last executing test programs: 56.719183711s ago: executing program 0 (id=108): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000007}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) 55.165822625s ago: executing program 0 (id=111): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x2, &(0x7f0000000040)={@align=0x100000001, {0x9, 0xd, 0xff, 0x5}}, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x86}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0x10, 0xa0, 0x0, 0xfd, @time={0x0, 0x10001}, {0x10, 0x49}, {0xe}, @time=@time={0xff, 0x21}}], 0x1c) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000002c0)={0x30, r1, 0x0, 0x0, 0x7, 0x7628, 0x1, &(0x7f0000000200)=""/159}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0xa) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x6000000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) setns(0xc9, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 54.403368234s ago: executing program 0 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000002900)) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x148c}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r5, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 54.179208224s ago: executing program 0 (id=118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000677b3507a91eb6d32692b74d56844917136e9d2e9819b12301ad9480c8b722b06c661c000000e6a27b17d5a67cd206c2222761645d35796832154ff5dc4227081ac733ac6b5abfe45f7314e24548bc77eeaf17a3608b0baa0e927c1b20eea6ac7b71561b2b65093ea54685a6dffc5beaf220a8af1e0e3075e69660e56ad8408636d76aaa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000100000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000018500000082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000580)="2e9b3d0007e03dd60c93dfb6c575963f88642514e58723d32ccb060000008f5a9affe06e00cb8c348d18c10dccd557f6161469853f500c8f61d2507158d834484a2dd5b56fe770f07a772686641606660d653453cd6443c5c17d0579346acc052d929e318bc9", 0x66}, {&(0x7f00000001c0)="1100d15c0f4c55da", 0x8}], 0x2) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0xf3) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88e076a72762d62f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0x9362, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002380)={0x2020}, 0x2020) 53.873511796s ago: executing program 0 (id=121): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x2000, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 53.499939522s ago: executing program 0 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x4c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0xee6f7d401b4432dd, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c010000100005000400000000000000ff0100000000000000000000000000017f0000010000000000000000000000001f90ffff1f90ffff0200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f00000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000035000002000000000000004c00120063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000001c0017000000000029bd700027bd70002dbd700025bd7000040000000000000000000080a76868be734233ebbe4c54796b714fe1d86b9043b9d9991b71731bc5b479674125c9f486501b188db2fbac4f41f1b98b770a43240b7090b2aed2d196cd12a86e73341b20a7f81dd100c8ba5505ccf9eb"], 0x15c}}, 0x0) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0xffff}, 0x3c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) getpid() setns(0xc9, 0x0) 53.335640767s ago: executing program 32 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x4c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0xee6f7d401b4432dd, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c010000100005000400000000000000ff0100000000000000000000000000017f0000010000000000000000000000001f90ffff1f90ffff0200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0xffff}, 0x3c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) getpid() setns(0xc9, 0x0) 6.468697496s ago: executing program 2 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000100)={'veth0_macvtap\x00', @ifru_data=&(0x7f00000000c0)="6824aaa7a27d8aed361efdc4d281f6ff918818c90bcfc991d769b9ea5524a7fb"}) 6.39698218s ago: executing program 2 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x18, 0x3, 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c000280050019000200000019cc0ddcb94e6e4ac8f4a312767aeb2cd15ccd59e3b66954a7133bccfa7bf0b91c99675ab386f8d52562b3128e9b938a98ed3fdba74f8d6458b101bade3446de0784a3d4812f1ab596e62bd2d330a3684fb41acc279e28aa97aff3dd65c1ad3b50b63111c8d33ff777d7142c7aac0be0de4ed41d4aadf9f28d05003acee48280ee818281"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0400368008000200", @ANYRES32=r8, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x40040}, 0x24000014) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xffff, 0x10000}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$inet(0x2, 0x1, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r11 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30004084}, 0x20000010) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x303}, "fa12653690630842", "c5623608e08c786909aa54a13924808b", "994e22c1", "f917684265437a84"}, 0x28) bind$packet(r11, &(0x7f0000000500)={0x11, 0x0, r7}, 0x14) sendto(r11, &(0x7f0000000600)="0011", 0x1d, 0x0, 0x0, 0x0) 6.129354575s ago: executing program 2 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mount/versions\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x40806685, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffe000/0x2000)=nil}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be", &(0x7f0000001a40), 0x1000009, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24004804) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd_mount/versions\x00', 0x2, 0x0) write(r4, &(0x7f0000000b00), 0x0) syz_usbip_server_init(0x1) 5.368549169s ago: executing program 2 (id=482): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDMKTONE(r1, 0x4b30, 0x7fffffff) r2 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x2, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r2, 0x1, 0x1, 0x61, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000440)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006118500000000000850000002700004db8b130c900950000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl(r8, 0x40946400, &(0x7f0000000100)="70633231326500000000000000000000000000000003") ioctl$COMEDI_INSN(r8, 0x8028250c, 0x0) write$binfmt_script(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r9, 0x43403d0e, &(0x7f0000000140)) pwrite64(r0, &(0x7f0000000440)="6ca7", 0x2, 0x5) 4.074085109s ago: executing program 2 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') exit(0xffff) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x5, 0x58, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00cd040004030003011c"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x86, @string={0x86, 0x3, "ab18673a5a64ae337638ce8b669ef1f163262f91260e3c8b620e9beea10192cb63c56b0a9e29cc6467f6eb08d6ba322ba4f6bc493349c6224a564fdc353d75d63d6ea9a6f940edb8d25b8e715e56e40b3708651476ff4f1a2b1d526ec30ac4817db3a59a6571f4303998fc04750fa66838af5064bffd917d0718b023c1e41337ee9a4810"}}, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000180)={0x0, 0x1, 0x11, 0xfffb}) ioctl$FS_IOC_RESVSP(r6, 0x402c5829, &(0x7f0000000080)={0x0, 0x2, 0xf8, 0x8000000000000c}) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x20, 0x13, 0x4, "0d718785"}, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) read$char_usb(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory2/state\x00', 0x1, 0x0) 3.190736826s ago: executing program 1 (id=493): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f00000000c0)={@lba=0x2, 0x0, 0xffffffffffffffdc, 0x0}) r1 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) 2.804336146s ago: executing program 1 (id=494): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.537204489s ago: executing program 1 (id=495): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff000002000000000036005ec2355f000095000000000000009500000000000000967f6d7716f1414ffc97cdd577eea43b4e83c427129c15459910c246c3"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0x900, 0x300}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="e8ee84068f", 0x5}], 0x1) r3 = socket$inet(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000300)={[0x50000, 0x4000, 0xfec00000, 0xd000], 0x4, 0x21}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) openat(r8, &(0x7f0000000440)='./file0\x00', 0x4202, 0xc4) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f00000001c0)={{[0x9, 0x10000, 0x101, 0x7]}, 0x0, 0x1, 0x7f, 0x0, &(0x7f0000000040)=[{{@align=0x22, {0x6, 0x2, 0x0, 0x2}}, 0xff, 0x0, '{#{\x00'}, {{@align=0x4, {0x7, 0x6, 0x4, 0x6}}, 0xd, 0x0, '&\x00'}, {{@align=0x4, {0x8, 0x8, 0x0, 0xc}}, 0x3, 0x0, '/[\\-:#@\x00'}, {{@align=0x9, {0x7, 0x4, 0x7, 0x241508b0000}}, 0x1000, 0x0, '$*/\x00'}, {{@_ha_fsid={[0x4, 0x200]}, {0x829, 0x7, 0xa3, 0x2}}, 0xfffff482, 0x0, '-+!)}\x00'}, {{@_ha_fsid={[0x184, 0x10]}, {0xfffd, 0x4f, 0x491d, 0xf}}, 0x6, 0x0, 'virt_wifi0\x00'}, {{@_ha_fsid={[0x4]}, {0x101, 0x298e, 0x7, 0x3}}, 0x1, 0x0, 'icmp\x00'}, {{@align=0x8, {0xffff, 0x589, 0x7f, 0x5}}, 0x40, 0x0, '%[\xab:^\x00'}, {{@_ha_fsid={[0x6, 0x8]}, {0xf, 0x0, 0x8, 0x7f}}, 0xffffffff, 0x0, 'CT\x00'}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x1}}, 0x3, 0x3, 0x4, 0x1, 0x80, 0xfffffffd, 0x5}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x30c, 0xb, 0xd0e0011, 0x30c, 0xc6, 0x39c, 0x1d8, 0x190, 0x39c, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0x2c4, 0x30c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x8}}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080027bd7000ffdbdf25170000002800308024000300f405751ca6a29a9e8c79be6977693811227bba7a428933743428e71ee63039f0380030801800018008000100000000000c00050046010000000000001c00018008000400020000000800040000020000080001000200000008000300", @ANYRES32=r12, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4044040}, 0x801) ioctl$FE_READ_UNCORRECTED_BLOCKS(r8, 0x80046f49, &(0x7f0000000300)) getsockopt$llc_int(r8, 0x10c, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 2.532811261s ago: executing program 3 (id=496): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) writev(r4, &(0x7f0000000200)=[{0x0, 0x23}, {&(0x7f0000000180)="84", 0x1}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x24040894) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1676c96b1c18451a}, 0x20040891) r10 = openat$full(0xffffff9c, &(0x7f0000000080), 0x200001, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r11, 0x6, 0x18, 0x0, &(0x7f0000000380)) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff001}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040}, 0x4008055) 2.310031336s ago: executing program 1 (id=497): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3, 0x20300) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0xfff, 0x0, 0x3, 0x10, 0x4}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a29453206dccf484fc4c794388339b689091801ce5e5d08a1804d7f24744f48f09ce8db2e8be65997097fd07fff93971c516006c4c12a80385094d225469139097d728b4dddc4fa13c7b158cd61811e7b2268b220a0981f7d8600815f405ba18513290fb4388c4fcccaa48cd93b412cffc7e3c5d785fe75d7dfc16c1cfe3ee9dc59dd7607f583dbc3719290e4aed3a898013205b9551983d8ca37e6522f6e661cd1b5314", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r2, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000780)=""/30) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r5, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) timer_create(0x9, 0x0, &(0x7f0000000700)=0x0) timer_delete(r11) 1.908101608s ago: executing program 3 (id=498): syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) syz_usb_connect$uac1(0x3, 0xbe, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x8, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x26}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "582ff29ba1"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x6, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x6, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x91, 0x8e, "e2fe"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x81, 0x2, 0x0, 0x3, "b5"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x5, "ae"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x1, "b98637"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xfa, 0x7f, 0x10, {0x7, 0x25, 0x1, 0x0, 0x0, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x7, 0x9, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x6c, 0x6, {0x7, 0x25, 0x1, 0xc, 0x80, 0xc24}}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x7, 0x9, 0xc4, 0x8, 0x9}, 0xf, &(0x7f00000005c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x8, 0x7f}]}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc2b}}, {0xa, &(0x7f0000000640)=@string={0xa, 0x3, "6d34d80b7218cd8f"}}, {0x62, &(0x7f0000000680)=@string={0x62, 0x3, "1f00f19f07502762c2a132e3b5fc59ee3cdea26245f627a321a5bf70cabdcbf5d447eb80c930bbb91952027f5a3c1c8459c6c1d426619d3d534f175b4bd4dadd92cb5255a90f8a7fc0f41c4ac013d15f99ebd62485928a5ace6f22977c793921"}}, {0xfb, &(0x7f0000000700)=@string={0xfb, 0x3, "63a1f222cbdfa3a5bfd5e437f9730368784d08b2fda1b69f8b1762cadec265f0f625507a809fa708e460daee8481ca8fff414745d69efb9f9961de526fbd2f2db3cc357aafb3ad9ee931a2e7380487feaea30526fe3818e3d468e940a575daae2f252917894bb7ebf8c7083fc0424f7bfc28f619f9b45e4db3a449d27a71257d48cbc312c460235966ed800f1601d9d2b78b37014aa9fa590ece2a4a4bff55a7d1c4d68fb941e66a5028823bddc8478b28b2d32c436776940a4d52f88033bf6934db991eb5cfa26e330f37277e3d70e2fdaff1203baa8dedfcda13608888539f821f42fffc88e0118bc1de2786d7a8aa9fb411cc0dc4e442e5"}}, {0x7b, &(0x7f0000000900)=@string={0x7b, 0x3, "fb41e541d2f1480461068da1c2fbeb271750b8c9b13436d100aa6e768f6a6eb4e1c745152e5d119f9f7ec32f5b95a7d385822d3bd51227198ecf100458e10ec86e10a3ef441fe7d276fbd08da09ef726f6430625efd4c5da74c626edd833360afc27483f6fbac17447efae003c32a723fa012afc199b1413a3"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x410}}, {0x9, &(0x7f0000000c00)=@string={0x9, 0x3, "920e8adf49728d"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) 1.713683893s ago: executing program 3 (id=500): timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES16=r1, @ANYRES16=r2, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) fcntl$lock(r1, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x5}) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_exec(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x167) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000008) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000240)={0x0, 0x4, 0x81, 0x509, 0x0, 0xf0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0xfffffff9, 0x8009}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000002000000020000", 0x1c) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@deltclass={0x58, 0x29, 0x0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffff, 0xf}, {0x5, 0xe}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xff}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r9, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) r10 = socket$packet(0x11, 0x3, 0x300) sendmmsg$alg(r4, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000100)="38462224e02e7c2ddd0fd658abdfe92b49b7d5e4230fda97893332c9cbfd86dafd791eed3672980304d350c098d4a94781dc9f3ce22ca8ca4ca19191400637e11d66979b1894eb49082517ad631d4ad75d830cfac6aaeaff440f9ea0f36df9378f9d25957251b922545317a15f75d263c6be36299c5ed15eadf415e257dab64d8e9c4c93221176846aba289533f0fee9a8a97f1c04b4b042a41b1003301d91c0d2564c84d8b3dfde0d6b08bfcc78e117aaf63b32fc2efae71626066fc12c265bfb0af4610729991c0483866770b11c31d9eaced75484e8", 0xd7}, {&(0x7f0000000340)="c2e2a9eca2efd7553f296dd26f9927c2c05f2c034930824b64d636ea6c89e06e6b3d6dcc77bff37a36d403d835b1d57daf4d8ba8d6fd62da2084b51651b0f8ed65f2764fb48765e6ca037dbd55a577596fb4eeb8a6ab648e8c9d087cb610c992750b7b1deda35b207a895dbc20a67f9bfe05ae30c130f386c39a0806e3a0a7b717b4382a91397feb569489ada979", 0x8e}, {&(0x7f0000000400)="bbdc90024d37a1789eab24250181886bca887aa4fa9a342afda8a8a20ae5031eda65ee12", 0x24}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="08630244ccba887fe62526f877633ad3c7741e8997d676a9eed39280f38fdbf48a2e6241b941cdfec2408fd68d73d12417a23c3c587d42e296a758efd448597e06fba947fd3b4b90572a0883e4868d1faa4f6d77a319db9de702482ed2d425533726e4e56e1fe890f3cb4abda40189cbfc8d266c4aaf237cfd83871d53a97e14998be3a593f490ceb498fd5154e94e0e969b7ce8db7f67f0df8f21d5d1ab81f20b545505bc02", 0xa6}, {&(0x7f0000001ec0)="0db1c71570613797dfa0cf8dd9f9f9455fa485068d65a608e960bc3920401ad72214182df4f01743ffaa6f2fdca81eaad55f63ed43899ae2c35227c53911e127ccc03bcbfe514c07cf96c4be51abd0389f4e90130899858c1ec501fb8932734b01a686df94bde1e2d64ece9f8b37da14c3b60dc4e07574c0749251fb13827466abc53ddde4151809efba690f8fd88c46a0dd338bff17faf1db575332bb4204bd0f737e73d3a77a9a9fa06bc9d81e1e3b4715774e88ac3c2e90f89acfb44c", 0xbe}, {&(0x7f0000001f80)="7c8796add0e9e0c8b77c708e801ac19ccc5925", 0x13}], 0x7, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x234, 0x8000}], 0x1, 0x20008000) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) r11 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r11, &(0x7f0000000080)='L\x00', 0x2, 0x0, 0x0, 0x0) 1.461537903s ago: executing program 3 (id=502): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.26002417s ago: executing program 3 (id=504): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049370, 0x0) (fail_nth: 1) 1.009353517s ago: executing program 3 (id=506): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0xffffffff, 0x3ff, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 840.03248ms ago: executing program 2 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0x2b, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x1e5442) 775.239379ms ago: executing program 1 (id=509): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4000, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 689.933861ms ago: executing program 1 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) 339.248058ms ago: executing program 4 (id=511): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x2, 0x4, 0x394, 0xffffffff, 0x0, 0x11c, 0x0, 0xfeffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xf8, 0x11c, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x20, 0x10, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x17de, 0x3b, 0x3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff0000ff, 0xff000000], 'sit0\x00', 'vxcan1\x00', {0xff}, {}, 0x20}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x3b, "e93edb303360f346e4ed042a7dc91978b39aa1d597bcfdff80cac766a3ae"}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f0) 289.828322ms ago: executing program 4 (id=512): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fcntl$getflags(r0, 0x408) r1 = openat$full(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = io_uring_setup(0x2a8a, &(0x7f0000000240)={0x0, 0xeb54, 0x1046, 0x0, 0x33b}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) syz_ublk_setup_io_uring(0x7a2c, &(0x7f0000000080)={0x0, 0xac08, 0x80, 0x2, 0x282, 0x0, r2}, &(0x7f00000003c0), 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00e1d0a3500000020000000e00000064a100002d2996a7db53", @ANYRES8=r2, @ANYRESDEC=r2], 0x50) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x2006030, &(0x7f0000000c00)=ANY=[@ANYRES16]) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x2c, r4, 0x10ada85e65c25349, 0x70bd27, 0xfffffffc, {{0x67}, {@void, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xf9}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1ff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x7]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008801) ioctl$RTC_UIE_ON(r1, 0x7003) 191.586309ms ago: executing program 4 (id=513): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x17, 0xa000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) read$FUSE(r2, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r7) 130.06144ms ago: executing program 4 (id=514): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x3f, 'vlan0\x00'}) 69.68175ms ago: executing program 4 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (fail_nth: 4) 0s ago: executing program 4 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/tracing_on\x00', 0x1, 0x0) write$binfmt_format(r1, &(0x7f0000000040)='0\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x4, 0x7ff, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x65, 0x0, 0x91, 0x2f, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x1b, 0x73, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @loopback, @broadcast, @remote]}, @rr={0x7, 0xb, 0xe0, [@multicast2, @local]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r2, 0x25, 0x2, @void}, 0x10) write(r1, &(0x7f0000000400)='1', 0x1) kernel console output (not intermixed with test programs): 4380][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.799419][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.802598][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.809927][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.813512][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.930500][ T6349] FAT-fs (nullb0): bogus number of reserved sectors [ 398.933356][ T6349] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 399.240274][ T12] bridge_slave_1: left allmulticast mode [ 399.243553][ T12] bridge_slave_1: left promiscuous mode [ 399.248889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.266187][ T12] bridge_slave_0: left allmulticast mode [ 399.269056][ T12] bridge_slave_0: left promiscuous mode [ 399.271047][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.481966][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.489909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.494648][ T12] bond0 (unregistering): Released all slaves [ 399.872939][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 399.985896][ T12] hsr_slave_0: left promiscuous mode [ 399.989680][ T12] hsr_slave_1: left promiscuous mode [ 399.993245][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.998177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.002652][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.006420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.022325][ T12] veth1_macvtap: left promiscuous mode [ 400.026496][ T12] veth0_macvtap: left promiscuous mode [ 400.029715][ T12] veth1_vlan: left promiscuous mode [ 400.032217][ T12] veth0_vlan: left promiscuous mode [ 400.197028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 400.204867][ T12] team0 (unregistering): Port device team_slave_0 removed [ 400.650071][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 400.719696][ T6415] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 400.764278][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 400.768802][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.774086][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.776651][ T6343] bridge_slave_0: entered allmulticast mode [ 400.779398][ T6343] bridge_slave_0: entered promiscuous mode [ 400.782776][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.785322][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.788407][ T6343] bridge_slave_1: entered allmulticast mode [ 400.792199][ T6343] bridge_slave_1: entered promiscuous mode [ 400.821458][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.841437][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.917956][ T5799] Bluetooth: hci2: command tx timeout [ 400.947288][ T6425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 400.949472][ T6425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.953418][ T6343] team0: Port device team_slave_0 added [ 400.958929][ T6425] vhci_hcd vhci_hcd.0: Device attached [ 400.962506][ T6426] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 400.972357][ T5870] vhci_hcd vhci_hcd.2: stop threads [ 400.972372][ T5870] vhci_hcd vhci_hcd.2: release socket [ 400.972383][ T5870] vhci_hcd vhci_hcd.2: disconnect device [ 400.992432][ T6343] team0: Port device team_slave_1 added [ 400.999686][ T6425] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 401.013884][ T6425] bond2: option mode: invalid value (19) [ 401.020306][ T6425] bond2 (unregistering): Released all slaves [ 401.049287][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.052755][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.077267][ T6432] comedi comedi1: Minor 0 could not be opened [ 401.078329][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.092930][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.095775][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.103630][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.113643][ T6430] : renamed from dummy0 [ 401.167078][ T6343] hsr_slave_0: entered promiscuous mode [ 401.175722][ T6343] hsr_slave_1: entered promiscuous mode [ 401.179804][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 401.181828][ T6343] Cannot create hsr debugfs directory [ 401.354853][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 401.414691][ T6343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.446130][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.447429][ T6452] FAULT_INJECTION: forcing a failure. [ 401.447429][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.455707][ T6452] CPU: 2 UID: 0 PID: 6452 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 401.455735][ T6452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.455741][ T6452] Call Trace: [ 401.455746][ T6452] [ 401.455751][ T6452] dump_stack_lvl+0x100/0x190 [ 401.455773][ T6452] should_fail_ex.cold+0x5/0xa [ 401.455791][ T6452] _copy_from_user+0x2e/0xd0 [ 401.455805][ T6452] aa_write_access+0x1df/0x16d0 [ 401.455822][ T6452] ? lockdep_hardirqs_on+0x7d/0x110 [ 401.455834][ T6452] ? irqentry_exit+0x24d/0xa10 [ 401.455850][ T6452] ? __pfx_aa_write_access+0x10/0x10 [ 401.455866][ T6452] ? lock_acquire+0x5e/0x370 [ 401.455883][ T6452] vfs_write+0x2aa/0x1050 [ 401.455897][ T6452] ? __pfx_aa_write_access+0x10/0x10 [ 401.455913][ T6452] ? __pfx_vfs_write+0x10/0x10 [ 401.455924][ T6452] ? find_held_lock+0x2b/0x80 [ 401.455939][ T6452] ? __fget_files+0x215/0x3d0 [ 401.455955][ T6452] ? __fget_files+0x21f/0x3d0 [ 401.455971][ T6452] ksys_write+0x12a/0x250 [ 401.455982][ T6452] ? __pfx_ksys_write+0x10/0x10 [ 401.455993][ T6452] ? ksys_write+0x1ac/0x250 [ 401.456004][ T6452] ? __pfx_ksys_write+0x10/0x10 [ 401.456019][ T6452] __do_fast_syscall_32+0x13a/0x8b0 [ 401.456031][ T6452] ? lockdep_hardirqs_on+0x7d/0x110 [ 401.456042][ T6452] do_fast_syscall_32+0x32/0x70 [ 401.456054][ T6452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.456069][ T6452] RIP: 0023:0xf702efec [ 401.456083][ T6452] Code: Unable to access opcode bytes at 0xf702efc2. [ 401.456087][ T6452] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 401.456098][ T6452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 401.456104][ T6452] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.456110][ T6452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.456138][ T6452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.456145][ T6452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.456159][ T6452] [ 401.458795][ T6343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.568333][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.580499][ T6343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.728661][ T6460] FAT-fs (nullb0): bogus number of reserved sectors [ 401.744223][ T6460] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 401.868980][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.885160][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 401.892875][ T6343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.915986][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.256811][ T6476] [U]  [ 402.368367][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.427519][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 402.473294][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.486472][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.488861][ T5808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.536219][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.538544][ T5808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.982819][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 403.007771][ T5799] Bluetooth: hci2: command tx timeout [ 403.191174][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.564713][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 403.597495][ T6549] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 403.669290][ T6343] veth0_vlan: entered promiscuous mode [ 403.683724][ T6534] pim6reg1: entered promiscuous mode [ 403.695878][ T6534] pim6reg1: entered allmulticast mode [ 403.709562][ T6343] veth1_vlan: entered promiscuous mode [ 403.790373][ T6343] veth0_macvtap: entered promiscuous mode [ 403.810118][ T6550] FAULT_INJECTION: forcing a failure. [ 403.810118][ T6550] name failslab, interval 1, probability 0, space 0, times 0 [ 403.830697][ T6343] veth1_macvtap: entered promiscuous mode [ 403.857534][ T6550] CPU: 2 UID: 0 PID: 6550 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) [ 403.857551][ T6550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.857557][ T6550] Call Trace: [ 403.857561][ T6550] [ 403.857565][ T6550] dump_stack_lvl+0x100/0x190 [ 403.857584][ T6550] should_fail_ex.cold+0x5/0xa [ 403.857597][ T6550] should_failslab+0xc2/0x120 [ 403.857616][ T6550] __kmalloc_noprof+0xfc/0x820 [ 403.857631][ T6550] ? __pfx_dynamic_dname+0x10/0x10 [ 403.857643][ T6550] ? tomoyo_encode2+0xfb/0x3c0 [ 403.857680][ T6550] tomoyo_encode2+0xfb/0x3c0 [ 403.857712][ T6550] tomoyo_encode+0x29/0x50 [ 403.857727][ T6550] tomoyo_realpath_from_path+0x18c/0x690 [ 403.857747][ T6550] tomoyo_path_number_perm+0x23c/0x580 [ 403.857760][ T6550] ? tomoyo_path_number_perm+0x22e/0x580 [ 403.857775][ T6550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 403.857790][ T6550] ? get_pid_task+0x106/0x250 [ 403.857826][ T6550] ? find_held_lock+0x2b/0x80 [ 403.857842][ T6550] ? __fget_files+0x215/0x3d0 [ 403.857855][ T6550] ? hook_file_ioctl_common+0x140/0x440 [ 403.857869][ T6550] ? __fget_files+0x215/0x3d0 [ 403.857884][ T6550] ? __fget_files+0x21f/0x3d0 [ 403.857899][ T6550] security_file_ioctl_compat+0xd3/0x230 [ 403.857914][ T6550] __ia32_compat_sys_ioctl+0xc2/0x360 [ 403.857929][ T6550] __do_fast_syscall_32+0x13a/0x8b0 [ 403.857942][ T6550] ? lockdep_hardirqs_on+0x7d/0x110 [ 403.857954][ T6550] do_fast_syscall_32+0x32/0x70 [ 403.857966][ T6550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.857980][ T6550] RIP: 0023:0xf702efec [ 403.857994][ T6550] Code: Unable to access opcode bytes at 0xf702efc2. [ 403.857998][ T6550] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 403.858010][ T6550] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000004048aecb [ 403.858017][ T6550] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.858023][ T6550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.858029][ T6550] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 403.858035][ T6550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.858049][ T6550] [ 403.934715][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.938986][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.044200][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.104595][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 404.183566][ T6554] overlayfs: failed to resolve './bus': -2 [ 404.193546][ T6552] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 404.200687][ T6550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.213171][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.220093][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.226610][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.257950][ T5870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.271187][ T5870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.371539][ T5808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.385764][ T5808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.707515][ T6568] /dev/sg0: Can't lookup blockdev [ 404.925745][ T6570] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.078680][ T5799] Bluetooth: hci2: command tx timeout [ 405.500510][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.545603][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.565651][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.631058][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.664336][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.684331][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.702130][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.723050][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.737564][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.763389][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.795035][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.823930][ T6563] jffs2: notice: (6563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.832846][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.835679][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.838805][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 405.866011][ T6581] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 405.884335][ T6584] FAT-fs (nullb0): bogus number of reserved sectors [ 405.895768][ T6584] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 406.698385][ T6599] evm: overlay not supported [ 406.731164][ T6596] FAULT_INJECTION: forcing a failure. [ 406.731164][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 406.736682][ T6596] CPU: 2 UID: 0 PID: 6596 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 406.736723][ T6596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.736735][ T6596] Call Trace: [ 406.736742][ T6596] [ 406.736751][ T6596] dump_stack_lvl+0x100/0x190 [ 406.736780][ T6596] should_fail_ex.cold+0x5/0xa [ 406.736802][ T6596] should_failslab+0xc2/0x120 [ 406.736831][ T6596] __kmalloc_noprof+0xfc/0x820 [ 406.736857][ T6596] ? tomoyo_encode2+0xfb/0x3c0 [ 406.736888][ T6596] tomoyo_encode2+0xfb/0x3c0 [ 406.736924][ T6596] tomoyo_encode+0x29/0x50 [ 406.736948][ T6596] tomoyo_realpath_from_path+0x18c/0x690 [ 406.736981][ T6596] tomoyo_path_number_perm+0x23c/0x580 [ 406.737003][ T6596] ? tomoyo_path_number_perm+0x22e/0x580 [ 406.737028][ T6596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.737053][ T6596] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 406.737088][ T6596] ? __lock_acquire+0x4c5/0x1ec0 [ 406.737121][ T6596] ? current_check_access_path+0x269/0x430 [ 406.737151][ T6596] ? __pfx_current_check_access_path+0x10/0x10 [ 406.737180][ T6596] ? d_alloc_parallel+0x9f6/0x14c0 [ 406.737205][ T6596] tomoyo_path_mknod+0x164/0x190 [ 406.737225][ T6596] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 406.737244][ T6596] ? __d_lookup+0x25c/0x4a0 [ 406.737258][ T6596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 406.737303][ T6596] security_path_mknod+0x161/0x300 [ 406.737330][ T6596] may_o_create+0x30/0x3a0 [ 406.737360][ T6596] lookup_open+0xe35/0x1990 [ 406.737389][ T6596] path_openat+0xa2c/0x2440 [ 406.737414][ T6596] ? __pfx_path_openat+0x10/0x10 [ 406.737447][ T6596] do_file_open+0x20e/0x430 [ 406.737470][ T6596] ? __pfx_do_file_open+0x10/0x10 [ 406.737507][ T6596] ? _raw_spin_unlock+0x28/0x50 [ 406.737533][ T6596] ? alloc_fd+0x471/0x7a0 [ 406.737561][ T6596] do_sys_openat2+0x10f/0x1e0 [ 406.737588][ T6596] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.737613][ T6596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 406.737633][ T6596] ? __fget_files+0x21f/0x3d0 [ 406.737656][ T6596] __ia32_sys_creat+0xcb/0x120 [ 406.737681][ T6596] ? __pfx___ia32_sys_creat+0x10/0x10 [ 406.737726][ T6596] ? __pfx_ksys_write+0x10/0x10 [ 406.737748][ T6596] ? __do_fast_syscall_32+0xb3/0x8b0 [ 406.737774][ T6596] __do_fast_syscall_32+0x13a/0x8b0 [ 406.737792][ T6596] ? lockdep_hardirqs_on+0x7d/0x110 [ 406.737817][ T6596] do_fast_syscall_32+0x32/0x70 [ 406.737840][ T6596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.737862][ T6596] RIP: 0023:0xf705efec [ 406.737885][ T6596] Code: Unable to access opcode bytes at 0xf705efc2. [ 406.737892][ T6596] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 406.737919][ T6596] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000090 [ 406.737931][ T6596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.737941][ T6596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.737950][ T6596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 406.737962][ T6596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.737986][ T6596] [ 406.823090][ T6560] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 406.825329][ T6596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.835450][ T42] kauditd_printk_skb: 369 callbacks suppressed [ 406.835462][ T42] audit: type=1804 audit(1787198387.892:381): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.183" name="/newroot/58/file0/file1" dev="overlay" ino=355 res=1 errno=0 [ 406.886628][ T42] audit: type=1804 audit(1787198387.932:382): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.181" name="/newroot/65/file0/file1" dev="overlay" ino=376 res=1 errno=0 [ 407.078756][ T6560] usb 9-1: Using ep0 maxpacket: 32 [ 407.098664][ T6560] usb 9-1: New USB device found, idVendor=13d3, idProduct=3359, bcdDevice=19.19 [ 407.102792][ T6560] usb 9-1: config 129 has an invalid interface number: 203 but max is 1 [ 407.107483][ T6560] usb 9-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 407.117263][ T6560] usb 9-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 407.124425][ T6560] usb 9-1: config 129 has an invalid interface number: 35 but max is 1 [ 407.128650][ T6560] usb 9-1: config 129 has no interface number 0 [ 407.133847][ T6560] usb 9-1: config 129 has no interface number 1 [ 407.136593][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 407.143555][ T6560] usb 9-1: config 129 interface 203 altsetting 4 endpoint 0xF has an invalid bInterval 109, changing to 10 [ 407.149063][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.158009][ T5799] Bluetooth: hci2: command tx timeout [ 407.161054][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 407.166759][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.172774][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 407.182041][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.185725][ T6560] usb 9-1: config 129 interface 203 altsetting 4 endpoint 0x4 has invalid maxpacket 1536, setting to 64 [ 407.189738][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.193808][ T6560] usb 9-1: config 129 interface 203 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.199730][ T6560] usb 9-1: config 129 interface 203 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 407.203462][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 407.207516][ T6560] usb 9-1: config 129 interface 35 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 407.209006][ T6609] trusted_key: encrypted_key: insufficient parameters specified [ 407.219608][ T6560] usb 9-1: config 129 interface 35 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 407.223350][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 407.226984][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 407.230646][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.242343][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.247054][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 407.251891][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 407.255513][ T6560] usb 9-1: config 129 interface 35 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 407.260315][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 407.288863][ T6560] usb 9-1: config 129 interface 35 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 407.298217][ T6560] usb 9-1: config 129 interface 203 has no altsetting 0 [ 407.304395][ T6560] usb 9-1: config 129 interface 35 has no altsetting 0 [ 407.310502][ T6560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.313600][ T6560] usb 9-1: Manufacturer: 、 [ 407.315726][ T6560] usb 9-1: SerialNumber: 㠊 [ 407.508466][ T6621] macvtap1: entered promiscuous mode [ 407.510193][ T6621] dummy0: entered promiscuous mode [ 407.532841][ T9] dummy0: left promiscuous mode [ 407.575727][ T6560] usb 9-1: USB disconnect, device number 2 [ 407.696215][ T6629] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 408.255737][ T6639] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 408.428373][ T6636] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 408.469229][ T6636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.511248][ T6636] tipc: Failed to obtain node identity [ 408.513094][ T6636] tipc: Enabling of bearer rejected, failed to enable media [ 408.692163][ T6651] [U]  [ 408.694048][ T6652] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 409.159608][ T6661] netlink: 'syz.1.199': attribute type 3 has an invalid length. [ 409.185871][ T6661] netlink: 'syz.1.199': attribute type 39 has an invalid length. [ 409.275904][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.309259][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.319490][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.327631][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.667015][ T6674] FAULT_INJECTION: forcing a failure. [ 409.667015][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.689897][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT(full) [ 409.689915][ T6674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.689922][ T6674] Call Trace: [ 409.689926][ T6674] [ 409.689930][ T6674] dump_stack_lvl+0x100/0x190 [ 409.689950][ T6674] should_fail_ex.cold+0x5/0xa [ 409.689963][ T6674] _copy_from_iter+0x1f4/0x1690 [ 409.689978][ T6674] ? __asan_memset+0x23/0x50 [ 409.689992][ T6674] ? __pfx__copy_from_iter+0x10/0x10 [ 409.690004][ T6674] ? __pfx___alloc_skb+0x10/0x10 [ 409.690023][ T6674] netlink_sendmsg+0x808/0xda0 [ 409.690037][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.690049][ T6674] ? apparmor_socket_sendmsg+0x15b/0x270 [ 409.690063][ T6674] ____sys_sendmsg+0xa4d/0xbe0 [ 409.690078][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.690089][ T6674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.690110][ T6674] ___sys_sendmsg+0x190/0x1e0 [ 409.690128][ T6674] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.690150][ T6674] ? find_held_lock+0x2b/0x80 [ 409.690174][ T6674] __sys_sendmsg+0x160/0x210 [ 409.690187][ T6674] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.690203][ T6674] ? __pfx_ksys_write+0x10/0x10 [ 409.690219][ T6674] __do_fast_syscall_32+0x13a/0x8b0 [ 409.690232][ T6674] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.690243][ T6674] do_fast_syscall_32+0x32/0x70 [ 409.690255][ T6674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.690269][ T6674] RIP: 0023:0xf702efec [ 409.690283][ T6674] Code: Unable to access opcode bytes at 0xf702efc2. [ 409.690288][ T6674] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 409.690299][ T6674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 409.690306][ T6674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.690312][ T6674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.690318][ T6674] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 409.690324][ T6674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.690336][ T6674] [ 409.891134][ T6681] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 410.236424][ T6691] capability: warning: `syz.2.208' uses 32-bit capabilities (legacy support in use) [ 410.297881][ T6678] pim6reg1: entered promiscuous mode [ 410.304217][ T6678] pim6reg1: entered allmulticast mode [ 410.365944][ T6694] capability: warning: `syz.3.207' uses deprecated v2 capabilities in a way that may be insecure [ 411.012659][ T6709] FAULT_INJECTION: forcing a failure. [ 411.012659][ T6709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.030992][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 411.031017][ T6709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.031026][ T6709] Call Trace: [ 411.031035][ T6709] [ 411.031042][ T6709] dump_stack_lvl+0x100/0x190 [ 411.031067][ T6709] should_fail_ex.cold+0x5/0xa [ 411.031088][ T6709] _copy_from_iter+0x1f4/0x1690 [ 411.031111][ T6709] ? __asan_memset+0x23/0x50 [ 411.031132][ T6709] ? __pfx__copy_from_iter+0x10/0x10 [ 411.031150][ T6709] ? __pfx___alloc_skb+0x10/0x10 [ 411.031178][ T6709] netlink_sendmsg+0x808/0xda0 [ 411.031199][ T6709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.031218][ T6709] ? apparmor_socket_sendmsg+0x15b/0x270 [ 411.031240][ T6709] ____sys_sendmsg+0xa4d/0xbe0 [ 411.031268][ T6709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.031289][ T6709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.031344][ T6709] ___sys_sendmsg+0x190/0x1e0 [ 411.031369][ T6709] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.031403][ T6709] ? find_held_lock+0x2b/0x80 [ 411.031440][ T6709] __sys_sendmsg+0x160/0x210 [ 411.031459][ T6709] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.031484][ T6709] ? __pfx_ksys_write+0x10/0x10 [ 411.031507][ T6709] __do_fast_syscall_32+0x13a/0x8b0 [ 411.031526][ T6709] ? lockdep_hardirqs_on+0x7d/0x110 [ 411.031543][ T6709] do_fast_syscall_32+0x32/0x70 [ 411.031560][ T6709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.031581][ T6709] RIP: 0023:0xf705efec [ 411.031601][ T6709] Code: Unable to access opcode bytes at 0xf705efc2. [ 411.031608][ T6709] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 411.031624][ T6709] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 411.031634][ T6709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.031647][ T6709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.031656][ T6709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 411.031665][ T6709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.031685][ T6709] [ 411.124748][ T6711] ======================================================= [ 411.124748][ T6711] WARNING: The mand mount option has been deprecated and [ 411.124748][ T6711] and is ignored by this kernel. Remove the mand [ 411.124748][ T6711] option from the mount to silence this warning. [ 411.124748][ T6711] ======================================================= [ 411.424512][ T6688] syz.1.206 (6688): drop_caches: 2 [ 411.468807][ T6716] exFAT-fs (nullb0): invalid boot record signature [ 411.473567][ T6716] exFAT-fs (nullb0): failed to read boot sector [ 411.476661][ T6716] exFAT-fs (nullb0): failed to recognize exfat type [ 411.729452][ T5871] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 411.939945][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.955062][ T5871] usb 6-1: not running at top speed; connect to a high speed hub [ 411.957878][ T5871] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 411.962929][ T5871] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 411.965575][ T5871] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 411.968641][ T5871] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 411.971882][ T5871] usb 6-1: config 14 has no interface number 0 [ 411.973843][ T5871] usb 6-1: config 14 has no interface number 1 [ 411.975827][ T5871] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 411.987788][ T5871] usb 6-1: config 14 interface 228 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 411.994444][ T5871] usb 6-1: config 14 interface 57 has no altsetting 0 [ 411.998692][ T5871] usb 6-1: config 14 interface 228 has no altsetting 0 [ 412.010633][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.013738][ T5871] usb 6-1: Product: syz [ 412.015357][ T5871] usb 6-1: Manufacturer: syz [ 412.018888][ T5871] usb 6-1: SerialNumber: syz [ 412.444344][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.458632][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.720715][ T6740] Zero length message leads to an empty skb [ 413.131272][ T5871] legousbtower 6-1:14.57: interrupt endpoints not found [ 413.148100][ T5871] legousbtower 6-1:14.228: interrupt endpoints not found [ 413.159100][ T5871] usb 6-1: USB disconnect, device number 4 [ 413.561831][ T6755] FAT-fs (nullb0): bogus number of reserved sectors [ 413.564025][ T6755] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 413.802855][ T6759] binder: 6758:6759 ioctl c0306201 80000480 returned -14 [ 413.820488][ T6759] support for cryptoloop has been removed. Use dm-crypt instead. [ 413.874105][ T6761] __nla_validate_parse: 23 callbacks suppressed [ 413.874119][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 414.601145][ T6777] FAT-fs (nullb0): bogus number of reserved sectors [ 414.616787][ T6777] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 415.263038][ T6716] Set syz1 is full, maxelem 65536 reached [ 415.420375][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 415.652706][ T6814] FAT-fs (nullb0): bogus number of reserved sectors [ 415.657210][ T6814] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 415.926279][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 415.930696][ T6834] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 415.933835][ T6834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.945226][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 416.438128][ T6030] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 416.587964][ T6030] usb 6-1: Using ep0 maxpacket: 32 [ 416.592433][ T6030] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 416.612489][ T6030] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.620096][ T6030] usb 6-1: config 0 has no interface number 0 [ 416.640940][ T6030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.644916][ T6030] usb 6-1: Product: syz [ 416.646825][ T6030] usb 6-1: Manufacturer: syz [ 416.649894][ T6030] usb 6-1: SerialNumber: syz [ 416.677158][ T6030] usb 6-1: config 0 descriptor?? [ 416.687796][ T6030] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 416.696250][ T6030] usb 6-1: selecting invalid altsetting 1 [ 416.698487][ T6030] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 416.805847][ T6030] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.818680][ T6030] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 416.829013][ T6030] usb 6-1: media controller created [ 416.854196][ T6560] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 416.870153][ T6030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.966407][ T6030] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 416.969556][ T6030] zl10353_read_register: readreg error (reg=127, ret==-71) [ 416.975552][ T6030] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 416.987912][ T6560] usb 9-1: device descriptor read/64, error -71 [ 417.043408][ T6030] usb 6-1: USB disconnect, device number 5 [ 417.247813][ T6560] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 417.287788][ T1485] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 417.378490][ T6560] usb 9-1: device descriptor read/64, error -71 [ 417.441605][ T1485] usb 7-1: Using ep0 maxpacket: 8 [ 417.447240][ T1485] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 417.464987][ T1485] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.492513][ T6560] usb usb9-port1: attempt power cycle [ 417.500973][ T1485] pvrusb2: Hardware description: Terratec Grabster AV400 [ 417.511220][ T1485] pvrusb2: ********** [ 417.512549][ T1485] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 417.519565][ T1485] pvrusb2: Important functionality might not be entirely working. [ 417.522127][ T1485] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 417.525628][ T1485] pvrusb2: ********** [ 417.532604][ T6859] FAULT_INJECTION: forcing a failure. [ 417.532604][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.538410][ T6859] CPU: 2 UID: 0 PID: 6859 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(full) [ 417.538434][ T6859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.538446][ T6859] Call Trace: [ 417.538454][ T6859] [ 417.538461][ T6859] dump_stack_lvl+0x100/0x190 [ 417.538491][ T6859] should_fail_ex.cold+0x5/0xa [ 417.538512][ T6859] _copy_from_user+0x2e/0xd0 [ 417.538533][ T6859] kstrtouint_from_user+0xd6/0x1d0 [ 417.538556][ T6859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 417.538578][ T6859] ? __lock_acquire+0x4c5/0x1ec0 [ 417.538612][ T6859] proc_fail_nth_write+0x83/0x220 [ 417.538636][ T6859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 417.538660][ T6859] vfs_write+0x2aa/0x1050 [ 417.538695][ T6859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 417.538716][ T6859] ? __pfx_vfs_write+0x10/0x10 [ 417.538732][ T6859] ? find_held_lock+0x2b/0x80 [ 417.538759][ T6859] ? __fget_files+0x215/0x3d0 [ 417.538787][ T6859] ? __fget_files+0x21f/0x3d0 [ 417.538812][ T6859] ksys_write+0x12a/0x250 [ 417.538829][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 417.538853][ T6859] do_int80_emulation+0x166/0x650 [ 417.538876][ T6859] asm_int80_emulation+0x1a/0x20 [ 417.538895][ T6859] RIP: 0023:0xf71674eb [ 417.538911][ T6859] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 417.538928][ T6859] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 417.538945][ T6859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 417.538955][ T6859] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.538964][ T6859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.538972][ T6859] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.538981][ T6859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.539003][ T6859] [ 417.706872][ T2510] pvrusb2: Invalid write control endpoint [ 417.796962][ T2510] pvrusb2: Invalid write control endpoint [ 417.803507][ T2510] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 417.810166][ T2510] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 417.813386][ T2510] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 417.817551][ T2510] pvrusb2: Device being rendered inoperable [ 417.839045][ T2510] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 417.858949][ T2510] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 417.865306][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 417.884378][ T2510] pvrusb2: Attached sub-driver cx25840 [ 417.886931][ T2510] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 417.890772][ T6560] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 417.897915][ T2510] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 417.913605][ T1485] usb 7-1: USB disconnect, device number 3 [ 417.919472][ T6560] usb 9-1: device descriptor read/8, error -71 [ 418.183470][ T6560] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 418.218501][ T6560] usb 9-1: device descriptor read/8, error -71 [ 418.330452][ T6560] usb usb9-port1: unable to enumerate USB device [ 418.794999][ T6863] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 419.051223][ T6891] netlink: 164 bytes leftover after parsing attributes in process `syz.1.259'. [ 419.060228][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 419.926977][ T6908] overlayfs: overlapping lowerdir path [ 420.112795][ T42] audit: type=1800 audit(1787198401.172:383): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.266" name="addr_trtype" dev="configfs" ino=16042 res=0 errno=0 [ 420.518248][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 420.681281][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.701989][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.713088][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.724850][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.744888][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.769021][ T9] usb 8-1: config 0 descriptor?? [ 421.030324][ T6917] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 421.045486][ T6917] netlink: 'syz.3.268': attribute type 7 has an invalid length. [ 421.193043][ T6931] syz_tun: left allmulticast mode [ 421.201411][ T6931] syz_tun: left promiscuous mode [ 421.214513][ T6931] bridge0: port 3(syz_tun) entered disabled state [ 421.315805][ T6931] bridge_slave_0: left allmulticast mode [ 421.330008][ T6931] bridge_slave_0: left promiscuous mode [ 421.344061][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.395770][ T6931] bridge_slave_1: left allmulticast mode [ 421.404852][ T6931] bridge_slave_1: left promiscuous mode [ 421.413218][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.502230][ T6931] bond0: (slave bond_slave_0): Releasing backup interface [ 421.564002][ T6931] bond0: (slave bond_slave_1): Releasing backup interface [ 421.577397][ T6931] team0: Port device team_slave_0 removed [ 421.587880][ T6931] team0: Port device team_slave_1 removed [ 421.591020][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.594052][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.600801][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.603244][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.608665][ T6931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.642844][ T6917] U: entered promiscuous mode [ 421.679005][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 421.686902][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 421.708913][ T9] usb 8-1: USB disconnect, device number 3 [ 421.964561][ T6955] jffs2: notice: (6955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 423.159133][ T6967] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 423.170596][ T6967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.787163][ T6990] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 423.823739][ T42] audit: type=1800 audit(1787198404.872:384): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="file0" dev="overlay" ino=524 res=0 errno=0 [ 423.849292][ T6990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.858504][ T6995] netlink: 2 bytes leftover after parsing attributes in process `syz.2.287'. [ 424.096715][ T6990] bond3: (slave gretap1): making interface the new active one [ 424.121708][ T6990] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 424.375121][ T7000] Illegal XDP return value 2494999669 on prog (id 44) dev N/A, expect packet loss! [ 424.605013][ T7010] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 424.909724][ T7022] overlayfs: conflicting options: nfs_export=on,index=off [ 425.445855][ T7034] input: syz0 as /devices/virtual/input/input5 [ 425.828045][ T1485] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 425.978007][ T1485] usb 8-1: Using ep0 maxpacket: 8 [ 425.983554][ T1485] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.998160][ T1485] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 426.006577][ T1485] usb 8-1: config 0 has no interface number 0 [ 426.016144][ T1485] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.031215][ T1485] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 426.043838][ T1485] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.057198][ T1485] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.068185][ T1485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.078843][ T1485] usb 8-1: config 0 descriptor?? [ 426.098042][ T1485] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 426.165313][ T7049] netlink: 'syz.4.304': attribute type 1 has an invalid length. [ 426.169145][ T7049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.304'. [ 426.352388][ T7053] netlink: 56 bytes leftover after parsing attributes in process `syz.4.306'. [ 426.434244][ T1485] usb 8-1: USB disconnect, device number 4 [ 426.434358][ C2] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 426.440824][ T1485] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 426.442120][ T7039] ldusb: No device or device unplugged -19 [ 426.485358][ T7059] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 426.531088][ T7059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.582074][ T7057] tipc: Failed to obtain node identity [ 426.585388][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 427.646525][ T7090] loop9: detected capacity change from 0 to 524287998 [ 427.680437][ T42] audit: type=1326 audit(1787198408.732:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.345846][ T42] audit: type=1326 audit(1787198408.732:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.352402][ T42] audit: type=1326 audit(1787198408.732:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.359143][ T42] audit: type=1326 audit(1787198408.742:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.365820][ T42] audit: type=1326 audit(1787198408.742:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.372488][ T42] audit: type=1326 audit(1787198408.792:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.379298][ T42] audit: type=1326 audit(1787198408.792:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.387532][ T42] audit: type=1326 audit(1787198408.792:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.394902][ T42] audit: type=1326 audit(1787198408.912:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.401860][ T42] audit: type=1326 audit(1787198408.912:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 428.525695][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.620975][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.744425][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.974779][ T7122] PKCS7: Unsupported SignedData version [ 429.045668][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 429.399446][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 429.432259][ T7141] FAULT_INJECTION: forcing a failure. [ 429.432259][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 429.436366][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.2.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.436396][ T7141] Tainted: [L]=SOFTLOCKUP [ 429.436400][ T7141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.436407][ T7141] Call Trace: [ 429.436411][ T7141] [ 429.436416][ T7141] dump_stack_lvl+0x100/0x190 [ 429.436434][ T7141] should_fail_ex.cold+0x5/0xa [ 429.436448][ T7141] should_failslab+0xc2/0x120 [ 429.436466][ T7141] __kmalloc_cache_noprof+0x91/0x6b0 [ 429.436480][ T7141] ? call_usermodehelper_setup+0xaf/0x360 [ 429.436500][ T7141] ? __pfx_free_modprobe_argv+0x10/0x10 [ 429.436529][ T7141] call_usermodehelper_setup+0xaf/0x360 [ 429.436549][ T7141] __request_module+0x3c7/0x6a0 [ 429.436562][ T7141] ? __pfx___request_module+0x10/0x10 [ 429.436576][ T7141] ? rcu_is_watching+0x13/0xc0 [ 429.436594][ T7141] ? crypto_alg_lookup+0x10c/0x1e0 [ 429.436611][ T7141] ? crypto_alg_lookup+0x10c/0x1e0 [ 429.436631][ T7141] crypto_alg_mod_lookup+0x413/0x5d0 [ 429.436649][ T7141] crypto_alloc_tfm_node+0xd3/0x260 [ 429.436667][ T7141] esp_init_authenc.constprop.0+0x1df/0xb50 [ 429.436688][ T7141] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 429.436709][ T7141] esp6_init_state+0x3a6/0x500 [ 429.436721][ T7141] __xfrm_init_state+0x842/0x1dc0 [ 429.436738][ T7141] xfrm_add_sa+0x2725/0x5cb0 [ 429.436754][ T7141] ? __pfx_xfrm_add_sa+0x10/0x10 [ 429.436768][ T7141] ? __pfx_xfrm_add_sa+0x10/0x10 [ 429.436780][ T7141] xfrm_user_rcv_msg+0x411/0xd00 [ 429.436793][ T7141] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 429.436804][ T7141] ? stack_trace_save+0x8e/0xc0 [ 429.436819][ T7141] ? __pfx_stack_trace_save+0x10/0x10 [ 429.436835][ T7141] ? stack_depot_save_flags+0x27/0x9f0 [ 429.436851][ T7141] ? stack_trace_save+0x8e/0xc0 [ 429.436879][ T7141] ? rcu_is_watching+0x13/0xc0 [ 429.436892][ T7141] ? trace_contention_end+0x126/0x160 [ 429.436906][ T7141] ? __mutex_lock+0x26c/0x1bc0 [ 429.436921][ T7141] netlink_rcv_skb+0x159/0x420 [ 429.436932][ T7141] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 429.436943][ T7141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.436962][ T7141] xfrm_netlink_rcv+0x71/0x90 [ 429.436972][ T7141] netlink_unicast+0x585/0x850 [ 429.436984][ T7141] ? __pfx_netlink_unicast+0x10/0x10 [ 429.437004][ T7141] netlink_sendmsg+0x8b0/0xda0 [ 429.437017][ T7141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.437028][ T7141] ? apparmor_socket_sendmsg+0x15b/0x270 [ 429.437043][ T7141] ____sys_sendmsg+0xa4d/0xbe0 [ 429.437058][ T7141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.437069][ T7141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.437091][ T7141] ___sys_sendmsg+0x190/0x1e0 [ 429.437109][ T7141] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.437131][ T7141] ? find_held_lock+0x2b/0x80 [ 429.437154][ T7141] __sys_sendmsg+0x160/0x210 [ 429.437167][ T7141] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.437184][ T7141] ? __pfx_ksys_write+0x10/0x10 [ 429.437199][ T7141] __do_fast_syscall_32+0x13a/0x8b0 [ 429.437211][ T7141] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.437223][ T7141] do_fast_syscall_32+0x32/0x70 [ 429.437234][ T7141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.437249][ T7141] RIP: 0023:0xf705efec [ 429.437262][ T7141] Code: Unable to access opcode bytes at 0xf705efc2. [ 429.437278][ T7141] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 429.437290][ T7141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 429.437297][ T7141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.437303][ T7141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.437309][ T7141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 429.437315][ T7141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.437329][ T7141] [ 429.918732][ T7152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.332'. [ 429.961208][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 429.973906][ T7154] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 430.526565][ T7166] FAT-fs (nullb0): bogus number of reserved sectors [ 430.530386][ T7166] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 431.055380][ T7177] overlayfs: missing 'lowerdir' [ 431.073581][ T5799] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 431.085824][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 431.098650][ T7179] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 431.167015][ T7181] autofs: Unknown parameter './file1' [ 431.285614][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 431.288549][ T7183] netlink: 348 bytes leftover after parsing attributes in process `syz.1.341'. [ 431.291424][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 431.294503][ T7183] netlink: 348 bytes leftover after parsing attributes in process `syz.1.341'. [ 431.297863][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 431.855671][ T7201] netlink: 'syz.3.350': attribute type 12 has an invalid length. [ 431.971022][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 431.974991][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 431.981832][ T64] Bluetooth: hci1: hardware error 0x00 [ 432.108387][ T7208] nvme nvme0: rdma_resolve_addr failed (-19). [ 432.394456][ T7223] FAT-fs (nullb0): bogus number of reserved sectors [ 432.397216][ T7223] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 432.671322][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 432.682668][ T7229] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 433.102918][ T7231] 9pnet_fd: p9_fd_create_tcp (7231): problem connecting socket to 127.0.0.1 [ 433.225411][ T7240] bridge1: entered promiscuous mode [ 433.228793][ T7240] bridge1: entered allmulticast mode [ 433.261107][ T7244] FAT-fs (nullb0): bogus number of reserved sectors [ 433.264393][ T7244] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 433.364199][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 433.364214][ T42] audit: type=1804 audit(1787198414.412:402): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.363" name="/newroot/78/file0/file0" dev="9p" ino=79953995 res=1 errno=0 [ 433.475945][ T7259] comedi comedi1: Minor 2 could not be opened [ 433.595070][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.603476][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.626504][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.656825][ T7259] bond_slave_0: entered promiscuous mode [ 433.665981][ T7259] bond_slave_1: entered promiscuous mode [ 433.695839][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.705498][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.725978][ T7259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.730537][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.766621][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 433.774078][ T7259] veth1_vlan: left promiscuous mode [ 433.790173][ T7259] veth0_vlan: left promiscuous mode [ 433.790691][ T7276] jffs2: notice: (7276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 433.795519][ T7259] veth0_vlan: entered promiscuous mode [ 433.823265][ T7259] veth1_vlan: entered promiscuous mode [ 433.865354][ T7259] veth1_macvtap: left promiscuous mode [ 433.872548][ T7259] veth0_macvtap: left promiscuous mode [ 433.875865][ T7259] veth0_macvtap: entered promiscuous mode [ 433.890955][ T7259] veth1_macvtap: entered promiscuous mode [ 433.901243][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.909553][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.934483][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.980894][ T7276] FAULT_INJECTION: forcing a failure. [ 433.980894][ T7276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.982901][ T7259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.990146][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.3.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.990178][ T7276] Tainted: [L]=SOFTLOCKUP [ 433.990181][ T7276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.990188][ T7276] Call Trace: [ 433.990192][ T7276] [ 433.990197][ T7276] dump_stack_lvl+0x100/0x190 [ 433.990217][ T7276] should_fail_ex.cold+0x5/0xa [ 433.990231][ T7276] _copy_from_iter+0x1f4/0x1690 [ 433.990247][ T7276] ? __asan_memset+0x23/0x50 [ 433.990263][ T7276] ? __pfx__copy_from_iter+0x10/0x10 [ 433.990275][ T7276] ? __pfx___alloc_skb+0x10/0x10 [ 433.990293][ T7276] netlink_sendmsg+0x808/0xda0 [ 433.990307][ T7276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.990319][ T7276] ? apparmor_socket_sendmsg+0x15b/0x270 [ 433.990334][ T7276] ____sys_sendmsg+0xa4d/0xbe0 [ 433.990349][ T7276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.990361][ T7276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.990383][ T7276] ___sys_sendmsg+0x190/0x1e0 [ 433.990413][ T7276] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.990436][ T7276] ? find_held_lock+0x2b/0x80 [ 433.990461][ T7276] __sys_sendmsg+0x160/0x210 [ 433.990474][ T7276] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.990490][ T7276] ? __pfx_ksys_write+0x10/0x10 [ 433.990507][ T7276] __do_fast_syscall_32+0x13a/0x8b0 [ 433.990520][ T7276] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.990532][ T7276] do_fast_syscall_32+0x32/0x70 [ 433.990543][ T7276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.990558][ T7276] RIP: 0023:0xf7f75fec [ 433.990567][ T7276] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 433.990577][ T7276] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 433.990589][ T7276] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100 [ 433.990596][ T7276] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.990602][ T7276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.990608][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.990614][ T7276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.990627][ T7276] [ 434.008957][ T7267] syzkaller0: entered promiscuous mode [ 434.059624][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 434.062724][ T7267] syzkaller0: entered allmulticast mode [ 434.064872][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.077338][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.082881][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.085163][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.257923][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.260868][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.270140][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.318323][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 434.323920][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.861849][ T7309] hfsplus: unable to find HFS+ superblock [ 435.319756][ T42] audit: type=1326 audit(1787198416.372:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.337672][ T42] audit: type=1326 audit(1787198416.372:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.350091][ T7331] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 435.352674][ T42] audit: type=1326 audit(1787198416.382:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.369961][ T42] audit: type=1326 audit(1787198416.382:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.390783][ T42] audit: type=1326 audit(1787198416.382:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.399564][ T7331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.401775][ T7338] netlink: 71 bytes leftover after parsing attributes in process `syz.1.392'. [ 435.406602][ T42] audit: type=1326 audit(1787198416.382:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.422551][ T42] audit: type=1326 audit(1787198416.382:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.433235][ T7331] tipc: Failed to obtain node identity [ 435.435659][ T42] audit: type=1326 audit(1787198416.382:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.443147][ T7331] tipc: Enabling of bearer rejected, failed to enable media [ 435.449028][ T42] audit: type=1326 audit(1787198416.382:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.2.391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 435.855713][ T7349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 435.873420][ T7349] block device autoloading is deprecated and will be removed. [ 436.053575][ T7362] lo: entered allmulticast mode [ 436.108449][ T7362] nvme_fabrics: missing parameter 'traddr=%s' [ 436.467778][ T7362] lo: left allmulticast mode [ 436.576675][ T7377] syz.4.402 (7377): /proc/7376/oom_adj is deprecated, please use /proc/7376/oom_score_adj instead. [ 436.612496][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 436.651646][ T7378] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 436.655258][ T7377] syzkaller0: entered promiscuous mode [ 436.659547][ T7377] syzkaller0: entered allmulticast mode [ 436.675369][ T7377] tipc: Started in network mode [ 436.681876][ T7377] tipc: Node identity da40041a5845, cluster identity 4711 [ 436.698837][ T7377] tipc: Enabled bearer , priority 0 [ 436.708808][ T7377] tipc: Resetting bearer [ 436.729278][ T7376] tipc: Resetting bearer [ 436.811555][ T7376] tipc: Disabling bearer [ 436.861699][ T7380] jffs2: notice: (7380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 437.294236][ T7393] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 437.323339][ T7393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.329841][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 437.337055][ T7393] tipc: Failed to obtain node identity [ 437.341260][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 437.450900][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 437.460866][ T7406] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 437.685371][ T7408] sd 0:0:0:0: PR command failed: 1026 [ 437.701771][ T7408] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 437.707254][ T7408] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 438.162934][ T7424] binder: 7423:7424 ioctl 400c620e 80000200 returned -22 [ 438.235788][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 438.250999][ T7431] binder_alloc: 7423: binder_alloc_buf, no vma [ 438.258588][ T7424] binder: 7423:7424 ioctl c0306201 800003c0 returned -14 [ 438.272402][ T7430] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 438.283441][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 438.289734][ T7433] openvswitch: netlink: Flow key attr not present in new flow. [ 438.300852][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 438.808155][ T6030] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 438.822653][ T7452] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 438.835311][ T7452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.842883][ T7452] tipc: Failed to obtain node identity [ 438.844675][ T7452] tipc: Enabling of bearer rejected, failed to enable media [ 438.958231][ T6030] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 438.962286][ T6030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.223063][ T6030] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 439.299887][ T7458] Invalid ELF header magic: != ELF [ 439.371182][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 439.380820][ T7464] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 439.469280][ T7447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 439.588826][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.591115][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.748798][ T6149] usb 8-1: USB disconnect, device number 5 [ 440.219733][ T7481] FAT-fs (nullb0): bogus number of reserved sectors [ 440.228409][ T7481] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 440.296369][ T7483] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 440.345002][ T7483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.356145][ T7487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.436'. [ 440.535447][ T7489] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 440.565434][ T7489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.599603][ T7489] tipc: Failed to obtain node identity [ 440.603865][ T7489] tipc: Enabling of bearer rejected, failed to enable media [ 440.713330][ T7493] netlink: 'syz.4.439': attribute type 3 has an invalid length. [ 441.514125][ T7506] FAULT_INJECTION: forcing a failure. [ 441.514125][ T7506] name failslab, interval 1, probability 0, space 0, times 0 [ 441.537542][ T7506] CPU: 2 UID: 0 PID: 7506 Comm: syz.1.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.537562][ T7506] Tainted: [L]=SOFTLOCKUP [ 441.537566][ T7506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.537572][ T7506] Call Trace: [ 441.537578][ T7506] [ 441.537585][ T7506] dump_stack_lvl+0x100/0x190 [ 441.537606][ T7506] should_fail_ex.cold+0x5/0xa [ 441.537621][ T7506] should_failslab+0xc2/0x120 [ 441.537639][ T7506] __kmalloc_cache_noprof+0x91/0x6b0 [ 441.537654][ T7506] ? configfs_write_iter+0x388/0x4e0 [ 441.537673][ T7506] configfs_write_iter+0x388/0x4e0 [ 441.537707][ T7506] vfs_write+0x6af/0x1050 [ 441.537721][ T7506] ? __pfx_configfs_write_iter+0x10/0x10 [ 441.537738][ T7506] ? __pfx_vfs_write+0x10/0x10 [ 441.537748][ T7506] ? find_held_lock+0x2b/0x80 [ 441.537774][ T7506] ksys_write+0x12a/0x250 [ 441.537785][ T7506] ? __pfx_ksys_write+0x10/0x10 [ 441.537796][ T7506] ? ksys_write+0x1ac/0x250 [ 441.537808][ T7506] ? __pfx_ksys_write+0x10/0x10 [ 441.537822][ T7506] __do_fast_syscall_32+0x13a/0x8b0 [ 441.537838][ T7506] ? lockdep_hardirqs_on+0x7d/0x110 [ 441.537850][ T7506] do_fast_syscall_32+0x32/0x70 [ 441.537862][ T7506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.537878][ T7506] RIP: 0023:0xf702efec [ 441.537891][ T7506] Code: Unable to access opcode bytes at 0xf702efc2. [ 441.537896][ T7506] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 441.537908][ T7506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 441.537915][ T7506] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.537921][ T7506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.537927][ T7506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.537933][ T7506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.537947][ T7506] [ 441.640108][ T7503] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 441.738891][ T7503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.745323][ T7510] tipc: Started in network mode [ 441.745836][ T7516] FAT-fs (nullb0): bogus number of reserved sectors [ 441.747154][ T7510] tipc: Node identity ac14142f, cluster identity 4711 [ 441.750218][ T7516] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 441.758627][ T7510] tipc: New replicast peer: 172.20.20.170 [ 441.762246][ T7510] tipc: Enabled bearer , priority 10 [ 441.764650][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 441.768328][ T7517] netlink: 9 bytes leftover after parsing attributes in process `syz.3.441'. [ 442.481472][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 442.484210][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 442.486924][ T7528] netlink: 'syz.2.447': attribute type 6 has an invalid length. [ 442.771059][ T7546] syzkaller0: entered promiscuous mode [ 442.771074][ T7546] syzkaller0: entered allmulticast mode [ 442.773431][ T6030] tipc: Node number set to 2886997039 [ 442.901386][ T7549] FAT-fs (nullb0): bogus number of reserved sectors [ 442.901400][ T7549] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 442.948363][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 443.054372][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 443.072822][ T7554] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 443.098819][ T9] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 443.099787][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 118, changing to 10 [ 443.111037][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25956, setting to 1024 [ 443.114599][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 118, changing to 10 [ 443.131124][ T9] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25956, setting to 1024 [ 443.133052][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.149745][ T9] usb 9-1: Product: syz [ 443.149758][ T9] usb 9-1: Manufacturer: syz [ 443.149766][ T9] usb 9-1: SerialNumber: syz [ 443.155012][ T7509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 443.165240][ T9] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 443.201725][ T7556] FAULT_INJECTION: forcing a failure. [ 443.201725][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 443.201795][ T7556] CPU: 2 UID: 0 PID: 7556 Comm: syz.1.457 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.201819][ T7556] Tainted: [L]=SOFTLOCKUP [ 443.201825][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.201835][ T7556] Call Trace: [ 443.201840][ T7556] [ 443.201847][ T7556] dump_stack_lvl+0x100/0x190 [ 443.201874][ T7556] should_fail_ex.cold+0x5/0xa [ 443.201877][ T9] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 443.201894][ T7556] should_failslab+0xc2/0x120 [ 443.201920][ T7556] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 443.201944][ T7556] ? __d_alloc+0x35/0xa50 [ 443.201987][ T7556] __d_alloc+0x35/0xa50 [ 443.202012][ T7556] d_alloc_parallel+0x105/0x14c0 [ 443.202030][ T7556] ? __up_read+0x333/0x980 [ 443.202055][ T7556] ? __pfx_d_alloc_parallel+0x10/0x10 [ 443.202072][ T7556] ? __pfx___might_resched+0x10/0x10 [ 443.202111][ T7556] ? find_held_lock+0x2b/0x80 [ 443.202134][ T7556] ? down_read+0x13b/0x4c0 [ 443.202159][ T7556] ? __pfx_down_read+0x10/0x10 [ 443.202179][ T7556] __lookup_slow+0x98/0x320 [ 443.202207][ T7556] lookup_slow+0x50/0x70 [ 443.202230][ T7556] path_lookupat+0x5e8/0xc40 [ 443.202251][ T7556] filename_lookup+0x202/0x590 [ 443.202271][ T7556] ? __pfx_filename_lookup+0x10/0x10 [ 443.202302][ T7556] ? strncpy_from_user+0x19d/0x2d0 [ 443.202327][ T7556] ? do_getname+0x191/0x390 [ 443.202353][ T7556] user_path_at+0x3c/0x60 [ 443.202371][ T7556] __ia32_sys_mount+0x1fb/0x310 [ 443.202395][ T7556] ? __pfx___ia32_sys_mount+0x10/0x10 [ 443.202416][ T7556] ? ksys_write+0x1ac/0x250 [ 443.202434][ T7556] ? __pfx_ksys_write+0x10/0x10 [ 443.202455][ T7556] __do_fast_syscall_32+0x13a/0x8b0 [ 443.202472][ T7556] ? lockdep_hardirqs_on+0x7d/0x110 [ 443.202490][ T7556] do_fast_syscall_32+0x32/0x70 [ 443.202507][ T7556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.202527][ T7556] RIP: 0023:0xf702efec [ 443.202546][ T7556] Code: Unable to access opcode bytes at 0xf702efc2. [ 443.202553][ T7556] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 443.202568][ T7556] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000040 [ 443.202579][ T7556] RDX: 0000000080000000 RSI: 0000000000200001 RDI: 0000000000000000 [ 443.202589][ T7556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.202598][ T7556] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 443.202607][ T7556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.202628][ T7556] [ 443.217662][ T9] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 443.378133][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.378651][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.407097][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.407840][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.412848][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.413032][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.413235][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.413425][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.413605][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.413796][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.414017][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.431188][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.433718][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.433917][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.434095][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.434294][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.434474][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.434663][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.448798][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.448990][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.449168][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.449372][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.449582][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.449790][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450002][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450211][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450396][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450574][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450749][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.450923][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.451097][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.451271][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.451462][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.451648][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.451826][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.452009][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.497662][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.497872][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498063][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498243][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498424][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498610][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498789][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.498967][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.499140][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.499316][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.499502][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.499700][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.500338][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.500516][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.500689][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.500862][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.501053][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.501249][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.501447][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.501647][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.501850][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.502050][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.502256][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.502456][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.502659][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.502857][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.503059][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.503267][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.503466][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.503667][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.503868][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.504068][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.504267][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.504467][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.504667][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.504870][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.505070][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.505281][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.505480][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.505672][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.505871][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.506073][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.506276][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.506477][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.506678][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.506875][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.507073][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.507275][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.507479][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.507676][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.507957][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.508160][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.508359][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.508560][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.508761][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.508980][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.509228][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.509464][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.509681][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.509899][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.510115][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.510324][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.510530][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.510734][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.510939][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.511143][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.511347][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.511550][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.511754][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.511981][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.512187][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.512392][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.512594][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.512797][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.513005][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.513208][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.513405][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.513598][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.513795][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.514018][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.514220][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.514425][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.514630][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.514847][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.752484][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.755903][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.759181][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.762623][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.765841][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.769045][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.772299][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.775708][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.778901][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.781986][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.785136][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.788351][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.791555][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.794796][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.798515][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.801888][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.805218][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.808772][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.812231][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.815500][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.818763][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.821958][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.825133][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.828362][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.831302][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 443.834361][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.837510][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.840770][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.843987][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.847131][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.850333][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.853387][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.856544][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.859715][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.862872][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.865773][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.868841][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.871918][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.874948][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.878429][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.881685][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.884894][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.888156][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.891347][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.894537][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.897678][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.901018][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.904050][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.907112][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.910343][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.911271][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.914410][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.917462][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.920480][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.923101][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.925893][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.929044][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.932157][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.935277][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.938385][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.948008][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.951091][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.954214][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.957348][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.960537][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.963655][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.966806][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.970071][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.973209][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.976394][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.979692][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.982897][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.986051][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.989274][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.992424][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.995485][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 443.998681][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.001793][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.005045][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.008337][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.011633][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.015327][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.019109][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.022286][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.025477][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.028626][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.031897][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.035107][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.038994][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.042339][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.045493][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.049641][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.052893][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.056265][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.059557][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.062754][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.065948][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.069252][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.072431][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.075555][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.078853][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.082053][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.085127][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.085584][ T7565] hfs: can't find a HFS filesystem on dev sr0 [ 444.088362][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.088585][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.091906][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.101558][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.104770][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.107949][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.111232][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.115276][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.118700][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.121661][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.124661][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.127902][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.131116][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.134410][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.137488][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.140781][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.144023][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.147276][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.150555][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.153703][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.156927][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.160177][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.163043][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.166023][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.169013][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.172147][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.175001][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.178297][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.181208][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.184194][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.186896][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.190166][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.193087][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.195596][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.199435][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.201858][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.204336][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.206828][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.209340][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.211898][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.214538][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.217399][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.219781][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.222218][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.224740][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.227204][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.229729][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.232246][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.234700][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.237191][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.239878][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.242455][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.244975][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.247448][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.250004][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.254131][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.256679][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.259163][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.261645][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.264029][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.266518][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.269012][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.271430][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.273825][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.276277][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.278832][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.281250][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 444.282938][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.285216][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.287452][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.289871][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.292308][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.294728][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.297125][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.299544][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.301992][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.304386][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.306720][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.309131][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.311502][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.313902][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.316297][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.318754][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.321425][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.324103][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.326408][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.328770][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.331142][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.333451][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.335830][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.338247][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.340746][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.343137][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.345505][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.348015][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.350441][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.352808][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.355202][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.357524][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.360093][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.362512][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.364949][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.367371][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.369860][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.372286][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.374687][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.377112][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.379578][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.381986][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.384389][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.386760][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.389137][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.391507][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.393935][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.396321][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.398736][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.398963][ T7572] FAT-fs (nullb0): bogus number of reserved sectors [ 444.401054][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.401238][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.403538][ T7572] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 444.405727][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.412629][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.415029][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.417442][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.419870][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.422685][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.425122][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.427637][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.430160][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.432820][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.435509][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.438138][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.440659][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.443116][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.445584][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.448017][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.450542][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.453090][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.455577][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.458085][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.460599][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.463061][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.465565][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.470729][ T7509] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 444.472295][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.476397][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.479087][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.481632][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.484175][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.486732][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.486820][ T7509] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 444.489312][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.489508][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.489699][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.489888][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.502117][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.503710][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 444.504682][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.508568][ T7570] syz.3.464: vmalloc error: size 4284481866, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 444.510453][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.510659][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.510848][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.510985][ T7509] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 444.511044][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.511226][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.515500][ T7570] ,cpuset= [ 444.520314][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.522996][ T7570] / [ 444.525727][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.528623][ T7570] ,mems_allowed=0-1 [ 444.530788][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.532828][ T7570] [ 444.532842][ T7570] CPU: 2 UID: 0 PID: 7570 Comm: syz.3.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.532862][ T7570] Tainted: [L]=SOFTLOCKUP [ 444.532866][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.532873][ T7570] Call Trace: [ 444.532878][ T7570] [ 444.532883][ T7570] dump_stack_lvl+0x100/0x190 [ 444.532902][ T7570] warn_alloc.cold+0x94/0xa8 [ 444.532916][ T7570] ? __pfx_warn_alloc+0x10/0x10 [ 444.532932][ T7570] ? __do_fast_syscall_32+0x13a/0x8b0 [ 444.532946][ T7570] ? do_fast_syscall_32+0x32/0x70 [ 444.532957][ T7570] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.532973][ T7570] ? __lock_acquire+0x4c5/0x1ec0 [ 444.532990][ T7570] __vmalloc_node_range_noprof+0x136c/0x1630 [ 444.533010][ T7570] ? trace_contention_end+0x126/0x160 [ 444.533024][ T7570] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 444.533062][ T7570] ? dvb_demux_do_ioctl+0x929/0x1200 [ 444.533079][ T7570] ? lockdep_hardirqs_on+0x7d/0x110 [ 444.533093][ T7570] ? find_held_lock+0x2b/0x80 [ 444.533109][ T7570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.533121][ T7570] ? __pfx___mutex_lock+0x10/0x10 [ 444.533136][ T7570] ? tomoyo_path_number_perm+0x188/0x580 [ 444.533159][ T7570] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 444.533178][ T7570] __vmalloc_node_noprof+0xad/0xf0 [ 444.533189][ T7570] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 444.533206][ T7570] dvb_demux_do_ioctl+0x9e0/0x1200 [ 444.533223][ T7570] ? do_vfs_ioctl+0x226/0x13e0 [ 444.533237][ T7570] dvb_usercopy+0x167/0x340 [ 444.533251][ T7570] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 444.533268][ T7570] ? __pfx_dvb_usercopy+0x10/0x10 [ 444.533287][ T7570] ? __fget_files+0x21f/0x3d0 [ 444.533303][ T7570] dvb_demux_ioctl+0x29/0x40 [ 444.533317][ T7570] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 444.533331][ T7570] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 444.533344][ T7570] __do_fast_syscall_32+0x13a/0x8b0 [ 444.533356][ T7570] ? lockdep_hardirqs_on+0x7d/0x110 [ 444.533368][ T7570] do_fast_syscall_32+0x32/0x70 [ 444.533380][ T7570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.533393][ T7570] RIP: 0023:0xf7f75fec [ 444.533409][ T7570] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 444.533414][ T7570] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 444.533425][ T7570] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000006f2d [ 444.533432][ T7570] RDX: 00000000ff60014a RSI: 0000000000000000 RDI: 0000000000000000 [ 444.533438][ T7570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.533444][ T7570] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 444.533450][ T7570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.533463][ T7570] [ 444.533479][ T7570] Mem-Info: [ 444.533979][ T7509] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 444.536179][ T7570] active_anon:9751 inactive_anon:18 isolated_anon:0 [ 444.536179][ T7570] active_file:7038 inactive_file:50529 isolated_file:0 [ 444.536179][ T7570] unevictable:5030 dirty:304 writeback:0 [ 444.536179][ T7570] slab_reclaimable:6532 slab_unreclaimable:66306 [ 444.536179][ T7570] mapped:28588 shmem:4372 pagetables:1389 [ 444.536179][ T7570] sec_pagetables:295 bounce:0 [ 444.536179][ T7570] kernel_misc_reclaimable:0 [ 444.536179][ T7570] free:20770 free_pcp:5998 free_cma:0 [ 444.536214][ T7570] Node 0 active_anon:16kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1388kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 444.536247][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.536249][ T7570] Node 1 active_anon:38988kB inactive_anon:68kB active_file:28148kB inactive_file:202116kB unevictable:20120kB isolated(anon):0kB isolated(file):0kB mapped:114324kB dirty:1216kB writeback:0kB shmem:17488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6108kB pagetables:4168kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 444.536282][ T7570] Node 0 DMA free:1956kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:620kB local_pcp:560kB free_cma:0kB [ 444.537178][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.540104][ T7570] lowmem_reserve[]: [ 444.541414][ C0] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 444.543945][ T7570] 0 279 [ 444.555805][ T5862] usb 9-1: USB disconnect, device number 7 [ 444.557758][ T7570] 279 [ 444.561913][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 444.563603][ T7570] 279 279 [ 444.563618][ T7570] Node 0 DMA32 free:15188kB boost:0kB min:12656kB low:15820kB high:18984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:286456kB mlocked:0kB bounce:0kB free_pcp:13328kB local_pcp:7216kB free_cma:0kB [ 444.565628][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 444.567598][ T7570] lowmem_reserve[]: 0 [ 444.578601][ T5862] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 444.580385][ T7570] 0 0 0 0 [ 444.580415][ T7570] Node 1 DMA32 free:65936kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38988kB inactive_anon:68kB active_file:28148kB inactive_file:202116kB unevictable:20120kB writepending:1216kB zspages:2404kB present:1048432kB managed:948212kB mlocked:16120kB bounce:0kB free_pcp:10200kB local_pcp:7040kB free_cma:0kB [ 444.586993][ T5862] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 444.588491][ T7570] lowmem_reserve[]: 0 0 0 0 0 [ 444.588526][ T7570] Node 0 DMA: 15*4kB [ 444.591361][ T5862] ti_usb_3410_5052 9-1:2.0: device disconnected [ 444.592210][ T7570] (UM) [ 444.629153][ T7574] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 444.629645][ T7570] 5*8kB [ 444.649376][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 444.655691][ T7570] (UM) 4*16kB (UM) 6*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1956kB [ 444.755061][ T7570] Node 0 DMA32: 41*4kB (UE) 68*8kB (UME) 39*16kB (UME) 97*32kB (UE) 38*64kB (UE) 25*128kB (UME) 8*256kB (UME) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 15188kB [ 444.761571][ T7570] Node 1 DMA32: 2*4kB (UE) 35*8kB (ME) 35*16kB (ME) 218*32kB (UME) 97*64kB (UME) 67*128kB (UME) 49*256kB (UME) 26*512kB (ME) 7*1024kB (M) 3*2048kB (M) 1*4096kB (U) = 65872kB [ 444.766785][ T7570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.769871][ T7570] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 444.772758][ T7570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.775698][ T7570] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 444.778700][ T7570] 62201 total pagecache pages [ 444.780218][ T7570] 265 pages in swap cache [ 444.781586][ T7570] Free swap = 119884kB [ 444.782880][ T7570] Total swap = 124996kB [ 444.784199][ T7570] 524155 pages RAM [ 444.785380][ T7570] 0 pages HighMem/MovableOnly [ 444.786858][ T7570] 211648 pages reserved [ 444.788177][ T7570] 0 pages cma reserved [ 444.838097][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 444.840334][ T9] usb usb6-port1: attempt power cycle [ 444.868093][ T7581] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 444.873194][ T7581] Error validating options; rc = [-22] [ 445.268964][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 445.301119][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 445.432230][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 445.462449][ T9] usb 6-1: Invalid ep0 maxpacket: 16 [ 445.476181][ T9] usb usb6-port1: unable to enumerate USB device [ 445.478348][ T7594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 445.478381][ T7594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.479196][ T7594] vhci_hcd vhci_hcd.0: Device attached [ 445.524847][ T7600] FAT-fs (nullb0): bogus number of reserved sectors [ 445.533007][ T7600] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 445.602196][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.606793][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.625703][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.629115][ T7602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.633448][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.636461][ T7602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.641069][ T7602] bridge0: entered promiscuous mode [ 445.646763][ T7602] bridge0: entered allmulticast mode [ 445.670979][ T7602] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 445.679590][ T7596] vhci_hcd: connection closed [ 445.679900][ T5842] vhci_hcd vhci_hcd.3: stop threads [ 445.688122][ T5842] vhci_hcd vhci_hcd.3: release socket [ 445.692782][ T5842] vhci_hcd vhci_hcd.3: disconnect device [ 445.697379][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 445.728287][ T6030] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 445.732428][ T6030] usb 43-1: enqueue for inactive port 0 [ 445.798162][ T6030] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 445.881126][ T7612] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 445.883646][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.886814][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 445.959109][ T5871] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 446.016240][ T7613] vhci_hcd: connection closed [ 446.016508][ T5894] vhci_hcd vhci_hcd.2: stop threads [ 446.020785][ T5894] vhci_hcd vhci_hcd.2: release socket [ 446.025636][ T5894] vhci_hcd vhci_hcd.2: disconnect device [ 446.088061][ T6149] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 446.108556][ T5871] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.113291][ T5871] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.116270][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.121723][ T5871] usb 9-1: config 0 has no interface number 0 [ 446.125122][ T5871] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.129707][ T5871] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 446.133849][ T5871] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 446.137410][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.149209][ T5871] usb 9-1: config 0 descriptor?? [ 446.160736][ T5871] ldusb 9-1:0.55: Interrupt in endpoint not found [ 446.366594][ T24] usb 9-1: USB disconnect, device number 8 [ 446.621069][ T7627] loop5: detected capacity change from 0 to 7 [ 446.691353][ T7629] FAT-fs (nullb0): bogus number of reserved sectors [ 446.696051][ T7629] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 447.076565][ T7627] Dev loop5: unable to read RDB block 7 [ 447.082775][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 447.086159][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 447.116730][ T7627] loop5: unable to read partition table [ 447.122383][ T7627] loop5: partition table beyond EOD, truncated [ 447.139324][ T7627] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 447.154104][ T7639] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 447.156675][ T7639] overlayfs: overlapping lowerdir path [ 448.568634][ T6149] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 449.058245][ T7654] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 449.060315][ T7654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 449.064364][ T7654] vhci_hcd vhci_hcd.0: Device attached [ 449.357855][ T24] usb 46-1: SetAddress Request (2) to port 0 [ 449.363641][ T24] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 449.444404][ T7664] vhci_hcd: connection reset by peer [ 449.450425][ T5603] vhci_hcd vhci_hcd.4: stop threads [ 449.452080][ T5603] vhci_hcd vhci_hcd.4: release socket [ 449.457419][ T5603] vhci_hcd vhci_hcd.4: disconnect device [ 449.809810][ T7671] ima: policy update failed [ 449.814770][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 449.814781][ T42] audit: type=1802 audit(1787198430.862:510): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.496" res=0 errno=0 [ 450.314195][ T7676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.322148][ T7676] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 450.395881][ T7676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.404924][ T7676] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 450.436090][ T7699] binder: 7698:7699 ioctl c0306201 80000480 returned -14 [ 450.486981][ T7699] support for cryptoloop has been removed. Use dm-crypt instead. [ 450.754566][ T7716] FAULT_INJECTION: forcing a failure. [ 450.754566][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 450.763350][ T7716] CPU: 2 UID: 0 PID: 7716 Comm: syz.3.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.763371][ T7716] Tainted: [L]=SOFTLOCKUP [ 450.763375][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.763381][ T7716] Call Trace: [ 450.763385][ T7716] [ 450.763390][ T7716] dump_stack_lvl+0x100/0x190 [ 450.763408][ T7716] should_fail_ex.cold+0x5/0xa [ 450.763437][ T7716] should_failslab+0xc2/0x120 [ 450.763458][ T7716] __kmalloc_noprof+0xfc/0x820 [ 450.763474][ T7716] ? rcu_is_watching+0x13/0xc0 [ 450.763490][ T7716] ? tomoyo_realpath_from_path+0xb6/0x690 [ 450.763511][ T7716] tomoyo_realpath_from_path+0xb6/0x690 [ 450.763531][ T7716] tomoyo_path_number_perm+0x23c/0x580 [ 450.763546][ T7716] ? tomoyo_path_number_perm+0x22e/0x580 [ 450.763561][ T7716] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.763576][ T7716] ? get_pid_task+0x106/0x250 [ 450.763604][ T7716] ? find_held_lock+0x2b/0x80 [ 450.763620][ T7716] ? __fget_files+0x215/0x3d0 [ 450.763634][ T7716] ? hook_file_ioctl_common+0x140/0x440 [ 450.763650][ T7716] ? __fget_files+0x215/0x3d0 [ 450.763665][ T7716] ? __fget_files+0x21f/0x3d0 [ 450.763681][ T7716] security_file_ioctl_compat+0xd3/0x230 [ 450.763698][ T7716] __ia32_compat_sys_ioctl+0xc2/0x360 [ 450.763712][ T7716] __do_fast_syscall_32+0x13a/0x8b0 [ 450.763726][ T7716] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.763739][ T7716] do_fast_syscall_32+0x32/0x70 [ 450.763752][ T7716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.763767][ T7716] RIP: 0023:0xf7f75fec [ 450.763780][ T7716] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 450.763785][ T7716] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 450.763796][ T7716] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080049370 [ 450.763803][ T7716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.763809][ T7716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.763815][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.763821][ T7716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.763834][ T7716] [ 450.763875][ T7716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 451.003225][ T7676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 451.006954][ T7676] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 451.218299][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 451.378607][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 451.384041][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.387188][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 451.387815][ T6149] usb 7-1: device descriptor read/64, error -71 [ 451.394949][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.406197][ T9] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 451.421727][ T9] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 451.435815][ T7726] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 451.455360][ T7726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 451.528561][ T6023] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 451.630771][ T6149] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 451.680068][ T6023] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 451.689729][ T6023] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.697060][ T6023] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 451.700534][ T6023] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.706400][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 451.709572][ T6023] usb 6-1: Product: syz [ 451.711217][ T6023] usb 6-1: Manufacturer: syz [ 451.719395][ T7739] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 451.724110][ T6023] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 451.734602][ T6023] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 451.774068][ T6149] usb 7-1: device descriptor read/64, error -71 [ 451.779835][ T7723] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 451.792070][ T7723] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 451.803167][ T7723] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 451.866369][ T7765] FAULT_INJECTION: forcing a failure. [ 451.866369][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.870505][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.4.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.870523][ T7765] Tainted: [L]=SOFTLOCKUP [ 451.870527][ T7765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.870534][ T7765] Call Trace: [ 451.870538][ T7765] [ 451.870542][ T7765] dump_stack_lvl+0x100/0x190 [ 451.870562][ T7765] should_fail_ex.cold+0x5/0xa [ 451.870575][ T7765] _copy_from_iter+0x1f4/0x1690 [ 451.870590][ T7765] ? __asan_memset+0x23/0x50 [ 451.870605][ T7765] ? __pfx__copy_from_iter+0x10/0x10 [ 451.870617][ T7765] ? __pfx___alloc_skb+0x10/0x10 [ 451.870637][ T7765] netlink_sendmsg+0x808/0xda0 [ 451.870651][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.870663][ T7765] ? apparmor_socket_sendmsg+0x15b/0x270 [ 451.870677][ T7765] ____sys_sendmsg+0xa4d/0xbe0 [ 451.870692][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.870703][ T7765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.870725][ T7765] ___sys_sendmsg+0x190/0x1e0 [ 451.870743][ T7765] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.870765][ T7765] ? find_held_lock+0x2b/0x80 [ 451.870789][ T7765] __sys_sendmsg+0x160/0x210 [ 451.870802][ T7765] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.870818][ T7765] ? __pfx_ksys_write+0x10/0x10 [ 451.870834][ T7765] __do_fast_syscall_32+0x13a/0x8b0 [ 451.870846][ T7765] ? lockdep_hardirqs_on+0x7d/0x110 [ 451.870859][ T7765] do_fast_syscall_32+0x32/0x70 [ 451.870870][ T7765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.870885][ T7765] RIP: 0023:0xf6ffefec [ 451.870899][ T7765] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 451.870904][ T7765] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 451.870915][ T7765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 451.870921][ T7765] RDX: 0000000004040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.870927][ T7765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.870933][ T7765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 451.870939][ T7765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.870953][ T7765] [ 451.888197][ T6149] usb usb7-port1: attempt power cycle [ 451.890503][ T7723] SPCP8x5 ttyUSB0: Set UART format 0x1709 failed (error = -32) [ 451.934836][ T7739] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 451.965522][ T7739] ------------[ cut here ]------------ [ 451.968877][ T7739] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x98/0x380 [ 451.972558][ T7739] WARNING: kernel/sched/core.c:9125 at __might_sleep+0x94/0xc0, CPU#0: syz.1.510/7739 [ 451.975391][ T7739] Modules linked in: [ 451.976819][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.1.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.980155][ T7739] Tainted: [L]=SOFTLOCKUP [ 451.981840][ T7739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.984988][ T7739] RIP: 0010:__might_sleep+0x97/0xc0 [ 451.986997][ T7739] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c 5d 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 cd 59 a4 00 eb 9f 89 74 24 04 e8 f2 59 a4 [ 451.993224][ T7739] RSP: 0018:ffffc9000468f598 EFLAGS: 00010282 [ 451.995121][ T7739] RAX: dffffc0000000000 RBX: ffffffff8e395284 RCX: ffffffff81e1cec8 [ 451.997488][ T7739] RDX: ffffffff81e1cec8 RSI: 0000000000000001 RDI: ffffffff91459950 [ 452.000007][ T7739] RBP: 0000000000000143 R08: 0000000000000001 R09: 00000000000000b5 [ 452.002893][ T7739] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888025f50000 [ 452.005397][ T7739] R13: 0000000000000001 R14: ffffffff87b2af40 R15: dffffc0000000000 [ 452.008274][ T7739] FS: 0000000000000000(0000) GS:ffff8880969db000(0063) knlGS:00000000f541db40 [ 452.011313][ T7739] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 452.013279][ T7739] CR2: 00000000f6fff000 CR3: 000000005cd86000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.016143][ T7739] Call Trace: [ 452.017512][ T7739] [ 452.017954][ T6023] usb 6-1: USB disconnect, device number 10 [ 452.018468][ T7739] __kmalloc_cache_noprof+0x3ff/0x6b0 [ 452.022327][ T7739] ? spcp8x5_get_msr+0xe9/0x2d0 [ 452.024190][ T7739] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 452.026474][ T7739] spcp8x5_get_msr+0xe9/0x2d0 [ 452.028384][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.030612][ T7739] spcp8x5_carrier_raised+0x75/0xe0 [ 452.032578][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.034802][ T7739] ? mark_held_locks+0x40/0x70 [ 452.036590][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.039105][ T7739] serial_port_carrier_raised+0x8f/0xd0 [ 452.041207][ T7739] tty_port_block_til_ready+0x43c/0x8e0 [ 452.043303][ T7739] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 452.045557][ T7739] ? __pfx_autoremove_wake_function+0x10/0x10 [ 452.048053][ T7739] tty_port_open+0x19c/0x1f0 [ 452.048421][ T6023] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 452.049825][ T7739] ? __pfx_serial_open+0x10/0x10 [ 452.049855][ T7739] tty_open+0x3dd/0xfa0 [ 452.056152][ T7739] ? __pfx_tty_open+0x10/0x10 [ 452.057873][ T6023] garmin_gps 6-1:1.0: device disconnected [ 452.060507][ T7739] ? chrdev_open+0x10b/0x6a0 [ 452.062132][ T7739] ? chrdev_open+0x10b/0x6a0 [ 452.063930][ T7739] ? __pfx_tty_open+0x10/0x10 [ 452.065640][ T7739] chrdev_open+0x234/0x6a0 [ 452.067293][ T7739] ? __pfx_apparmor_file_open+0x10/0x10 [ 452.069518][ T7739] ? __pfx_chrdev_open+0x10/0x10 [ 452.071355][ T7739] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 452.073716][ T7739] do_dentry_open+0x6ab/0x14d0 [ 452.075562][ T7739] ? __pfx_chrdev_open+0x10/0x10 [ 452.077452][ T7739] vfs_open+0x82/0x3f0 [ 452.079107][ T7739] path_openat+0x19fa/0x2440 [ 452.080871][ T7739] ? __pfx_path_openat+0x10/0x10 [ 452.082700][ T7739] ? find_held_lock+0x2b/0x80 [ 452.084497][ T7739] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 452.086620][ T7739] do_file_open+0x20e/0x430 [ 452.088415][ T7739] ? __pfx_do_file_open+0x10/0x10 [ 452.090307][ T7739] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.092232][ T7739] ? _raw_spin_unlock+0x28/0x50 [ 452.094063][ T7739] ? alloc_fd+0x471/0x7a0 [ 452.095745][ T7739] do_sys_openat2+0x10f/0x1e0 [ 452.097495][ T7739] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.099507][ T7739] ? find_held_lock+0x2b/0x80 [ 452.101318][ T7739] __ia32_compat_sys_openat+0x12d/0x210 [ 452.103368][ T7739] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 452.105617][ T7739] __do_fast_syscall_32+0x13a/0x8b0 [ 452.107592][ T7739] do_fast_syscall_32+0x32/0x70 [ 452.109541][ T7739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.111951][ T7739] RIP: 0023:0xf702efec [ 452.113460][ T7739] Code: Unable to access opcode bytes at 0xf702efc2. [ 452.115832][ T7739] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 452.119211][ T7739] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 452.122167][ T7739] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.125040][ T7739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.127972][ T7739] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.130850][ T7739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.133822][ T7739] [ 452.134999][ T7739] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 452.137702][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.1.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.141441][ T7739] Tainted: [L]=SOFTLOCKUP [ 452.142722][ T7739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.145924][ T7739] Call Trace: [ 452.147242][ T7739] [ 452.148411][ T7739] dump_stack_lvl+0x100/0x190 [ 452.150162][ T7739] vpanic+0x553/0x970 [ 452.151610][ T7739] ? __pfx_vpanic+0x10/0x10 [ 452.153021][ T7739] panic+0xd1/0xe0 [ 452.154193][ T7739] ? __pfx_panic+0x10/0x10 [ 452.155552][ T7739] check_panic_on_warn.cold+0x19/0x34 [ 452.157203][ T7739] ? __might_sleep+0x94/0xc0 [ 452.158618][ T7739] __warn.cold+0x191/0x318 [ 452.159989][ T7739] __report_bug+0x30f/0x440 [ 452.161421][ T7739] ? __might_sleep+0x94/0xc0 [ 452.162845][ T7739] ? __pfx___report_bug+0x10/0x10 [ 452.164400][ T7739] ? prepare_to_wait+0x98/0x380 [ 452.166131][ T7739] ? prepare_to_wait+0x98/0x380 [ 452.167993][ T7739] report_bug_entry+0xe2/0x290 [ 452.169430][ T7739] ? __might_sleep+0x97/0xc0 [ 452.170859][ T7739] handle_bug+0x1cd/0x2a0 [ 452.172223][ T7739] exc_invalid_op+0x17/0x50 [ 452.173659][ T7739] asm_exc_invalid_op+0x1a/0x20 [ 452.175147][ T7739] RIP: 0010:__might_sleep+0x97/0xc0 [ 452.176713][ T7739] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c 5d 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 cd 59 a4 00 eb 9f 89 74 24 04 e8 f2 59 a4 [ 452.182633][ T7739] RSP: 0018:ffffc9000468f598 EFLAGS: 00010282 [ 452.184523][ T7739] RAX: dffffc0000000000 RBX: ffffffff8e395284 RCX: ffffffff81e1cec8 [ 452.187507][ T7739] RDX: ffffffff81e1cec8 RSI: 0000000000000001 RDI: ffffffff91459950 [ 452.190430][ T7739] RBP: 0000000000000143 R08: 0000000000000001 R09: 00000000000000b5 [ 452.193306][ T7739] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888025f50000 [ 452.196195][ T7739] R13: 0000000000000001 R14: ffffffff87b2af40 R15: dffffc0000000000 [ 452.199251][ T7739] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 452.201304][ T7739] ? prepare_to_wait+0x98/0x380 [ 452.202757][ T7739] ? prepare_to_wait+0x98/0x380 [ 452.204274][ T7739] __kmalloc_cache_noprof+0x3ff/0x6b0 [ 452.205882][ T7739] ? spcp8x5_get_msr+0xe9/0x2d0 [ 452.207369][ T7739] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 452.209199][ T7739] spcp8x5_get_msr+0xe9/0x2d0 [ 452.210653][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.212457][ T7739] spcp8x5_carrier_raised+0x75/0xe0 [ 452.214027][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.215866][ T7739] ? mark_held_locks+0x40/0x70 [ 452.217299][ T7739] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 452.219021][ T7739] serial_port_carrier_raised+0x8f/0xd0 [ 452.220744][ T7739] tty_port_block_til_ready+0x43c/0x8e0 [ 452.222394][ T7739] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 452.224237][ T7739] ? __pfx_autoremove_wake_function+0x10/0x10 [ 452.226049][ T7739] tty_port_open+0x19c/0x1f0 [ 452.227618][ T7739] ? __pfx_serial_open+0x10/0x10 [ 452.229226][ T7739] tty_open+0x3dd/0xfa0 [ 452.230505][ T7739] ? __pfx_tty_open+0x10/0x10 [ 452.231944][ T7739] ? chrdev_open+0x10b/0x6a0 [ 452.233366][ T7739] ? chrdev_open+0x10b/0x6a0 [ 452.234794][ T7739] ? __pfx_tty_open+0x10/0x10 [ 452.236216][ T7739] chrdev_open+0x234/0x6a0 [ 452.237546][ T7739] ? __pfx_apparmor_file_open+0x10/0x10 [ 452.239215][ T7739] ? __pfx_chrdev_open+0x10/0x10 [ 452.240778][ T7739] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 452.242673][ T7739] do_dentry_open+0x6ab/0x14d0 [ 452.244088][ T7739] ? __pfx_chrdev_open+0x10/0x10 [ 452.245596][ T7739] vfs_open+0x82/0x3f0 [ 452.246892][ T7739] path_openat+0x19fa/0x2440 [ 452.248313][ T7739] ? __pfx_path_openat+0x10/0x10 [ 452.249830][ T7739] ? find_held_lock+0x2b/0x80 [ 452.251314][ T7739] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 452.253072][ T7739] do_file_open+0x20e/0x430 [ 452.254504][ T7739] ? __pfx_do_file_open+0x10/0x10 [ 452.255992][ T7739] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.257601][ T7739] ? _raw_spin_unlock+0x28/0x50 [ 452.259116][ T7739] ? alloc_fd+0x471/0x7a0 [ 452.260510][ T7739] do_sys_openat2+0x10f/0x1e0 [ 452.261976][ T7739] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.263446][ T7739] ? find_held_lock+0x2b/0x80 [ 452.264916][ T7739] __ia32_compat_sys_openat+0x12d/0x210 [ 452.266803][ T7739] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 452.268960][ T7739] __do_fast_syscall_32+0x13a/0x8b0 [ 452.270584][ T7739] do_fast_syscall_32+0x32/0x70 [ 452.272105][ T7739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.274091][ T7739] RIP: 0023:0xf702efec [ 452.275338][ T7739] Code: Unable to access opcode bytes at 0xf702efc2. [ 452.277300][ T7739] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 452.279841][ T7739] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 452.282085][ T7739] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.284546][ T7739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.286969][ T7739] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.289773][ T7739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.292362][ T7739] [ 452.294113][ T7739] Kernel Offset: disabled [ 452.295535][ T7739] Rebooting in 86400 seconds..