023227][T11247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 525.024773][ T41] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 525.025926][T11247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 525.057012][T11247] vhci_hcd vhci_hcd.0: Device attached [ 525.120165][T11255] picdev_write: 12 callbacks suppressed [ 525.120181][T11255] kvm: pic: non byte write [ 525.121272][T11255] kvm: pic: non byte write [ 525.122081][T11255] kvm: pic: non byte write [ 525.123456][T11255] kvm: pic: non byte write [ 525.124904][T11255] kvm: pic: non byte write [ 525.126138][T11255] kvm: pic: non byte write [ 525.127499][T11255] kvm: pic: non byte write [ 525.128678][T11255] kvm: pic: non byte write [ 525.130020][T11255] kvm: pic: non byte write [ 525.131508][T11255] kvm: pic: non byte write [ 525.183773][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 525.187413][ T41] usb 7-1: config 0 has no interfaces? [ 525.190694][ T41] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 525.190723][ T41] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 525.190741][ T41] usb 7-1: Product: syz [ 525.190755][ T41] usb 7-1: Manufacturer: syz [ 525.190768][ T41] usb 7-1: SerialNumber: syz [ 525.200878][ T41] usb 7-1: config 0 descriptor?? [ 525.427047][ T8045] usb 7-1: USB disconnect, device number 19 [ 525.533823][ T5532] usb 44-1: SetAddress Request (14) to port 0 [ 525.534264][ T5532] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 526.247979][T11250] vhci_hcd: connection reset by peer [ 526.251329][ T12] vhci_hcd vhci_hcd.3: stop threads [ 526.253946][ T12] vhci_hcd vhci_hcd.3: release socket [ 526.256743][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 526.613170][ T5828] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 526.655501][ T49] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 526.662334][T11261] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 526.893099][ T5828] usb 7-1: Using ep0 maxpacket: 8 [ 526.896447][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.902207][ T5828] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.248353][ T5828] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.259421][ T5828] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 527.266932][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.273505][ T5828] usb 7-1: Product: syz [ 527.277401][ T5828] usb 7-1: Manufacturer: syz [ 527.281168][ T5828] usb 7-1: SerialNumber: syz [ 527.745884][T11277] gadgetfs: bound to dummy_udc driver [ 527.822221][T11282] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 528.501313][T11261] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 528.653254][ T5828] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 529.142706][ T5828] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 529.630899][ T5828] usb 7-1: USB disconnect, device number 20 [ 529.668340][T10718] udevd[10718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.053193][ T5828] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 530.213126][ T5828] usb 7-1: Using ep0 maxpacket: 16 [ 530.216765][ T5828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 530.220105][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.223753][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.228960][ T5828] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 530.231856][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.234706][ T5828] usb 7-1: Product: syz [ 530.236352][ T5828] usb 7-1: Manufacturer: syz [ 530.238204][ T5828] usb 7-1: SerialNumber: syz [ 530.547764][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.552206][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.643199][ T5532] usb 44-1: device descriptor read/8, error -110 [ 530.789032][ T5828] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 530.794335][ T5828] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 530.815962][ T5828] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 530.820094][ T5828] usb 7-1: USB disconnect, device number 21 [ 530.835513][T11295] udevd[11295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.035231][ T5532] usb usb44-port1: attempt power cycle [ 532.392315][ T5532] usb usb44-port1: unable to enumerate USB device [ 536.953435][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 537.007326][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 537.011108][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 537.083056][T11352] ref_ctr_offset mismatch. inode: 0x746 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 538.211489][T11259] libceph: connect (1)[c::]:6789 error -101 [ 538.217621][T11259] libceph: mon0 (1)[c::]:6789 connect error [ 538.690127][T11375] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 538.699893][T11375] overlayfs: failed to set xattr on upper [ 538.703929][T11375] overlayfs: ...falling back to redirect_dir=nofollow. [ 538.707028][T11375] overlayfs: ...falling back to index=off. [ 538.709869][T11375] overlayfs: ...falling back to uuid=null. [ 538.715591][T11360] ceph: No mds server is up or the cluster is laggy [ 538.730814][T11259] libceph: connect (1)[c::]:6789 error -101 [ 538.733238][T11259] libceph: mon0 (1)[c::]:6789 connect error [ 538.821250][T11376] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 539.774853][T11382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 539.819413][ T80] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 539.827147][T11383] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 542.624302][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 542.627287][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 544.155441][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 544.226041][T11422] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 546.675886][T11442] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 546.679924][T11442] device-mapper: ioctl: error adding target to table [ 549.769729][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 549.793101][T11492] bridge_slave_1: left allmulticast mode [ 549.795355][T11492] bridge_slave_1: left promiscuous mode [ 549.804402][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.916849][T11499] No source specified [ 549.987528][T11492] bridge_slave_0: left allmulticast mode [ 549.990103][T11492] bridge_slave_0: left promiscuous mode [ 549.992777][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.884755][T11504] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 553.053210][T11259] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 553.223096][T11259] usb 7-1: Using ep0 maxpacket: 32 [ 553.227040][T11259] usb 7-1: unable to get BOS descriptor or descriptor too short [ 553.230567][T11259] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 553.234966][T11259] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 553.237672][T11259] usb 7-1: config 14 has no interface number 0 [ 553.239613][T11259] usb 7-1: config 14 has no interface number 1 [ 553.241737][T11259] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 553.246633][T11259] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 553.250505][T11259] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 553.254689][T11259] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 553.258503][T11259] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 553.262343][T11259] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.273774][T11259] usb 7-1: config 14 interface 57 has no altsetting 0 [ 553.276522][T11259] usb 7-1: config 14 interface 228 has no altsetting 0 [ 553.294674][T11259] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 553.299562][T11259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.306929][T11259] usb 7-1: Product: syz [ 553.308843][T11259] usb 7-1: Manufacturer: syz [ 553.311391][T11259] usb 7-1: SerialNumber: syz [ 553.965546][T11259] legousbtower 7-1:14.57: interrupt endpoints not found [ 554.241551][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1363'. [ 554.247232][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1363'. [ 555.173884][T11259] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 555.182371][T11259] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 555.488412][T11559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.631808][ T5891] usb 7-1: USB disconnect, device number 22 [ 555.655770][ T5891] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 558.420514][T11575] random: crng reseeded on system resumption [ 559.754350][T11596] Mass Storage Function, version: 2009/09/11 [ 559.758470][T11596] LUN: removable file: (no medium) [ 559.776687][T11594] binder: 11590:11594 ioctl c0306201 80000040 returned -14 [ 559.777755][T11596] LUN: removable file: (no medium) [ 559.793483][T11594] ublk1: read batch cmd buffer failed [ 559.799125][T11594] ublk1: read batch cmd buffer failed [ 562.480220][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.482044][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.176188][ T5757] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 563.328116][T11625] No source specified [ 564.757907][ T5757] Bluetooth: hci0: unexpected event for opcode 0x202d [ 567.738306][T11674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'. [ 567.893619][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 567.894110][T11671] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 567.913767][T11671] syz_tun: entered promiscuous mode [ 567.963197][T11671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 567.969954][ T5554] bond0: (slave bond_slave_0): interface is now down [ 568.000427][ T5554] bond0: (slave bond_slave_1): interface is now down [ 568.018956][ T5554] bond0: (slave syz_tun): interface is now down [ 568.444430][ T5554] bond0: now running without any active interface! [ 569.534082][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'. [ 570.235126][ T8045] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 570.390686][ T8045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 570.403092][ T8045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 570.411371][ T8045] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 570.423445][ T8045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.426644][ T8045] usb 7-1: Product: syz [ 570.428158][ T8045] usb 7-1: Manufacturer: syz [ 570.429806][ T8045] usb 7-1: SerialNumber: syz [ 570.444396][ T8045] usb 7-1: config 0 descriptor?? [ 570.448909][T11727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.452605][ T8045] hub 7-1:0.0: bad descriptor, ignoring hub [ 570.460289][ T8045] hub 7-1:0.0: probe with driver hub failed with error -5 [ 570.471202][ T8045] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input18 [ 571.245338][ T5757] Bluetooth: hci1: unexpected event for opcode 0x201c [ 571.352449][T11737] x_tables: duplicate underflow at hook 1 [ 571.383421][T11737] hub 8-0:1.0: USB hub found [ 571.424926][T11737] hub 8-0:1.0: 1 port detected [ 572.583174][ T5532] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 572.737681][ T5532] usb 8-1: config 0 has no interfaces? [ 572.746498][ T5532] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 572.750742][ T5532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 572.754696][ T5532] usb 8-1: Product: syz [ 572.756576][ T5532] usb 8-1: Manufacturer: syz [ 572.758605][ T5532] usb 8-1: SerialNumber: syz [ 572.769650][ T5532] usb 8-1: config 0 descriptor?? [ 573.153406][ T40] usb 7-1: USB disconnect, device number 23 [ 575.762284][ T5891] usb 8-1: USB disconnect, device number 17 [ 579.186339][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1423'. [ 579.315012][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1423'. [ 583.034568][T11834] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd1": -EINTR [ 585.913121][T11853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 585.919768][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 585.960813][T11853] vhci_hcd vhci_hcd.0: Device attached [ 586.283257][ T5532] usb 40-1: SetAddress Request (6) to port 0 [ 586.288948][ T5532] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 586.434889][T11865] wg2 speed is unknown, defaulting to 1000 [ 586.532574][T11866] vhci_hcd: connection reset by peer [ 586.537019][T11865] wg2 speed is unknown, defaulting to 1000 [ 586.542418][T11865] wg2 speed is unknown, defaulting to 1000 [ 586.545298][ T5554] vhci_hcd vhci_hcd.1: stop threads [ 586.547234][ T5554] vhci_hcd vhci_hcd.1: release socket [ 586.549351][ T5554] vhci_hcd vhci_hcd.1: disconnect device [ 586.903857][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 587.017939][T11259] wg2 speed is unknown, defaulting to 1000 [ 587.023477][T11865] infiniband syz2: set active [ 587.033687][T11865] infiniband syz2: added wg2 [ 587.254920][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 587.261658][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.266430][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.271375][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.277525][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.282155][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.287159][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.293329][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.298206][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.305972][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.310939][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.317721][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.320627][T11865] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 587.322364][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.333957][T11865] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 587.342853][T11865] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 587.348397][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.352286][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.359618][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.366407][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.374871][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.379279][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.391437][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.396038][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.400430][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.404875][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 587.408339][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 587.412481][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.419185][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 587.423323][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 587.426881][ T10] usb 8-1: Product: syz [ 587.429158][ T10] usb 8-1: Manufacturer: syz [ 587.430988][ T10] usb 8-1: SerialNumber: syz [ 587.458692][T11865] RDS/IB: syz2: added [ 587.461882][ T10] usb 8-1: config 0 descriptor?? [ 587.467715][T11865] smc: adding ib device syz2 with port count 1 [ 587.471194][T11865] smc: ib device syz2 port 1 has no pnetid [ 587.483606][T11259] wg2 speed is unknown, defaulting to 1000 [ 587.485093][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 587.515123][T11865] wg2 speed is unknown, defaulting to 1000 [ 587.807388][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 587.807787][T11259] usb 8-1: USB disconnect, device number 18 [ 587.813497][T11879] yurex 8-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 587.833344][T11259] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 587.872158][T11884] ================================================================== [ 587.875668][T11884] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 587.878961][T11884] Read of size 96 at addr ffffffff9ba42da0 by task syz.0.1442/11884 [ 587.884154][T11884] [ 587.885532][T11884] CPU: 3 UID: 0 PID: 11884 Comm: syz.0.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.885566][T11884] Tainted: [L]=SOFTLOCKUP [ 587.885573][T11884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 587.885586][T11884] Call Trace: [ 587.885595][T11884] [ 587.885604][T11884] dump_stack_lvl+0x100/0x190 [ 587.885634][T11884] print_report+0x13d/0x4b0 [ 587.885679][T11884] ? __virt_addr_valid+0x239/0x430 [ 587.885721][T11884] ? usb_copy_descriptors+0x18d/0x320 [ 587.885754][T11884] kasan_report+0xdf/0x1c0 [ 587.885805][T11884] ? usb_copy_descriptors+0x18d/0x320 [ 587.885836][T11884] kasan_check_range+0x10f/0x1e0 [ 587.885866][T11884] __asan_memcpy+0x23/0x60 [ 587.885888][T11884] usb_copy_descriptors+0x18d/0x320 [ 587.885918][T11884] usb_assign_descriptors+0xd2/0x470 [ 587.885946][T11884] f_audio_bind+0x243a/0x3950 [ 587.885970][T11884] ? __pfx_f_audio_bind+0x10/0x10 [ 587.885987][T11884] usb_add_function+0x219/0x890 [ 587.886017][T11884] configfs_composite_bind+0xd83/0x1960 [ 587.886048][T11884] ? kernfs_create_link+0x1bd/0x240 [ 587.886075][T11884] gadget_bind_driver+0x28c/0xbf0 [ 587.886097][T11884] ? __pfx_gadget_bind_driver+0x10/0x10 [ 587.886122][T11884] really_probe+0x241/0xa60 [ 587.886170][T11884] __driver_probe_device+0x20e/0x450 [ 587.886199][T11884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 587.886238][T11884] driver_probe_device+0x4a/0x140 [ 587.886269][T11884] __driver_attach+0x21f/0x5b0 [ 587.886296][T11884] ? __pfx___driver_attach+0x10/0x10 [ 587.886322][T11884] bus_for_each_dev+0x13e/0x1d0 [ 587.886345][T11884] ? __pfx_bus_for_each_dev+0x10/0x10 [ 587.886366][T11884] ? bus_add_driver+0x2b5/0x5b0 [ 587.886392][T11884] bus_add_driver+0x305/0x5b0 [ 587.886421][T11884] driver_register+0x1e2/0x360 [ 587.886438][T11884] usb_gadget_register_driver_owner+0x132/0x210 [ 587.886461][T11884] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 587.886490][T11884] configfs_write_iter+0x302/0x4e0 [ 587.886510][T11884] vfs_write+0x6ac/0x1050 [ 587.886535][T11884] ? __pfx_configfs_write_iter+0x10/0x10 [ 587.886554][T11884] ? __pfx_vfs_write+0x10/0x10 [ 587.886569][T11884] ? find_held_lock+0x2b/0x80 [ 587.886603][T11884] ksys_write+0x12a/0x250 [ 587.886620][T11884] ? __pfx_ksys_write+0x10/0x10 [ 587.886644][T11884] __do_fast_syscall_32+0xe7/0x970 [ 587.886679][T11884] do_fast_syscall_32+0x32/0x70 [ 587.886705][T11884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 587.886729][T11884] RIP: 0023:0xf7fb2fec [ 587.886751][T11884] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 587.886759][T11884] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 587.886778][T11884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002100 [ 587.886790][T11884] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 587.886800][T11884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.886811][T11884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 587.886836][T11884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.886855][T11884] [ 587.886861][T11884] [ 588.005818][T11884] The buggy address belongs to the variable: [ 588.008230][T11884] ac_header_desc+0x0/0x40 [ 588.010109][T11884] [ 588.011143][T11884] The buggy address belongs to the physical page: [ 588.013719][T11884] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba42 [ 588.017359][T11884] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 588.020629][T11884] raw: 00fff00000002000 ffffea00006e9088 ffffea00006e9088 0000000000000000 [ 588.024121][T11884] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 588.027258][T11884] page dumped because: kasan: bad access detected [ 588.029768][T11884] page_owner info is not present (never set?) [ 588.032277][T11884] [ 588.033262][T11884] Memory state around the buggy address: [ 588.035349][T11884] ffffffff9ba42c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 588.038554][T11884] ffffffff9ba42d00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 588.041793][T11884] >ffffffff9ba42d80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 588.044987][T11884] ^ [ 588.047137][T11884] ffffffff9ba42e00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 588.050377][T11884] ffffffff9ba42e80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 588.053721][T11884] ================================================================== [ 588.067393][T11884] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.070342][T11884] CPU: 3 UID: 0 PID: 11884 Comm: syz.0.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.074896][T11884] Tainted: [L]=SOFTLOCKUP [ 588.076633][T11884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 588.080427][T11884] Call Trace: [ 588.081639][T11884] [ 588.082661][T11884] dump_stack_lvl+0x100/0x190 [ 588.084376][T11884] vpanic+0x552/0x970 [ 588.085802][T11884] ? __pfx_vpanic+0x10/0x10 [ 588.087600][T11884] ? usb_copy_descriptors+0x18d/0x320 [ 588.089710][T11884] panic+0xd1/0xe0 [ 588.091245][T11884] ? __pfx_panic+0x10/0x10 [ 588.092848][T11884] ? usb_copy_descriptors+0x18d/0x320 [ 588.094768][T11884] ? preempt_schedule_common+0x42/0xc0 [ 588.096881][T11884] check_panic_on_warn.cold+0x19/0x34 [ 588.099052][T11884] end_report.part.0+0x3a/0x90 [ 588.100944][T11884] kasan_report.cold+0xe/0x18 [ 588.102811][T11884] ? usb_copy_descriptors+0x18d/0x320 [ 588.105077][T11884] kasan_check_range+0x10f/0x1e0 [ 588.107242][T11884] __asan_memcpy+0x23/0x60 [ 588.109200][T11884] usb_copy_descriptors+0x18d/0x320 [ 588.111569][T11884] usb_assign_descriptors+0xd2/0x470 [ 588.113934][T11884] f_audio_bind+0x243a/0x3950 [ 588.115942][T11884] ? __pfx_f_audio_bind+0x10/0x10 [ 588.117677][T11884] usb_add_function+0x219/0x890 [ 588.119500][T11884] configfs_composite_bind+0xd83/0x1960 [ 588.121721][T11884] ? kernfs_create_link+0x1bd/0x240 [ 588.123726][T11884] gadget_bind_driver+0x28c/0xbf0 [ 588.125569][T11884] ? __pfx_gadget_bind_driver+0x10/0x10 [ 588.127636][T11884] really_probe+0x241/0xa60 [ 588.129383][T11884] __driver_probe_device+0x20e/0x450 [ 588.131445][T11884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.133506][T11884] driver_probe_device+0x4a/0x140 [ 588.135173][T11884] __driver_attach+0x21f/0x5b0 [ 588.136984][T11884] ? __pfx___driver_attach+0x10/0x10 [ 588.138802][T11884] bus_for_each_dev+0x13e/0x1d0 [ 588.140532][T11884] ? __pfx_bus_for_each_dev+0x10/0x10 [ 588.142893][T11884] ? bus_add_driver+0x2b5/0x5b0 [ 588.144892][T11884] bus_add_driver+0x305/0x5b0 [ 588.146837][T11884] driver_register+0x1e2/0x360 [ 588.148664][T11884] usb_gadget_register_driver_owner+0x132/0x210 [ 588.151105][T11884] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 588.153295][T11884] configfs_write_iter+0x302/0x4e0 [ 588.155413][T11884] vfs_write+0x6ac/0x1050 [ 588.157087][T11884] ? __pfx_configfs_write_iter+0x10/0x10 [ 588.159262][T11884] ? __pfx_vfs_write+0x10/0x10 [ 588.161207][T11884] ? find_held_lock+0x2b/0x80 [ 588.162909][T11884] ksys_write+0x12a/0x250 [ 588.164637][T11884] ? __pfx_ksys_write+0x10/0x10 [ 588.166557][T11884] __do_fast_syscall_32+0xe7/0x970 [ 588.168471][T11884] do_fast_syscall_32+0x32/0x70 [ 588.170442][T11884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.172952][T11884] RIP: 0023:0xf7fb2fec [ 588.174919][T11884] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 588.177358][T11884] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 588.180367][T11884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002100 [ 588.183233][T11884] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 588.187006][T11884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.190993][T11884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 588.194459][T11884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.197697][T11884] [ 588.199851][T11884] Kernel Offset: disabled [ 588.201944][T11884] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:56:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000edd363 RBX=ffffffff8e891480 RCX=ffffffff8bb8b335 RDX=0000000000000000 RSI=ffffffff8e1aa1ca RDI=ffffffff8c400c80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb898ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002a637000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c400 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000082000020 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f60281d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f60280b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5eeb3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c2d984c53e3 73730c2d984c53e3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737942 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e200627375 0000000000000021 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000351 000055e7f602bc70 0000316573003300 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b33a558 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8e18433e RDI=ffffffff8c400c80 RBP=ffff888027188000 RSP=ffffc90007ac7618 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffff888027188c40 R15=0000000000000004 RIP=ffffffff8bb8a231 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5453ff4 CR3=00000000798eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfffc00 Opmask01=0000000000004211 Opmask02=0000000003010037 Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f600f660 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5eeb3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a5e44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e55520041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f601d460 000055e7f600e510 000055e7f600fa10 000055e7f6013230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f600d010 000055e7f6018f80 000055e7f6016520 000055e7f60250c0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f6018a30 000055e7f601a1b0 000055e7f6166810 000055e7f60158f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f6015ed0 000055e7f5fffd40 000055e7f600a630 000055e7f601d420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e7f60005d0 0000000000000020 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000501 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90032cccb20 RCX=ffffffff89c3aaa1 RDX=fffffffffde72186 RSI=00051eb851eb851e RDI=0000000000000007 RBP=ffff88807ad3e2c0 RSP=ffffc90000538b70 R8 =0000000000000005 R9 =00000000000f4240 R10=0000000000989680 R11=0000000000000000 R12=00051eb851eb851e R13=0000000000000000 R14=0000000000000000 R15=fffffffffde72186 RIP=ffffffff8209a9b0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2f86623300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005622c6f29f40 CR3=0000000046ed4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=678306b597cbaab4 d0533de99ebb5aae 678306b597cbaab4 d0533de99ebb5aae 678306b597cbaab4 d0533de99ebb5aae 678306b597cbaab4 d0533de99ebb5aae ZMM18=e40e3fba428b72f3 08a6159ab2dd274c e40e3fba428b72f3 08a6159ab2dd274c e40e3fba428b72f3 08a6159ab2dd274c e40e3fba428b72f3 08a6159ab2dd274c ZMM19=9412000000000000 0000000000000004 9412000000000000 0000000000000003 9412000000000000 0000000000000002 9412000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffdf 0821e00316080021 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d80320c480080021 d00305800421c003 02f4080021b80304 080021b003004c50 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4701ffffffffffff fffff70800030004 21a0030380042190 0306080021880330 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6b9f7c912df1c08 0880030880040da0 030008000d98031c 08000d9003208080 ZMM25=08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a 08a6159a08a6159a ZMM26=428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 428b72f3428b72f3 ZMM27=e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba e40e3fbae40e3fba ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9312000093120000 9312000093120000 9312000093120000 9312000093120000 9312000093120000 9312000093120000 9312000093120000 9312000093120000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0c1f5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90007ad7198 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666652 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6f71e8 R15=ffffffff85a0c190 RIP=ffffffff85a0c21f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033c06ff8 CR3=0000000057aef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003d000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000