last executing test programs: 4.610753065s ago: executing program 1 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="02000000040000000000cee4937aa9a905050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000050000000000000000000000181100", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000040808007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000400000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001540)) r9 = dup(r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x401, 0x5, {{0x3d, 0x4, 0x0, 0x1, 0xf4, 0x66, 0x0, 0x3, 0x4, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0xf, 0xd, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x35}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x2, 0xc, "06fdfdabf961f5448378"}, {0x0, 0x3, "b5"}, {0x6, 0x7, '\"}i2O'}, {0x1, 0x12, "5435d8543b4de1c29b1b9063d60f870a"}, {0x1, 0x10, "b8090a09d8772fe8b4b27a0c59b9"}, {0x6, 0x10, "d9f4328c4d00f59e9b3e663033f0"}]}, @timestamp={0x44, 0x18, 0x8b, 0x0, 0x0, [0x4, 0xf, 0x9, 0x2aa, 0xfffffffb]}, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x1, [0x6, 0x401, 0x3]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0x1, [{@broadcast, 0x3}, {@broadcast, 0x7fffffff}, {@loopback, 0x6}]}, @end, @lsrr={0x83, 0x27, 0xc5, [@rand_addr=0x64010102, @loopback, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}]}}}}}) r11 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r11, 0xa, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3b00000000000000000000000100000400000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="05000000050000000400"/28], 0x50) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000280)={0x1, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) 4.269704424s ago: executing program 1 (id=1398): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) tkill(r1, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 3.79830866s ago: executing program 2 (id=1402): syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x40, 0x0, 0x2f, 0x7}, {0x9, 0x5, 0x5, 0x2, 0x40, 0x8, 0x4, 0x5}, {0x9, 0x5, 0xb, 0x3, 0x40, 0x8, 0x1, 0x40}}}}}}]}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='/dev/ptmx\x00', 0x42c00, &(0x7f0000000100)={@_ha_fsid={[0x3ae, 0x5]}, {0x7, 0x7, 0x45, 0x50000000000}}, 0xffff0001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8001}) dup(r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x113002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xb767, 0x2, 0x14, "3eccd8000000000000000010000000040100"}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b1b, 0x0) 2.481435362s ago: executing program 3 (id=1409): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x1ffffd, 0x200000, 0x0, 0x0, 0x5989}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.377808646s ago: executing program 3 (id=1411): r0 = syz_clone(0x2000000, &(0x7f00000000c0)="f954dc6cc5f2a828b356e3c83fe0ff42146c98f55c89d3ffd4c640e225e20dcc86b08d2db84135f0d34b72bf840a71c419a10ceb690751af41ba3d17ce33f72508b50afb3b943542c1af0f903ff8bb15281250f1a56e3961e8b7c1f84f09d7ae18c57f6ff5834f625e616ab9e52abdf2fd724fd0e12aefcf8964b49ad99f6b87361fd52e42a1286eb42ff1b50f7edb9f1e9baf2505c969a93982649ebdda5cc4750cd3c49ca045f61c752ceb9784f28a85b0396a82b88c3d129e2b029fa89a0858bfa9bca4bb3a78f8f4222726138f79c1cf84a977", 0xd5, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="f293b0af7621661e4885319a6bac77fbc4e1380f926bea8db4db9306f38578943fb94ce01de1ed7d2e05a74e317c38c020fc8d2718b3829533e1a14ff063df68c93c787e0f10962ee0e1612162227d29dea683b0024e52fe8a451d051c4f94dccbf39aca1977fe057b5da9159296c6c1f5c9e5973aeae9550d55cd814518d0ac410bd6db8d2cd895dac5ccff34d632be52863acbe81b58fba382585063a7d6acc21d498d485347c33fc271401b8066830dc016a58aa09423617c0285021a5d7f40b30a10c87a4344aaba0d57fc5798c01027b5dca2cfcfb1f6b2a17f3252fe3289f642d101173aba") (async) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000004c0)={0x4, 0x40, {r0}, {r1}, 0x9, 0x40}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) accept4(r3, 0x0, 0x0, 0x800) (async) socket$kcm(0x23, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) setns(0xc9, 0x0) socket$inet6(0xa, 0x1, 0x84) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) r12 = socket(0x8, 0x5, 0x5) quotactl$Q_GETQUOTA(0x48d483f6be92af82, &(0x7f0000000500)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000540)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) 2.200961686s ago: executing program 3 (id=1412): r0 = openat$dsp1(0xffffff9c, &(0x7f0000001100), 0x109482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000480)="a687337ce8", 0x5, 0x24000045, &(0x7f0000000440)={0xa, 0x2, 0xffff, @private1, 0x9}, 0x1c) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x10000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev/ttyGS0/file0\x00', &(0x7f0000000080)='ramfs\x00', 0x9340a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x284001, 0x0) openat(r1, &(0x7f0000000180)='./dev/ttyGS0\x00', 0x1, 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello world\n', 0xc) r5 = openat(r4, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x20083, 0x19a) nanosleep(0x0, 0x0) write(r5, &(0x7f0000000a00)='hel', 0x3) landlock_create_ruleset(&(0x7f0000000400)={0x7b36, 0x0, 0x0, 0x1c14, 0x0, 0x1}, 0x30, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) 1.82702635s ago: executing program 2 (id=1414): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.771162391s ago: executing program 0 (id=1415): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r9) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 1.770950611s ago: executing program 2 (id=1416): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc0}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_clone(0x2811400, 0x0, 0xffffffe3, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/163, 0x9c}], 0x42, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 1.661010539s ago: executing program 2 (id=1417): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af0224a920000ffffffffffffff00"}) r3 = syz_open_pts(r2, 0x60001) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d000000875a000004000000030000000000000078cad0d474fd28b269647816760b177928460cf75873aedc243595c8c0cb634b8d93b44f1cf705ec73fc47228de6f513379d8038f57a8da7f3f6e0736153952e44c9c6a9868d220a697e5acf41a0b9620ba4ac471f4b943dbd62c3965214ddb19b27f99745f42325fb2dd727c96191f2939da57944d038a3a31a14f74b1e9bbf27480ea441da7503853658c272a3d1e449d6318b92f151e43d95a6adc2a67e4012bd1f8719bf28b571787774da893b15e8d28afba135a2af594bfc996032d64c90021363006c281df0b61ae5abd7f6c4c64b6ae9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pread64(r5, &(0x7f0000000140)=""/237, 0xed, 0x4) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xff84, 0xfd, 0x2000, 0x6, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x6f) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r7, &(0x7f0000001000)='syzkaller%', 0xa) ptrace$pokeuser(0x6, r6, 0x118, 0x137db) syz_emit_ethernet(0x1012, &(0x7f00000007c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@llc={0xaa, 0x2, "d06e", "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"}}}}}, 0x0) 1.553897076s ago: executing program 0 (id=1418): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001840)={0x28, 0x0, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xba83542b86c80fd3}, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) bind$802154_dgram(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12000, 0x0) 1.540146186s ago: executing program 2 (id=1419): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f0000000100)={0x8, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f0000000240)=0x4) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) 1.171148002s ago: executing program 1 (id=1420): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) 1.144353091s ago: executing program 1 (id=1421): syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x7, &(0x7f0000d0a000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="20c88bffffffffffffbd70f2ffff00000c8e85845ff9"], 0x38}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x4044010) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x36, 0x0, &(0x7f0000000240)="63eced0000dc3f08df33c9f786dd958a31678a4ea8707a060278b42bac2f2f131ad80cfc1d6406d60c43c223046c09bf19c6813202eb", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 992.712289ms ago: executing program 3 (id=1422): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x28000600) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000a00)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x80000002}, @l2tp={0x2, 0x0, @multicast2}, @nfc={0x27, 0x0, 0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, 0x300}) 831.326301ms ago: executing program 3 (id=1423): r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x8101, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect={0xffff}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2001) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x108}}], 0x2, 0x22040057) 637.259885ms ago: executing program 0 (id=1424): r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000002040)=0x0, &(0x7f0000002080), &(0x7f00000020c0)=0x0) (async, rerun: 32) getresgid(&(0x7f0000002100)=0x0, &(0x7f0000002140)=0x0, &(0x7f0000002180)) (rerun: 32) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0x0, r1, {0x4, 0x2, 0x8001, 0x0, 0x3ff, 0x7fffffff, {0x2, 0x7, 0xa9c2, 0xfffffffffffffff7, 0x2, 0x9, 0x3, 0xd68, 0x0, 0x2000, 0x8, r5, r8, 0x6, 0x38a}}}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000022c0)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x138, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x28c, 0x28c, 0x28c, 0xffffffff, 0x4, &(0x7f0000002280), {[{{@ip={@loopback, @local, 0x0, 0xffffff00, 'nr0\x00', 'veth1\x00', {0xff}, {0xff}, 0x0, 0x1, 0x20}, 0x0, 0xdc, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x7, 0x2, 0x2, 0x1, 0x5], 0x4, 0x5}}}, @common=@addrtype={{0x2c}, {0x2, 0x20, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0xf, [0xd, 0x29, 0x23, 0xe, 0x13, 0x24, 0x10, 0x2a, 0x1c, 0x3a, 0x2b, 0x3f, 0x38, 0x21, 0x1, 0x9], 0x3b93b83b5070dce5, 0x8, 0x8}}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}, {[0x1, 0x81]}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'ip_vti0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x6, 0x1, 0x2}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x37c) bind$inet(r0, &(0x7f0000002640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r9 = signalfd(r0, &(0x7f0000002680)={[0x0, 0x1]}, 0x8) getpeername$inet(r9, &(0x7f00000026c0), &(0x7f0000002700)=0x10) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002780)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000002880)=0xe4) (async, rerun: 64) r11 = getpgid(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x28, 0x34, 0x592674fc10fd2386, 0x70bd2b, 0x25dfdbfe, {0x15}, [@nested={0x14, 0x34, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r11}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async, rerun: 32) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x4) (async, rerun: 32) tkill(r4, 0x17) (async) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002980)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000029c0)=r12, 0x4) (async) r13 = fsmount(r0, 0x1, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000002a00)=0x6, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r9, {r10, r7}}, './file0\x00'}) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000005f80)={r14}, 0x8) sendmsg$netlink(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000002a80)={0x1114, 0x35, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xc, 0x5a, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}]}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @generic="a8382e9f2ca2b48e827932b2f27bf80d9742302900f3b3a2d53f97a353f7d9a3ad6809c9a193be6c37f7df653764dc", @typed={0x92, 0x118, 0x0, 0x0, @binary="0ad0e3a3637d69c6ecd93087475c2f1a931b6defad4ffec1274071d3eca63b5b56f9d1dbd97213307b7bb36e97f0a1ad781aba44647d986fa00a82338cfe616b7e0993507fa9e6f2cfde106272dc7dc92496ff6eb3825b106df9de53b2faf8cbedd6b3f67c453fce229150561f36d1ed7317b933b323b1b94107790ed88ea4f96f629b11c329d650cfa7f0767796"}, @generic="4af5b5b3134cb75bc021327d", @nested={0x100c, 0x11e, 0x0, 0x1, [@generic="7bb4aa53dc4f6dae723476387bdd266dca034679f7401cb4b634dc4dfe93ba8d708455b9841cb2794536af4ca34376251d2d8fe02b78433c095b78b09a210a97fa71c54154561cc7c80988c4bd9a634fb8a89c9a6f34cd9a70a5eadc13a97d170eb79c0f864650620e9832699caa692340a15e40618f6b0b66fc37c28bc1ba1011feab91c6185b567d080e4cc0490e4555b403f085f3fd7c8622780d6dfeb782f1e572719a1739bd58d7eabe35f804e48c56a84a60a51b239a793ddc28f61c969102220a5a5c36812463ee9cd1378db26cedeedcee93f7788bbd3b8fb933974e500aed196f330ab082d793e06d3b7cc478aa339b6f6db3ad65ac00004641cec664399cfcd1d853486a4616ed9f0b0d906d73235890b2056e0767768ebdd7b133db12bec3e7322099861353f33673b6520ff700b19807486b489e2fa7d87acbe8911ff442fa5f159db63703e049774313b8775f857838da475eaa56e6ee83ea25bd0ece8709604f5fff80f21a683959051d63780e673a86ed87d7c7daa2ca4a96c5f530e0b994425d865e0acf05bcebba04c4a081d15dbcae4e56acbcb5c912b0d913213ae8655834e062b921ea48c58f0e346b017c6afbdc20d541b0ab0e288b2ce885c2de7b130bd1e977fe036868ef82383d7e61532e125a96761f184cebfc495d8f9b55094e3cdd0855ab30c3b6cadb4f6c599879c75a302bbd85af4b4bde365528fdc0066d2160e807106d402022795f3167e9a88c49c5af86e50f315c63afa34511cca76c38212a1930d0c450c00b69b6b8324acd325dafe9a4c3de632cc9a5f0a08526a455b63e54e2ba243127a8b25271d058ebe5e5d7124987f06abfc862cb3bd5e5e74c7cd5e2d1c315f1b4290387c5c826150593dccdf1ae22c7ca89731dfd2b1ab3cc2436246b1d19f068c355d55c58fdd04bb9ff0fa4f11053e52cc905f5d7ed2584b8d61b69561819cb5876ad906fb5ffc8dacb3fccca675fd446aa44f148cccd0a75523fdd5b1531682d8a29e7524987790808ac03c0bd7979ed2eca0397bca9ab1a69e33768269240b14d4d158e5285d45e5516c3a9e745a8b04ec00671d1361f321aeaf27eb430d735de9f89a2dc29079b9ec42f0789d6b2259b6a8bc42029b0acb44c571d9de3c9519d8033a4c31ff7f65dbad2646713a1caf88325eb3cfa5009f19057df40a2dcd6fd41600d39d30a01b73e9a2489eb966045ae244a24a1552cfcc4b2549580d832ebba5beeda53eeb4f3639fa87548ccc6e7c76ef7e9c09b18e7cf04646475d6c18a25b6047386fc6b53defce5e9018188b897cfbb6e9a8782bcdf581c34240b5d8b4e7e2db234832f0ebc09ed403ed7d926fdb6f0be15ff49cce5a705246c7d37beb8ab2bceba54e13c2de1a8a6abf75e5d6ae37b94a70dd712d8b2c0ab787d3e8db09b61536bf702c72699017bd76b53d288367ae78765371876000b6f7654dd1b4f3d716cae57f574cb9501a73f5cc0baa17d04b5e7faf1129dc898707959eb621acbdef232844723d464a4099a2d26e139d53cf200fd004c08ea951b32eef036511b9eb3972b7bc77740a32b1ed931fefa01667b5b34f208c8abdb45ac64f591ad98ccd76d6604b2e2d4e3b1f9307b77fc87025a137519cd233364f93554357ca0f9b8c51c1d4b028c93e2c7903f7cb22aaadca9c83d3abf3599201611aa34da2a6727a654805f9505674987f4ec6d28c7236314feb15811df801fdef567db61ecc6dd06c3a9db17bd93cacceff6f155bce3c6de9bde8b05a84afa990f6f4c33b9c3e04cdf600de7b7c9c31391a4464483878886d723ce1e307cb11a462fe10162f7ec7aaf613076e441686b43bdfe210c97093e7623a9345127aa33106ce7e9a1f3c78c2ff0039e165d8612ea6687b566b187889e4dee2a5b3c8b36494b7b74f6c728c1c75e53160fb2d2dbc3e23cb13dc2edd5d2ca4565baf5f4d30354b8d1879ddd9082f6d2b738cf35b1f7d1ff5f1d71b8f6871a1b510a0071c77a4acefcaba14a225109d2d3a0889b779a004cb9a28c36b315250edb5a6cd385a4663dbd1238e3b0b3caf4785a5a230bad71efe3fe748bc8fb807d24475afcca5f26d82884b5feb703b3a4bcb188f667aabb4fa2d0e3af9da1dc90ab1c22f73fa3b180160bc1574cda06326a028e34fc1a9727e30375317ad4621ced3fd4fee81eee3095c2b03abd0a07318b281ebdeff22056dfb853b50179f92e151dea66d5e97b7cb7cc3866c4925860d616face562a6eca51cc1d876e990702db51d709ff8f28f43750c704f380a01514c35cb862a29d1e03aa70afaf26fe77c9161b22492fa0fd8ceeae2f9c2cc83e11fbbb9d3430c40e594f8c52c58a74096f80d140ae0be2341a2afb63eb7acf3eefb6ae090bf5a02b07d2e7944a1f5155dbbe35a3cd668b379ed5413fcedf91ed851cfd97f25ed56537be79b33ee4a6d2bc24359fcf6fa2039c7bca4bf92f003360f82b0bf5fadb9ed4af860f112c1c80c8f016812bbbe038ef9b89a9cbbbeddf1d3efee9877f1f64aac1e86a208915c5680322a445a64f71514b2b1b86fa33f72254885bf2d58c17f7b925c5386e6319110c47fcb257cd8242a6955a79aa5410eca8e7b755cbdad0389b931701a21e5e09211194ddc577a28414ac6a67cfa7eebaa514ea9aa4d56c77bfd94edc174ebe46907577ff92849f81fa96ea5e1157745c0b7f8765062ec10a24f8eca6c0d6fd9038a6eeada018adb04d161982b58e121fcd07e32a1592989bcbb284013968fa992c41e55357701522cffaa95ba97267648e901166afa33d7461c216129824f7a77b10d19b4617a6edd59c093635b65e0b8c5ae797a16f02210d33c0d3134b523d606af28540c8d74976faa9611bfef021508b8e1c2b0899da7bd23dbff1cac9398912848deebcdc77e3a5981eea7e8d1fc2262e52b7953270c6d7f4170678583f7d5152bb19adb59badb7dcc8eb131fca9902aea76da67052265533fc563b002c0ea0275a064cf1dcf9f2e0f207d5886097560daf75ed5ba5f946273ec9ec942e8ea4fd0989d46b2e27f99758e349dae6644d656a20e96457d4b09864583f6d9246715470e182e58e438abc7ffe21ad138b06fc191c6b697aced585b389b86a64f6d606735309cae863cfa604a24e7cbdf6e4a488f17573c0927eaad059213c7e7fb0da4006ac302c22915e42dad736f2621944025f5570f67a286194aa3e26dedccc08f279d6892d1c711f3ba2513a08eb6a76e8266cd0a9300a45c9b370daaf57f358f4a763a76e1cbaa01c50df50e5372104e36354f49bf096e47cc5bd3ab25561f69ef4bb32ad3a12d023183ad8506b88474d96b7826422bcc909e56cdb0fe11b2d6a87a5950bdbd021eee935583e2bf827a6796bf7b2c464136a07cd3d8b823c9cb3fee73fa6d015cc2272c10ee8b6ea97d295a1cc2454ed3205bbfc5ae62d6000bc37a22b0aed2f2a42b9692b157afec6204bb1bb80215a8b5f9d5d2ace241fe4c190beef7e27393c545a77721078e171aa49bf8089c2b1acbd5360940d336de4370c90f66e567dddbb27ce7d47fe0616e06ec7b754240f371e18d7676e9850c7e51a0d06be0d93aa1622bd5ef3e6c0f61d84117155e0a17358a39ceb664ad1becd583c8e9fa4da65ef3c1bd5684068590798e4d7083132cc39414786cbf608bc4bfa0a41c937facd193323c8c60c3cf9980df7dc3fe1fbe6e46e6a7738bb5d0e88166e01f85fcc1ee408d68e2b9a6f375972218011de188f13b8b36fe150b086166256e2da575c82fde895edffb2b08e53493057057ec42cd39aca018c3a09a5b17f4a3d79db31b51e18dac7f4e8dc076d62a7f45260212b807db99639b6a158cd6c3c8eb573014c933426bdc22532ce5aafeb64e8c54e770641eea500b576eafa7fb4eea88359098f062d47f85b99d7042070e8cb1feee235fb9461c4b85277f7635456fadee18e3640c6ebf375946ae3518487d493924733ce8d2155caec3349264ffad42486a615a6205ae14bee59af42ccfc211d4eaabf10799954181aa960b3c811fa9a9075a710773ae8e53a0b1ca06b00bcf1988e77575a02a592142e726e9724f9b100368836a97263a3314535f4e6173103a495d154e285e51ef264dfbc19909ccb7e35e0f20998a6035593e96a56f1d2713cd947bb22474261a94e830e7bde92184fe8440e721b6c1481573c6902af5f35a43a9b8bf4eaa80f16468f13f8b3d023820f15b6d5f7c231dd48d23863ef5219866b546171b13ffec1e5cd42ee9235fd9270eac74fd75ceb4c48809c4bd84395b55fc58c601474595b550fa64c7bd6fa4a319b9f26aadbc27f72c2a91ed4775469402c936a9510135a56faa24003af0dd0e7a1aa409d9a363b977c09a7d9bd86d144f9763b2e8e4f2f266540393a529ffb0ad28e8ec0985b2efb18286b1c3509d1ae8e7f78e6d339ac202529a6290d509bafb135b54ee8668932b384dfed059a2458da252210bd3461fe9e718385bb0c6894d1ec2a4bc54d78fafcc49422c1cf98b7762779d58eafc0a08ef4ac2029cc3e550c6b84e8537f5a415c7aebbbbf8efe3457af85abd6ca23096daa6afb0e2b54884371191f84184670b9b1930991e9b295c8c825b74872b8f3aa281a3e47af9c8453ea4e7164f08d152efd9af410f92a660bb5c9dc116691fec8cbd9c4b4744bd4789f5455fc5161c9b8b79b9edbf726cbaf543560607d1a4ddeff37d34879a1fd7452502cba42e2b405e50629c8fd85d6288f5041521021361630f84f5c1690604a27bd338927273346d62805594181300566ef5279ead2255e6c7e65fb169808ee546a6b5b68a49071a9b07bbca097cf7d3e570b18d59ad359027fb4128b403afffb80035bac8d11416a6da5a30ab628a54a867f63e0f6d9aec5d58ebd524440c8ed6262bac9badc40f9f46811c15bb6ad666e297b68adcdaff49fe46cbfc4876b0022e94e081058fe53c29cfeb3c125dd25f6fe3e777c262cd34130d4101e9288d160ccbb9d05a15d011aedaf8388e43f763191d30d3f1024a9db2c0c60e26f747dd035f093bdcd67ca7b39fa58afe65f6c8afd641297f0dcb06a6cc15d063b81854bf7923ec5ed8542ef89edcee5f65ee604902b7c27aff7f4783b265b6e709e7866ac2d9f59a2d262093be5127655edab3b328de57c36da9252feffa4731ccf2c11ca15f95d95ce7d41f6b96556c59c59e97b7fb5be9e32b2ac60888c87387abedcf241546d16dc01dc3c3ae3cf3ab13a290e538bd2f3517ba4c0449e1588b6330b1eda92db0f0119e20a988e00d3bf40d3359c66eadf05e72302b9ad700dec63b45690049b61528fe1a47e91189fac8d11df1db006aec981d87ea8664792120770bc4bb77178eac1f603ff6dc894ba01a7ef7b7b3e94960a2143baedd9944fc35f85102e4f9c8b0f649bba0b94391efa29a7ff149c2a78d1c589654ee1f257788c0f15ab8351a170b9fc5574f3cf03a73c94694a326f15a0803638895239e0ac586881b99156ad91e8893551c17a2567547812be9e216eac26bdb030e6eef441003883eeae35ee76312df5256f2270058c714730463b95065189705b62cb17ec86a4bd616ac48439db755d0e63b0c8ca002e02638a8447d4503853ca431a616f6eb3357abf18ca7a80fe02c5ce1aefa5868509adb83a7b807edd213097ef282aac2f9e40f65c89b662e0a2517dee4b436ecd2c2ad7f563d144f330bfcc189a2c916c8babc1481937267b895e8fecdd9886d49d4290203ebf4fb35544ad90821d6361b935577e8d8b72", @nested={0x4, 0xf8}, @nested={0x4, 0x141}]}, @nested={0xc, 0x14a, 0x0, 0x1, [@typed={0x4, 0xc1}, @nested={0x4, 0x15f}]}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r9}]}, 0x1114}, {&(0x7f0000003bc0)={0x10c, 0x2e, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@generic="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"]}, 0x10c}, {&(0x7f0000003d00)={0x223c, 0x2d, 0x2, 0x70bd26, 0x25dfdbff, "", [@nested={0x2010, 0x2e, 0x0, 0x1, [@nested={0x4, 0xd4}, @generic="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", @generic="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", @typed={0x8, 0x12f, 0x0, 0x0, @pid=r11}]}, @nested={0x178, 0x82, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd=r9}, @generic="cda635eed7a1fc6ff4f79f6bce1e982785285aef53423bfa3b4cf06e02bca5f65abfcff0f1cb9cd136f85c7cd0425217165ed48792649dea2d32ff7af6ab7353e57a490b7c726192685f25d421e28dd29fefc8271561e13bd1c56ae836b3a1baf64bb168c2978d523deb8963d1e2203411ab82ddddc08c7e879760ded7ba2716be97eeb0173dc328cde49d2be85d882283", @generic="f0f3c06956c85e003303e5f8d3f84bbcbb83e22a16511009c6d16d0c146e0900da78c4", @generic="bf37887b2393d8bad574c92dc18513428208de4b6202aa71ff8f4233b8bd9dec9dd63899a28f4e2cfaacc9699d6a8b2efa7ebccfe835189a23ec7cd73281f91d0cc39eaf4ddd1dfaf701985ff014f00bebb8b18b618ffd400a847b744689588cffe70520ace72ab7afa8ae6d400537246af2e152aa7b378005295893ed59096828ad31e9ec536475b543c42ff81432cdbd0f3e9912a694033b82cb1d49b1e3fcbb8c43775730580ce18aacd09477c1925f7672e7", @nested={0x4, 0x15a}]}, @nested={0xa4, 0x123, 0x0, 0x1, [@nested={0x4, 0x5e}, @nested={0x4, 0x13f}, @nested={0x4, 0x10b}, @generic="a58be5e6ec958112c8b008c4bb6cc6f7aa563d479c26218d86bba80796ff1dbcdc9ecc886a908c88700b1ffb37b40d9f1625fe270b2314956ebd9463c89f02a2294611cca4889644a9d4c130d8df22f2d729fdb34794cd57c63eb50244fb0d2b8c58835653ffcecc9e29df8cf41787063763c0e31be31e8b1451696e9b2793779ac83833afc1bd4212bcf58bbc03dd78", @typed={0x4, 0x94}]}]}, 0x223c}], 0x3, &(0x7f0000005fc0)=[@cred={{0x18, 0x1, 0x2, {r4, r10, r3}}}, @cred={{0x18, 0x1, 0x2, {r4, r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r12, r9, r12, r14]}}, @rights={{0x24, 0x1, 0x1, [r0, r15, 0xffffffffffffffff, r13, r0, r0]}}], 0x70, 0x44000}, 0x4001) (async) r16 = getgid() chown(&(0x7f0000006080)='./file0\x00', r2, r16) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000061c0)={&(0x7f00000060c0)=[0x0], &(0x7f0000006100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006180)=[0x0], 0x1, 0x5, 0x4, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000006200)={r17}) (async) r18 = syz_open_dev$mtd(&(0x7f0000006240), 0x80000000, 0x8001) ioctl$MTDFILEMODE(r18, 0x4d13, 0x3) (async) ioctl$XFS_IOC_GETBMAPA(r14, 0xc020582c, &(0x7f0000006280)={0x7fff, 0x7, 0x1, 0xe9, 0x7}) (async) getsockopt$inet6_tcp_buf(r14, 0x6, 0x1a, &(0x7f00000062c0)=""/106, &(0x7f0000006340)=0x6a) (async) write$FUSE_ATTR(r13, &(0x7f00000064c0)={0x78, 0x0, r1, {0x7, 0x0, 0x0, {0x1, 0x100000000, 0x3, 0x1000, 0x6, 0x9, 0x17, 0xf45, 0x7f, 0xc000, 0x101, r6, 0x0, 0x52, 0x7}}}, 0x78) 552.744373ms ago: executing program 0 (id=1425): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010020, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c000000) 538.875161ms ago: executing program 2 (id=1426): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/67, 0x43, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c", 0x75) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64, @ANYRESOCT], 0xfffffdcf) connect$unix(r7, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4094) 381.260801ms ago: executing program 0 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x5, {{0x33, 0x4, 0x0, 0x4, 0xcc, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0xc, 0xb1, 0x0, 0x5, [0x7, 0x80000001]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xaa, [@local, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @private=0xa010101, @loopback, @loopback]}, @timestamp_addr={0x44, 0x54, 0xfd, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x3}, {@local, 0x61}, {@private=0xa010100, 0x200}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@private=0xa010100, 0xd}, {@rand_addr=0x64010101, 0x7d}, {@local, 0x6}, {@broadcast, 0x4}, {@loopback, 0x4}]}, @cipso={0x86, 0x39, 0x2, [{0x1, 0x7, "d77ca7b41e"}, {0x4, 0xc, "9f70590116663ac7826f"}, {0x5, 0x6, "a5c6c3df"}, {0x2, 0xd, "033acd77b467bfcd8d4553"}, {0x1, 0xd, "6727a7d8c0dbfaf9b72d1a"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000190001002dbd7000fcdbdf250a148004ff010004000c0000080010001000000008000300", @ANYRES32=r1, @ANYBLOB="6da56d08cdb61e6c50a2e1650e78fe27686a07d9315d50bccac2d3bcb81b948869181edc44dc93"], 0x2c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000100039040300"/20, @ANYRES32=r1, @ANYBLOB="00000000000020700038190d20a09a46c8ea9ed59ab73d678aea0f435adab18246d379832d59920744a85791d737"], 0xd}}, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mq_notify(r2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) openat$binder_debug(0xffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x1c) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="339931a8e57f9726597cb103c8611cef98c8869bc249aa823e92dd5c4bdd15e15339b6a03d8cc177f480d2e85bdff1334fd2dab10a3382102d2433b096bdd4c48950f490f041002f93a162be7ea5d398df5a8decd22af100f0dbcd", 0x5b}, {&(0x7f0000000180)="63960c77c65e2f6b4f3a7f058be0ca84bc1abb869a", 0x15}, {&(0x7f00000001c0)="c3d417f6", 0x4}, {&(0x7f0000000200)="5223424f66c0f32ba3fd", 0xa}, {&(0x7f0000000280)="332c7174438292916ef13b51716c1d4afaa3adea1d06b134146556747468acf3984227f9e5b28d1fd3456061ddf9052b0a24f30f3922baa872c9926140aae7f58258adcb12b2d24359c8a412d7cbfe6a79faa831d8b6739b9c59ef540c", 0x5d}], 0x5) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400)="7f0b08c5b3ee213b1a4fc2d41247c9397726e9b7336a4597acc7f60987b545ff", 0x20, r4}, 0x64) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) dup3(r6, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x9, 0xfc, 0x1, 0xffff22bc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 61.447883ms ago: executing program 3 (id=1428): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) tkill(r1, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 61.175295ms ago: executing program 1 (id=1429): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r0 = syz_open_dev$sg(0x0, 0x0, 0xc0b41) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) 60.951003ms ago: executing program 0 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0xf5, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) 0s ago: executing program 1 (id=1431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$packet(r1, &(0x7f0000000a40)="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", 0x1fb, 0x24008805, 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0x7, 0x2d, 0xfff, 0x101, 0x4}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 0s ago: executing program 1 (id=1435): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2685, &(0x7f0000000640)={0x0, 0x1825, 0x2000, 0xfffffffe, 0x22e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): : type=1804 audit(1785132309.129:60): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.690" name="/newroot/165/file0" dev="tmpfs" ino=889 res=1 errno=0 [ 200.162937][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.174201][ T5831] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 200.186818][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.207338][ T5831] usb 5-1: config 0 descriptor?? [ 200.408790][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 200.463868][ T8478] trusted_key: encrypted_key: key user:syz not found [ 200.486366][ T8497] syzkaller0: entered promiscuous mode [ 200.497398][ T8497] syzkaller0: entered allmulticast mode [ 200.546505][ T42] audit: type=1804 audit(1785132309.549:61): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.696" name="/newroot/183/file0" dev="tmpfs" ino=977 res=1 errno=0 [ 200.551667][ T5831] ath6kl: Failed to submit usb control message: -71 [ 200.554509][ T5831] ath6kl: unable to send the bmi data to the device: -71 [ 200.556694][ T5831] ath6kl: Unable to send get target info: -71 [ 200.575345][ T5831] ath6kl: Failed to init ath6kl core: -71 [ 200.583200][ T5831] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 200.587420][ T5831] usb 5-1: USB disconnect, device number 9 [ 200.689877][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 202.576280][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 202.634131][ T8528] SQUASHFS error: Failed to read block 0x0: -5 [ 202.636171][ T8528] unable to read squashfs_super_block [ 202.709625][ T5831] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 202.774353][ T8535] /dev/sg0: Can't lookup blockdev [ 202.778237][ T8535] random: crng reseeded on system resumption [ 202.781301][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 202.785358][ T8535] Restarting kernel threads ... [ 202.789378][ T8535] Done restarting kernel threads. [ 202.794761][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 202.847270][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 202.862608][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.866602][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 202.871963][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.878828][ T5831] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 202.884657][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.892842][ T5831] usb 7-1: config 0 descriptor?? [ 202.947946][ T8541] sd 0:0:0:0: PR command failed: 1026 [ 202.950353][ T8541] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 202.952516][ T8541] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 203.370856][ T5831] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 203.379622][ T6314] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 203.531911][ T6314] usb 6-1: Using ep0 maxpacket: 8 [ 203.536615][ T6314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.544631][ T6314] usb 6-1: config 0 has no interfaces? [ 203.550201][ T6314] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 203.554717][ T6314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.560253][ T6314] usb 6-1: Product: syz [ 203.563176][ T6314] usb 6-1: Manufacturer: syz [ 203.566868][ T6314] usb 6-1: SerialNumber: syz [ 203.642054][ T6314] usb 6-1: config 0 descriptor?? [ 203.785060][ T5831] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 203.787715][ T5831] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 203.798164][ T5831] elan 0003:04F3:0755.0003: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 203.832547][ T6314] usb 7-1: USB disconnect, device number 13 [ 203.909338][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 203.924950][ T1348] usb 6-1: USB disconnect, device number 17 [ 203.940706][ T8554] fido_id[8554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 204.239763][ T61] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 204.390032][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 204.404267][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.411379][ T61] usb 8-1: config 0 has no interfaces? [ 204.440455][ T61] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 204.447697][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.456947][ T61] usb 8-1: Product: syz [ 204.458143][ T8561] /dev/sg0: Can't lookup blockdev [ 204.458287][ T61] usb 8-1: Manufacturer: syz [ 204.462449][ T61] usb 8-1: SerialNumber: syz [ 204.464275][ T8561] random: crng reseeded on system resumption [ 204.474157][ T61] usb 8-1: config 0 descriptor?? [ 204.485391][ T8561] Restarting kernel threads ... [ 204.499345][ T8561] Done restarting kernel threads. [ 204.505182][ T8561] FAULT_INJECTION: forcing a failure. [ 204.505182][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 204.520117][ T8561] CPU: 2 UID: 0 PID: 8561 Comm: syz.2.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.520135][ T8561] Tainted: [L]=SOFTLOCKUP [ 204.520139][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.520148][ T8561] Call Trace: [ 204.520153][ T8561] [ 204.520157][ T8561] dump_stack_lvl+0x100/0x190 [ 204.520174][ T8561] should_fail_ex.cold+0x5/0xa [ 204.520187][ T8561] should_failslab+0xc2/0x120 [ 204.520202][ T8561] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 204.520217][ T8561] ? alloc_inode+0x183/0x250 [ 204.520234][ T8561] alloc_inode+0x183/0x250 [ 204.520247][ T8561] new_inode+0x22/0x1c0 [ 204.520264][ T8561] gadgetfs_make_inode+0x23/0x1c0 [ 204.520289][ T8561] gadgetfs_create_file+0x34/0xd0 [ 204.520311][ T8561] gadgetfs_bind+0x42b/0x890 [ 204.520343][ T8561] gadget_bind_driver+0x28c/0xbf0 [ 204.520363][ T8561] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 204.520390][ T8561] ? __pfx_gadget_bind_driver+0x10/0x10 [ 204.520409][ T8561] really_probe+0x241/0xa60 [ 204.520435][ T8561] __driver_probe_device+0x20e/0x450 [ 204.520457][ T8561] driver_probe_device+0x4a/0x140 [ 204.520479][ T8561] __driver_attach+0x21f/0x5b0 [ 204.520501][ T8561] ? __pfx___driver_attach+0x10/0x10 [ 204.520525][ T8561] bus_for_each_dev+0x13e/0x1d0 [ 204.520544][ T8561] ? __pfx_bus_for_each_dev+0x10/0x10 [ 204.520560][ T8561] ? bus_add_driver+0x2b5/0x5b0 [ 204.520584][ T8561] bus_add_driver+0x305/0x5b0 [ 204.520607][ T8561] driver_register+0x1e2/0x360 [ 204.520631][ T8561] usb_gadget_register_driver_owner+0x132/0x210 [ 204.520658][ T8561] dev_config+0xdce/0x1610 [ 204.520687][ T8561] ? __pfx_dev_config+0x10/0x10 [ 204.520736][ T8561] vfs_write+0x2aa/0x1050 [ 204.520756][ T8561] ? __pfx_dev_config+0x10/0x10 [ 204.520782][ T8561] ? __pfx_vfs_write+0x10/0x10 [ 204.520797][ T8561] ? find_held_lock+0x2b/0x80 [ 204.520818][ T8561] ? __fget_files+0x215/0x3d0 [ 204.520839][ T8561] ? __fget_files+0x21f/0x3d0 [ 204.520863][ T8561] ksys_write+0x12a/0x250 [ 204.520880][ T8561] ? __pfx_ksys_write+0x10/0x10 [ 204.520896][ T8561] ? ksys_write+0x1ac/0x250 [ 204.520910][ T8561] ? __pfx_ksys_write+0x10/0x10 [ 204.520930][ T8561] __do_fast_syscall_32+0xe7/0x970 [ 204.520952][ T8561] ? lockdep_hardirqs_on+0x78/0x100 [ 204.520973][ T8561] do_fast_syscall_32+0x32/0x70 [ 204.520994][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.521014][ T8561] RIP: 0023:0xf705efec [ 204.521033][ T8561] Code: Unable to access opcode bytes at 0xf705efc2. [ 204.521040][ T8561] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 204.521057][ T8561] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 204.521069][ T8561] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 204.521079][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.521088][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.521098][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.521121][ T8561] [ 204.523086][ T8561] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 204.639657][ T8561] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 204.646647][ T8561] gadgetfs: bound to dummy_udc driver [ 204.687320][ T1348] usb 8-1: USB disconnect, device number 11 [ 205.749716][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 205.899609][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 205.968419][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 205.980641][ T8600] bridge_slave_1: left allmulticast mode [ 205.988478][ T8600] bridge_slave_1: left promiscuous mode [ 205.994950][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.005070][ T8600] bridge_slave_0: left allmulticast mode [ 206.010949][ T8600] bridge_slave_0: left promiscuous mode [ 206.018555][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.317145][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.625124][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 206.781885][ T61] usb 8-1: config 0 has no interfaces? [ 206.785285][ T61] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 206.788221][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.790725][ T61] usb 8-1: Product: syz [ 206.792015][ T61] usb 8-1: Manufacturer: syz [ 206.793565][ T61] usb 8-1: SerialNumber: syz [ 206.796232][ T61] usb 8-1: config 0 descriptor?? [ 207.002480][ T5535] usb 8-1: USB disconnect, device number 12 [ 207.079630][ T61] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 207.091130][ T8623] fuse: Unknown parameter 'd' [ 207.250715][ T8616] dvmrp0: entered allmulticast mode [ 207.267130][ T8616] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 208.072046][ T8655] netlink: 112 bytes leftover after parsing attributes in process `syz.0.745'. [ 208.184025][ T8657] ptrace attach of ""[8658] was attempted by "/syz-executor exec"[8657] [ 208.400488][ T42] audit: type=1800 audit(1785132317.349:62): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 209.589855][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 209.739658][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 209.745237][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.759639][ T9] usb 7-1: config 0 has no interfaces? [ 209.763450][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 209.766510][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.769955][ T9] usb 7-1: Product: syz [ 209.771410][ T9] usb 7-1: Manufacturer: syz [ 209.773869][ T9] usb 7-1: SerialNumber: syz [ 209.780766][ T9] usb 7-1: config 0 descriptor?? [ 209.848041][ T61] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.856591][ T61] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 209.862205][ T61] usb 6-1: can't read configurations, error -71 [ 209.987615][ T5535] usb 7-1: USB disconnect, device number 14 [ 210.124991][ T8678] openvswitch: netlink: Message has 8 unknown bytes. [ 210.185950][ T8676] netlink: 56 bytes leftover after parsing attributes in process `syz.3.751'. [ 210.246875][ T6314] kernel write not supported for file bpf-map (pid: 6314 comm: kworker/2:4) [ 210.429624][ T1348] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 210.580940][ T1348] usb 8-1: Using ep0 maxpacket: 8 [ 210.594240][ T1348] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.601490][ T1348] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 59161, setting to 1024 [ 210.618638][ T1348] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.625036][ T1348] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 210.630050][ T1348] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.632960][ T1348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.636867][ T1348] usb 8-1: Product: ê«¡ç—¡⢑æ½×‰ [ 210.640261][ T1348] usb 8-1: Manufacturer: Ѩᦣ迃甩㉾齃é²êŽ½äœ™å´Œä¥¶æ¾é¨¸áƒœç—•î…€á¹”í礦è„耺귯宰葨鎣噉셙㕌⫒ï‘扮㉂タï”çœÔ¸í–µæ†²å£‡æ‰‡æ”ˆæ¨”á‡ãš¿ç‹° [ 210.650021][ T1348] usb 8-1: SerialNumber: Г [ 210.676173][ T8693] syzkaller0: entered promiscuous mode [ 210.678180][ T8693] syzkaller0: entered allmulticast mode [ 211.710570][ T1348] cdc_ncm 8-1:1.0: bind() failure [ 211.715154][ T1348] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 211.717281][ T1348] cdc_ncm 8-1:1.1: bind() failure [ 211.720862][ T1348] usb 8-1: USB disconnect, device number 13 [ 212.860077][ T8701] bond0: left promiscuous mode [ 212.861735][ T8701] bond_slave_0: left promiscuous mode [ 212.863593][ T8701] bond_slave_1: left promiscuous mode [ 212.865425][ T8701] syz_tun: left promiscuous mode [ 212.910709][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.915683][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.035266][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.047707][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.060297][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.063122][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.227723][ T8724] overlayfs: conflicting options: userxattr,metacopy=on [ 213.447194][ T8727] siw: device registration error -23 [ 213.456448][ T6314] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 213.639871][ T6314] usb 8-1: Using ep0 maxpacket: 8 [ 213.654117][ T6314] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.666560][ T6314] usb 8-1: config 0 has no interfaces? [ 213.677342][ T6314] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 213.681259][ T6314] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.684456][ T6314] usb 8-1: Product: syz [ 213.686080][ T6314] usb 8-1: Manufacturer: syz [ 213.687846][ T6314] usb 8-1: SerialNumber: syz [ 213.734239][ T6314] usb 8-1: config 0 descriptor?? [ 213.957612][ T6314] usb 8-1: USB disconnect, device number 14 [ 214.023413][ T8729] ALSA: mixer_oss: invalid OSS volume 'file0' [ 214.811824][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 214.979612][ T9] usb 8-1: device descriptor read/64, error -71 [ 214.983765][ T8744] No source specified [ 215.719631][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 215.859630][ T9] usb 8-1: device descriptor read/64, error -71 [ 215.906595][ T8753] netlink: 'syz.2.773': attribute type 9 has an invalid length. [ 215.915429][ T8753] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 215.924375][ T8753] netlink: 'syz.2.773': attribute type 8 has an invalid length. [ 215.980027][ T9] usb usb8-port1: attempt power cycle [ 216.339870][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 216.360320][ T9] usb 8-1: device descriptor read/8, error -71 [ 216.620677][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 216.651130][ T9] usb 8-1: device descriptor read/8, error -71 [ 216.772503][ T9] usb usb8-port1: unable to enumerate USB device [ 216.994148][ T8774] netlink: 15678 bytes leftover after parsing attributes in process `syz.0.779'. [ 217.029962][ T5535] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 217.189979][ T5535] usb 7-1: Using ep0 maxpacket: 8 [ 217.195847][ T5535] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.202079][ T5535] usb 7-1: config 0 has no interfaces? [ 217.212364][ T5535] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 217.217013][ T5535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.219794][ T5535] usb 7-1: Product: syz [ 217.221255][ T5535] usb 7-1: Manufacturer: syz [ 217.222798][ T5535] usb 7-1: SerialNumber: syz [ 217.226892][ T5535] usb 7-1: config 0 descriptor?? [ 217.298701][ T8783] block device autoloading is deprecated and will be removed. [ 217.434460][ T5535] usb 7-1: USB disconnect, device number 15 [ 217.925835][ T8798] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 217.927955][ T8798] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.946904][ T8798] vhci_hcd vhci_hcd.0: Device attached [ 217.976341][ T8798] ip6gretap0: entered promiscuous mode [ 218.005296][ T8798] vlan2: entered promiscuous mode [ 218.210727][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 218.221812][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 218.582054][ T8799] vhci_hcd: connection reset by peer [ 218.584218][ T12] vhci_hcd vhci_hcd.1: stop threads [ 218.587521][ T12] vhci_hcd vhci_hcd.1: release socket [ 218.593080][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 218.929326][ T8829] ptrace attach of ""[8832] was attempted by "/syz-executor exec"[8829] [ 218.955711][ T42] audit: type=1800 audit(1785132327.959:63): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.792" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 219.088801][ T8834] siw: device registration error -23 [ 220.427156][ T8845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.539649][ T5535] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 220.589630][ T6314] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 220.741662][ T6314] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 220.750731][ T6314] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 220.765409][ T6314] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 220.775404][ T6314] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.782318][ T6314] usb 8-1: Product: syz [ 220.786189][ T6314] usb 8-1: Manufacturer: syz [ 220.814646][ T8844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.827112][ T8844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.838480][ T6314] usb_debug 8-1:1.0: debug converter detected [ 220.851737][ T6314] usb 8-1: debug converter now attached to ttyUSB0 [ 221.115694][ T1348] usb 8-1: USB disconnect, device number 19 [ 221.163378][ T1348] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 221.179949][ T1348] usb_debug 8-1:1.0: device disconnected [ 221.279631][ T5535] usb 6-1: Using ep0 maxpacket: 8 [ 221.284514][ T5535] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.289989][ T5535] usb 6-1: config 0 has no interfaces? [ 221.295294][ T5535] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 221.298628][ T5535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.309657][ T5535] usb 6-1: Product: syz [ 221.310960][ T5535] usb 6-1: Manufacturer: syz [ 221.312385][ T5535] usb 6-1: SerialNumber: syz [ 221.315080][ T5535] usb 6-1: config 0 descriptor?? [ 221.472876][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 221.524270][ T1348] usb 6-1: USB disconnect, device number 20 [ 221.582101][ T8859] ptrace attach of ""[8860] was attempted by "/syz-executor exec"[8859] [ 221.586397][ T42] audit: type=1800 audit(1785132330.589:64): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.803" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 221.671871][ T8862] overlay: ./file0 is not a directory [ 223.004385][ T8878] ptrace attach of ""[8880] was attempted by "/syz-executor exec"[8878] [ 223.143845][ T42] audit: type=1800 audit(1785132332.149:65): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.808" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 223.329648][ T9] usb 40-1: device descriptor read/8, error -110 [ 223.743883][ T9] usb usb40-port1: attempt power cycle [ 224.108590][ T8930] binder: 8928:8930 ioctl c0306201 80000640 returned -22 [ 224.310223][ T9] usb usb40-port1: unable to enumerate USB device [ 224.370588][ T8944] ptrace attach of ""[8946] was attempted by "/syz-executor exec"[8944] [ 224.392790][ T42] audit: type=1800 audit(1785132333.399:66): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.824" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 224.630646][ T1348] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.686020][ T8961] binder: 8960:8961 ioctl c0306201 80000640 returned -22 [ 224.779614][ T1348] usb 5-1: Using ep0 maxpacket: 8 [ 224.785661][ T1348] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 224.790386][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.796380][ T1348] usb 5-1: Product: syz [ 224.797620][ T1348] usb 5-1: Manufacturer: syz [ 224.802109][ T1348] usb 5-1: SerialNumber: syz [ 224.806920][ T1348] usb 5-1: config 0 descriptor?? [ 224.812514][ T1348] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 224.817948][ T1348] dvb-usb: bulk message failed: -22 (2/0) [ 224.831192][ T1348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.838769][ T1348] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 224.843863][ T1348] usb 5-1: media controller created [ 224.862422][ T1348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.883814][ T1348] dvb-usb: bulk message failed: -22 (1/0) [ 224.886306][ T1348] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 224.892162][ T1348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input32 [ 224.902569][ T1348] dvb-usb: schedule remote query interval to 50 msecs. [ 224.906554][ T1348] dvb-usb: bulk message failed: -22 (2/0) [ 224.909800][ T1348] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 224.961186][ T1348] dvb-usb: bulk message failed: -22 (1/0) [ 224.968050][ T1348] dvb-usb: error while querying for an remote control event. [ 225.041198][ T1348] dvb-usb: bulk message failed: -22 (1/0) [ 225.051893][ T1348] dvb-usb: error while querying for an remote control event. [ 225.066720][ T1348] usb 5-1: USB disconnect, device number 10 [ 225.071150][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 225.098938][ T8966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.109040][ T1348] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 225.137040][ T8968] macsec0: entered promiscuous mode [ 225.139048][ T8968] macsec0: entered allmulticast mode [ 225.142189][ T8968] veth1_macvtap: entered allmulticast mode [ 225.815059][ T8988] binder: 8987:8988 ioctl c0306201 80000640 returned -22 [ 226.538880][ T8999] ptrace attach of ""[9000] was attempted by "/syz-executor exec"[8999] [ 226.768985][ T42] audit: type=1800 audit(1785132335.769:67): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.844" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 227.610074][ T5831] libceph: connect (1)[c::]:6789 error -99 [ 227.616225][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 227.664745][ T9010] lo speed is unknown, defaulting to 1000 [ 227.779466][ T9008] ceph: No mds server is up or the cluster is laggy [ 227.880274][ T5831] libceph: connect (1)[c::]:6789 error -99 [ 227.891297][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 228.029369][ T9025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.850'. [ 229.120175][ T9052] netlink: 48 bytes leftover after parsing attributes in process `syz.3.859'. [ 230.627234][ T9084] netlink: 48 bytes leftover after parsing attributes in process `syz.3.868'. [ 230.751436][ T9091] ALSA: mixer_oss: invalid OSS volume '' [ 230.824712][ T9096] binder: 9095:9096 ioctl c0306201 80000640 returned -22 [ 230.881013][ T6314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.121259][ T6314] usb 5-1: Using ep0 maxpacket: 8 [ 231.124435][ T6314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.128009][ T6314] usb 5-1: config 0 has no interfaces? [ 231.132925][ T6314] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 231.136865][ T6314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.140327][ T6314] usb 5-1: Product: syz [ 231.142181][ T6314] usb 5-1: Manufacturer: syz [ 231.144181][ T6314] usb 5-1: SerialNumber: syz [ 231.148555][ T6314] usb 5-1: config 0 descriptor?? [ 231.363098][ T6314] usb 5-1: USB disconnect, device number 11 [ 231.538060][ T9107] exfat: Deprecated parameter 'debug' [ 231.543235][ T9107] exFAT-fs (loop3): unable to read boot sector [ 231.548653][ T9107] exFAT-fs (loop3): failed to read boot sector [ 231.556000][ T9107] exFAT-fs (loop3): failed to recognize exfat type [ 233.334623][ T9132] No control pipe specified [ 233.689612][ T1348] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.849726][ T1348] usb 5-1: Using ep0 maxpacket: 8 [ 233.859743][ T1348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.878169][ T1348] usb 5-1: config 0 has no interfaces? [ 233.898539][ T1348] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 233.911911][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.918899][ T1348] usb 5-1: Product: syz [ 233.921321][ T1348] usb 5-1: Manufacturer: syz [ 233.924362][ T1348] usb 5-1: SerialNumber: syz [ 233.934367][ T1348] usb 5-1: config 0 descriptor?? [ 234.140191][ T5831] usb 5-1: USB disconnect, device number 12 [ 234.535538][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 234.552438][ T42] audit: type=1326 audit(1785132343.559:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.562791][ T9155] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.568668][ T42] audit: type=1326 audit(1785132343.559:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.571066][ T9155] overlayfs: failed to resolve '/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaasysfs': -2 [ 234.588745][ T42] audit: type=1326 audit(1785132343.559:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.604956][ T42] audit: type=1326 audit(1785132343.559:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.610505][ T9155] binder: 9154:9155 ioctl c0306201 80000080 returned -14 [ 234.613156][ T9156] ptrace attach of ""[9157] was attempted by "/syz-executor exec"[9156] [ 234.619640][ T42] audit: type=1326 audit(1785132343.559:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.629276][ T42] audit: type=1326 audit(1785132343.559:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.642158][ T42] audit: type=1326 audit(1785132343.559:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.660887][ T42] audit: type=1326 audit(1785132343.559:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.685748][ T42] audit: type=1326 audit(1785132343.559:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 234.703825][ T42] audit: type=1326 audit(1785132343.559:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.895" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 235.178814][ T9175] binder: 9174:9175 ioctl c0306201 80000640 returned -22 [ 236.742869][ T9203] binder: 9202:9203 ioctl c0306201 80000640 returned -22 [ 237.197286][ T9215] FAULT_INJECTION: forcing a failure. [ 237.197286][ T9215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.220328][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.3.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.220346][ T9215] Tainted: [L]=SOFTLOCKUP [ 237.220350][ T9215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.220356][ T9215] Call Trace: [ 237.220360][ T9215] [ 237.220364][ T9215] dump_stack_lvl+0x100/0x190 [ 237.220382][ T9215] should_fail_ex.cold+0x5/0xa [ 237.220394][ T9215] strncpy_from_user+0x3b/0x2d0 [ 237.220413][ T9215] do_getname+0x78/0x390 [ 237.220428][ T9215] user_path_at+0x26/0x60 [ 237.220445][ T9215] __ia32_sys_mount+0x1fb/0x310 [ 237.220458][ T9215] ? __pfx___ia32_sys_mount+0x10/0x10 [ 237.220471][ T9215] ? ksys_write+0x1ac/0x250 [ 237.220481][ T9215] ? __pfx_ksys_write+0x10/0x10 [ 237.220493][ T9215] __do_fast_syscall_32+0xe7/0x970 [ 237.220507][ T9215] ? lockdep_hardirqs_on+0x78/0x100 [ 237.220521][ T9215] do_fast_syscall_32+0x32/0x70 [ 237.220535][ T9215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.220549][ T9215] RIP: 0023:0xf6feefec [ 237.220562][ T9215] Code: Unable to access opcode bytes at 0xf6feefc2. [ 237.220566][ T9215] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 237.220577][ T9215] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 237.220584][ T9215] RDX: 0000000080000000 RSI: 0000000001008081 RDI: 0000000000000000 [ 237.220590][ T9215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.220596][ T9215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 237.220602][ T9215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.220614][ T9215] [ 237.569672][ T6314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.740864][ T6314] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.749586][ T6314] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.754081][ T6314] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.759640][ T6314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.772509][ T9226] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.779809][ T6314] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.933414][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.919'. [ 237.991695][ T6314] usb 5-1: USB disconnect, device number 13 [ 238.003856][ T9217] libceph: secret too big 289 [ 238.304499][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 238.391868][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.922'. [ 239.273986][ T9257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 239.276740][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.295394][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 239.539634][ T5831] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 239.839845][ T9261] vhci_hcd: connection reset by peer [ 239.843719][ T12] vhci_hcd vhci_hcd.2: stop threads [ 239.845963][ T12] vhci_hcd vhci_hcd.2: release socket [ 239.847839][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 240.023581][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 240.027477][ T9271] binder: 9270:9271 ioctl c0306201 80000640 returned -22 [ 240.030476][ T9269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.030543][ T9269] IPv6: NLM_F_CREATE should be set when creating new route [ 240.302009][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 240.444371][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 240.504530][ T9293] netlink: 'syz.2.939': attribute type 2 has an invalid length. [ 240.600844][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 240.775353][ T9298] lo speed is unknown, defaulting to 1000 [ 241.292894][ T9315] FAULT_INJECTION: forcing a failure. [ 241.292894][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 241.297259][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.3.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.297277][ T9315] Tainted: [L]=SOFTLOCKUP [ 241.297280][ T9315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.297287][ T9315] Call Trace: [ 241.297290][ T9315] [ 241.297295][ T9315] dump_stack_lvl+0x100/0x190 [ 241.297310][ T9315] should_fail_ex.cold+0x5/0xa [ 241.297323][ T9315] should_failslab+0xc2/0x120 [ 241.297338][ T9315] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 241.297352][ T9315] ? __alloc_skb+0x5b7/0x710 [ 241.297365][ T9315] ? __alloc_skb+0x140/0x710 [ 241.297381][ T9315] __alloc_skb+0x140/0x710 [ 241.297393][ T9315] ? __alloc_skb+0x5b7/0x710 [ 241.297406][ T9315] ? __pfx___alloc_skb+0x10/0x10 [ 241.297424][ T9315] netlink_alloc_large_skb+0x69/0x150 [ 241.297437][ T9315] netlink_sendmsg+0x680/0xda0 [ 241.297451][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.297465][ T9315] ? apparmor_socket_sendmsg+0x15b/0x270 [ 241.297479][ T9315] ____sys_sendmsg+0xa4d/0xbe0 [ 241.297490][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.297505][ T9315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.297522][ T9315] ___sys_sendmsg+0x190/0x1e0 [ 241.297534][ T9315] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.297552][ T9315] ? find_held_lock+0x2b/0x80 [ 241.297574][ T9315] __sys_sendmsg+0x160/0x210 [ 241.297589][ T9315] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.297607][ T9315] ? __pfx_ksys_write+0x10/0x10 [ 241.297621][ T9315] __do_fast_syscall_32+0xe7/0x970 [ 241.297650][ T9315] ? lockdep_hardirqs_on+0x78/0x100 [ 241.297664][ T9315] do_fast_syscall_32+0x32/0x70 [ 241.297678][ T9315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.297692][ T9315] RIP: 0023:0xf6feefec [ 241.297705][ T9315] Code: Unable to access opcode bytes at 0xf6feefc2. [ 241.297710][ T9315] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 241.297721][ T9315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 241.297727][ T9315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.297733][ T9315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.297739][ T9315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.297745][ T9315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.297779][ T9315] [ 241.609222][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 241.919720][ T1348] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 242.070896][ T1348] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.074591][ T1348] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.082178][ T1348] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.087158][ T1348] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.091551][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.094957][ T1348] usb 5-1: Product: syz [ 242.094997][ T5759] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 242.096365][ T1348] usb 5-1: Manufacturer: syz [ 242.106381][ T1348] usb 5-1: SerialNumber: syz [ 242.113913][ T1348] usb 5-1: config 0 descriptor?? [ 242.163015][ T1348] usb 5-1: selecting invalid altsetting 0 [ 242.274633][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'. [ 242.365551][ T1348] usb 5-1: USB disconnect, device number 14 [ 242.556219][ T8345] udevd[8345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.664607][ T9347] hugetlbfs: Bad value 'ßø' for mount option 'size' [ 242.664607][ T9347] [ 243.160631][ T9357] siw: device registration error -23 [ 243.288354][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 243.501021][ T1348] IPVS: starting estimator thread 0... [ 243.609932][ T9360] IPVS: using max 44 ests per chain, 105600 per kthread [ 243.755421][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 244.010172][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 244.379922][ T1348] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 244.532212][ T1348] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.542614][ T1348] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.553769][ T1348] usb 7-1: config 0 interface 0 has no altsetting 0 [ 244.564431][ T1348] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.571384][ T1348] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.579028][ T1348] usb 7-1: Product: syz [ 244.583119][ T1348] usb 7-1: Manufacturer: syz [ 244.587288][ T1348] usb 7-1: SerialNumber: syz [ 244.599295][ T1348] usb 7-1: config 0 descriptor?? [ 244.613007][ T1348] usb 7-1: selecting invalid altsetting 0 [ 244.691218][ T5831] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 244.876691][ T5535] usb 7-1: USB disconnect, device number 16 [ 245.119237][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 245.413489][ T9396] binder: 9395:9396 ioctl c0306201 80000080 returned -14 [ 245.417039][ T9396] binder: 9395:9396 ioctl c0306201 800003c0 returned -14 [ 245.643376][ T9403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 245.645519][ T9403] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.714776][ T9403] vhci_hcd vhci_hcd.0: Device attached [ 245.773942][ T9408] siw: device registration error -23 [ 246.439651][ T5535] usb 40-1: SetAddress Request (6) to port 0 [ 246.439709][ T5535] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 246.516610][ T9404] vhci_hcd: connection reset by peer [ 247.221024][ T13] vhci_hcd vhci_hcd.1: stop threads [ 247.224177][ T13] vhci_hcd vhci_hcd.1: release socket [ 247.227792][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 247.457104][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 247.469171][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.967965][ T5759] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 247.973071][ T9441] fuse: Bad value for 'fd' [ 248.196052][ T9444] fuse: Bad value for 'fd' [ 248.800147][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 248.920999][ T9453] binder: BINDER_SET_CONTEXT_MGR already set [ 248.934855][ T9453] binder: 9452:9453 ioctl 4018620d 800000c0 returned -16 [ 249.130055][ T9458] siw: device registration error -23 [ 249.730566][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 249.730577][ T42] audit: type=1800 audit(1785132358.739:162): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.989" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 250.592135][ T9479] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.948692][ T9480] syzkaller0: entered allmulticast mode [ 250.990884][ T9477] netlink: 80 bytes leftover after parsing attributes in process `syz.0.994'. [ 251.017809][ T9487] FAULT_INJECTION: forcing a failure. [ 251.017809][ T9487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.039642][ T9487] CPU: 2 UID: 0 PID: 9487 Comm: syz.1.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.039661][ T9487] Tainted: [L]=SOFTLOCKUP [ 251.039665][ T9487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.039671][ T9487] Call Trace: [ 251.039676][ T9487] [ 251.039680][ T9487] dump_stack_lvl+0x100/0x190 [ 251.039697][ T9487] should_fail_ex.cold+0x5/0xa [ 251.039707][ T9487] ? prepare_alloc_pages+0x16d/0x5f0 [ 251.039724][ T9487] should_fail_alloc_page+0xeb/0x140 [ 251.039740][ T9487] prepare_alloc_pages+0x1f0/0x5f0 [ 251.039758][ T9487] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 251.039771][ T9487] ? bpf_ksym_find+0x124/0x1c0 [ 251.039797][ T9487] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 251.039816][ T9487] ? __lock_acquire+0x49f/0x1a40 [ 251.039835][ T9487] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.039850][ T9487] ? __lock_acquire+0x49f/0x1a40 [ 251.039868][ T9487] ? __lock_acquire+0x49f/0x1a40 [ 251.039888][ T9487] ? __lock_acquire+0x49f/0x1a40 [ 251.039905][ T9487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.039922][ T9487] ? policy_nodemask+0xed/0x4f0 [ 251.039938][ T9487] alloc_pages_mpol+0x1fb/0x540 [ 251.039955][ T9487] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.039974][ T9487] folio_alloc_mpol_noprof+0x36/0x260 [ 251.039992][ T9487] shmem_alloc_folio+0x135/0x160 [ 251.040010][ T9487] shmem_alloc_and_add_folio+0x371/0xd40 [ 251.040025][ T9487] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 251.040038][ T9487] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 251.040053][ T9487] shmem_get_folio_gfp+0x6ad/0x1910 [ 251.040067][ T9487] ? unwind_get_return_address+0x59/0xa0 [ 251.040083][ T9487] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 251.040099][ T9487] shmem_fault+0x1f9/0xa20 [ 251.040110][ T9487] ? __lock_acquire+0x49f/0x1a40 [ 251.040127][ T9487] ? __pfx_shmem_fault+0x10/0x10 [ 251.040146][ T9487] ? __pfx_filemap_map_pages+0x10/0x10 [ 251.040155][ T9487] __do_fault+0x10b/0x440 [ 251.040168][ T9487] ? find_held_lock+0x2b/0x80 [ 251.040182][ T9487] do_fault+0x2db/0x1750 [ 251.040199][ T9487] __handle_mm_fault+0x187d/0x2a00 [ 251.040212][ T9487] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.040225][ T9487] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.040237][ T9487] ? pte_offset_map_lock+0x174/0x320 [ 251.040251][ T9487] ? find_held_lock+0x2b/0x80 [ 251.040269][ T9487] ? follow_page_pte+0x4d0/0x13f0 [ 251.040287][ T9487] handle_mm_fault+0x37b/0xa30 [ 251.040301][ T9487] __get_user_pages+0x1178/0x32a0 [ 251.040320][ T9487] ? down_read_killable+0x35e/0x520 [ 251.040336][ T9487] ? __pfx___get_user_pages+0x10/0x10 [ 251.040355][ T9487] __gup_longterm_locked+0x279/0x16f0 [ 251.040371][ T9487] ? filter_irq_stacks+0x41/0x90 [ 251.040388][ T9487] ? __pfx___gup_longterm_locked+0x10/0x10 [ 251.040406][ T9487] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 251.040424][ T9487] gup_fast_fallback+0x16dc/0x2790 [ 251.040449][ T9487] ? __pfx_gup_fast_fallback+0x10/0x10 [ 251.040466][ T9487] ? rcu_is_watching+0x12/0xc0 [ 251.040479][ T9487] ? rcu_is_watching+0x12/0xc0 [ 251.040494][ T9487] pin_user_pages_fast+0xa7/0xf0 [ 251.040510][ T9487] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 251.040526][ T9487] ? io_pin_pages+0xc3/0x1d0 [ 251.040541][ T9487] io_pin_pages+0xe6/0x1d0 [ 251.040555][ T9487] io_sqe_buffer_register+0x1d9/0x1500 [ 251.040571][ T9487] ? trace_kmalloc+0xeb/0x110 [ 251.040586][ T9487] ? __kasan_kmalloc+0xaa/0xb0 [ 251.040599][ T9487] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 251.040612][ T9487] ? __kvmalloc_node_noprof+0x36d/0x970 [ 251.040630][ T9487] ? iovec_from_user+0xda/0x140 [ 251.040651][ T9487] io_sqe_buffers_register.cold+0x346/0x4c3 [ 251.040671][ T9487] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 251.040687][ T9487] ? __fget_files+0x21f/0x3d0 [ 251.040702][ T9487] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 251.040718][ T9487] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 251.040731][ T9487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.040745][ T9487] ? __fget_files+0x21f/0x3d0 [ 251.040757][ T9487] ? fput+0x79/0x100 [ 251.040770][ T9487] ? ksys_write+0x1ac/0x250 [ 251.040779][ T9487] ? __pfx_ksys_write+0x10/0x10 [ 251.040792][ T9487] __do_fast_syscall_32+0xe7/0x970 [ 251.040806][ T9487] ? lockdep_hardirqs_on+0x78/0x100 [ 251.040820][ T9487] do_fast_syscall_32+0x32/0x70 [ 251.040834][ T9487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.040848][ T9487] RIP: 0023:0xf7fa8fec [ 251.040861][ T9487] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 251.040866][ T9487] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 251.040876][ T9487] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 251.040882][ T9487] RDX: 00000000800002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 251.040889][ T9487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.040895][ T9487] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.040901][ T9487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.040915][ T9487] [ 251.494786][ T5535] usb 40-1: device descriptor read/8, error -110 [ 251.599402][ T9500] binder: BINDER_SET_CONTEXT_MGR already set [ 251.603780][ T9500] binder: 9499:9500 ioctl 4018620d 80000480 returned -16 [ 251.610286][ T9500] binder: 9499:9500 ioctl c0306201 80000440 returned -22 [ 251.615104][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 251.629998][ T9500] binder: 9499:9500 ioctl c0145608 80000140 returned -22 [ 251.877012][ T9506] siw: device registration error -23 [ 251.921537][ T5535] usb usb40-port1: attempt power cycle [ 252.502098][ T9509] overlayfs: overlapping lowerdir path [ 252.532052][ T5759] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 252.779635][ T1348] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 252.832614][ T9517] ptrace attach of ""[9518] was attempted by "/syz-executor exec"[9517] [ 252.905118][ T42] audit: type=1800 audit(1785132361.909:163): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1004" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 252.929963][ T1348] usb 6-1: Using ep0 maxpacket: 8 [ 252.936075][ T1348] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.939385][ T1348] usb 6-1: config 0 has no interfaces? [ 252.945008][ T1348] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 252.948769][ T1348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.953651][ T1348] usb 6-1: Product: syz [ 252.956610][ T1348] usb 6-1: Manufacturer: syz [ 252.961621][ T1348] usb 6-1: SerialNumber: syz [ 253.219863][ T1348] usb 6-1: config 0 descriptor?? [ 253.322424][ T5535] usb usb40-port1: unable to enumerate USB device [ 253.432131][ T1348] usb 6-1: USB disconnect, device number 21 [ 253.458368][ T9527] ptrace attach of ""[9528] was attempted by "/syz-executor exec"[9527] [ 253.478395][ T42] audit: type=1800 audit(1785132362.479:164): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1006" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 253.607780][ T9532] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1010'. [ 253.755514][ T9535] ptrace attach of ""[9536] was attempted by "/syz-executor exec"[9535] [ 253.783344][ T42] audit: type=1800 audit(1785132362.789:165): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1009" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 254.430220][ T5535] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 254.572856][ T9555] syzkaller0: entered promiscuous mode [ 254.584141][ T9555] syzkaller0: entered allmulticast mode [ 254.585468][ T5535] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 254.595396][ T5535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 254.602196][ T5535] usb 6-1: Product: syz [ 254.605146][ T5535] usb 6-1: Manufacturer: syz [ 254.609488][ T5535] usb 6-1: SerialNumber: syz [ 254.624036][ T5535] usb 6-1: config 0 descriptor?? [ 254.635048][ T5535] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 254.644262][ T5535] dvb-usb: bulk message failed: -22 (2/0) [ 254.656400][ T5535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.663680][ T5535] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 254.668341][ T5535] usb 6-1: media controller created [ 254.683021][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.744838][ T42] audit: type=1326 audit(1785132363.749:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.1018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 254.761067][ T42] audit: type=1326 audit(1785132363.749:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.1018" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 254.774183][ T42] audit: type=1326 audit(1785132363.749:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.1018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 254.789992][ T42] audit: type=1326 audit(1785132363.759:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.1018" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 254.885093][ T9569] binder: BINDER_SET_CONTEXT_MGR already set [ 254.889648][ T9569] binder: 9568:9569 ioctl 4018620d 80000100 returned -16 [ 254.914705][ T9569] binder: 9568:9569 ioctl c0306201 80000640 returned -22 [ 254.969941][ T1348] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 255.102805][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.119680][ T1348] usb 5-1: Using ep0 maxpacket: 8 [ 255.125952][ T1348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.132733][ T1348] usb 5-1: config 0 has no interfaces? [ 255.141050][ T1348] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 255.147296][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.155659][ T1348] usb 5-1: Product: syz [ 255.159331][ T1348] usb 5-1: Manufacturer: syz [ 255.164744][ T1348] usb 5-1: SerialNumber: syz [ 255.173663][ T1348] usb 5-1: config 0 descriptor?? [ 255.176327][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.393568][ T1348] usb 5-1: USB disconnect, device number 15 [ 255.459176][ T9575] ptrace attach of ""[9576] was attempted by "/syz-executor exec"[9575] [ 255.594340][ T42] audit: type=1800 audit(1785132364.549:170): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1022" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 255.685008][ T5535] cxusb: set interface failed [ 255.688287][ T5535] dvb-usb: bulk message failed: -22 (1/0) [ 255.713936][ T5535] DVB: Unable to find symbol mt352_attach() [ 255.717530][ T5535] dvb-usb: bulk message failed: -22 (5/0) [ 255.726047][ T5535] zl10353_read_register: readreg error (reg=127, ret==-121) [ 255.731233][ T5535] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 255.793800][ T5535] rc_core: IR keymap rc-dvico-mce not found [ 255.793816][ T5535] Registered IR keymap rc-empty [ 255.794651][ T5535] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 255.798348][ T5535] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input33 [ 255.813935][ T5535] dvb-usb: schedule remote query interval to 100 msecs. [ 255.813948][ T5535] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 255.814704][ T5535] usb 6-1: USB disconnect, device number 22 [ 255.841911][ T5535] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 256.191130][ T9603] overlayfs: missing 'lowerdir' [ 257.641527][ T9634] ptrace attach of ""[9635] was attempted by "/syz-executor exec"[9634] [ 257.665958][ T42] audit: type=1800 audit(1785132366.669:171): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1036" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 257.709704][ T1348] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 257.853648][ T9637] ptrace attach of ""[9638] was attempted by "/syz-executor exec"[9637] [ 257.860046][ T1348] usb 8-1: Using ep0 maxpacket: 16 [ 257.865922][ T1348] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.876829][ T1348] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.886764][ T1348] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.892447][ T42] audit: type=1800 audit(1785132366.899:172): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1039" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 257.893297][ T1348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.918943][ T1348] usb 8-1: config 0 descriptor?? [ 258.178509][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.201927][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.384352][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 258.711128][ T5535] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 258.871568][ T9641] macsec0: left promiscuous mode [ 258.873433][ T5535] usb 5-1: Using ep0 maxpacket: 8 [ 258.878930][ T5535] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 258.890964][ T5535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.916880][ T5535] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.924229][ T5535] pvrusb2: ********** [ 258.925549][ T5535] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.946177][ T5535] pvrusb2: Important functionality might not be entirely working. [ 258.964153][ T5535] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 258.989430][ T5535] pvrusb2: ********** [ 259.015340][ T9659] NILFS (loop2): device size too small [ 259.126384][ T2519] pvrusb2: Invalid write control endpoint [ 259.187087][ T9641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.294557][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.347043][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.438978][ T2519] pvrusb2: Invalid write control endpoint [ 259.483737][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 259.528077][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 259.548717][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 259.574503][ T2519] pvrusb2: Device being rendered inoperable [ 259.596196][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 259.615463][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 259.691405][ T2519] pvrusb2: Attached sub-driver cx25840 [ 259.707960][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.722580][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.722619][ T1348] usbhid 8-1:0.0: can't add hid device: -71 [ 259.731417][ T1348] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 259.735643][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.760152][ T1348] usb 8-1: USB disconnect, device number 20 [ 259.763456][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.781855][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.804813][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.176947][ T9685] binder: BINDER_SET_CONTEXT_MGR already set [ 260.187385][ T9685] binder: 9681:9685 ioctl 4018620d 80000100 returned -16 [ 260.219411][ T9688] ptrace attach of ""[9689] was attempted by "/syz-executor exec"[9688] [ 260.222757][ T9685] binder: 9681:9685 ioctl c0306201 80000640 returned -22 [ 260.261717][ T42] audit: type=1800 audit(1785132369.269:173): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1050" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 260.857554][ T9707] siw: device registration error -23 [ 262.627645][ T1348] usb 5-1: USB disconnect, device number 16 [ 262.835391][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 262.948100][ T9723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 262.980625][ T42] audit: type=1800 audit(1785132371.979:174): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1063" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 263.017676][ T9725] binder: 9724:9725 ioctl c0306201 80000640 returned -22 [ 263.105345][ T1348] IPVS: starting estimator thread 0... [ 263.316419][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'. [ 263.331563][ T9734] IPVS: using max 44 ests per chain, 105600 per kthread [ 263.345303][ T9743] siw: device registration error -23 [ 263.377791][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'. [ 264.887447][ T9758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1070'. [ 265.103439][ T9777] ptrace attach of ""[9778] was attempted by "/syz-executor exec"[9777] [ 265.151583][ T42] audit: type=1800 audit(1785132374.159:175): pid=9777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1075" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 265.463610][ T9783] siw: device registration error -23 [ 266.765684][ T9790] siw: device registration error -23 [ 268.347775][ T5831] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 268.479879][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 268.688965][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 268.809763][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.817352][ T5831] usb 5-1: config 0 has no interfaces? [ 268.821067][ T5831] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 268.823969][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.827548][ T5831] usb 5-1: Product: syz [ 268.830004][ T5831] usb 5-1: Manufacturer: syz [ 268.833642][ T5831] usb 5-1: SerialNumber: syz [ 268.838549][ T5831] usb 5-1: config 0 descriptor?? [ 268.992760][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 269.001120][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.004525][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.007993][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.012008][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.015051][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.018616][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.021941][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.024714][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.028300][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.031623][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.034519][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.037899][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.041009][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.043830][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.049588][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.054346][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.058201][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.061781][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.064356][ T5831] usb 5-1: USB disconnect, device number 17 [ 269.066487][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.070168][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.073696][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.076566][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.079463][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.085296][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 269.089290][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 269.092398][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 269.095087][ T9] usb 8-1: Product: syz [ 269.096435][ T9] usb 8-1: Manufacturer: syz [ 269.097945][ T9] usb 8-1: SerialNumber: syz [ 269.100998][ T9] usb 8-1: config 0 descriptor?? [ 269.109083][ T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 269.292056][ T9834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 269.294105][ T9834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.296768][ T9834] vhci_hcd vhci_hcd.0: Device attached [ 269.431844][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 269.432022][ T6314] usb 8-1: USB disconnect, device number 21 [ 269.435080][ T9837] yurex 8-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 269.439953][ T6314] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 269.559647][ T1348] usb 40-1: SetAddress Request (10) to port 0 [ 269.562228][ T1348] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 269.623109][ T9841] binder: 9840:9841 ioctl c0306201 80000640 returned -22 [ 269.650928][ T9823] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 269.671963][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1096'. [ 269.683661][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1096'. [ 269.689006][ T9823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.777334][ T9823] bond2: (slave geneve2): making interface the new active one [ 269.788996][ T9823] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 269.814877][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 269.830302][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 269.923193][ T9835] vhci_hcd: connection reset by peer [ 269.928643][ T12] vhci_hcd vhci_hcd.1: stop threads [ 269.935878][ T12] vhci_hcd vhci_hcd.1: release socket [ 269.940982][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 270.189703][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 270.279655][ T6314] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 270.361576][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.365329][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.369153][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 270.373305][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.380317][ T9] usb 5-1: config 0 descriptor?? [ 270.387390][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 270.390245][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 270.395790][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 270.399781][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 270.402701][ T9] usb 5-1: media controller created [ 270.405903][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.416253][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 270.419078][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 270.424602][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input35 [ 270.430130][ T6314] usb 7-1: Using ep0 maxpacket: 8 [ 270.433866][ T6314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.437361][ T6314] usb 7-1: config 0 has no interfaces? [ 270.441914][ T6314] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 270.443028][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 270.444783][ T6314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.447783][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 270.453609][ T6314] usb 7-1: Product: syz [ 270.456561][ T6314] usb 7-1: Manufacturer: syz [ 270.458865][ T6314] usb 7-1: SerialNumber: syz [ 270.473696][ T6314] usb 7-1: config 0 descriptor?? [ 270.586920][ T9850] dvb-usb: bulk message failed: -22 (2/0) [ 270.592702][ T6314] usb 5-1: USB disconnect, device number 18 [ 270.654138][ T6314] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.708938][ T6898] usb 7-1: USB disconnect, device number 17 [ 271.221767][ T6898] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 271.297051][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1109'. [ 271.323696][ T9889] netlink: 16026 bytes leftover after parsing attributes in process `syz.2.1110'. [ 271.380488][ T6898] usb 8-1: Using ep0 maxpacket: 8 [ 271.384113][ T6898] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 271.387239][ T6898] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.391287][ T6898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.395001][ T6898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.398826][ T6898] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.404107][ T6898] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.407592][ T6898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.482686][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.650615][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.654529][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 271.701096][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.706425][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.710684][ T9] usb 5-1: Product: syz [ 271.712461][ T9] usb 5-1: Manufacturer: syz [ 271.714054][ T9] usb 5-1: SerialNumber: syz [ 271.736175][ T9] cdc_mbim 5-1:1.0: skipping garbage [ 272.034652][ T9885] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 272.129448][ T9902] ptrace attach of ""[9903] was attempted by "/syz-executor exec"[9902] [ 272.144480][ T6898] usb 8-1: usb_control_msg returned -71 [ 272.148128][ T6898] usbtmc 8-1:16.0: can't read capabilities [ 272.184767][ T6898] usb 8-1: USB disconnect, device number 22 [ 272.219336][ T42] audit: type=1800 audit(1785132381.219:176): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1114" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 272.735555][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1118'. [ 272.748510][ T9885] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 272.755672][ T9] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 272.779353][ T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 272.783188][ T9927] ptrace attach of ""[9928] was attempted by "/syz-executor exec"[9927] [ 272.815119][ T9] wwan wwan0: port wwan0mbim0 attached [ 272.849986][ T42] audit: type=1800 audit(1785132381.849:177): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1115" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 272.882657][ T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, be:c6:f7:f0:fe:f5 [ 272.914293][ T42] audit: type=1326 audit(1785132381.919:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914325][ T42] audit: type=1326 audit(1785132381.919:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914347][ T42] audit: type=1326 audit(1785132381.919:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914367][ T42] audit: type=1326 audit(1785132381.919:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914388][ T42] audit: type=1326 audit(1785132381.919:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914409][ T42] audit: type=1326 audit(1785132381.919:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914429][ T42] audit: type=1326 audit(1785132381.919:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.914449][ T42] audit: type=1326 audit(1785132381.919:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8fec code=0x7ffc0000 [ 272.962122][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.962167][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.962627][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.962639][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.962837][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.962852][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.963059][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.963074][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.963267][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.963282][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.963480][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.963494][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.963697][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.963711][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.963902][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.963916][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.964118][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.964132][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 272.964333][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 272.964347][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 273.034338][ T9885] libceph: resolve '400' (ret=-3): failed [ 273.053497][ T5831] usb 5-1: USB disconnect, device number 19 [ 273.054564][ T5831] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 273.134856][ T9935] netlink: 'syz.2.1120': attribute type 25 has an invalid length. [ 273.272359][ T5831] wwan wwan0: port wwan0mbim0 disconnected [ 274.528353][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 274.553147][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 274.612659][ T1348] usb 40-1: device descriptor read/8, error -110 [ 275.013544][ T1348] usb usb40-port1: attempt power cycle [ 275.177972][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1125'. [ 275.187969][ T9959] syz.0.1122 (9959) used greatest stack depth: 19104 bytes left [ 275.669727][ T9991] ptrace attach of ""[9992] was attempted by "/syz-executor exec"[9991] [ 275.944121][ T1348] usb usb40-port1: unable to enumerate USB device [ 275.971483][ T9997] netlink: 'syz.1.1130': attribute type 4 has an invalid length. [ 276.013701][ T9998] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 276.083147][ T9997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.526038][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 276.535733][T10014] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.123058][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'. [ 278.721333][T10033] siw: device registration error -23 [ 279.199107][T10045] 9pnet_fd: Insufficient options for proto=fd [ 279.201394][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 279.251892][T10046] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 279.262537][T10046] overlayfs: failed to set xattr on upper [ 279.266588][T10046] overlayfs: ...falling back to redirect_dir=nofollow. [ 279.274660][T10046] overlayfs: ...falling back to index=off. [ 279.278769][T10046] overlayfs: ...falling back to uuid=null. [ 279.297057][T10046] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 279.961975][T10040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.966992][T10040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.987316][T10040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.992484][T10040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.994545][T10040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.239728][ T5831] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 280.392401][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.400793][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.408377][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.418078][ T5831] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.424885][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.435573][ T5831] usb 8-1: config 0 descriptor?? [ 280.548505][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 280.877407][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.884700][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.891282][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.897450][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.904588][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.911152][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.917459][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.926150][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.932535][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.939003][ T5831] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.986409][ T5831] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 281.125492][ T5831] usb 8-1: USB disconnect, device number 23 [ 281.249749][ T5759] Bluetooth: hci0: command 0x0406 tx timeout [ 281.339847][ T1348] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 281.469729][ T1348] usb 6-1: device descriptor read/64, error -71 [ 281.529788][ T6314] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 281.544842][T10103] netlink: 'syz.0.1159': attribute type 10 has an invalid length. [ 281.547445][T10103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1159'. [ 281.615294][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 281.617890][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 281.698271][ T6314] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 281.705044][ T6314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 281.709021][ T6314] usb 7-1: Product: syz [ 281.712365][ T1348] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 281.715609][T10105] ceph: No mds server is up or the cluster is laggy [ 281.718452][ T6314] usb 7-1: Manufacturer: syz [ 281.720751][ T6314] usb 7-1: SerialNumber: syz [ 281.759142][ T6898] IPVS: starting estimator thread 0... [ 281.766448][ T6314] usb 7-1: config 0 descriptor?? [ 281.790830][ T6314] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 281.794044][ T6314] dvb-usb: bulk message failed: -22 (2/0) [ 281.798432][ T6314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.804030][ T6314] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 281.808385][ T6314] usb 7-1: media controller created [ 281.838470][ T6314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.849811][T10112] IPVS: using max 27 ests per chain, 64800 per kthread [ 281.887406][ T1348] usb 6-1: device descriptor read/64, error -71 [ 281.892344][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1163'. [ 281.972177][T10098] cxusb: i2c rd: len=88 is too big! [ 281.972177][T10098] [ 281.977611][T10097] cxusb: i2c rd: len=88 is too big! [ 281.977611][T10097] [ 281.999831][ T1348] usb usb6-port1: attempt power cycle [ 282.050179][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 282.091420][ T6314] cxusb: set interface failed [ 282.094214][ T6314] dvb-usb: bulk message failed: -22 (1/0) [ 282.118578][ T6314] DVB: Unable to find symbol mt352_attach() [ 282.120750][ T6314] dvb-usb: bulk message failed: -22 (5/0) [ 282.123965][ T6314] zl10353_read_register: readreg error (reg=127, ret==-121) [ 282.126377][ T6314] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 282.189640][ T6314] rc_core: IR keymap rc-dvico-mce not found [ 282.191849][ T6314] Registered IR keymap rc-empty [ 282.194151][ T6314] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 282.198651][ T6314] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input37 [ 282.203795][ T6314] dvb-usb: schedule remote query interval to 100 msecs. [ 282.206250][ T6314] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 282.211755][ T6314] usb 7-1: USB disconnect, device number 18 [ 282.255524][ T6314] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 282.339770][ T1348] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 282.360240][ T1348] usb 6-1: device descriptor read/8, error -71 [ 282.599713][ T1348] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 282.621437][ T1348] usb 6-1: device descriptor read/8, error -71 [ 282.729202][T10133] overlay: ./bus is not a directory [ 282.741932][ T1348] usb usb6-port1: unable to enumerate USB device [ 282.950546][T10146] syzkaller1: entered promiscuous mode [ 282.959641][T10146] syzkaller1: entered allmulticast mode [ 283.122339][T10152] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1172'. [ 283.185542][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1173'. [ 283.235229][T10156] veth2: entered allmulticast mode [ 283.331317][ T5759] Bluetooth: hci0: command 0x0406 tx timeout [ 283.366200][T10162] serio: Serial port ttynull [ 283.380250][ T1348] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 283.382406][T10165] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 283.398613][ T42] kauditd_printk_skb: 128 callbacks suppressed [ 283.398623][ T42] audit: type=1326 audit(1785132392.399:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.406995][ T42] audit: type=1326 audit(1785132392.409:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.413786][ T42] audit: type=1326 audit(1785132392.409:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.420390][ T42] audit: type=1326 audit(1785132392.409:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.427420][ T42] audit: type=1326 audit(1785132392.409:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.499982][ T42] audit: type=1326 audit(1785132392.509:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.506068][ T42] audit: type=1326 audit(1785132392.509:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.2.1177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 283.519662][ T1348] usb 6-1: device descriptor read/64, error -71 [ 283.759625][ T1348] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 283.901168][ T1348] usb 6-1: device descriptor read/64, error -71 [ 283.919673][ T5831] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 284.009968][ T1348] usb usb6-port1: attempt power cycle [ 284.069702][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1183'. [ 284.071957][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.076734][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.081324][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.085687][ T5831] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.091679][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.110642][ T5831] usb 8-1: config 0 descriptor?? [ 284.129990][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 284.644153][T10197] loop9: detected capacity change from 0 to 2640 [ 284.648823][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.656357][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.663889][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.668278][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.672021][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.674874][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.678177][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.684126][T10197] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.690861][T10197] ldm_validate_partition_table(): Disk read failed. [ 284.703968][T10199] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 284.714372][T10197] Buffer I/O error on dev loop9, logical block 1, async page read [ 284.724408][ T5831] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 284.730710][T10197] Dev loop9: unable to read RDB block 8 [ 284.741795][T10197] loop9: unable to read partition table [ 284.744085][T10197] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 284.960395][T10204] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 284.969750][T10204] CIFS mount error: No usable UNC path provided in device string! [ 284.969750][T10204] [ 284.973287][T10204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.102809][T10210] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 285.160373][T10210] netlink: 'syz.2.1191': attribute type 16 has an invalid length. [ 285.167759][T10210] netlink: 'syz.2.1191': attribute type 3 has an invalid length. [ 285.174744][T10210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1191'. [ 285.184930][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 285.195058][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 285.229447][T10210] veth3: entered allmulticast mode [ 285.235288][T10210] bond2: (slave veth3): Enslaving as an active interface with a down link [ 285.257157][T10210] bond2 (unregistering): (slave veth3): Releasing active interface [ 285.289022][T10210] bond2 (unregistering): Released all slaves [ 285.325911][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1193'. [ 285.409684][ T5759] Bluetooth: hci0: command 0x0406 tx timeout [ 285.969012][T10239] lo speed is unknown, defaulting to 1000 [ 285.982924][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 285.991696][ T1348] usb 8-1: USB disconnect, device number 24 [ 286.162555][ T42] audit: type=1326 audit(1785132395.169:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.0.1200" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc4fec code=0x0 [ 286.211466][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 286.265230][T10253] ehci-pci 0000:00:1d.7: remove, state 1 [ 286.276918][T10253] usb usb2: USB disconnect, device number 1 [ 286.284978][T10253] usb 2-1: USB disconnect, device number 2 [ 286.661761][T10258] syzkaller0: entered promiscuous mode [ 286.665129][T10258] syzkaller0: entered allmulticast mode [ 286.682471][T10258] tipc: Enabled bearer , priority 0 [ 286.691312][T10257] tipc: Resetting bearer [ 286.720349][T10257] tipc: Disabling bearer [ 286.799040][T10253] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 286.863797][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 286.929970][T10266] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 286.963096][T10254] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 287.007419][T10254] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 287.017647][T10254] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 287.020229][ T5831] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 287.022752][T10254] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 287.030959][T10254] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 287.042901][T10254] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12605 usecs [ 287.089156][T10254] pci 0000:00:01.0: Adding to iommu group 1 [ 287.100885][T10254] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 287.103313][T10254] pci 0000:00:01.0: vgaarb: bridge control possible [ 287.105849][T10254] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 287.117647][T10254] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 287.123492][T10254] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 287.147095][T10254] pci 0000:00:1d.7: Adding to iommu group 7 [ 287.163192][T10254] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 287.174274][T10254] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 287.181859][ T5831] usb 1-1: not running at top speed; connect to a high speed hub [ 287.186007][T10254] pci 0000:00:1d.7: BAR 0 [mem 0x81001000-0x81001fff]: assigned [ 287.203053][T10254] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 287.212874][ T5831] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 287.216201][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 287.222179][ T5831] usb 1-1: Product: QEMU USB Tablet [ 287.226209][ T5831] usb 1-1: Manufacturer: QEMU [ 287.231177][ T5831] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 287.255661][T10254] [drm] Found bochs VGA, ID 0xb0c5. [ 287.261612][T10254] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 287.268944][ T5831] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input38 [ 287.270955][T10254] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 287.350055][ T5831] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 287.472636][T10254] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 169862 usecs [ 287.582460][ T37] usb 1-1: USB disconnect, device number 2 [ 287.814761][T10286] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 287.860284][T10286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.904074][T10286] bond1: (slave veth3): Enslaving as an active interface with a down link [ 287.988491][T10288] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 288.016222][T10286] bond1: (slave dummy0): making interface the new active one [ 288.033495][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1210'. [ 288.056084][T10286] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 288.086807][T10288] dummy0: entered promiscuous mode [ 288.100320][T10288] bond1: (slave dummy0): Releasing active interface [ 288.190326][ T37] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 288.298299][T10294] Bluetooth: MGMT ver 1.23 [ 288.332078][ T37] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 288.401196][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 288.404789][ T37] ehci-pci 0000:00:1d.7: irq 19, io mem 0x81001000 [ 288.550950][ T9] usb 5-1: device descriptor read/64, error -71 [ 288.570913][ T37] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 288.626831][ T37] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 288.636590][ T37] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 288.657050][ T37] usb usb2: Product: EHCI Host Controller [ 288.662124][ T37] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 288.671268][ T37] usb usb2: SerialNumber: 0000:00:1d.7 [ 288.701839][T10302] tmpfs: Bad value for 'mpol' [ 288.712665][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 288.763557][ T37] hub 2-0:1.0: USB hub found [ 288.782617][ T37] hub 2-0:1.0: 6 ports detected [ 288.811603][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 288.845419][ T37] hub 1-0:1.0: USB hub found [ 288.848758][ T37] hub 1-0:1.0: 2 ports detected [ 288.950503][ T9] usb 5-1: device descriptor read/64, error -71 [ 288.974902][ T37] hub 3-0:1.0: USB hub found [ 288.978741][ T37] hub 3-0:1.0: 2 ports detected [ 289.009934][ T1481] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 289.016138][ T37] hub 4-0:1.0: USB hub found [ 289.023047][ T37] hub 4-0:1.0: 2 ports detected [ 289.057248][T10308] ptrace attach of ""[10309] was attempted by "/syz-executor exec"[10308] [ 289.062668][ T9] usb usb5-port1: attempt power cycle [ 289.077863][ T42] audit: type=1800 audit(1785132398.079:322): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1218" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 289.090292][ T6314] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 289.159670][ T1481] usb 8-1: Using ep0 maxpacket: 8 [ 289.162736][ T1481] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 289.166467][ T1481] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.174196][ T1481] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.183585][ T1481] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.190998][ T1481] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.200563][ T1481] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.206988][ T1481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.284406][ T6314] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 289.292676][ T6314] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 289.298073][ T6314] usb 2-1: Product: QEMU USB Tablet [ 289.304330][ T6314] usb 2-1: Manufacturer: QEMU [ 289.307455][ T6314] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 289.334174][ T6314] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input39 [ 289.399784][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 289.420359][ T9] usb 5-1: device descriptor read/8, error -71 [ 289.427769][ T6314] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 289.436490][ T1481] usb 8-1: usb_control_msg returned -32 [ 289.440127][ T1481] usbtmc 8-1:16.0: can't read capabilities [ 289.659652][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 289.680133][ T9] usb 5-1: device descriptor read/8, error -71 [ 289.790087][ T9] usb usb5-port1: unable to enumerate USB device [ 289.879039][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 289.887662][T10325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.890940][T10325] IPv6: NLM_F_CREATE should be set when creating new route [ 289.909884][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 289.913431][T10325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.148636][T10330] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1216'. [ 291.435895][T10348] ptrace attach of ""[10349] was attempted by "/syz-executor exec"[10348] [ 291.441360][ T1481] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 291.446896][ T42] audit: type=1800 audit(1785132400.449:323): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1229" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 291.569721][ T1348] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 291.579886][ T1481] usb 7-1: device descriptor read/64, error -71 [ 291.721840][ T1348] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.729660][ T1348] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.739641][ T1348] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.742447][ T1348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.750037][ T1348] usb 6-1: config 0 descriptor?? [ 291.756779][ T1348] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 291.819621][ T1481] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 291.949610][ T1481] usb 7-1: device descriptor read/64, error -71 [ 291.967633][ T9] usb 6-1: USB disconnect, device number 30 [ 292.060862][ T1481] usb usb7-port1: attempt power cycle [ 292.399714][ T1481] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 292.420284][ T1481] usb 7-1: device descriptor read/8, error -71 [ 292.500345][T10357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.503728][T10357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.660591][ T1481] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 292.681060][ T1481] usb 7-1: device descriptor read/8, error -71 [ 292.803548][ T1481] usb usb7-port1: unable to enumerate USB device [ 293.115081][T10354] overlayfs: statfs failed on './file0' [ 293.550013][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.690070][ T9] usb 5-1: device descriptor read/64, error -71 [ 293.939938][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 294.081022][ T9] usb 5-1: device descriptor read/64, error -71 [ 294.191027][ T9] usb usb5-port1: attempt power cycle [ 294.540341][T10381] ptrace attach of ""[10382] was attempted by "/syz-executor exec"[10381] [ 294.557253][ T42] audit: type=1800 audit(1785132403.559:324): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1239" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 294.679960][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 294.702221][ T9] usb 5-1: device descriptor read/8, error -71 [ 294.950142][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 294.984341][ T9] usb 5-1: device descriptor read/8, error -71 [ 295.110089][ T9] usb usb5-port1: unable to enumerate USB device [ 295.171099][T10330] usbtmc 8-1:16.0: usb_control_msg returned -110 [ 295.279146][ T9] usb 8-1: USB disconnect, device number 25 [ 295.375231][T10386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.381370][T10386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.847697][ T42] audit: type=1800 audit(1785132404.849:325): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1240" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 296.100264][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 296.249648][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 296.255237][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.263404][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.272011][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.292764][ T9] usb 7-1: config 0 descriptor?? [ 296.537327][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 297.530845][T10424] ptrace attach of ""[10426] was attempted by "/syz-executor exec"[10424] [ 297.639616][ T42] audit: type=1800 audit(1785132406.579:326): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1249" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 297.878525][ T1348] usb 7-1: USB disconnect, device number 23 [ 298.219943][ T6314] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 298.380474][ T6314] usb 6-1: Using ep0 maxpacket: 32 [ 298.401238][ T6314] usb 6-1: config index 0 descriptor too short (expected 8219, got 27) [ 298.493110][ T6314] usb 6-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 298.516219][ T6314] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 298.561901][ T6314] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 298.599443][ T6314] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 298.640473][ T6314] usb 6-1: Product: syz [ 298.651503][T10451] siw: device registration error -23 [ 298.655033][ T6314] usb 6-1: Manufacturer: syz [ 298.672539][ T6314] usb 6-1: SerialNumber: syz [ 299.780777][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 299.919631][ T9] usb 5-1: device descriptor read/64, error -71 [ 300.181043][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 300.264869][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 300.298942][T10481] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 300.339929][ T9] usb 5-1: device descriptor read/64, error -71 [ 300.360226][T10481] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 300.414957][T10481] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 300.463476][ T9] usb usb5-port1: attempt power cycle [ 300.587089][T10481] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.708606][ T6314] usb 6-1: USB disconnect, device number 31 [ 300.829790][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 300.873125][ T9] usb 5-1: device descriptor read/8, error -71 [ 301.151159][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 301.183630][ T9] usb 5-1: device descriptor read/8, error -71 [ 301.299987][ T9] usb usb5-port1: unable to enumerate USB device [ 301.363414][T10426] syz.3.1249 (10426) used greatest stack depth: 17896 bytes left [ 302.419953][ T6314] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 302.611816][T10515] syzkaller0: entered promiscuous mode [ 302.613806][T10515] syzkaller0: entered allmulticast mode [ 302.619700][ T6314] usb 6-1: device descriptor read/64, error -71 [ 302.684129][T10519] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 302.686264][T10519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.691609][T10519] vhci_hcd vhci_hcd.0: Device attached [ 302.859813][ T6314] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 302.959676][ T6898] usb 44-1: SetAddress Request (2) to port 0 [ 302.961865][ T6898] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 302.989615][ T6314] usb 6-1: device descriptor read/64, error -71 [ 303.100063][ T6314] usb usb6-port1: attempt power cycle [ 303.329735][T10520] vhci_hcd: connection reset by peer [ 303.331713][ T13] vhci_hcd vhci_hcd.3: stop threads [ 303.333510][ T13] vhci_hcd vhci_hcd.3: release socket [ 303.338245][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 303.439797][ T6314] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 303.460123][ T6314] usb 6-1: device descriptor read/8, error -71 [ 303.704724][ T6314] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 303.733728][ T6314] usb 6-1: device descriptor read/8, error -71 [ 303.849868][ T6314] usb usb6-port1: unable to enumerate USB device [ 304.146106][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 304.151615][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 304.215416][T10535] fuse: Bad value for 'fd' [ 304.218014][T10535] futex_wake_op: syz.0.1273 tries to shift op by 144; fix this program [ 304.772850][T10557] ptrace attach of ""[10558] was attempted by "/syz-executor exec"[10557] [ 304.792531][ T42] audit: type=1800 audit(1785132413.799:327): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 305.443302][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 305.456058][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 305.798318][T10581] Cannot find set identified by id 2 to match [ 305.831801][ T9] libceph: connect (1)[c::]:6789 error -101 [ 305.839424][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 305.877033][T10588] netlink: 'syz.3.1285': attribute type 13 has an invalid length. [ 305.886240][T10588] netlink: 'syz.3.1285': attribute type 27 has an invalid length. [ 305.896969][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1285'. [ 306.046206][T10597] FAULT_INJECTION: forcing a failure. [ 306.046206][T10597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.051968][T10597] CPU: 2 UID: 0 PID: 10597 Comm: syz.1.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.051987][T10597] Tainted: [L]=SOFTLOCKUP [ 306.051991][T10597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.051998][T10597] Call Trace: [ 306.052003][T10597] [ 306.052008][T10597] dump_stack_lvl+0x100/0x190 [ 306.052025][T10597] should_fail_ex.cold+0x5/0xa [ 306.052039][T10597] copy_fpstate_to_sigframe+0x82d/0xae0 [ 306.052054][T10597] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 306.052068][T10597] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 306.052082][T10597] ? x86_task_fpu+0x5f/0x90 [ 306.052099][T10597] get_sigframe+0x3fb/0x940 [ 306.052118][T10597] ? __pfx_get_sigframe+0x10/0x10 [ 306.052134][T10597] ? rcu_is_watching+0x12/0xc0 [ 306.052148][T10597] ? siginfo_layout+0x156/0x290 [ 306.052161][T10597] ia32_setup_rt_frame+0xe7/0xaf0 [ 306.052178][T10597] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 306.052192][T10597] ? __pfx_vfs_read+0x10/0x10 [ 306.052207][T10597] ? find_held_lock+0x2b/0x80 [ 306.052222][T10597] arch_do_signal_or_restart+0x459/0x7a0 [ 306.052240][T10597] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 306.052261][T10597] ? fput+0x79/0x100 [ 306.052280][T10597] exit_to_user_mode_loop+0x139/0x6f0 [ 306.052291][T10597] ? rcu_is_watching+0x12/0xc0 [ 306.052305][T10597] __do_fast_syscall_32+0x701/0x970 [ 306.052319][T10597] ? lockdep_hardirqs_on+0x78/0x100 [ 306.052332][T10597] do_fast_syscall_32+0x32/0x70 [ 306.052346][T10597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.052360][T10597] RIP: 0023:0xf7fa8fea [ 306.052369][T10597] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.052380][T10597] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 306.052391][T10597] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000080000280 [ 306.052397][T10597] RDX: 000000000000009b RSI: 0000000000000000 RDI: 0000000000000000 [ 306.052403][T10597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.052408][T10597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 306.052415][T10597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.052428][T10597] [ 306.109968][ T9] libceph: connect (1)[c::]:6789 error -101 [ 306.213778][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 306.264839][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'. [ 306.271690][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'. [ 306.341735][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1293'. [ 306.413139][T10609] team0 (unregistering): Port device team_slave_0 removed [ 306.441999][T10609] team0 (unregistering): Port device team_slave_1 removed [ 306.475069][T10582] ceph: No mds server is up or the cluster is laggy [ 306.497709][T10609] team0 (unregistering): Port device bond0 removed [ 306.751449][T10619] veth6: entered allmulticast mode [ 307.976617][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1301'. [ 307.980798][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1301'. [ 308.049793][ T6898] usb 44-1: device descriptor read/8, error -110 [ 308.440644][ T6898] usb usb44-port1: attempt power cycle [ 308.849625][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 308.849732][ T5759] Bluetooth: hci0: command 0x0406 tx timeout [ 308.854887][T10621] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 309.011253][ T6898] usb usb44-port1: unable to enumerate USB device [ 309.692099][T10621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.734208][T10652] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 309.833041][T10656] binder: 10655:10656 ioctl c0306201 0 returned -14 [ 309.842947][T10656] binder: 10655:10656 ioctl c0306201 80000640 returned -22 [ 309.975615][T10665] ptrace attach of ""[10666] was attempted by "/syz-executor exec"[10665] [ 310.082053][ T42] audit: type=1800 audit(1785132419.069:328): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1304" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 310.091718][T10663] veth4: entered allmulticast mode [ 310.934537][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 310.947569][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 310.980254][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 310.982717][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 312.582712][T10689] binder: 10687:10689 ioctl c0306201 80000640 returned -22 [ 312.893119][ T42] audit: type=1326 audit(1785132421.889:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 312.929838][ T42] audit: type=1326 audit(1785132421.899:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705efec code=0x7ffc0000 [ 312.958099][ T42] audit: type=1326 audit(1785132421.899:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 312.996636][ T42] audit: type=1326 audit(1785132421.899:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.035851][ T42] audit: type=1326 audit(1785132421.899:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.057170][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 313.061600][ T42] audit: type=1326 audit(1785132422.069:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.065370][T10705] veth4: entered allmulticast mode [ 313.068235][ T42] audit: type=1326 audit(1785132422.069:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.068260][ T42] audit: type=1326 audit(1785132422.069:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.089180][ T42] audit: type=1326 audit(1785132422.089:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1316" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 313.580084][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 313.855641][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 313.910626][T10728] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1325'. [ 313.957595][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 314.263316][T10734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1328'. [ 314.277431][T10734] syzkaller1: entered promiscuous mode [ 314.282667][T10734] syzkaller1: entered allmulticast mode [ 314.540873][ T9] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 314.551606][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.554091][ T9] usb 5-1: Product: syz [ 314.555435][ T9] usb 5-1: Manufacturer: syz [ 314.557254][ T9] usb 5-1: SerialNumber: syz [ 314.967260][T10742] veth4: entered allmulticast mode [ 314.980299][T10716] loop5: detected capacity change from 0 to 7 [ 314.987959][T10716] Dev loop5: unable to read RDB block 7 [ 314.992465][T10716] loop5: AHDI p1 [ 314.994807][T10716] loop5: partition table partially beyond EOD, truncated [ 315.008320][ T9] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 315.021021][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 315.024388][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 315.027130][ T9] usb 5-1: media controller created [ 315.035793][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.212349][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 315.227483][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 315.246629][ T9] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 315.254822][ T9] usb 5-1: USB disconnect, device number 32 [ 315.980313][ T6898] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 315.994822][T10763] vcan0: tx address claim with dlc 0 [ 316.017565][T10763] lo speed is unknown, defaulting to 1000 [ 316.091346][T10772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1339'. [ 316.110850][ T6898] usb 6-1: device descriptor read/64, error -71 [ 316.160447][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1340'. [ 316.359868][ T6898] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 316.521479][ T6898] usb 6-1: device descriptor read/64, error -71 [ 316.535561][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.539408][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.629802][ T6898] usb usb6-port1: attempt power cycle [ 316.769771][T10793] veth4: entered allmulticast mode [ 316.949668][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 316.989724][ T6898] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 317.020250][ T6898] usb 6-1: device descriptor read/8, error -71 [ 317.099618][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 317.106755][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 317.114142][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 317.118830][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.125023][ T9] usb 5-1: Product: syz [ 317.126750][ T9] usb 5-1: Manufacturer: syz [ 317.128647][ T9] usb 5-1: SerialNumber: syz [ 317.139051][ T9] usb 5-1: config 0 descriptor?? [ 317.141418][T10792] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 317.145837][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 317.151162][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 317.155018][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input41 [ 317.270111][ T6898] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 317.290316][ T6898] usb 6-1: device descriptor read/8, error -71 [ 317.400011][ T6898] usb usb6-port1: unable to enumerate USB device [ 317.414961][ T6898] usb 5-1: USB disconnect, device number 33 [ 317.415054][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 317.682646][T10808] only policy match revision 0 supported [ 317.682663][T10808] unable to load match [ 317.819121][T10814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.869510][T10817] fuse: Unknown parameter 'fô' [ 318.151326][T10823] team0: Port device xfrm0 removed [ 318.153258][T10823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.179974][ T6898] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 318.341186][ T6898] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.343903][ T6898] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.347159][ T6898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.350212][ T6898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 318.353628][ T6898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 318.358537][ T6898] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.361770][ T6898] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.364312][ T6898] usb 5-1: Product: syz [ 318.365703][ T6898] usb 5-1: Manufacturer: syz [ 318.372064][ T6898] cdc_wdm 5-1:1.0: skipping garbage [ 318.374435][ T6898] cdc_wdm 5-1:1.0: skipping garbage [ 318.378479][ T6898] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 318.381328][ T6898] cdc_wdm 5-1:1.0: Unknown control protocol [ 318.636475][ C0] wdm_int_callback: 341 callbacks suppressed [ 318.636490][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.638063][ T6898] usb 5-1: USB disconnect, device number 34 [ 318.638464][ C0] wdm_int_callback: 341 callbacks suppressed [ 318.638479][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.638493][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 319.826823][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 320.024518][T10851] Bluetooth: hci4: Frame reassembly failed (-84) [ 320.049650][ T1481] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 320.070766][T10851] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 320.178914][T10867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.189696][ T1481] usb 5-1: device descriptor read/64, error -71 [ 320.449761][ T1481] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 320.622256][ T1481] usb 5-1: device descriptor read/64, error -71 [ 320.730909][ T1481] usb usb5-port1: attempt power cycle [ 321.045643][T10895] binder_alloc: binder_alloc_mmap_handler: 10890 80ffc000-81000000 already mapped failed -16 [ 321.080902][ T1481] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 321.111713][ T1481] usb 5-1: device descriptor read/8, error -71 [ 321.359717][ T1481] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 321.383643][ T1481] usb 5-1: device descriptor read/8, error -71 [ 321.432827][T10897] syzkaller0: entered promiscuous mode [ 321.434630][T10897] syzkaller0: entered allmulticast mode [ 321.490397][ T1481] usb usb5-port1: unable to enumerate USB device [ 321.729333][T10901] pim6reg: entered allmulticast mode [ 321.735897][T10901] pim6reg: left allmulticast mode [ 321.890062][ T5759] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 321.895018][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 322.430811][T10926] binder: BINDER_SET_CONTEXT_MGR already set [ 322.433067][T10926] binder: 10924:10926 ioctl 4018620d 80004a80 returned -16 [ 322.489761][ T6898] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 322.641972][ T6898] usb 8-1: Using ep0 maxpacket: 32 [ 322.650346][ T6898] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 322.651988][T10930] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 322.657541][ T6898] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 322.661015][T10930] hsr1: entered allmulticast mode [ 322.661881][ T6898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.663041][T10930] dummy0: entered allmulticast mode [ 322.666382][ T6898] usb 8-1: Product: syz [ 322.666399][ T6898] usb 8-1: Manufacturer: syz [ 322.666411][ T6898] usb 8-1: SerialNumber: syz [ 322.670390][ T6898] usb 8-1: config 0 descriptor?? [ 322.671595][T10930] ip6gretap0: entered allmulticast mode [ 322.675625][T10923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 322.689929][ T6898] hub 8-1:0.0: bad descriptor, ignoring hub [ 322.692134][ T6898] hub 8-1:0.0: probe with driver hub failed with error -5 [ 322.696874][ T6898] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input42 [ 322.880235][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 322.880246][ T42] audit: type=1326 audit(1785132431.889:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1392" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x0 [ 322.883596][T10939] lo speed is unknown, defaulting to 1000 [ 322.891881][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 322.917538][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 322.974026][ T6898] usb 8-1: USB disconnect, device number 26 [ 322.974080][ C2] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 323.298865][ T5759] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 323.518117][T10964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.539650][ T6314] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 323.669688][ T6314] usb 6-1: device descriptor read/64, error -71 [ 323.909703][ T6314] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 323.979840][ T6898] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 324.039733][ T6314] usb 6-1: device descriptor read/64, error -71 [ 324.149827][ T6898] usb 7-1: Using ep0 maxpacket: 8 [ 324.271260][ T6314] usb usb6-port1: attempt power cycle [ 324.584529][ T6898] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 324.937919][ T6898] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.940979][ T6898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.943855][ T6898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.946925][ T6898] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.951564][ T6898] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.954266][ T6898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.167851][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.173706][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.181062][ T6898] usb 7-1: usb_control_msg returned -71 [ 325.186349][ T6898] usbtmc 7-1:16.0: can't read capabilities [ 325.196071][ T6898] usb 7-1: USB disconnect, device number 24 [ 325.269840][ T6314] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 325.290485][ T6314] usb 6-1: device descriptor read/8, error -71 [ 325.529692][ T6314] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 325.550400][ T6314] usb 6-1: device descriptor read/8, error -71 [ 325.660110][ T6314] usb usb6-port1: unable to enumerate USB device [ 325.719086][T11013] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1413'. [ 326.157709][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1419'. [ 326.309395][T11008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.321053][T11008] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 326.374233][T11008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.393404][T11008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 327.499629][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 327.564276][T11074] syzkaller1: entered promiscuous mode [ 327.566506][T11074] syzkaller1: entered allmulticast mode [ 327.570678][T11074] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 327.710249][T11081] ================================================================== [ 327.713599][T11081] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 327.716806][T11081] Read of size 1 at addr ffff88806b223818 by task syz.1.1435/11081 [ 327.721641][T11081] [ 327.722675][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.1.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.722706][T11081] Tainted: [L]=SOFTLOCKUP [ 327.722714][T11081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.722727][T11081] Call Trace: [ 327.722735][T11081] [ 327.722743][T11081] dump_stack_lvl+0x100/0x190 [ 327.722770][T11081] print_report+0x13d/0x4b0 [ 327.722799][T11081] ? __virt_addr_valid+0x239/0x430 [ 327.722822][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 327.722838][T11081] kasan_report+0xdf/0x1c0 [ 327.722866][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 327.722884][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 327.722899][T11081] __kasan_check_byte+0x36/0x50 [ 327.722921][T11081] lock_acquire+0x132/0x370 [ 327.722948][T11081] ? __pfx_apparmor_file_open+0x10/0x10 [ 327.723017][T11081] ? _raw_spin_lock_irq+0x45/0x50 [ 327.723037][T11081] _raw_spin_lock_irq+0x36/0x50 [ 327.723058][T11081] ? gadget_dev_open+0x44/0x1b0 [ 327.723086][T11081] gadget_dev_open+0x44/0x1b0 [ 327.723115][T11081] do_dentry_open+0x6ab/0x14d0 [ 327.723135][T11081] ? __pfx_gadget_dev_open+0x10/0x10 [ 327.723164][T11081] vfs_open+0x82/0x3f0 [ 327.723188][T11081] path_openat+0x2873/0x4280 [ 327.723214][T11081] ? __pfx_path_openat+0x10/0x10 [ 327.723235][T11081] do_file_open+0x20e/0x430 [ 327.723251][T11081] ? __lock_acquire+0x49f/0x1a40 [ 327.723280][T11081] ? __pfx_do_file_open+0x10/0x10 [ 327.723308][T11081] ? _raw_spin_unlock+0x28/0x50 [ 327.723327][T11081] ? alloc_fd+0x471/0x7a0 [ 327.723345][T11081] do_sys_openat2+0x10f/0x1e0 [ 327.723370][T11081] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.723397][T11081] __ia32_compat_sys_openat+0x12d/0x210 [ 327.723424][T11081] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 327.723453][T11081] __do_fast_syscall_32+0xe7/0x970 [ 327.723479][T11081] do_fast_syscall_32+0x32/0x70 [ 327.723501][T11081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.723524][T11081] RIP: 0023:0xf7fa8fec [ 327.723545][T11081] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 327.723555][T11081] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 327.723582][T11081] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 327.723597][T11081] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.723608][T11081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.723620][T11081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 327.723631][T11081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.723649][T11081] [ 327.723656][T11081] [ 327.823706][T11081] Allocated by task 15: [ 327.825440][T11081] kasan_save_stack+0x30/0x50 [ 327.827202][T11081] kasan_save_track+0x14/0x30 [ 327.829009][T11081] __kasan_kmalloc+0xaa/0xb0 [ 327.830774][T11081] __kmalloc_noprof+0x322/0x820 [ 327.832604][T11081] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 327.834823][T11081] ieee80211_inform_bss+0x159/0x1170 [ 327.836770][T11081] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 327.839206][T11081] cfg80211_inform_bss_data+0x230/0x3b60 [ 327.841372][T11081] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 327.843877][T11081] ieee80211_bss_info_update+0x310/0xab0 [ 327.846055][T11081] ieee80211_scan_rx+0x4e6/0xb60 [ 327.848097][T11081] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 327.850508][T11081] ieee80211_rx_list+0xf19/0x2160 [ 327.852583][T11081] ieee80211_rx_napi+0xdc/0x400 [ 327.854440][T11081] ieee80211_handle_queued_frames+0xc8/0x120 [ 327.856877][T11081] tasklet_action_common+0x2de/0x3d0 [ 327.858942][T11081] handle_softirqs+0x1ea/0x9b0 [ 327.860687][T11081] run_ksoftirqd+0x38/0x60 [ 327.862417][T11081] smpboot_thread_fn+0x3d3/0xaa0 [ 327.864269][T11081] kthread+0x370/0x450 [ 327.865799][T11081] ret_from_fork+0x72b/0xd50 [ 327.867614][T11081] ret_from_fork_asm+0x1a/0x30 [ 327.869536][T11081] [ 327.870551][T11081] Freed by task 15: [ 327.872067][T11081] kasan_save_stack+0x30/0x50 [ 327.873895][T11081] kasan_save_track+0x14/0x30 [ 327.875636][T11081] kasan_save_free_info+0x3b/0x70 [ 327.877600][T11081] __kasan_slab_free+0x5f/0x80 [ 327.879624][T11081] kfree+0x22b/0x6c0 [ 327.881166][T11081] ieee80211_inform_bss+0x8f5/0x1170 [ 327.883179][T11081] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 327.885469][T11081] cfg80211_inform_bss_data+0x230/0x3b60 [ 327.887320][T11081] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 327.889522][T11081] ieee80211_bss_info_update+0x310/0xab0 [ 327.891698][T11081] ieee80211_scan_rx+0x4e6/0xb60 [ 327.893656][T11081] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 327.895904][T11081] ieee80211_rx_list+0xf19/0x2160 [ 327.897783][T11081] ieee80211_rx_napi+0xdc/0x400 [ 327.899610][T11081] ieee80211_handle_queued_frames+0xc8/0x120 [ 327.902022][T11081] tasklet_action_common+0x2de/0x3d0 [ 327.904264][T11081] handle_softirqs+0x1ea/0x9b0 [ 327.906247][T11081] run_ksoftirqd+0x38/0x60 [ 327.908156][T11081] smpboot_thread_fn+0x3d3/0xaa0 [ 327.910114][T11081] kthread+0x370/0x450 [ 327.911790][T11081] ret_from_fork+0x72b/0xd50 [ 327.913686][T11081] ret_from_fork_asm+0x1a/0x30 [ 327.915595][T11081] [ 327.916636][T11081] The buggy address belongs to the object at ffff88806b223800 [ 327.916636][T11081] which belongs to the cache kmalloc-1k of size 1024 [ 327.921905][T11081] The buggy address is located 24 bytes inside of [ 327.921905][T11081] freed 1024-byte region [ffff88806b223800, ffff88806b223c00) [ 327.927581][T11081] [ 327.928601][T11081] The buggy address belongs to the physical page: [ 327.931065][T11081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806b225000 pfn:0x6b220 [ 327.935055][T11081] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 327.938491][T11081] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 327.941199][T11081] page_type: f5(slab) [ 327.942518][T11081] raw: 04fff00000000240 ffff88801bc42dc0 ffffea0001bcb410 ffffea00010bae10 [ 327.945254][T11081] raw: ffff88806b225000 000000080010000f 00000000f5000000 0000000000000000 [ 327.948709][T11081] head: 04fff00000000240 ffff88801bc42dc0 ffffea0001bcb410 ffffea00010bae10 [ 327.951468][T11081] head: ffff88806b225000 000000080010000f 00000000f5000000 0000000000000000 [ 327.954210][T11081] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 327.956969][T11081] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 327.959684][T11081] page dumped because: kasan: bad access detected [ 327.961738][T11081] page_owner tracks the page as allocated [ 327.963527][T11081] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 55, tgid 55 (kworker/1:1), ts 50239812956, free_ts 0 [ 327.971100][T11081] post_alloc_hook+0xfd/0x120 [ 327.973078][T11081] get_page_from_freelist+0xf48/0x3530 [ 327.975311][T11081] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 327.977146][T11081] new_slab+0xa2/0x640 [ 327.978612][T11081] refill_objects+0xe3/0x410 [ 327.980440][T11081] __pcs_replace_empty_main+0x376/0x680 [ 327.982750][T11081] __kmalloc_noprof+0x66d/0x820 [ 327.984766][T11081] ___neigh_create+0x1532/0x2940 [ 327.986850][T11081] ip6_finish_output2+0xffa/0x1ce0 [ 327.988999][T11081] __ip6_finish_output+0x357/0xdf0 [ 327.991131][T11081] ip6_output+0x2aa/0xa60 [ 327.992928][T11081] NF_HOOK.constprop.0+0x115/0x5a0 [ 327.994611][T11081] mld_sendpack+0x8f7/0xec0 [ 327.996344][T11081] mld_ifc_work+0x75a/0xc10 [ 327.998298][T11081] process_one_work+0xa23/0x1940 [ 327.999916][T11081] worker_thread+0x5ef/0xe50 [ 328.001408][T11081] page_owner free stack trace missing [ 328.003118][T11081] [ 328.003870][T11081] Memory state around the buggy address: [ 328.005689][T11081] ffff88806b223700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.008215][T11081] ffff88806b223780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.010646][T11081] >ffff88806b223800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.013263][T11081] ^ [ 328.014834][T11081] ffff88806b223880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.018001][T11081] ffff88806b223900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.021484][T11081] ================================================================== [ 328.024748][T11081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 328.027698][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.1.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.032183][T11081] Tainted: [L]=SOFTLOCKUP [ 328.034023][T11081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.037993][T11081] Call Trace: [ 328.039198][T11081] [ 328.040291][T11081] dump_stack_lvl+0x100/0x190 [ 328.042067][T11081] vpanic+0x552/0x970 [ 328.043550][T11081] ? __pfx_vpanic+0x10/0x10 [ 328.045306][T11081] ? __pfx_vprintk_emit+0x10/0x10 [ 328.047253][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 328.049175][T11081] panic+0xd1/0xe0 [ 328.050623][T11081] ? __pfx_panic+0x10/0x10 [ 328.052372][T11081] ? end_report.part.0+0x23/0x90 [ 328.054344][T11081] ? rcu_is_watching+0x12/0xc0 [ 328.056352][T11081] ? end_report.part.0+0x23/0x90 [ 328.058322][T11081] check_panic_on_warn.cold+0x19/0x34 [ 328.060129][T11081] end_report.part.0+0x3a/0x90 [ 328.061758][T11081] kasan_report.cold+0xe/0x18 [ 328.063686][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 328.065787][T11081] ? _raw_spin_lock_irq+0x36/0x50 [ 328.067902][T11081] __kasan_check_byte+0x36/0x50 [ 328.070022][T11081] lock_acquire+0x132/0x370 [ 328.072032][T11081] ? __pfx_apparmor_file_open+0x10/0x10 [ 328.074395][T11081] ? _raw_spin_lock_irq+0x45/0x50 [ 328.076488][T11081] _raw_spin_lock_irq+0x36/0x50 [ 328.078606][T11081] ? gadget_dev_open+0x44/0x1b0 [ 328.080653][T11081] gadget_dev_open+0x44/0x1b0 [ 328.082589][T11081] do_dentry_open+0x6ab/0x14d0 [ 328.084650][T11081] ? __pfx_gadget_dev_open+0x10/0x10 [ 328.086667][T11081] vfs_open+0x82/0x3f0 [ 328.088037][T11081] path_openat+0x2873/0x4280 [ 328.089778][T11081] ? __pfx_path_openat+0x10/0x10 [ 328.091649][T11081] do_file_open+0x20e/0x430 [ 328.093156][T11081] ? __lock_acquire+0x49f/0x1a40 [ 328.094785][T11081] ? __pfx_do_file_open+0x10/0x10 [ 328.096794][T11081] ? _raw_spin_unlock+0x28/0x50 [ 328.098807][T11081] ? alloc_fd+0x471/0x7a0 [ 328.100627][T11081] do_sys_openat2+0x10f/0x1e0 [ 328.102551][T11081] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.104608][T11081] __ia32_compat_sys_openat+0x12d/0x210 [ 328.106937][T11081] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 328.109461][T11081] __do_fast_syscall_32+0xe7/0x970 [ 328.111587][T11081] do_fast_syscall_32+0x32/0x70 [ 328.113620][T11081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.116253][T11081] RIP: 0023:0xf7fa8fec [ 328.118015][T11081] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 328.120602][T11081] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 328.123979][T11081] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 328.127278][T11081] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.130558][T11081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.133795][T11081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.137053][T11081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.140226][T11081] [ 328.142178][T11081] Kernel Offset: disabled [ 328.144039][T11081] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:07:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a121a5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc9000402f2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6f320f R15=ffffffff85a12140 RIP=ffffffff85a121cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b0ff8 CR3=000000006f5de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f728e853 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001c072f RBX=ffff88801c7fca80 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a83a9 RDI=ffffffff8c400980 RBP=ffffed10038ff950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b67b8 CR3=0000000070fe1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7fa540 RSI=ffffffff81b51ece RDI=ffff88801c7fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556ea3194bb8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000101 Opmask01=0000000030000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000efffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556ea318f620 0000556ea318f620 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe973ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ff000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe973f52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 423532302c413532 302c413432302c34 3432302c36313230 2c453032302c4330 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000