last executing test programs: 13.030218681s ago: executing program 0 (id=479): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x2, 0x12) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) 10.014581766s ago: executing program 2 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) write(r1, &(0x7f0000000880)="310a3bd2e7290300000000000000b0e94e6c6599035957a4a959895f7cd228cf660352dd8e25d4f36836b2668697f4b87425137e664116ad75c8a912096b341940bb9727856b485d5a77f48e91bb3bcb8aa9f2d181c5a74e7f4b278ecbe52edd0adc29d079ddf914cd133ad4f091436d2638c657b43e6740b21f90fbd4804492701c165ec0af1d8fe3457c7f00b21315a75a75122f66c6926beaebed67b3da6eb165", 0xa2) 10.014460515s ago: executing program 3 (id=490): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 8.901932663s ago: executing program 2 (id=492): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r4, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r2) 8.901735735s ago: executing program 3 (id=493): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 8.901430567s ago: executing program 0 (id=494): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x1492) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') sendmmsg$sock(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="f86278fb1d12797fd1076d2a6f1a50c39d7032daddf158f45ebf90c4f84041be23632b9e5ff17cc4493575fc3c0531645014a37f4ec03137c814612191b27b08dd59b389dd6bd572243de45723299fc78f8631bb1739679271dc07acd286de3beb47a24e5153ad1cc4dedd1bb97bc3147806f05a4635d6a911eb7ccc5babe06b0b48b5c2f840e7c39f420190b844c42fc2b429f026363ed031efc6c26a8eebb33607756918128e7ba7d8ea524bf3fc0fcca4ce52805a0fa5cd27efc51d8870", 0xbf}, {&(0x7f00000005c0)="a6d8077d5e87bfa5459d90c5869038b5d0c12afb4158e981a84a48ff55b458dc8370b411a1b4ea28", 0x28}, {&(0x7f0000000600)="2bc05ae4052829d262b5ee348d6d56d8823766bc2b7d88e741dc8880b15244b55bf92289c4530cc395282b85363a577a0037ee1ae44c2fb9a842ce24f07b3ea16c118382e683d94e9b6c88d3bbab7a0fc0f1de6bb0b3b3d22a2a44829b0b9f41c7cb91f459d36c474c1957004e4f0a824a0135d548fa2bdd40432f3e345c1b33e4c794d62f81d88b22ef48e7d1439857fd642e5b", 0x94}, {&(0x7f00000006c0)="11f33f6530429adb4f84d379ec1cc7aaabda3a56c3f94e00b40f6cacc4c6b9213f0e72845f13ecf8dae6014316d2e60121b6745ef16ab1cc03ef836511fdeacb91e5ff2e0963f3a3036da433a5801d243efa6e6013196d1d6f400b746bd43eff318cf5d17d91698e4c8d5a3c3c1a6485afe2c33de78e4338a00aa34c66e6b27755f3e4d76b4c095841dabb84324a865dfdb4a7bf200e604d383cc39ec7ce4392ee3ff4100a1a9732273ed857e1c974f4cb84664e1d33b9717251be022f2730872f9ab0b4e1cd7797cf1b099f6203618e31108fac5890c388aad287c3", 0xdc}, {&(0x7f00000007c0)="f07ec0cceb5f6e78be24d30d9fa60723d71c3535a2efcff8545c75a2eaf701cde0ca07e7397d5ccd7f9d8961b543ffe5739c432a087991642c8eca8db0d39fa6a515804c5f94a751712a53d6fb33f582d15ba6a0e3", 0x55}, {&(0x7f0000000840)="bf7fb822ec8ab9203755cfd3393dce866a48c703fc6c01573000688e111a862f4e4ee4d9b07b5a43166425bd0da215aa2562346fce2994c46436705d26c04354d41c37409044b2837c983d5e6a16d2e18e2c9c1a70f0343833d26499b1fe5b1127e0b1ae0dacd9228eda5c3b676465abf012bfccfb53988f6e8d3098de91b364e0317df23133653929056c395176ce5e4d9d32aba307585102e9e589e4414e2450190781c5cbe08c48d00e980f5daad479e4a4f51088487a1986a7eb512199c5", 0xc0}, {&(0x7f0000000900)="c22783f336dd805f0459936a0d99c16ef825d17bdb1b7b378fbaf429d7dd3f8e67cc65f7b2b89dc687ada38531a5f45a5c820aa60bedf22fd84cade3b2d4bb2b89ab442e215f119ed6df17bd82f3a3474df81b0b92ab5a4517ba0b80", 0x5c}], 0x7, &(0x7f0000000a80)=[@txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @mark={{0x10}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x58}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="e13494e2b60473a8f4bd3aad3c2fbb1d7a57622bb4a5320d9c4fd4c89fe57eb0022b6ddbffca18d292a215f2fe159585e5538dcafe608848bc4f81d2831b311e3337d09298c1fa83011670fb41b06d8cba2f4b97ebe90cc9aa21e0ba07fe58407f1189bacfa6f6cebcf4314ba7652ad48bb410513d8afc78cdb81dbdf80db5a743bddecbda69587ab7f66bb9cced3198b3a3f0f8e70161e7ae218c4cdc7feb8070284d01030bb62ceb70886cc0a6f8492ecad0c686e4c82c73df3e670ddc787b1e51ef60978aaebe1a37bb26a2d7a7", 0xcf}, {&(0x7f0000000c00)="b267063e954641c5ae1012df68463245fae8ec5cb2417f9517d8000567ca62395e470379ac4e484650b8e1f04a60d231", 0x30}, {&(0x7f0000000c40)="1a703dfd0f29586240b20bca152916b411aa148c5524fa6cbbe8dd09051082630a740646d91e5a33e7ac81ac6e2cc50c0033a7e4ad2844404cf96e3660aed1e1628645565f642bf7e550a1ec5dcc95f7ce3158aac259c5d05de8ae1cfee2ce1483276a33c1f4c248349a73b06f46c2eda20b8f80bb4f43738816d8e1388e32df18e638df321ec9ae0acc82a396566e3a6899f15948a9d09afe6a24c9e6092a22ed6e9a3824f0eb9a79b2962378819f04edf03f102dbfacbddaad7a0ff9aa5d0f56f2613cd18a13e1f2806e8ca69a6a791d319a103bd1801a623469f04e23e944869d99a0d42fbca9d4", 0xe9}, {&(0x7f0000000d40)="04c0d504689342fc73beeeb53f93ce97c73011ffa04034fceccc815ed54aa7e3ddd77161db49488aabf3dc2c1d6b3cb70f434b75c6b080f3a413a6ed100336d62411a22ebd4f8bc0525985389b94a2e10efe092e3040006638628ac3146e583303a4b3c1d20102c75d507a8a", 0x6c}, {&(0x7f0000000dc0)="d5803f82996a772615e47096f48b7b62057f2a96734690c3b9078993a7c7e49d9f1e4b458d06749e3295ad4d58080efc2c6f", 0x32}, {&(0x7f0000000e00)="6861a3876004a2e5e02800ba7329ee2f35eb9b07c944ea81078a2453147ef5132eb618bc18def8e9f3b931a8ac325145fabbad3442786711e8af392e1f4ae8e70bcfbf1a5a8e82209799c32c6b7274d3d297e8907cf59d6e4cfae70de0470aeba66d4bbb2d200b3c9554bd8ab906c4e0ba947fb384e07f94ad89c199688eb6f5c8cdb3143a53da5dd75069f8d23d6efb0f9a63", 0x93}, {&(0x7f0000000f40)="96b3d4e6366c697749890a0df146a2b426865657357bd00dfdffe1ffce21d72a598a9f66f6db3f550183db7f8847b7f1437b0e75408999778dcd3110ff11f0b6b2ba3c387f47ff97f493447e047c39dedc52dd68856815028da0e84cd79cd762bd7a5348900bcbe35746c0ad584b5bdaee9a5277445dda41e4ef19aeb702eb8cfb873581145d860920bd618d955e618e144869b5a72335e392793a98e9dab0da272c84666aa1ee6f20f3518a3b698485ecf028c09171bc512a00ce43aef139243d8ded193d5a82daacdc6cc3f131394c8f", 0xd1}, {&(0x7f0000001040)="c3ce170a6af85941a670ab18bb85ee2c77360b580ab1d1faa5ac73309d5a422798bb43c59d0de7290a849f4d35ccde45dd0f923cb68c2caaaa9f51c6ebf8e73ed6859053bcd027a4adc5755f5efad3b8c3393ca611659223fb42dfc6e0991e6efebd0b5154a2c30f7b7413394f18c6b5", 0x70}], 0x8}}], 0x2, 0x0) unlink(&(0x7f0000000100)='./file0\x00') syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000440)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x81, 0xd1e, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0xc1}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7) setsockopt$llc_int(r0, 0x10c, 0x6, 0x0, 0x0) 8.887064099s ago: executing program 1 (id=500): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800800064000000000050001000600"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 8.879099709s ago: executing program 3 (id=502): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x52) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0x1a, @void}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) r4 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x92cc, 0x800, 0x3, 0x80000259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefa7, 0x0, 0x2, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x502d, 0x80000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x755, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8.788011597s ago: executing program 0 (id=495): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000140)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 5.870630335s ago: executing program 1 (id=496): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5.628062333s ago: executing program 1 (id=497): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x25d, 0x0, 0x4000, 0xffffffffffffffff}) read(r2, &(0x7f0000000240)=""/74, 0x4a) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ID={0x8}]}, 0x4c}}, 0x8800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0e080600000025bd8d00fedbdf250400030fab00000005000000000000000f0000000000000081000000000010"], 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 5.605597473s ago: executing program 2 (id=507): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.382607218s ago: executing program 0 (id=498): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r4, r5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 4.382314062s ago: executing program 1 (id=499): openat$hpet(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x183100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x281}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xbb3, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x7fffffff, 0x81}, {0xdf, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x10000000, 0x0, 0x3, 0x8}]}]}, 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40c0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.377054941s ago: executing program 2 (id=509): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.375979439s ago: executing program 3 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x44090}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) unshare(0x22020600) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r7 = open_tree(r6, 0x0, 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a4031, 0x0) 1.287279718s ago: executing program 0 (id=501): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.28578746s ago: executing program 2 (id=503): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 1.285511912s ago: executing program 3 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) write(r1, &(0x7f0000000880)="310a3bd2e7290300000000000000b0e94e6c6599035957a4a959895f7cd228cf660352dd8e25d4f36836b2668697f4b87425137e664116ad75c8a912096b341940bb9727856b485d5a77f48e91bb3bcb8aa9f2d181c5a74e7f4b278ecbe52edd0adc29d079ddf914cd133ad4f091436d2638c657b43e6740b21f90fbd4804492701c165ec0af1d8fe3457c7f00b21315a75a75122f66c6926beaebed67b3da6eb165", 0xa2) 1.204970867s ago: executing program 1 (id=505): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x1f, 0x800000000004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000080)={0x1, [[0x7fff], [0xfffffff8, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x7, 0xfffffffd], [0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0xd}, {}, {0x0, 0x2}, {}, {0x4}], '\x00', 0x102}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x8]}}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000000000004, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 1.203802481s ago: executing program 2 (id=514): unshare(0x6a040000) syz_emit_ethernet(0x3e, &(0x7f0000001980)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x67, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @opaque="0ddb3de826d4854457ce2cf7617fa5365352fa43"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) move_pages(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xd05}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) unshare(0x2c050100) unshare(0x14000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 211.156626ms ago: executing program 1 (id=506): io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffff"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 23.201685ms ago: executing program 3 (id=508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800800064000000000050001000600"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 0s ago: executing program 0 (id=511): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff00"/24) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() kernel console output (not intermixed with test programs): 6073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.289287][ T6073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.289298][ T6073] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.289310][ T6073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.289333][ T6073] [ 51.581684][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.582153][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.592662][ T6075] batman_adv: batadv0: Interface deactivated: dummy0 [ 51.658232][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.665848][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.827171][ T5841] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.827216][ T5841] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.827245][ T5841] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.827274][ T5841] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.592798][ T873] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.857521][ T873] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 55.224619][ T6109] ceph: No mds server is up or the cluster is laggy [ 56.328347][ T6128] netlink: 4064 bytes leftover after parsing attributes in process `syz.1.68'. [ 56.875717][ T6141] Invalid ELF header magic: != ELF [ 57.586190][ T6143] syzkaller0: entered promiscuous mode [ 57.586205][ T6143] syzkaller0: entered allmulticast mode [ 57.631989][ T6151] overlayfs: missing 'lowerdir' [ 57.942315][ T6161] veth1_vlan: entered allmulticast mode [ 58.437689][ T6154] ceph: No mds server is up or the cluster is laggy [ 58.571219][ T6170] net_ratelimit: 10 callbacks suppressed [ 58.571233][ T6170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 59.730830][ T6189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.770866][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.770880][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.791207][ T6194] Zero length message leads to an empty skb [ 59.794404][ T6194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.84'. [ 59.797199][ T5841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.797236][ T5841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.797261][ T5841] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.797286][ T5841] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.922350][ T856] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 59.926709][ T6189] md: could not open device unknown-block(0,0). [ 59.926771][ T6189] md: error, md_import_device() returned -6 [ 59.938030][ T6199] binder: 6198:6199 ioctl c00c6211 0 returned -14 [ 60.178364][ T856] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 60.260580][ T873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.437822][ T873] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 60.438949][ T873] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.441168][ T873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 60.441190][ T873] usb 8-1: Product: syz [ 60.441201][ T873] usb 8-1: Manufacturer: syz [ 60.441213][ T873] usb 8-1: SerialNumber: syz [ 60.443802][ T6211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.691493][ T1816] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 60.695565][ T873] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.743628][ T6201] ceph: No mds server is up or the cluster is laggy [ 60.949422][ T5844] usb 8-1: USB disconnect, device number 2 [ 60.963453][ T5844] usblp0: removed [ 61.044800][ T6224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.139734][ T6224] evm: overlay not supported [ 62.080894][ T6233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.94'. [ 62.314299][ T6237] Unsupported ieee802154 address type: 0 [ 62.489359][ T6241] jffs2: notice: (6241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 62.519079][ T6242] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.673288][ T6249] syzkaller0: entered promiscuous mode [ 62.673303][ T6249] syzkaller0: entered allmulticast mode [ 62.810793][ T43] audit: type=1326 audit(1789568879.137:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812126][ T43] audit: type=1326 audit(1789568879.137:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812275][ T43] audit: type=1326 audit(1789568879.137:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812379][ T43] audit: type=1326 audit(1789568879.137:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812481][ T43] audit: type=1326 audit(1789568879.137:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812743][ T43] audit: type=1326 audit(1789568879.137:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.812786][ T43] audit: type=1326 audit(1789568879.137:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 62.857147][ T5951] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 62.877723][ T6251] kvm [6250]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 62.904725][ T6251] kvm [6250]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 62.925781][ T6251] kvm [6250]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 63.007577][ T5951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.008474][ T5951] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 63.008489][ T5951] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 63.012388][ T5951] usb 6-1: string descriptor 0 read error: -22 [ 63.012451][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.043461][ T43] audit: type=1326 audit(1789568879.337:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 63.043570][ T43] audit: type=1326 audit(1789568879.337:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.3.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 63.231683][ T6246] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 63.252679][ T5951] cdc_ncm 6-1:1.0: bind() failure [ 64.582057][ T5951] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 64.582100][ T5951] cdc_ncm 6-1:1.1: bind() failure [ 64.599463][ T5951] usb 6-1: USB disconnect, device number 2 [ 64.919242][ T6286] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 67.034259][ T6278] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.197966][ T6278] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 67.198769][ T6278] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.198792][ T6278] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 67.198805][ T6278] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 67.198825][ T6278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.399748][ T6318] veth1_vlan: entered allmulticast mode [ 67.567071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 67.797068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.164413][ T6324] netlink: 56 bytes leftover after parsing attributes in process `syz.3.109'. [ 69.218096][ T6278] cxacru 8-1:1.0: send of cm 0x90 failed (-104) [ 69.274363][ T6333] Need at least one configuration in g1. [ 69.274630][ T6333] udc dummy_udc.0: failed to start g1: -22 [ 69.274653][ T6333] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 69.280884][ T6333] UDC core: g1: couldn't find an available UDC or it's busy [ 69.299834][ T5817] usb 8-1: USB disconnect, device number 3 [ 70.045233][ T6336] veth1_vlan: entered allmulticast mode [ 70.901351][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.901415][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.904440][ T9] cfg80211: failed to load regulatory.db [ 71.120968][ T6358] veth1_vlan: entered allmulticast mode [ 71.811613][ T43] audit: type=1326 audit(1789568888.137:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.811754][ T43] audit: type=1326 audit(1789568888.137:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.813773][ T43] audit: type=1326 audit(1789568888.137:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.813961][ T43] audit: type=1326 audit(1789568888.137:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.814230][ T43] audit: type=1326 audit(1789568888.137:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.814651][ T43] audit: type=1326 audit(1789568888.137:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.815206][ T43] audit: type=1326 audit(1789568888.137:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 71.873920][ T6365] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 72.088706][ T6373] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 72.088722][ T6373] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 72.088811][ T6373] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 72.188450][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.347870][ T42] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 72.348991][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.349026][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 72.349047][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 72.349081][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.384498][ T43] audit: type=1326 audit(1789568888.707:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 72.384547][ T43] audit: type=1326 audit(1789568888.707:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 72.824539][ T6380] jffs2: notice: (6380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 72.836463][ T6378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.130'. [ 72.842595][ T66] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 72.939618][ T6385] syz.3.135: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 72.939696][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.3.135 Not tainted syzkaller #0 PREEMPT(full) [ 72.939708][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.939715][ T6385] Call Trace: [ 72.939719][ T6385] [ 72.939724][ T6385] dump_stack_lvl+0x100/0x190 [ 72.939742][ T6385] warn_alloc.cold+0x9e/0xb2 [ 72.939755][ T6385] ? __pfx_warn_alloc+0x10/0x10 [ 72.939773][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 72.939791][ T6385] __vmalloc_node_range_noprof+0x123b/0x1420 [ 72.939805][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 72.939820][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 72.939836][ T6385] ? do_replace+0x1c6/0x490 [ 72.939850][ T6385] ? do_raw_spin_lock+0x128/0x260 [ 72.939868][ T6385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.939883][ T6385] ? __lock_acquire+0x5c0/0x1f40 [ 72.939898][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.939909][ T6385] ? do_replace+0x1c6/0x490 [ 72.939921][ T6385] __vmalloc_node_noprof+0xad/0xf0 [ 72.939935][ T6385] ? do_replace+0x1c6/0x490 [ 72.939948][ T6385] __vmalloc_noprof+0xa3/0x120 [ 72.939963][ T6385] ? __pfx___vmalloc_noprof+0x10/0x10 [ 72.939982][ T6385] do_replace+0x1c6/0x490 [ 72.939997][ T6385] ? __pfx_do_replace+0x10/0x10 [ 72.940019][ T6385] ? register_lock_class+0x3f/0x7b0 [ 72.940041][ T6385] compat_do_replace+0x589/0x7a0 [ 72.940056][ T6385] ? __pfx_compat_do_replace+0x10/0x10 [ 72.940077][ T6385] ? bpf_lsm_capable+0x9/0x10 [ 72.940093][ T6385] ? security_capable+0x80/0x260 [ 72.940108][ T6385] do_ebt_set_ctl+0x3f4/0x4a0 [ 72.940122][ T6385] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 72.940137][ T6385] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 72.940147][ T6385] ? futex_wake+0x4ea/0x5e0 [ 72.940162][ T6385] ? nf_sockopt_find.isra.0+0x222/0x290 [ 72.940180][ T6385] nf_setsockopt+0x8d/0xf0 [ 72.940203][ T6385] ip_setsockopt+0xcb/0xf0 [ 72.940216][ T6385] tcp_setsockopt+0xa7/0x100 [ 72.940232][ T6385] smc_setsockopt+0x1b6/0xa40 [ 72.940247][ T6385] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 72.940287][ T6385] ? __pfx_smc_setsockopt+0x10/0x10 [ 72.940303][ T6385] ? aa_sock_opt_perm+0x114/0x1e0 [ 72.940318][ T6385] ? __pfx_smc_setsockopt+0x10/0x10 [ 72.940334][ T6385] do_sock_setsockopt+0xf3/0x1d0 [ 72.940353][ T6385] __sys_setsockopt+0x119/0x190 [ 72.940370][ T6385] __ia32_sys_setsockopt+0xbc/0x160 [ 72.940384][ T6385] ? __do_fast_syscall_32+0xb3/0x8b0 [ 72.940400][ T6385] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.940415][ T6385] __do_fast_syscall_32+0x13a/0x8b0 [ 72.940437][ T6385] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.940460][ T6385] do_fast_syscall_32+0x32/0x70 [ 72.940485][ T6385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.940507][ T6385] RIP: 0023:0xf700efec [ 72.940528][ T6385] Code: Unable to access opcode bytes at 0xf700efc2. [ 72.940535][ T6385] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 72.940552][ T6385] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 72.940564][ T6385] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 72.940576][ T6385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.940588][ T6385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.940599][ T6385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.940624][ T6385] [ 72.942297][ T6385] Mem-Info: [ 72.942307][ T6385] active_anon:17391 inactive_anon:636 isolated_anon:0 [ 72.942307][ T6385] active_file:117 inactive_file:58883 isolated_file:0 [ 72.942307][ T6385] unevictable:1000 dirty:630 writeback:0 [ 72.942307][ T6385] slab_reclaimable:9174 slab_unreclaimable:51398 [ 72.942307][ T6385] mapped:24023 shmem:14646 pagetables:1052 [ 72.942307][ T6385] sec_pagetables:303 bounce:0 [ 72.942307][ T6385] kernel_misc_reclaimable:0 [ 72.942307][ T6385] free:21294 free_pcp:12254 free_cma:0 [ 72.942336][ T6385] Node 0 active_anon:112kB inactive_anon:72kB active_file:428kB inactive_file:72kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:64kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1300kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 72.942366][ T6385] Node 1 active_anon:69452kB inactive_anon:2472kB active_file:40kB inactive_file:235460kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:95996kB dirty:2456kB writeback:0kB shmem:56476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4624kB pagetables:2908kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 72.942395][ T6385] Node 0 DMA free:1912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:8kB free_cma:0kB [ 72.942427][ T6385] lowmem_reserve[]: 0 277 277 277 277 [ 72.942448][ T6385] Node 0 DMA32 free:15664kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:112kB inactive_anon:72kB active_file:272kB inactive_file:72kB unevictable:2000kB writepending:64kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:12068kB local_pcp:3692kB free_cma:0kB [ 72.942481][ T6385] lowmem_reserve[]: 0 0 0 0 0 [ 72.942500][ T6385] Node 1 DMA32 free:67600kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:69452kB inactive_anon:2472kB active_file:40kB inactive_file:235460kB unevictable:2000kB writepending:2456kB zspages:3160kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:36860kB local_pcp:5476kB free_cma:0kB [ 72.942530][ T6385] lowmem_reserve[]: 0 0 0 0 0 [ 72.942673][ T6385] Node 0 DMA: 42*4kB (U) 4*8kB (U) 1*16kB (M) 9*32kB (UM) 2*64kB (U) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1912kB [ 72.942766][ T6385] Node 0 DMA32: 4*4kB (UM) 104*8kB (M) 110*16kB (ME) 88*32kB (UME) 64*64kB (UME) 16*128kB (ME) 10*256kB (UME) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15664kB [ 72.942849][ T6385] Node 1 DMA32: 470*4kB (UME) 167*8kB (ME) 61*16kB (UM) 17*32kB (UME) 8*64kB (UME) 5*128kB (M) 9*256kB (UM) 20*512kB (UME) 2*1024kB (UE) 5*2048kB (UE) 9*4096kB (UM) = 67584kB [ 72.942940][ T6385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.942948][ T6385] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.942956][ T6385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.942964][ T6385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.942971][ T6385] 74510 total pagecache pages [ 72.942975][ T6385] 867 pages in swap cache [ 72.942979][ T6385] Free swap = 113516kB [ 72.942983][ T6385] Total swap = 124996kB [ 72.942987][ T6385] 524155 pages RAM [ 72.942990][ T6385] 0 pages HighMem/MovableOnly [ 72.942994][ T6385] 212121 pages reserved [ 72.942997][ T6385] 0 pages cma reserved [ 74.969544][ T42] cxacru 6-1:1.0: send of cm 0x90 failed (-104) [ 75.153653][ T873] usb 6-1: USB disconnect, device number 3 [ 75.461028][ T6415] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 76.205014][ T42] hid-generic 0005:0007:0009.0002: item fetching failed at offset 0/1 [ 76.207977][ T42] hid-generic 0005:0007:0009.0002: probe with driver hid-generic failed with error -22 [ 76.251516][ T6420] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.277468][ T6420] md: array md0 already initialised! [ 76.283460][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 76.331668][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 76.338906][ T6427] dlm: no local IP address has been set [ 76.338919][ T6427] dlm: cannot start dlm midcomms -107 [ 76.341536][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.223058][ T6433] Console: switching to colour dummy device 80x25 [ 77.310558][ T6434] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 77.316970][ T6434] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 77.326302][ T6434] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 77.331413][ T6434] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 77.332209][ T6434] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 77.358425][ T6434] pci 0000:00:01.0: Adding to iommu group 1 [ 77.373163][ T6434] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 77.373177][ T6434] pci 0000:00:01.0: vgaarb: bridge control possible [ 77.373184][ T6434] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 77.402587][ T6434] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 77.412247][ T6434] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 77.418192][ T6434] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 77.429352][ T6434] [drm] Found bochs VGA, ID 0xb0c5. [ 77.429363][ T6434] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 77.446486][ T6434] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 77.581817][ T6434] Console: switching to colour frame buffer device 160x50 [ 77.644172][ T6434] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 78.545350][ T6446] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 78.588863][ T6444] ======================================================= [ 78.588863][ T6444] WARNING: The mand mount option has been deprecated and [ 78.588863][ T6444] and is ignored by this kernel. Remove the mand [ 78.588863][ T6444] option from the mount to silence this warning. [ 78.588863][ T6444] ======================================================= [ 78.597147][ T6444] gadgetfs: bound to dummy_udc driver [ 78.605557][ T43] audit: type=1800 audit(1789568894.927:56): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.153" name="ep1in-bulk" dev="gadgetfs" ino=12026 res=0 errno=0 [ 78.787707][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.952200][ T42] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 78.958592][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.958698][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 78.958735][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 78.958784][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.450357][ T6454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.151'. [ 79.810400][ T6461] Invalid ELF header magic: != ELF [ 81.057233][ T42] cxacru 5-1:1.0: send of cm 0x90 failed (-104) [ 81.801506][ T9] usb 5-1: USB disconnect, device number 2 [ 83.440451][ T856] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 83.480780][ T6537] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.240066][ T6530] ceph: No mds server is up or the cluster is laggy [ 85.033793][ T856] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 85.359520][ T6558] Invalid ELF header magic: != ELF [ 87.778885][ T6590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.180'. [ 87.850845][ T43] audit: type=1326 audit(1789568904.167:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.3.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 87.851384][ T43] audit: type=1326 audit(1789568904.167:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.3.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 89.123038][ T6596] ceph: No mds server is up or the cluster is laggy [ 92.633383][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 92.658497][ T6656] syzkaller0: entered promiscuous mode [ 92.658514][ T6656] syzkaller0: entered allmulticast mode [ 92.762821][ T6656] tipc: Started in network mode [ 92.762848][ T6656] tipc: Node identity 9e5dfbd54eee, cluster identity 4711 [ 92.763077][ T6656] tipc: Enabled bearer , priority 0 [ 92.770002][ T6651] tipc: Resetting bearer [ 92.807874][ T6651] tipc: Disabling bearer [ 92.903543][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 93.411271][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 93.486138][ T6653] ceph: No mds server is up or the cluster is laggy [ 94.373457][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.174736][ T6672] batman_adv: batadv0: Interface deactivated: dummy0 [ 95.175495][ T6672] batman_adv: batadv0: Removing interface: dummy0 [ 95.228345][ T6672] bridge_slave_0: left allmulticast mode [ 95.229221][ T6672] bridge_slave_0: left promiscuous mode [ 95.231162][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.270217][ T6672] bridge_slave_1: left allmulticast mode [ 95.270245][ T6672] bridge_slave_1: left promiscuous mode [ 95.270383][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.289911][ T6672] bond0: (slave bond_slave_0): Releasing backup interface [ 95.318436][ T6672] bond0: (slave bond_slave_1): Releasing backup interface [ 95.350456][ T6672] team0: Port device team_slave_0 removed [ 95.364208][ T6672] team0: Port device team_slave_1 removed [ 95.364999][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.365017][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.372525][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.372547][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.379645][ T6672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.942567][ T6707] netlink: 468 bytes leftover after parsing attributes in process `syz.2.203'. [ 99.090228][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 99.097922][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 99.385556][ T5951] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 99.556986][ T6706] ceph: No mds server is up or the cluster is laggy [ 99.782242][ T6719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.907367][ T6718] Console: switching to colour dummy device 80x25 [ 100.158153][ T6727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.292290][ T6719] md: could not open device unknown-block(1,1). [ 100.613807][ T6735] Illegal XDP return value 4294967294 on prog (id 13) dev N/A, expect packet loss! [ 100.944283][ T6729] md/raid1:md0: active with 1 out of 2 mirrors [ 100.946510][ T6729] md_update_sb: can't update sb for read-only array md0 [ 100.946734][ T6729] md0: detected capacity change from 0 to 2048 [ 100.962872][ T6737] md_update_sb: can't update sb for read-only array md0 [ 101.074841][ T43] audit: type=1326 audit(1789568917.397:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.075224][ T43] audit: type=1326 audit(1789568917.397:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.087449][ T43] audit: type=1326 audit(1789568917.407:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.088125][ T43] audit: type=1326 audit(1789568917.417:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.089896][ T43] audit: type=1326 audit(1789568917.417:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.092551][ T43] audit: type=1326 audit(1789568917.417:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.093834][ T43] audit: type=1326 audit(1789568917.417:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.096001][ T43] audit: type=1326 audit(1789568917.417:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.100451][ T43] audit: type=1326 audit(1789568917.427:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.101705][ T43] audit: type=1326 audit(1789568917.427:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.1.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 101.634149][ T6472] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 101.646709][ T6399] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 101.651203][ T6332] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 101.686504][ T5904] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 102.870708][ T6762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.031879][ T5818] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.187304][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 103.189101][ T5818] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.191020][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 103.194275][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.194296][ T5818] usb 5-1: Product: syz [ 103.194308][ T5818] usb 5-1: Manufacturer: syz [ 103.194321][ T5818] usb 5-1: SerialNumber: syz [ 103.198111][ T5818] usb 5-1: config 0 descriptor?? [ 103.215558][ T5818] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.215590][ T5818] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 103.289642][ T6773] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 103.289736][ T6773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.808949][ T5818] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 104.241155][ T5818] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.241191][ T5818] em28xx 5-1:0.0: board has no eeprom [ 104.317100][ T5818] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.317126][ T5818] em28xx 5-1:0.0: dvb set to bulk mode. [ 104.319378][ T35] em28xx 5-1:0.0: Binding DVB extension [ 104.324821][ T5818] usb 5-1: USB disconnect, device number 3 [ 104.325475][ T5818] em28xx 5-1:0.0: Disconnecting em28xx [ 104.384476][ T35] em28xx 5-1:0.0: Registering input extension [ 104.384983][ T5818] em28xx 5-1:0.0: Closing input extension [ 104.421854][ T5818] em28xx: Freeing device [ 106.973951][ T6818] uhci_hcd 0000:00:1d.0: remove, state 4 [ 106.974021][ T6818] usb usb2: USB disconnect, device number 1 [ 107.042325][ T6818] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 107.087745][ T5817] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.240166][ T5817] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 107.241273][ T5817] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 107.241292][ T5817] usb 6-1: config 1 has no interface number 0 [ 107.241320][ T5817] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 107.241339][ T5817] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 107.241357][ T5817] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.243276][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.243288][ T5817] usb 6-1: Product: syz [ 107.243295][ T5817] usb 6-1: Manufacturer: syz [ 107.243302][ T5817] usb 6-1: SerialNumber: syz [ 107.245395][ T6814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.377123][ T2132] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 107.461831][ T6814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.527144][ T2132] usb 7-1: Using ep0 maxpacket: 16 [ 107.528002][ T2132] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.529004][ T2132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.531303][ T2132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.531315][ T2132] usb 7-1: Product: syz [ 107.531322][ T2132] usb 7-1: Manufacturer: syz [ 107.531329][ T2132] usb 7-1: SerialNumber: syz [ 107.533141][ T2132] usb 7-1: config 0 descriptor?? [ 107.537397][ T2132] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.537423][ T2132] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 108.024942][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.026338][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.139018][ T2132] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 108.243464][ T6834] random: crng reseeded on system resumption [ 108.327819][ T5817] usb 6-1: Incompatible driver and firmware versions [ 108.393851][ T5817] usb 6-1: USB disconnect, device number 4 [ 108.540100][ T6839] netlink: zone id is out of range [ 108.540221][ T6839] netlink: zone id is out of range [ 108.540370][ T6839] netlink: zone id is out of range [ 108.540479][ T6839] netlink: zone id is out of range [ 108.543045][ T6839] netlink: zone id is out of range [ 108.543757][ T6839] netlink: zone id is out of range [ 108.543824][ T6839] netlink: zone id is out of range [ 108.544397][ T6839] netlink: zone id is out of range [ 108.544547][ T6839] netlink: zone id is out of range [ 108.544930][ T6839] netlink: zone id is out of range [ 109.531893][ T2132] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.531912][ T2132] em28xx 7-1:0.0: board has no eeprom [ 109.619323][ T2132] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.619341][ T2132] em28xx 7-1:0.0: dvb set to bulk mode. [ 109.668692][ T5951] em28xx 7-1:0.0: Binding DVB extension [ 109.674972][ T2132] usb 7-1: USB disconnect, device number 3 [ 109.675617][ T2132] em28xx 7-1:0.0: Disconnecting em28xx [ 109.701688][ T5951] em28xx 7-1:0.0: Registering input extension [ 109.701853][ T2132] em28xx 7-1:0.0: Closing input extension [ 109.704890][ T6845] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 109.712930][ T6845] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 109.713076][ T6845] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 109.713324][ T6845] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 109.713741][ T6845] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 109.752792][ T2132] em28xx: Freeing device [ 109.762685][ T6845] pci 0000:00:01.0: Adding to iommu group 1 [ 109.782492][ T6845] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 109.782515][ T6845] pci 0000:00:01.0: vgaarb: bridge control possible [ 109.782527][ T6845] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 109.804079][ T6845] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 109.815536][ T6845] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 109.842320][ T6845] pci 0000:00:1d.0: Adding to iommu group 7 [ 109.850619][ T6845] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 109.850745][ T6845] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 109.850859][ T6845] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 109.853298][ T6845] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 109.883148][ T6845] [drm] Found bochs VGA, ID 0xb0c5. [ 109.883668][ T6845] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 109.898991][ T55] IPVS: starting estimator thread 0... [ 109.991206][ T6845] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 110.007701][ T6858] IPVS: using max 43 ests per chain, 103200 per kthread [ 110.361459][ T6845] Console: switching to colour frame buffer device 160x50 [ 110.393137][ T6845] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 110.748184][ T6845] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 334115 usecs [ 110.781217][ T6845] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 110.798396][ T6845] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 110.799160][ T6845] uhci_hcd 0000:00:1d.0: detected 2 ports [ 110.813363][ T6845] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 110.818027][ T6845] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 110.820310][ T6845] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 110.820325][ T6845] usb usb2: Product: UHCI Host Controller [ 110.820332][ T6845] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 110.820340][ T6845] usb usb2: SerialNumber: 0000:00:1d.0 [ 110.836218][ T6845] hub 2-0:1.0: USB hub found [ 110.838683][ T6845] hub 2-0:1.0: 2 ports detected [ 110.958599][ T6868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.247'. [ 110.973516][ T6868] input: syz0 as /devices/virtual/input/input9 [ 111.177275][ T6874] Console: switching to colour dummy device 80x25 [ 111.607584][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.653990][ T6876] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 111.665039][ T6876] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 111.665223][ T6876] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 111.665787][ T6876] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 111.667782][ T6876] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 111.711115][ T6876] pci 0000:00:01.0: Adding to iommu group 1 [ 111.715207][ T6876] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 111.715219][ T6876] pci 0000:00:01.0: vgaarb: bridge control possible [ 111.715226][ T6876] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 111.722006][ T6876] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 111.722117][ T6876] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 111.723246][ T6876] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 111.738295][ T6876] [drm] Found bochs VGA, ID 0xb0c5. [ 111.738304][ T6876] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 111.757096][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 111.758118][ T5817] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.759279][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.761299][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.761319][ T5817] usb 6-1: Product: syz [ 111.761330][ T5817] usb 6-1: Manufacturer: syz [ 111.761341][ T5817] usb 6-1: SerialNumber: syz [ 111.762745][ T6876] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 111.766834][ T5817] usb 6-1: config 0 descriptor?? [ 111.778260][ T5817] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.778287][ T5817] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 111.933000][ T6876] Console: switching to colour frame buffer device 160x50 [ 111.970265][ T6876] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 112.407423][ T5817] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 112.707166][ T2132] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.857653][ T2132] usb 7-1: Using ep0 maxpacket: 16 [ 112.859742][ T2132] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.860627][ T2132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.862211][ T2132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.862223][ T2132] usb 7-1: Product: syz [ 112.862230][ T2132] usb 7-1: Manufacturer: syz [ 112.862237][ T2132] usb 7-1: SerialNumber: syz [ 112.864168][ T2132] usb 7-1: config 0 descriptor?? [ 112.870023][ T2132] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.870047][ T2132] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 113.162476][ T5817] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.162494][ T5817] em28xx 6-1:0.0: board has no eeprom [ 113.472988][ T2132] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 113.687136][ T5817] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.687154][ T5817] em28xx 6-1:0.0: dvb set to bulk mode. [ 113.689989][ T873] em28xx 6-1:0.0: Binding DVB extension [ 113.744189][ T5817] usb 6-1: USB disconnect, device number 5 [ 113.744831][ T5817] em28xx 6-1:0.0: Disconnecting em28xx [ 113.807309][ T873] em28xx 6-1:0.0: Registering input extension [ 113.807492][ T5817] em28xx 6-1:0.0: Closing input extension [ 113.845279][ T5817] em28xx: Freeing device [ 114.089377][ T2132] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.089459][ T2132] em28xx 7-1:0.0: board has no eeprom [ 114.130665][ T6909] syz.3.257 uses obsolete (PF_INET,SOCK_PACKET) [ 114.139842][ T6909] netlink: 72 bytes leftover after parsing attributes in process `syz.3.257'. [ 114.177397][ T2132] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.177428][ T2132] em28xx 7-1:0.0: dvb set to bulk mode. [ 114.184289][ T5951] em28xx 7-1:0.0: Binding DVB extension [ 114.246302][ T2132] usb 7-1: USB disconnect, device number 4 [ 114.278921][ T2132] em28xx 7-1:0.0: Disconnecting em28xx [ 114.285211][ T5951] em28xx 7-1:0.0: Registering input extension [ 114.293606][ T2132] em28xx 7-1:0.0: Closing input extension [ 114.330843][ T2132] em28xx: Freeing device [ 114.387288][ T873] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 114.542585][ T873] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.545973][ T873] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.545987][ T873] usb 8-1: config 0 has no interface number 0 [ 114.546005][ T873] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 114.546017][ T873] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 35380, setting to 64 [ 114.549749][ T873] usb 8-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 114.549762][ T873] usb 8-1: Product: syz [ 114.549770][ T873] usb 8-1: SerialNumber: syz [ 114.556878][ T873] usb 8-1: config 0 descriptor?? [ 114.559687][ T6909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.564033][ T873] cm109 8-1:0.8: invalid payload size 64, expected 4 [ 114.565210][ T873] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input12 [ 114.911229][ T5817] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 115.136916][ T5817] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.146916][ T5817] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.147124][ T5817] usb 7-1: config 0 has no interface number 0 [ 115.147175][ T5817] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 115.147262][ T5817] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 115.147308][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.327202][ T5817] usb 7-1: config 0 descriptor?? [ 115.368814][ T6913] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.580986][ T5817] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 116.203827][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.204771][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.204946][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205125][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205308][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205477][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205645][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205812][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.205983][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.206150][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.210324][ T5951] usb 8-1: USB disconnect, device number 4 [ 116.211677][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 116.492469][ T5951] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 116.816023][ T25] usb 7-1: USB disconnect, device number 5 [ 117.956530][ T6937] ALSA: mixer_oss: invalid OSS volume '' [ 117.956588][ T6937] ALSA: mixer_oss: invalid OSS volume '9[&¸?ļ©çx;ëBµb’[rSíH€Ùsréü' [ 117.956621][ T6937] ALSA: mixer_oss: invalid OSS volume 'ä`èôí~'5{Š&½óá]cÒ}¢ {xã.eÙÍ8' [ 117.956657][ T6937] ALSA: mixer_oss: invalid OSS volume 'Ç×j'é|Ù]õ¢Ìüªjp™i?®.¾>ÆÌ¡¶ÑÇ|Ê' [ 117.956789][ T6937] ALSA: mixer_oss: invalid OSS volume 'º¶\SO\Å ª¯,4ÃãQx¸' [ 117.956857][ T6937] ALSA: mixer_oss: invalid OSS volume '‡£Q‚µÎq«*hÌ0;¤úbZ1#Š<3 ŽP' [ 117.956899][ T6937] ALSA: mixer_oss: invalid OSS volume 'Séë Êߌ_ãq“' [ 117.956943][ T6937] ALSA: mixer_oss: invalid OSS volume ')Ù:{ b‘“Ÿ€vá¨i¢ûjpÈÜè"g_6´fÝ¢' [ 117.957514][ T6937] ALSA: mixer_oss: invalid OSS volume '“áXë­r…ÅÞ]X[*ˆÍÛ‡£Ø8èôtf;v6' [ 117.957789][ T6937] ALSA: mixer_oss: invalid OSS volume '8L&Äwr‹‰ËŸ' [ 117.957881][ T6937] ALSA: mixer_oss: invalid OSS volume 'zap1oRR|/`²‚' [ 117.960840][ T6937] ALSA: mixer_oss: invalid OSS volume 'šÏ_Õêy4"·PI¢]ÖþYÄye3O|K7qa' [ 117.965066][ T6937] ALSA: mixer_oss: invalid OSS volume 'º\QÀa2`„ íÊg34ä%£a¶üãäêFÊæaÉÍ v' [ 117.965105][ T6937] ALSA: mixer_oss: invalid OSS volume 'Añvb4¢x‡•féØÆ[k'3R¤g' [ 117.965121][ T6937] ALSA: mixer_oss: invalid OSS volume 'ÜuÐneßB†œì?È' [ 117.976438][ T6937] ALSA: mixer_oss: invalid OSS volume 'Yî*Î)ëi-íÅ?•9jþ(/±1G:á³EêCWw­Ïì' [ 118.377440][ T1816] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 118.527127][ T1816] usb 6-1: Using ep0 maxpacket: 16 [ 118.530109][ T1816] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.533375][ T1816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.551325][ T1816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.551346][ T1816] usb 6-1: Product: syz [ 118.551357][ T1816] usb 6-1: Manufacturer: syz [ 118.551368][ T1816] usb 6-1: SerialNumber: syz [ 118.594828][ T1816] usb 6-1: config 0 descriptor?? [ 118.630424][ T1816] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.630531][ T1816] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 119.107571][ T856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.215481][ T1816] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 119.257092][ T856] usb 5-1: Using ep0 maxpacket: 16 [ 119.258083][ T856] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.259707][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.263206][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.263224][ T856] usb 5-1: Product: syz [ 119.263235][ T856] usb 5-1: Manufacturer: syz [ 119.263246][ T856] usb 5-1: SerialNumber: syz [ 119.269129][ T856] usb 5-1: config 0 descriptor?? [ 119.278385][ T856] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.278412][ T856] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 119.634884][ T1816] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 119.634904][ T1816] em28xx 6-1:0.0: board has no eeprom [ 119.697643][ T1816] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.697911][ T1816] em28xx 6-1:0.0: dvb set to bulk mode. [ 119.774874][ T10] em28xx 6-1:0.0: Binding DVB extension [ 119.785918][ T1816] usb 6-1: USB disconnect, device number 6 [ 119.837135][ T1816] em28xx 6-1:0.0: Disconnecting em28xx [ 119.896296][ T856] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 120.326761][ T10] em28xx 6-1:0.0: Registering input extension [ 120.330874][ T1816] em28xx 6-1:0.0: Closing input extension [ 120.475322][ T856] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 120.475341][ T856] em28xx 5-1:0.0: board has no eeprom [ 120.484272][ T1816] em28xx: Freeing device [ 120.537093][ T856] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 120.537109][ T856] em28xx 5-1:0.0: dvb set to bulk mode. [ 120.537488][ T10] em28xx 5-1:0.0: Binding DVB extension [ 120.741948][ T856] usb 5-1: USB disconnect, device number 4 [ 120.747937][ T10] em28xx 5-1:0.0: Registering input extension [ 120.755132][ T6963] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 120.817202][ T856] em28xx 5-1:0.0: Disconnecting em28xx [ 120.817218][ T856] em28xx 5-1:0.0: Closing input extension [ 121.393836][ T6968] syz_tun: left promiscuous mode [ 121.394617][ T6968] batman_adv: batadv0: Interface deactivated: dummy0 [ 121.395683][ T6968] veth1_vlan: left allmulticast mode [ 121.396211][ T6968] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 121.396226][ T6968] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 121.709407][ T856] em28xx: Freeing device [ 121.885587][ T103] IPVS: starting estimator thread 0... [ 121.895623][ T6981] net_ratelimit: 9 callbacks suppressed [ 121.895644][ T6981] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 121.977157][ T6982] IPVS: using max 42 ests per chain, 100800 per kthread [ 123.677157][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 123.827131][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 123.827863][ T35] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.828828][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.830953][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.830969][ T35] usb 8-1: Product: syz [ 123.830979][ T35] usb 8-1: Manufacturer: syz [ 123.830988][ T35] usb 8-1: SerialNumber: syz [ 123.844002][ T35] usb 8-1: config 0 descriptor?? [ 123.848388][ T35] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.848419][ T35] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 124.035571][ T7015] netlink: 68 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.051258][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.051273][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.051283][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.052075][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.052086][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.208059][ T7017] FAULT_INJECTION: forcing a failure. [ 124.208059][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 124.208091][ T7017] CPU: 3 UID: 0 PID: 7017 Comm: syz.1.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.208117][ T7017] Tainted: [L]=SOFTLOCKUP [ 124.208124][ T7017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.208134][ T7017] Call Trace: [ 124.208141][ T7017] [ 124.208148][ T7017] dump_stack_lvl+0x100/0x190 [ 124.208255][ T7017] should_fail_ex.cold+0x5/0xa [ 124.208282][ T7017] should_failslab+0xc2/0x120 [ 124.208332][ T7017] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 124.208354][ T7017] ? find_held_lock+0x2b/0x80 [ 124.208375][ T7017] ? sock_alloc_inode+0x26/0x2c0 [ 124.208434][ T7017] ? __pfx_sock_alloc_inode+0x10/0x10 [ 124.208465][ T7017] sock_alloc_inode+0x26/0x2c0 [ 124.208494][ T7017] ? __pfx_sock_alloc_inode+0x10/0x10 [ 124.208523][ T7017] alloc_inode+0x68/0x250 [ 124.208551][ T7017] sock_alloc+0x44/0x280 [ 124.208575][ T7017] ? security_socket_create+0x7f/0x250 [ 124.208601][ T7017] __sock_create+0xc2/0x860 [ 124.208624][ T7017] __sys_socket+0x14d/0x260 [ 124.208643][ T7017] ? fput+0x7c/0x100 [ 124.208666][ T7017] ? __pfx___sys_socket+0x10/0x10 [ 124.208684][ T7017] ? ksys_write+0x1ac/0x250 [ 124.208703][ T7017] ? __pfx_ksys_write+0x10/0x10 [ 124.208728][ T7017] __ia32_sys_socket+0x72/0xb0 [ 124.208747][ T7017] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.208799][ T7017] __do_fast_syscall_32+0x13a/0x8b0 [ 124.208849][ T7017] do_fast_syscall_32+0x32/0x70 [ 124.208881][ T7017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.208904][ T7017] RIP: 0023:0xf7f47fec [ 124.208924][ T7017] Code: Unable to access opcode bytes at 0xf7f47fc2. [ 124.208932][ T7017] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 124.208950][ T7017] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 124.208962][ T7017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.208974][ T7017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.208985][ T7017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.208995][ T7017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.209019][ T7017] [ 124.209227][ T7017] socket: no more sockets [ 124.224818][ T3375] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 124.267106][ T873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 124.417096][ T873] usb 7-1: Using ep0 maxpacket: 16 [ 124.417549][ T873] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.418386][ T873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.419950][ T873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.419967][ T873] usb 7-1: Product: syz [ 124.419979][ T873] usb 7-1: Manufacturer: syz [ 124.419991][ T873] usb 7-1: SerialNumber: syz [ 124.421360][ T873] usb 7-1: config 0 descriptor?? [ 124.423519][ T873] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.423545][ T873] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 124.524116][ T3375] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 124.580680][ T35] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 125.028639][ T873] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 125.034265][ T7017] ceph: No mds server is up or the cluster is laggy [ 125.074530][ T3375] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 125.191702][ T35] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.191720][ T35] em28xx 8-1:0.0: board has no eeprom [ 125.267098][ T35] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.267124][ T35] em28xx 8-1:0.0: dvb set to bulk mode. [ 125.273383][ T3375] em28xx 8-1:0.0: Binding DVB extension [ 125.324758][ T35] usb 8-1: USB disconnect, device number 5 [ 125.368121][ T35] em28xx 8-1:0.0: Disconnecting em28xx [ 125.570984][ T3375] em28xx 8-1:0.0: Registering input extension [ 125.572579][ T35] em28xx 8-1:0.0: Closing input extension [ 125.700691][ T35] em28xx: Freeing device [ 125.977698][ T873] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.977727][ T873] em28xx 7-1:0.0: board has no eeprom [ 126.197782][ T873] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.197828][ T873] em28xx 7-1:0.0: dvb set to bulk mode. [ 126.203395][ T5826] em28xx 7-1:0.0: Binding DVB extension [ 126.213406][ T7036] netlink: 1064 bytes leftover after parsing attributes in process `syz.0.290'. [ 126.251260][ T873] usb 7-1: USB disconnect, device number 6 [ 126.282362][ T873] em28xx 7-1:0.0: Disconnecting em28xx [ 126.428557][ T5826] em28xx 7-1:0.0: Registering input extension [ 126.429164][ T873] em28xx 7-1:0.0: Closing input extension [ 126.558180][ T3375] Process accounting resumed [ 126.901544][ T873] em28xx: Freeing device [ 127.688735][ T7049] nvmet: adding nsid 1 to subsystem testsubsys [ 127.689934][ T7049] nvmet: Invalid value 'fc [ 127.689934][ T7049] ´öM<©þq˜I—w'œ5ÑÌKà8…v ØÄ ‡wƒÇø' for trtype [ 127.772032][ T7055] FAULT_INJECTION: forcing a failure. [ 127.772032][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 127.772054][ T7055] CPU: 3 UID: 0 PID: 7055 Comm: syz.3.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.772070][ T7055] Tainted: [L]=SOFTLOCKUP [ 127.772074][ T7055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.772081][ T7055] Call Trace: [ 127.772085][ T7055] [ 127.772090][ T7055] dump_stack_lvl+0x100/0x190 [ 127.772108][ T7055] should_fail_ex.cold+0x5/0xa [ 127.772123][ T7055] should_failslab+0xc2/0x120 [ 127.772139][ T7055] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 127.772152][ T7055] ? find_held_lock+0x2b/0x80 [ 127.772164][ T7055] ? sock_alloc_inode+0x26/0x2c0 [ 127.772181][ T7055] ? __pfx_sock_alloc_inode+0x10/0x10 [ 127.772198][ T7055] sock_alloc_inode+0x26/0x2c0 [ 127.772214][ T7055] ? __pfx_sock_alloc_inode+0x10/0x10 [ 127.772229][ T7055] alloc_inode+0x68/0x250 [ 127.772246][ T7055] sock_alloc+0x44/0x280 [ 127.772261][ T7055] ? security_socket_create+0x7f/0x250 [ 127.772276][ T7055] __sock_create+0xc2/0x860 [ 127.772289][ T7055] __sys_socket+0x14d/0x260 [ 127.772299][ T7055] ? xfd_validate_state+0x129/0x190 [ 127.772315][ T7055] ? __pfx___sys_socket+0x10/0x10 [ 127.772330][ T7055] __ia32_sys_socket+0x72/0xb0 [ 127.772341][ T7055] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.772357][ T7055] __do_fast_syscall_32+0x13a/0x8b0 [ 127.772375][ T7055] do_fast_syscall_32+0x32/0x70 [ 127.772391][ T7055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.772405][ T7055] RIP: 0023:0xf700efec [ 127.772424][ T7055] Code: Unable to access opcode bytes at 0xf700efc2. [ 127.772430][ T7055] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 127.772442][ T7055] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 127.772450][ T7055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.772457][ T7055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.772465][ T7055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.772472][ T7055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.772486][ T7055] [ 127.772492][ T7055] socket: no more sockets [ 127.867668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 128.227206][ T856] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 128.387211][ T856] usb 6-1: Using ep0 maxpacket: 16 [ 128.389036][ T856] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.390192][ T856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.392505][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.392525][ T856] usb 6-1: Product: syz [ 128.392537][ T856] usb 6-1: Manufacturer: syz [ 128.392549][ T856] usb 6-1: SerialNumber: syz [ 128.396770][ T856] usb 6-1: config 0 descriptor?? [ 128.400868][ T856] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.400895][ T856] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 128.500271][ T7064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.599811][ T7055] ceph: No mds server is up or the cluster is laggy [ 129.110783][ T856] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 129.541880][ T7078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.955490][ T873] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 130.187940][ T873] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.188864][ T873] usb 8-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 130.188905][ T873] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.188931][ T873] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.190850][ T873] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.190871][ T873] usb 8-1: Product: syz [ 130.190890][ T873] usb 8-1: Manufacturer: syz [ 130.190904][ T873] usb 8-1: SerialNumber: syz [ 130.193170][ T873] usb 8-1: config 0 descriptor?? [ 130.264622][ T873] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 130.285000][ T6907] udevd[6907]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 130.339367][ T7094] ucma_write: process 309 (syz.0.305) changed security contexts after opening file descriptor, this is not allowed. [ 130.579379][ T856] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 130.584745][ T856] em28xx 6-1:0.0: board has no eeprom [ 130.605831][ T7060] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 130.658600][ T856] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 130.658618][ T856] em28xx 6-1:0.0: dvb set to bulk mode. [ 130.660409][ T1816] em28xx 6-1:0.0: Binding DVB extension [ 130.664095][ T856] usb 6-1: USB disconnect, device number 7 [ 130.664745][ T856] em28xx 6-1:0.0: Disconnecting em28xx [ 130.730884][ T1816] em28xx 6-1:0.0: Registering input extension [ 130.731416][ T856] em28xx 6-1:0.0: Closing input extension [ 130.735292][ T856] em28xx: Freeing device [ 131.257715][ T7130] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 131.405192][ T873] usb 8-1: USB disconnect, device number 6 [ 131.467809][ T7130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.621340][ T7134] bond1: (slave geneve0): making interface the new active one [ 131.634319][ T7134] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 131.719291][ T7134] syz.1.309 (7134) used greatest stack depth: 18184 bytes left [ 132.152450][ T7157] usb3503 0-0008: unknown mode is requested [ 132.152464][ T7157] usb3503 0-0008: usb3503_probe: probed in standby mode [ 132.153980][ T7157] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 132.340216][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.340247][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.648031][ T7175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.711415][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 132.711437][ T43] audit: type=1326 audit(1789568949.037:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.711681][ T43] audit: type=1326 audit(1789568949.037:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.714195][ T43] audit: type=1326 audit(1789568949.037:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.714237][ T43] audit: type=1326 audit(1789568949.037:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.714299][ T43] audit: type=1326 audit(1789568949.037:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.714675][ T43] audit: type=1326 audit(1789568949.037:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.715799][ T43] audit: type=1326 audit(1789568949.037:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.715962][ T43] audit: type=1326 audit(1789568949.037:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 132.803361][ T43] audit: type=1326 audit(1789568949.127:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 132.803412][ T43] audit: type=1326 audit(1789568949.127:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.312" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 133.068121][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.118724][ T7193] tps6598x 1-0003: failed to read vendor ID: -6, vid: 0x0 [ 133.139447][ T7193] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03 [ 133.218349][ T25] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 133.233946][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.233972][ T25] usb 5-1: Product: syz [ 133.233983][ T25] usb 5-1: Manufacturer: syz [ 133.233994][ T25] usb 5-1: SerialNumber: syz [ 133.258125][ T25] usb 5-1: USB2VGA dongle found at address 5 [ 133.265554][ T25] usb 5-1: Allocated 8 output buffers [ 133.620815][ T7178] netlink: 'syz.0.312': attribute type 30 has an invalid length. [ 133.677153][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 133.724458][ T25] usb 5-1: Failed to early initialize device [ 133.750782][ T25] usb 5-1: USB disconnect, device number 5 [ 133.838117][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 133.839381][ T5818] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.840450][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.842428][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.842447][ T5818] usb 6-1: Product: syz [ 133.842459][ T5818] usb 6-1: Manufacturer: syz [ 133.842470][ T5818] usb 6-1: SerialNumber: syz [ 133.848474][ T5818] usb 6-1: config 0 descriptor?? [ 133.852063][ T5818] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.852089][ T5818] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 134.459410][ T5818] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 134.657309][ T7223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.873594][ T5818] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 134.873621][ T5818] em28xx 6-1:0.0: board has no eeprom [ 134.947121][ T5818] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 134.947584][ T5818] em28xx 6-1:0.0: dvb set to bulk mode. [ 134.954896][ T5818] usb 6-1: USB disconnect, device number 8 [ 134.958812][ T5818] em28xx 6-1:0.0: Disconnecting em28xx [ 134.958867][ T3375] em28xx 6-1:0.0: Binding DVB extension [ 134.980053][ T3375] em28xx 6-1:0.0: Registering input extension [ 134.985637][ T5818] em28xx 6-1:0.0: Closing input extension [ 135.039220][ T5818] em28xx: Freeing device [ 136.038099][ T7254] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 136.038122][ T7254] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 136.038133][ T7254] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 136.181022][ T74] IPVS: starting estimator thread 0... [ 136.267265][ T7261] IPVS: using max 42 ests per chain, 100800 per kthread [ 136.294372][ T7264] pim6reg: entered allmulticast mode [ 136.492677][ T7258] pim6reg: left allmulticast mode [ 137.156809][ T7268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.687117][ T3375] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 137.877995][ T3375] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 137.878603][ T3375] usb 6-1: config 0 has no interfaces? [ 137.881003][ T3375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.881022][ T3375] usb 6-1: Product: syz [ 137.881034][ T3375] usb 6-1: Manufacturer: syz [ 137.881045][ T3375] usb 6-1: SerialNumber: syz [ 137.884441][ T3375] usb 6-1: config 0 descriptor?? [ 138.175652][ T7294] bond0: (slave syz_tun): Releasing backup interface [ 138.190489][ T1816] usb 6-1: USB disconnect, device number 9 [ 140.066530][ T1168] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 140.069518][ T7328] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 140.077389][ T7333] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 140.133766][ T7338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.247253][ T873] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 140.421943][ T873] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.423185][ T873] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 140.423213][ T873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.425275][ T873] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.425300][ T873] usb 6-1: Product: syz [ 140.425316][ T873] usb 6-1: Manufacturer: syz [ 140.425329][ T873] usb 6-1: SerialNumber: syz [ 140.453110][ T873] usb 6-1: config 0 descriptor?? [ 140.464228][ T873] usb 6-1: selecting invalid altsetting 0 [ 140.693712][ T7358] FAULT_INJECTION: forcing a failure. [ 140.693712][ T7358] name fail_futex, interval 1, probability 0, space 0, times 0 [ 140.693737][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.2.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.693755][ T7358] Tainted: [L]=SOFTLOCKUP [ 140.693760][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.693768][ T7358] Call Trace: [ 140.693773][ T7358] [ 140.693779][ T7358] dump_stack_lvl+0x100/0x190 [ 140.693801][ T7358] should_fail_ex.cold+0x5/0xa [ 140.693819][ T7358] get_futex_key+0x1d0/0x14f0 [ 140.693842][ T7358] ? __pfx_get_futex_key+0x10/0x10 [ 140.693869][ T7358] ? putname+0xb1/0x110 [ 140.693886][ T7358] ? kasan_save_stack+0x3f/0x50 [ 140.693901][ T7358] ? kasan_save_stack+0x30/0x50 [ 140.693915][ T7358] ? kasan_save_track+0x14/0x30 [ 140.693931][ T7358] ? kasan_save_free_info+0x3b/0x70 [ 140.693960][ T7358] futex_wake+0xf4/0x5e0 [ 140.693983][ T7358] ? __pfx_futex_wake+0x10/0x10 [ 140.694011][ T7358] do_futex+0x2b2/0x440 [ 140.694030][ T7358] ? __pfx_do_futex+0x10/0x10 [ 140.694055][ T7358] __ia32_sys_futex_time32+0x2f4/0x470 [ 140.694078][ T7358] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 140.694099][ T7358] __do_fast_syscall_32+0x13a/0x8b0 [ 140.694121][ T7358] do_fast_syscall_32+0x32/0x70 [ 140.694141][ T7358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.694157][ T7358] RIP: 0023:0xf701efec [ 140.694170][ T7358] Code: Unable to access opcode bytes at 0xf701efc2. [ 140.694176][ T7358] RSP: 002b:00000000f540d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 140.694189][ T7358] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 140.694198][ T7358] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 140.694207][ T7358] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 140.694215][ T7358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.694223][ T7358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.694280][ T7358] [ 141.258334][ T7367] veth1_vlan: left allmulticast mode [ 141.277376][ T5783] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.277403][ T5783] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.277421][ T5783] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.277438][ T5783] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.277456][ T5783] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.277473][ T5783] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.277491][ T5783] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.277508][ T5783] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.657180][ T1816] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 141.965999][ T7376] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.967141][ T1816] usb 8-1: Using ep0 maxpacket: 8 [ 141.996969][ T1816] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 142.053492][ T1816] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 142.053510][ T1816] usb 8-1: config 0 has no interface number 0 [ 142.162972][ T1816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.162996][ T1816] usb 8-1: Product: syz [ 142.163007][ T1816] usb 8-1: Manufacturer: syz [ 142.163019][ T1816] usb 8-1: SerialNumber: syz [ 142.554061][ T1816] usb 8-1: config 0 descriptor?? [ 143.231361][ T9] usb 6-1: USB disconnect, device number 10 [ 144.606099][ T1816] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 144.606166][ T1816] uvcvideo 8-1:0.31: No valid video chain found. [ 144.611256][ T1816] usb 8-1: USB disconnect, device number 7 [ 144.832465][ T7413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.395633][ T7442] capability: warning: `syz.3.365' uses deprecated v2 capabilities in a way that may be insecure [ 145.517091][ T1816] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 145.687666][ T1816] usb 7-1: Using ep0 maxpacket: 16 [ 145.688472][ T1816] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.689646][ T1816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 145.696374][ T1816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.696396][ T1816] usb 7-1: Product: syz [ 145.696408][ T1816] usb 7-1: Manufacturer: syz [ 145.696419][ T1816] usb 7-1: SerialNumber: syz [ 145.729287][ T1816] usb 7-1: config 0 descriptor?? [ 145.731419][ T1816] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.731439][ T1816] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 145.828628][ T7456] input: syz0 as /devices/virtual/input/input19 [ 146.040480][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 146.187511][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 146.190235][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 146.190262][ T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 146.192282][ T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 146.192297][ T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 146.192312][ T9] usb 8-1: config 14 has no interface number 0 [ 146.192320][ T9] usb 8-1: config 14 has no interface number 1 [ 146.192341][ T9] usb 8-1: config 14 interface 57 has no altsetting 0 [ 146.192398][ T9] usb 8-1: config 14 interface 228 has no altsetting 0 [ 146.196657][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.196679][ T9] usb 8-1: Product: syz [ 146.196690][ T9] usb 8-1: Manufacturer: syz [ 146.196700][ T9] usb 8-1: SerialNumber: syz [ 146.336899][ T1816] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 146.756594][ T1816] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 146.756620][ T1816] em28xx 7-1:0.0: board has no eeprom [ 146.827163][ T1816] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 146.827188][ T1816] em28xx 7-1:0.0: dvb set to bulk mode. [ 146.829464][ T10] em28xx 7-1:0.0: Binding DVB extension [ 146.835176][ T1816] usb 7-1: USB disconnect, device number 7 [ 146.836683][ T1816] em28xx 7-1:0.0: Disconnecting em28xx [ 146.871833][ T10] em28xx 7-1:0.0: Registering input extension [ 146.872105][ T1816] em28xx 7-1:0.0: Closing input extension [ 146.879264][ T1816] em28xx: Freeing device [ 146.947186][ T873] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 147.097905][ T873] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.099120][ T873] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.099137][ T873] usb 6-1: config 0 has no interface number 0 [ 147.099162][ T873] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 147.099179][ T873] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 147.099203][ T873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.100617][ T873] usb 6-1: config 0 descriptor?? [ 147.101309][ T7468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 147.107704][ T873] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.320441][ T7474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.279929][ T9] legousbtower 8-1:14.57: interrupt endpoints not found [ 148.286950][ T9] legousbtower 8-1:14.228: interrupt endpoints not found [ 148.292924][ T9] usb 8-1: USB disconnect, device number 8 [ 148.613204][ T9] usb 6-1: USB disconnect, device number 11 [ 148.827126][ T3375] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 149.035525][ T7503] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 149.184771][ T3375] usb 8-1: Using ep0 maxpacket: 16 [ 149.232000][ T3375] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.287400][ T3375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 149.356700][ T3375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.356724][ T3375] usb 8-1: Product: syz [ 149.356736][ T3375] usb 8-1: Manufacturer: syz [ 149.356748][ T3375] usb 8-1: SerialNumber: syz [ 149.401433][ T3375] usb 8-1: config 0 descriptor?? [ 149.403370][ T3375] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.403388][ T3375] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 150.120672][ T3375] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 150.630582][ T3375] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 150.630611][ T3375] em28xx 8-1:0.0: board has no eeprom [ 150.857195][ T3375] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 150.857221][ T3375] em28xx 8-1:0.0: dvb set to bulk mode. [ 150.857997][ T5818] em28xx 8-1:0.0: Binding DVB extension [ 150.866887][ T3375] usb 8-1: USB disconnect, device number 9 [ 150.868186][ T3375] em28xx 8-1:0.0: Disconnecting em28xx [ 150.887273][ T7533] FAULT_INJECTION: forcing a failure. [ 150.887273][ T7533] name fail_futex, interval 1, probability 0, space 0, times 0 [ 150.887294][ T7533] CPU: 3 UID: 0 PID: 7533 Comm: syz.2.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.887312][ T7533] Tainted: [L]=SOFTLOCKUP [ 150.887316][ T7533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.887323][ T7533] Call Trace: [ 150.887327][ T7533] [ 150.887332][ T7533] dump_stack_lvl+0x100/0x190 [ 150.887358][ T7533] should_fail_ex.cold+0x5/0xa [ 150.887373][ T7533] get_futex_key+0x1d0/0x14f0 [ 150.887394][ T7533] ? __pfx_get_futex_key+0x10/0x10 [ 150.887410][ T7533] ? find_held_lock+0x2b/0x80 [ 150.887422][ T7533] ? futex_wake+0x4ea/0x5e0 [ 150.887438][ T7533] futex_wake+0xf4/0x5e0 [ 150.887451][ T7533] ? futex_wait+0x11e/0x370 [ 150.887466][ T7533] ? __pfx_futex_wake+0x10/0x10 [ 150.887485][ T7533] do_futex+0x2b2/0x440 [ 150.887495][ T7533] ? __pfx_do_futex+0x10/0x10 [ 150.887510][ T7533] __ia32_sys_futex_time32+0x2f4/0x470 [ 150.887523][ T7533] ? xfd_validate_state+0x129/0x190 [ 150.887539][ T7533] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 150.887556][ T7533] __do_fast_syscall_32+0x13a/0x8b0 [ 150.887575][ T7533] do_fast_syscall_32+0x32/0x70 [ 150.887592][ T7533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.887605][ T7533] RIP: 0023:0xf701efec [ 150.887616][ T7533] Code: Unable to access opcode bytes at 0xf701efc2. [ 150.887621][ T7533] RSP: 002b:00000000f540d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 150.887633][ T7533] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 150.887640][ T7533] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 150.887648][ T7533] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 150.887654][ T7533] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.887662][ T7533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.887676][ T7533] [ 150.924559][ T5818] em28xx 8-1:0.0: Registering input extension [ 150.924672][ T3375] em28xx 8-1:0.0: Closing input extension [ 150.930812][ T3375] em28xx: Freeing device [ 151.130356][ T7541] overlayfs: overlapping lowerdir path [ 152.124937][ T7556] random: crng reseeded on system resumption [ 152.572145][ T7557] netlink: 256 bytes leftover after parsing attributes in process `syz.0.393'. [ 152.572875][ T7557] comedi comedi4: bad chanlist[1]=0x00000101 chan=257 range length=2 [ 153.250040][ T7575] FAULT_INJECTION: forcing a failure. [ 153.250040][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 153.250063][ T7575] CPU: 3 UID: 0 PID: 7575 Comm: syz.0.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.250080][ T7575] Tainted: [L]=SOFTLOCKUP [ 153.250084][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.250091][ T7575] Call Trace: [ 153.250096][ T7575] [ 153.250101][ T7575] dump_stack_lvl+0x100/0x190 [ 153.250121][ T7575] should_fail_ex.cold+0x5/0xa [ 153.250137][ T7575] should_failslab+0xc2/0x120 [ 153.250154][ T7575] __kmalloc_cache_noprof+0x91/0x6d0 [ 153.250199][ T7575] ? ceph_osdmap_alloc+0x40/0x2d0 [ 153.250221][ T7575] ceph_osdmap_alloc+0x40/0x2d0 [ 153.250238][ T7575] ceph_osdc_init+0x433/0xa00 [ 153.250256][ T7575] ceph_create_client+0x281/0x370 [ 153.250273][ T7575] ceph_get_tree+0x1a4/0x1fd0 [ 153.250287][ T7575] ? bpf_lsm_capable+0x9/0x10 [ 153.250304][ T7575] ? security_capable+0x80/0x260 [ 153.250319][ T7575] vfs_get_tree+0x92/0x320 [ 153.250337][ T7575] vfs_cmd_create+0xd7/0x2a0 [ 153.250356][ T7575] __do_sys_fsconfig+0x55a/0xcb0 [ 153.250376][ T7575] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 153.250393][ T7575] ? xfd_validate_state+0x129/0x190 [ 153.250416][ T7575] __do_fast_syscall_32+0x13a/0x8b0 [ 153.250437][ T7575] do_fast_syscall_32+0x32/0x70 [ 153.250514][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.250531][ T7575] RIP: 0023:0xf709efec [ 153.250546][ T7575] Code: Unable to access opcode bytes at 0xf709efc2. [ 153.250551][ T7575] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 153.250563][ T7575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 153.250571][ T7575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.250578][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.250585][ T7575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.250592][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.250610][ T7575] [ 153.917139][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 154.089700][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 154.091368][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.091516][ T9] usb 6-1: config 0 has no interfaces? [ 154.091640][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.104880][ T9] usb 6-1: config 0 descriptor?? [ 154.659875][ T43] kauditd_printk_skb: 91 callbacks suppressed [ 154.659892][ T43] audit: type=1326 audit(1789568970.987:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.662257][ T43] audit: type=1326 audit(1789568970.987:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.662798][ T43] audit: type=1326 audit(1789568970.987:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.662822][ T43] audit: type=1326 audit(1789568970.987:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.662842][ T43] audit: type=1326 audit(1789568970.987:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.663017][ T43] audit: type=1326 audit(1789568970.987:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.663286][ T43] audit: type=1326 audit(1789568970.987:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.705472][ T43] audit: type=1326 audit(1789568970.987:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.729454][ T43] audit: type=1326 audit(1789568971.057:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.739998][ T43] audit: type=1326 audit(1789568971.067:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.2.406" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf701efec code=0x7ffc0000 [ 154.742505][ T7603] FAULT_INJECTION: forcing a failure. [ 154.742505][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 154.742536][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.3.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.742563][ T7603] Tainted: [L]=SOFTLOCKUP [ 154.742570][ T7603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.742582][ T7603] Call Trace: [ 154.742589][ T7603] [ 154.742597][ T7603] dump_stack_lvl+0x100/0x190 [ 154.742625][ T7603] should_fail_ex.cold+0x5/0xa [ 154.742651][ T7603] should_failslab+0xc2/0x120 [ 154.742674][ T7603] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 154.742696][ T7603] ? shmem_alloc_inode+0x25/0x50 [ 154.742718][ T7603] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 154.742738][ T7603] shmem_alloc_inode+0x25/0x50 [ 154.742757][ T7603] alloc_inode+0x68/0x250 [ 154.742785][ T7603] new_inode+0x22/0x1c0 [ 154.742814][ T7603] shmem_get_inode+0x1e3/0xf70 [ 154.742839][ T7603] ? __pfx_shmem_get_inode+0x10/0x10 [ 154.742865][ T7603] ? make_vfsgid+0xf1/0x140 [ 154.742884][ T7603] shmem_mknod+0x217/0x480 [ 154.742925][ T7603] ? __pfx_shmem_mknod+0x10/0x10 [ 154.742958][ T7603] vfs_create+0x2fb/0x6c0 [ 154.742992][ T7603] filename_mknodat+0x2de/0x7f0 [ 154.743021][ T7603] ? __pfx_filename_mknodat+0x10/0x10 [ 154.743043][ T7603] ? strncpy_from_user+0x19d/0x2d0 [ 154.743068][ T7603] ? do_getname+0x191/0x390 [ 154.743095][ T7603] __ia32_sys_mknodat+0xb4/0xf0 [ 154.743119][ T7603] __do_fast_syscall_32+0x13a/0x8b0 [ 154.743153][ T7603] do_fast_syscall_32+0x32/0x70 [ 154.743182][ T7603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.743205][ T7603] RIP: 0023:0xf700efec [ 154.743232][ T7603] Code: Unable to access opcode bytes at 0xf700efc2. [ 154.743242][ T7603] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 154.743262][ T7603] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 154.743276][ T7603] RDX: 0000000000008000 RSI: 0000000000000103 RDI: 0000000000000000 [ 154.743288][ T7603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.743300][ T7603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.743311][ T7603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.743339][ T7603] [ 155.114218][ T7616] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 155.476600][ T7609] ceph: No mds server is up or the cluster is laggy [ 156.518094][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.697892][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 156.698752][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.699759][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.702116][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.702129][ T9] usb 5-1: Product: syz [ 156.702136][ T9] usb 5-1: Manufacturer: syz [ 156.702143][ T9] usb 5-1: SerialNumber: syz [ 156.705908][ T9] usb 5-1: config 0 descriptor?? [ 156.711041][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.711059][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 157.328014][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 157.487212][ T5818] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 157.600651][ T7645] Console: switching to colour dummy device 80x25 [ 157.649313][ T5818] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 157.663612][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.663635][ T5818] usb 7-1: Product: syz [ 157.663646][ T5818] usb 7-1: Manufacturer: syz [ 157.663659][ T5818] usb 7-1: SerialNumber: syz [ 157.678250][ T5818] usb 7-1: USB2VGA dongle found at address 8 [ 157.684044][ T5818] usb 7-1: Allocated 8 output buffers [ 157.700752][ T7644] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 157.714215][ T7644] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 157.714417][ T7644] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 157.714757][ T7644] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 157.715570][ T7644] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 157.729077][ T7644] pci 0000:00:01.0: Adding to iommu group 1 [ 157.740451][ T7644] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 157.740474][ T7644] pci 0000:00:01.0: vgaarb: bridge control possible [ 157.740488][ T7644] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 157.763132][ T7644] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 157.763404][ T7644] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 157.765282][ T7644] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 157.779519][ T7644] [drm] Found bochs VGA, ID 0xb0c5. [ 157.779534][ T7644] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 157.798758][ T7644] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 158.001247][ T7642] netlink: 'syz.2.415': attribute type 30 has an invalid length. [ 158.024672][ T7644] Console: switching to colour frame buffer device 160x50 [ 158.057838][ T7644] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 158.171834][ T5818] usb 7-1: Failed to early initialize device [ 158.181881][ T5818] usb 7-1: USB disconnect, device number 8 [ 158.200083][ T10] usb 6-1: USB disconnect, device number 12 [ 158.822379][ T7631] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 158.836962][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 158.836991][ T9] em28xx 5-1:0.0: board has no eeprom [ 158.917098][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 158.917122][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 158.917585][ T10] em28xx 5-1:0.0: Binding DVB extension [ 158.940842][ T9] usb 5-1: USB disconnect, device number 6 [ 158.955247][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 159.055509][ T10] em28xx 5-1:0.0: Registering input extension [ 159.055610][ T9] em28xx 5-1:0.0: Closing input extension [ 159.070025][ T9] em28xx: Freeing device [ 159.617135][ T3375] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 159.777634][ T3375] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 159.778584][ T3375] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 159.778610][ T3375] usb 8-1: config 1 has no interface number 0 [ 159.778640][ T3375] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 159.778660][ T3375] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 159.778682][ T3375] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.780295][ T3375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.780311][ T3375] usb 8-1: Product: syz [ 159.780319][ T3375] usb 8-1: Manufacturer: syz [ 159.780327][ T3375] usb 8-1: SerialNumber: syz [ 159.782411][ T7675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.997550][ T7675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.019770][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 160.019988][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 160.162601][ T7685] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.201796][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.211081][ T7686] Console: switching to colour dummy device 80x25 [ 160.251452][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.257569][ T3375] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 160.303807][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.317746][ T7683] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 160.326008][ T7683] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 160.326112][ T7683] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 160.326309][ T7683] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 160.326726][ T7683] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 160.334200][ T7683] pci 0000:00:01.0: Adding to iommu group 1 [ 160.338119][ T7683] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 160.338132][ T7683] pci 0000:00:01.0: vgaarb: bridge control possible [ 160.338159][ T7683] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 160.348564][ T7690] md: could not open device unknown-block(1,1). [ 160.348743][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.354411][ T7683] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 160.354600][ T7683] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 160.355684][ T7683] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 160.384556][ T7683] [drm] Found bochs VGA, ID 0xb0c5. [ 160.384568][ T7683] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 160.410550][ T7683] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 160.431953][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.432445][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.435095][ T7685] md_update_sb: can't update sb for read-only array md0 [ 160.455643][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.554827][ T6737] md_update_sb: can't update sb for read-only array md0 [ 160.579566][ T7683] Console: switching to colour frame buffer device 160x50 [ 160.612934][ T7683] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 160.650347][ T7675] random: crng reseeded on system resumption [ 160.714026][ T3375] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 160.714045][ T3375] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 160.714346][ T3375] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 160.714358][ T3375] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 160.724819][ T3375] usb 8-1: USB disconnect, device number 10 [ 160.726362][ T3375] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 160.849730][ T3375] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 161.676418][ T7717] netlink: 72 bytes leftover after parsing attributes in process `syz.0.441'. [ 161.707078][ T3375] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 161.887223][ T3375] usb 6-1: Using ep0 maxpacket: 16 [ 161.888219][ T3375] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.889302][ T3375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.891065][ T3375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.891078][ T3375] usb 6-1: Product: syz [ 161.891086][ T3375] usb 6-1: Manufacturer: syz [ 161.891094][ T3375] usb 6-1: SerialNumber: syz [ 161.892408][ T3375] usb 6-1: config 0 descriptor?? [ 161.899024][ T3375] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.899043][ T3375] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 161.937127][ T25] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 162.087826][ T25] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.088801][ T25] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.088822][ T25] usb 5-1: config 0 has no interface number 0 [ 162.088852][ T25] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 162.088875][ T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 35380, setting to 64 [ 162.090314][ T25] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 162.090333][ T25] usb 5-1: Product: syz [ 162.090345][ T25] usb 5-1: SerialNumber: syz [ 162.095176][ T25] usb 5-1: config 0 descriptor?? [ 162.095934][ T7717] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.165380][ T25] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 162.170838][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input23 [ 162.375912][ C2] cm109_urb_ctl_callback: 7 callbacks suppressed [ 162.375930][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.376180][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.376373][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.376450][ T25] usb 5-1: USB disconnect, device number 7 [ 162.376578][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.376589][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 162.416206][ T25] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 162.564070][ T3375] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 162.985702][ T3375] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.985721][ T3375] em28xx 6-1:0.0: board has no eeprom [ 163.047096][ T3375] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.047121][ T3375] em28xx 6-1:0.0: dvb set to bulk mode. [ 163.056549][ T3375] usb 6-1: USB disconnect, device number 13 [ 163.057830][ T3375] em28xx 6-1:0.0: Disconnecting em28xx [ 163.057877][ T5818] em28xx 6-1:0.0: Binding DVB extension [ 163.131170][ T5818] em28xx 6-1:0.0: Registering input extension [ 163.131661][ T3375] em28xx 6-1:0.0: Closing input extension [ 163.140963][ T3375] em28xx: Freeing device [ 164.693408][ T7739] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.748781][ T6737] md_update_sb: can't update sb for read-only array md0 [ 164.948817][ T7739] md: could not open device unknown-block(1,0). [ 164.948946][ T7748] md: could not open device unknown-block(1,1). [ 164.950679][ T6737] md_update_sb: can't update sb for read-only array md0 [ 165.031127][ T7739] md_update_sb: can't update sb for read-only array md0 [ 165.872440][ T6737] md_update_sb: 1 callbacks suppressed [ 165.872479][ T6737] md_update_sb: can't update sb for read-only array md0 [ 167.087091][ T62] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 167.257122][ T62] usb 7-1: Using ep0 maxpacket: 16 [ 167.298038][ T62] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.302271][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 167.984096][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.984113][ T62] usb 7-1: Product: syz [ 167.984153][ T62] usb 7-1: Manufacturer: syz [ 167.984161][ T62] usb 7-1: SerialNumber: syz [ 168.055045][ T62] usb 7-1: config 0 descriptor?? [ 168.056888][ T62] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.056906][ T62] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 168.401697][ T7793] random: crng reseeded on system resumption [ 168.457064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 168.630548][ T7798] netlink: 256 bytes leftover after parsing attributes in process `syz.3.454'. [ 168.631222][ T7798] comedi comedi4: bad chanlist[1]=0x00000101 chan=257 range length=2 [ 168.667699][ T5826] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.725706][ T62] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 168.820612][ T5826] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 168.825352][ T5826] usb 5-1: config 0 has no interfaces? [ 168.874551][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.874746][ T5826] usb 5-1: Product: syz [ 168.875000][ T5826] usb 5-1: Manufacturer: syz [ 168.875039][ T5826] usb 5-1: SerialNumber: syz [ 168.896662][ T5826] usb 5-1: config 0 descriptor?? [ 169.166725][ T7799] Console: switching to colour dummy device 80x25 [ 169.249306][ T62] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 169.250493][ T62] em28xx 7-1:0.0: board has no eeprom [ 169.357628][ T62] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 169.359651][ T62] em28xx 7-1:0.0: dvb set to bulk mode. [ 169.363151][ T5817] em28xx 7-1:0.0: Binding DVB extension [ 169.442050][ T62] usb 7-1: USB disconnect, device number 9 [ 169.443126][ T62] em28xx 7-1:0.0: Disconnecting em28xx [ 169.443220][ T5817] em28xx 7-1:0.0: Registering input extension [ 169.443397][ T62] em28xx 7-1:0.0: Closing input extension [ 169.449193][ T7793] hwrng_fill thread creation failed [ 169.469392][ T62] em28xx: Freeing device [ 170.890360][ T7824] veth1_vlan: entered allmulticast mode [ 171.543786][ T9] usb 5-1: USB disconnect, device number 8 [ 171.567208][ T3375] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 171.692372][ T7837] binder: 7836:7837 ioctl c00c6211 0 returned -14 [ 171.767152][ T3375] usb 7-1: Using ep0 maxpacket: 16 [ 171.791067][ T3375] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.864712][ T3375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 172.441712][ T3375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.441734][ T3375] usb 7-1: Product: syz [ 172.441741][ T3375] usb 7-1: Manufacturer: syz [ 172.441748][ T3375] usb 7-1: SerialNumber: syz [ 172.507695][ T3375] usb 7-1: config 0 descriptor?? [ 172.529528][ T3375] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 172.529547][ T3375] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 173.132275][ T3375] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 173.417346][ T5818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.542116][ T3375] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 173.542136][ T3375] em28xx 7-1:0.0: board has no eeprom [ 173.587875][ T5818] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 173.588985][ T5818] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 173.589007][ T5818] usb 5-1: config 1 has no interface number 0 [ 173.589037][ T5818] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 173.589059][ T5818] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 173.589080][ T5818] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.591742][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.591757][ T5818] usb 5-1: Product: syz [ 173.591764][ T5818] usb 5-1: Manufacturer: syz [ 173.591772][ T5818] usb 5-1: SerialNumber: syz [ 173.596059][ T7858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.634536][ T3375] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 173.634557][ T3375] em28xx 7-1:0.0: dvb set to bulk mode. [ 173.635861][ T35] em28xx 7-1:0.0: Binding DVB extension [ 173.650890][ T3375] usb 7-1: USB disconnect, device number 10 [ 173.655240][ T3375] em28xx 7-1:0.0: Disconnecting em28xx [ 173.678973][ T35] em28xx 7-1:0.0: Registering input extension [ 173.679647][ T3375] em28xx 7-1:0.0: Closing input extension [ 173.710519][ T3375] em28xx: Freeing device [ 173.823027][ T7854] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 174.067890][ T5818] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 174.113791][ T7876] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.147589][ T7878] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 174.147606][ T7878] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 174.147704][ T7878] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 174.177106][ T7880] FAULT_INJECTION: forcing a failure. [ 174.177106][ T7880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 174.177141][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.2.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.177175][ T7880] Tainted: [L]=SOFTLOCKUP [ 174.177182][ T7880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.177194][ T7880] Call Trace: [ 174.177200][ T7880] [ 174.177208][ T7880] dump_stack_lvl+0x100/0x190 [ 174.177296][ T7880] should_fail_ex.cold+0x5/0xa [ 174.177321][ T7880] get_futex_key+0x1d0/0x14f0 [ 174.177352][ T7880] ? __pfx_get_futex_key+0x10/0x10 [ 174.177378][ T7880] ? putname+0xb1/0x110 [ 174.177426][ T7880] ? kasan_save_stack+0x3f/0x50 [ 174.177446][ T7880] ? kasan_save_stack+0x30/0x50 [ 174.177465][ T7880] ? kasan_save_track+0x14/0x30 [ 174.177484][ T7880] ? kasan_save_free_info+0x3b/0x70 [ 174.177518][ T7880] futex_wake+0xf4/0x5e0 [ 174.177543][ T7880] ? __pfx_futex_wake+0x10/0x10 [ 174.177577][ T7880] do_futex+0x2b2/0x440 [ 174.177598][ T7880] ? __pfx_do_futex+0x10/0x10 [ 174.177622][ T7880] __ia32_sys_futex_time32+0x2f4/0x470 [ 174.177644][ T7880] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 174.177672][ T7880] __do_fast_syscall_32+0x13a/0x8b0 [ 174.177727][ T7880] do_fast_syscall_32+0x32/0x70 [ 174.177759][ T7880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.177782][ T7880] RIP: 0023:0xf701efec [ 174.177801][ T7880] Code: Unable to access opcode bytes at 0xf701efc2. [ 174.177809][ T7880] RSP: 002b:00000000f540d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 174.177827][ T7880] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 174.177838][ T7880] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 174.177849][ T7880] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 174.177859][ T7880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.177871][ T7880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.177895][ T7880] [ 174.235908][ T7882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.236176][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.236384][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.368091][ T7886] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.450157][ T7854] random: crng reseeded on system resumption [ 174.505847][ T5818] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 174.505871][ T5818] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 174.506318][ T5818] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 174.506444][ T5818] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 174.526249][ T5818] usb 5-1: USB disconnect, device number 9 [ 174.531512][ T5818] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 174.598663][ T5818] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 175.096264][ T7900] binder: 7899:7900 ioctl c00c6211 0 returned -14 [ 175.785379][ T7905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.819839][ T6737] md_update_sb: can't update sb for read-only array md0 [ 175.882153][ T7906] md: could not open device unknown-block(1,0). [ 175.884944][ T7906] md: could not open device unknown-block(1,1). [ 175.885088][ T6737] md_update_sb: can't update sb for read-only array md0 [ 175.997235][ T7905] md_update_sb: can't update sb for read-only array md0 [ 175.997340][ T6737] md_update_sb: can't update sb for read-only array md0 [ 176.043570][ T6737] md_update_sb: can't update sb for read-only array md0 [ 176.187149][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.197396][ T7915] FAULT_INJECTION: forcing a failure. [ 176.197396][ T7915] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.197430][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.1.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.197456][ T7915] Tainted: [L]=SOFTLOCKUP [ 176.197465][ T7915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.197476][ T7915] Call Trace: [ 176.197482][ T7915] [ 176.197490][ T7915] dump_stack_lvl+0x100/0x190 [ 176.197520][ T7915] should_fail_ex.cold+0x5/0xa [ 176.197545][ T7915] get_futex_key+0x1d0/0x14f0 [ 176.197576][ T7915] ? __pfx_get_futex_key+0x10/0x10 [ 176.197612][ T7915] futex_wait_setup+0x91/0x540 [ 176.197639][ T7915] __futex_wait+0x19f/0x300 [ 176.197662][ T7915] ? __pfx___futex_wait+0x10/0x10 [ 176.197684][ T7915] ? __pfx_try_to_wake_up+0x10/0x10 [ 176.197711][ T7915] ? futex_hash+0x311/0x400 [ 176.197739][ T7915] ? __pfx_futex_wake_mark+0x10/0x10 [ 176.197766][ T7915] ? find_held_lock+0x2b/0x80 [ 176.197785][ T7915] ? futex_wake+0x4ea/0x5e0 [ 176.197813][ T7915] futex_wait+0xe6/0x370 [ 176.197835][ T7915] ? __pfx_futex_wait+0x10/0x10 [ 176.197870][ T7915] do_futex+0x265/0x440 [ 176.197889][ T7915] ? __pfx_do_futex+0x10/0x10 [ 176.197914][ T7915] __ia32_sys_futex_time32+0x2f4/0x470 [ 176.197939][ T7915] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 176.197969][ T7915] __do_fast_syscall_32+0x13a/0x8b0 [ 176.198003][ T7915] do_fast_syscall_32+0x32/0x70 [ 176.198032][ T7915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.198085][ T7915] RIP: 0023:0xf7f47fec [ 176.198106][ T7915] Code: Unable to access opcode bytes at 0xf7f47fc2. [ 176.198115][ T7915] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 176.198133][ T7915] RAX: ffffffffffffffda RBX: 00000000f7404f88 RCX: 0000000000000080 [ 176.198153][ T7915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 176.198165][ T7915] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 176.198177][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.198188][ T7915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.198214][ T7915] [ 176.347112][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 176.347844][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.348847][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.350506][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.350518][ T9] usb 5-1: Product: syz [ 176.350525][ T9] usb 5-1: Manufacturer: syz [ 176.350532][ T9] usb 5-1: SerialNumber: syz [ 176.351735][ T9] usb 5-1: config 0 descriptor?? [ 176.355580][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.355597][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 177.093842][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 177.492392][ T7940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.590811][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 178.590846][ T9] em28xx 5-1:0.0: board has no eeprom [ 178.630172][ T7909] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 178.807139][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 178.807157][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 178.807613][ T1816] em28xx 5-1:0.0: Binding DVB extension [ 178.814819][ T9] usb 5-1: USB disconnect, device number 10 [ 178.815581][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 178.836511][ T1816] em28xx 5-1:0.0: Registering input extension [ 178.836680][ T9] em28xx 5-1:0.0: Closing input extension [ 178.854543][ T9] em28xx: Freeing device [ 179.881875][ T7976] FAULT_INJECTION: forcing a failure. [ 179.881875][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 179.881898][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.3.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.881913][ T7976] Tainted: [L]=SOFTLOCKUP [ 179.881917][ T7976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.881925][ T7976] Call Trace: [ 179.881929][ T7976] [ 179.881934][ T7976] dump_stack_lvl+0x100/0x190 [ 179.881955][ T7976] should_fail_ex.cold+0x5/0xa [ 179.881969][ T7976] should_failslab+0xc2/0x120 [ 179.881986][ T7976] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 179.881999][ T7976] ? __d_alloc+0x35/0xa50 [ 179.882017][ T7976] __d_alloc+0x35/0xa50 [ 179.882032][ T7976] d_alloc+0x4a/0x1e0 [ 179.882068][ T7976] lookup_one_qstr_excl+0x171/0x250 [ 179.882087][ T7976] ? mnt_want_write+0x164/0x420 [ 179.882099][ T7976] filename_create+0x1cf/0x400 [ 179.882111][ T7976] ? __pfx_filename_create+0x10/0x10 [ 179.882126][ T7976] ? __might_fault+0xc5/0x140 [ 179.882145][ T7976] filename_mknodat+0x190/0x7f0 [ 179.882162][ T7976] ? __pfx_filename_mknodat+0x10/0x10 [ 179.882176][ T7976] ? strncpy_from_user+0x19d/0x2d0 [ 179.882192][ T7976] ? do_getname+0x191/0x390 [ 179.882209][ T7976] __ia32_sys_mknodat+0xb4/0xf0 [ 179.882223][ T7976] __do_fast_syscall_32+0x13a/0x8b0 [ 179.882242][ T7976] do_fast_syscall_32+0x32/0x70 [ 179.882258][ T7976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.882273][ T7976] RIP: 0023:0xf700efec [ 179.882285][ T7976] Code: Unable to access opcode bytes at 0xf700efc2. [ 179.882290][ T7976] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 179.882301][ T7976] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 179.882307][ T7976] RDX: 0000000000008000 RSI: 0000000000000103 RDI: 0000000000000000 [ 179.882314][ T7976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.882320][ T7976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.882326][ T7976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.882339][ T7976] [ 179.942198][ T7980] binder: 7979:7980 ioctl c00c6211 0 returned -14 [ 179.980025][ T7982] jffs2: notice: (7982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 180.235741][ T8000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.500'. [ 180.641037][ T8004] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 180.651258][ T8004] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 180.652566][ T8004] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 180.653218][ T8004] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 180.655273][ T8004] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 180.700841][ T8004] pci 0000:00:01.0: Adding to iommu group 1 [ 180.728827][ T8004] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 180.728844][ T8004] pci 0000:00:01.0: vgaarb: bridge control possible [ 180.728852][ T8004] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 180.746206][ T8004] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 180.746890][ T8004] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 180.757731][ T8004] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 180.816756][ T8004] [drm] Found bochs VGA, ID 0xb0c5. [ 180.816797][ T8004] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 181.448881][ T8004] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 181.861127][ T8004] Console: switching to colour frame buffer device 160x50 [ 182.090925][ T8004] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 183.276315][ T8019] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 183.276347][ T8019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.473780][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 184.562794][ T8038] Console: switching to colour dummy device 80x25 [ 185.006003][ T8026] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 185.024193][ T8026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 185.024340][ T8026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 185.024590][ T8026] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 185.025817][ T8026] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 185.036763][ T8026] pci 0000:00:01.0: Adding to iommu group 1 [ 185.047022][ T8026] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 185.047038][ T8026] pci 0000:00:01.0: vgaarb: bridge control possible [ 185.047046][ T8026] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 185.069372][ T8026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 185.069633][ T8026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 185.071500][ T8026] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 185.106600][ T8026] [drm] Found bochs VGA, ID 0xb0c5. [ 185.106617][ T8026] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 185.131655][ T8026] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 185.341804][ T8026] Console: switching to colour frame buffer device 160x50 [ 185.375815][ T8026] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 187.553636][ T8057] FAULT_INJECTION: forcing a failure. [ 187.553636][ T8057] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.553670][ T8057] CPU: 3 UID: 0 PID: 8057 Comm: syz.2.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.553697][ T8057] Tainted: [L]=SOFTLOCKUP [ 187.553705][ T8057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.553716][ T8057] Call Trace: [ 187.553759][ T8057] [ 187.553767][ T8057] dump_stack_lvl+0x100/0x190 [ 187.553842][ T8057] should_fail_ex.cold+0x5/0xa [ 187.553868][ T8057] get_futex_key+0x1d0/0x14f0 [ 187.553897][ T8057] ? __pfx_get_futex_key+0x10/0x10 [ 187.553929][ T8057] futex_wait_setup+0x91/0x540 [ 187.553954][ T8057] __futex_wait+0x19f/0x300 [ 187.553977][ T8057] ? __pfx___futex_wait+0x10/0x10 [ 187.553996][ T8057] ? __pfx_try_to_wake_up+0x10/0x10 [ 187.554044][ T8057] ? futex_hash+0x311/0x400 [ 187.554070][ T8057] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.554103][ T8057] ? find_held_lock+0x2b/0x80 [ 187.554124][ T8057] ? futex_wake+0x4ea/0x5e0 [ 187.554151][ T8057] futex_wait+0xe6/0x370 [ 187.554173][ T8057] ? __pfx_futex_wait+0x10/0x10 [ 187.554207][ T8057] do_futex+0x265/0x440 [ 187.554225][ T8057] ? __pfx_do_futex+0x10/0x10 [ 187.554248][ T8057] __ia32_sys_futex_time32+0x2f4/0x470 [ 187.554272][ T8057] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 187.554300][ T8057] __do_fast_syscall_32+0x13a/0x8b0 [ 187.554360][ T8057] do_fast_syscall_32+0x32/0x70 [ 187.554388][ T8057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.554410][ T8057] RIP: 0023:0xf701efec [ 187.554429][ T8057] Code: Unable to access opcode bytes at 0xf701efc2. [ 187.554461][ T8057] RSP: 002b:00000000f540d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 187.554481][ T8057] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 187.554491][ T8057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 187.554502][ T8057] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 187.554513][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.554524][ T8057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.554547][ T8057] [ 188.557230][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 188.717281][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 188.720198][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 188.721508][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.721542][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.723418][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.723437][ T9] usb 7-1: Product: syz [ 188.723450][ T9] usb 7-1: Manufacturer: syz [ 188.723462][ T9] usb 7-1: SerialNumber: syz [ 188.757420][ T9] usb 7-1: config 0 descriptor?? [ 188.778931][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.779272][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.779604][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.779939][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.781166][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.781462][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.781746][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.781997][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.782283][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.782547][ T8078] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.879860][ T8084] netlink: 44 bytes leftover after parsing attributes in process `syz.3.508'. [ 189.044132][ T8087] [ 189.045211][ T8087] ====================================================== [ 189.048149][ T8087] WARNING: possible circular locking dependency detected [ 189.051123][ T8087] syzkaller #0 Tainted: G L [ 189.053767][ T8087] ------------------------------------------------------ [ 189.056641][ T8087] syz.0.511/8087 is trying to acquire lock: [ 189.059085][ T8087] ffff888021781d40 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 189.063289][ T8087] [ 189.063289][ T8087] but task is already holding lock: [ 189.066345][ T8087] ffffffff8f9bb760 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 189.070175][ T8087] [ 189.070175][ T8087] which lock already depends on the new lock. [ 189.070175][ T8087] [ 189.074416][ T8087] [ 189.074416][ T8087] the existing dependency chain (in reverse order) is: [ 189.078120][ T8087] [ 189.078120][ T8087] -> #3 (major_names_lock){+.+.}-{4:4}: [ 189.081304][ T8087] lock_acquire+0x1d1/0x380 [ 189.083527][ T8087] __mutex_lock+0x1a4/0x1bd0 [ 189.085694][ T8087] blk_probe_dev+0x28/0x1e0 [ 189.087855][ T8087] blk_request_module+0x16/0xc0 [ 189.090144][ T8087] blkdev_get_no_open+0x9b/0xf0 [ 189.092424][ T8087] bdev_file_open_by_dev+0x70/0x210 [ 189.094909][ T8087] md_import_device+0x120/0x360 [ 189.097254][ T8087] md_add_new_disk+0xdbf/0x1820 [ 189.099503][ T8087] md_ioctl+0x2bec/0x36d0 [ 189.101723][ T8087] compat_blkdev_ioctl+0x682/0x7b0 [ 189.104241][ T8087] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 189.106894][ T8087] __do_fast_syscall_32+0x13a/0x8b0 [ 189.109292][ T8087] do_fast_syscall_32+0x32/0x70 [ 189.111556][ T8087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.114404][ T8087] [ 189.114404][ T8087] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 189.117729][ T8087] lock_acquire+0x1d1/0x380 [ 189.119861][ T8087] __mutex_lock+0x1a4/0x1bd0 [ 189.122054][ T8087] md_start_sync+0x55f/0xea0 [ 189.124251][ T8087] process_one_work+0xac7/0x1b10 [ 189.126646][ T8087] worker_thread+0x5ef/0xe50 [ 189.128860][ T8087] kthread+0x373/0x450 [ 189.130853][ T8087] ret_from_fork+0x730/0xd60 [ 189.132995][ T8087] ret_from_fork_asm+0x1a/0x30 [ 189.135168][ T8087] [ 189.135168][ T8087] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 189.139047][ T8087] lock_acquire+0x1d1/0x380 [ 189.141160][ T8087] process_one_work+0xa32/0x1b10 [ 189.143728][ T8087] worker_thread+0x5ef/0xe50 [ 189.146570][ T8087] kthread+0x373/0x450 [ 189.148707][ T8087] ret_from_fork+0x730/0xd60 [ 189.151136][ T8087] ret_from_fork_asm+0x1a/0x30 [ 189.153320][ T8087] [ 189.153320][ T8087] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 189.156776][ T8087] check_prev_add+0xeb/0xe60 [ 189.159027][ T8087] __lock_acquire+0x1528/0x1f40 [ 189.161345][ T8087] lock_acquire+0x1d1/0x380 [ 189.163990][ T8087] touch_wq_lockdep_map+0xad/0x1c0 [ 189.166570][ T8087] __flush_workqueue+0x131/0x1200 [ 189.169094][ T8087] md_alloc+0x30/0x10a0 [ 189.171214][ T8087] md_probe+0x73/0xf0 [ 189.173095][ T8087] blk_probe_dev+0x149/0x1e0 [ 189.175176][ T8087] blk_request_module+0x16/0xc0 [ 189.177258][ T8087] blkdev_get_no_open+0x9b/0xf0 [ 189.179495][ T8087] bdev_file_open_by_dev+0x70/0x210 [ 189.181814][ T8087] swsusp_check+0x72/0x470 [ 189.183875][ T8087] software_resume+0x6f/0x330 [ 189.186099][ T8087] resume_store+0x248/0x460 [ 189.188247][ T8087] kobj_attr_store+0x58/0x80 [ 189.190469][ T8087] sysfs_kf_write+0xf2/0x150 [ 189.192661][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 189.195111][ T8087] vfs_write+0x6af/0x1050 [ 189.197276][ T8087] ksys_write+0x12a/0x250 [ 189.199492][ T8087] __do_fast_syscall_32+0x13a/0x8b0 [ 189.201876][ T8087] do_fast_syscall_32+0x32/0x70 [ 189.204339][ T8087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.207534][ T8087] [ 189.207534][ T8087] other info that might help us debug this: [ 189.207534][ T8087] [ 189.211807][ T8087] Chain exists of: [ 189.211807][ T8087] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 189.211807][ T8087] [ 189.217730][ T8087] Possible unsafe locking scenario: [ 189.217730][ T8087] [ 189.220836][ T8087] CPU0 CPU1 [ 189.223069][ T8087] ---- ---- [ 189.225360][ T8087] lock(major_names_lock); [ 189.227331][ T8087] lock(&mddev->reconfig_mutex); [ 189.230434][ T8087] lock(major_names_lock); [ 189.233297][ T8087] lock((wq_completion)md_misc); [ 189.235428][ T8087] [ 189.235428][ T8087] *** DEADLOCK *** [ 189.235428][ T8087] [ 189.238857][ T8087] locks held by syz.0.511/8087: 6, last CPU#0: [ 189.241756][ T8087] #0: ffff888024e76630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 189.246084][ T8087] #1: ffff888027372460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 189.250151][ T8087] #2: ffff88802ae72c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 189.254433][ T8087] #3: ffff88801d79b5a8 (kn->active#82){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 189.258587][ T8087] #4: ffffffff8eca2640 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 189.262909][ T8087] #5: ffffffff8f9bb760 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 189.267402][ T8087] [ 189.267402][ T8087] stack backtrace: [ 189.270197][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.0.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.274926][ T8087] Tainted: [L]=SOFTLOCKUP [ 189.276702][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.281037][ T8087] Call Trace: [ 189.282500][ T8087] [ 189.283787][ T8087] dump_stack_lvl+0x100/0x190 [ 189.285804][ T8087] print_circular_bug.cold+0x178/0x1be [ 189.288496][ T8087] check_noncircular+0x146/0x160 [ 189.290925][ T8087] check_prev_add+0xeb/0xe60 [ 189.292955][ T8087] __lock_acquire+0x1528/0x1f40 [ 189.295039][ T8087] lock_acquire+0x1d1/0x380 [ 189.297015][ T8087] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 189.299355][ T8087] ? lockdep_init_map_type+0x5c/0x250 [ 189.301826][ T8087] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 189.304636][ T8087] touch_wq_lockdep_map+0xad/0x1c0 [ 189.307235][ T8087] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 189.309694][ T8087] __flush_workqueue+0x131/0x1200 [ 189.311842][ T8087] ? __pfx___schedule+0x10/0x10 [ 189.313907][ T8087] ? __pfx___flush_workqueue+0x10/0x10 [ 189.316170][ T8087] md_alloc+0x30/0x10a0 [ 189.317936][ T8087] md_probe+0x73/0xf0 [ 189.319673][ T8087] ? __pfx_md_probe+0x10/0x10 [ 189.321897][ T8087] blk_probe_dev+0x149/0x1e0 [ 189.324035][ T8087] blk_request_module+0x16/0xc0 [ 189.326224][ T8087] blkdev_get_no_open+0x9b/0xf0 [ 189.328328][ T8087] bdev_file_open_by_dev+0x70/0x210 [ 189.330526][ T8087] swsusp_check+0x72/0x470 [ 189.332396][ T8087] software_resume+0x6f/0x330 [ 189.334368][ T8087] resume_store+0x248/0x460 [ 189.336309][ T8087] ? __pfx_resume_store+0x10/0x10 [ 189.338515][ T8087] ? find_held_lock+0x2b/0x80 [ 189.340578][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 189.343088][ T8087] ? sysfs_file_kobj+0xe4/0x290 [ 189.345487][ T8087] ? __pfx_resume_store+0x10/0x10 [ 189.347806][ T8087] kobj_attr_store+0x58/0x80 [ 189.349752][ T8087] ? __pfx_kobj_attr_store+0x10/0x10 [ 189.351934][ T8087] sysfs_kf_write+0xf2/0x150 [ 189.353862][ T8087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 189.356050][ T8087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 189.358225][ T8087] vfs_write+0x6af/0x1050 [ 189.360092][ T8087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 189.362854][ T8087] ? __pfx_vfs_write+0x10/0x10 [ 189.365027][ T8087] ? find_held_lock+0x2b/0x80 [ 189.367084][ T8087] ksys_write+0x12a/0x250 [ 189.368952][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 189.371018][ T8087] __do_fast_syscall_32+0x13a/0x8b0 [ 189.373176][ T8087] do_fast_syscall_32+0x32/0x70 [ 189.375195][ T8087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.377859][ T8087] RIP: 0023:0xf709efec [ 189.379634][ T8087] Code: Unable to access opcode bytes at 0xf709efc2. [ 189.382492][ T8087] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 189.386489][ T8087] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000180 [ 189.390265][ T8087] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.393654][ T8087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.396979][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.400233][ T8087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.403571][ T8087] [ 189.412252][ T8088] ubi0: attaching mtd0 [ 189.417501][ T8088] ubi0: scanning is finished [ 189.417563][ T8088] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 189.500641][ T8087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.500660][ T8087] PM: Image not found (code -6) [ 189.583810][ T9] usb 7-1: USB disconnect, device number 11 [ 189.817897][ T8088] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 193.778177][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778203][ T1437] ieee802154 phy1 wpan1: encryption failed: -22