last executing test programs: 11.024379207s ago: executing program 1 (id=3257): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x5, r2, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) socket$alg(0x26, 0x5, 0x0) 11.024091398s ago: executing program 2 (id=3258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}}) r8 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r8, 0x1, 0x8, 0x0) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000200)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096) ptrace$setregset(0x4205, r9, 0x202, &(0x7f00000001c0)={0x0}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 9.79528786s ago: executing program 2 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) 9.794908714s ago: executing program 1 (id=3262): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/102], 0x8c) socket$packet(0x11, 0x3, 0x300) 8.931684709s ago: executing program 2 (id=3266): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xe35, 0x40040) ioctl$EVIOCGABS20(r5, 0x80184560, 0x0) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getpeername$l2tp6(r6, 0x0, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 8.634709652s ago: executing program 1 (id=3267): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 5.802174445s ago: executing program 1 (id=3268): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000edffffffffffffff050000007311e00000000000185b00000c00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0643381c90c95f0c932b639be58f07d71c53dfa482d502947b05d647b336402235c36606b1d6c3e926a7af5b2df0f933a69e6ca643839462b4d85238dea8d80df89a21476f5ebed60ef0c4bd12d1eed6efe136a127314b2b8b218ce4f92784b5a4ac17c04bd12cc2c372e4a2f603528a9860e256063943e0a0f26e62c5b039458eda605e553f45ecb12b55ee67e6aced27f89c57c4373203425d4fdb1c301a9a2dc223c59ce03fd9f691574319b062b38cb651b9ea9ca044f9d8a8aaaefc6df744bbf687aa60cdcb856373f066b0089fff95baf57400", @ANYBLOB="010528bf7000fcdbdf251200000018000180140002006272696467655f736c6176655f30000008000700080000000800090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.8002704s ago: executing program 0 (id=3276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) 5.767852954s ago: executing program 3 (id=3269): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) 4.981998822s ago: executing program 2 (id=3270): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='ramfs\x00', 0x2080, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_usb_connect(0x6, 0x55, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) 4.86938792s ago: executing program 1 (id=3271): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000000)=0xe4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa0002014}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) 4.857174033s ago: executing program 0 (id=3272): syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073b57a31000000078008c9f54000200005080013400000000e0500050002000000050004000100000011"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000140)={r1, 0x0, 0x10000, 0x0, 0x33, &(0x7f0000000080), 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000180)) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000200)={0x9, 0x1, 0x1, 0x8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r6, 0xffffffffffffffff, 0x0) 4.744518076s ago: executing program 3 (id=3273): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x2c, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/102], 0x8c) socket$packet(0x11, 0x3, 0x300) 3.99977763s ago: executing program 0 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) 3.528419919s ago: executing program 3 (id=3275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/102], 0x8c) socket$packet(0x11, 0x3, 0x300) 2.993966254s ago: executing program 0 (id=3277): landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x6, 0x2, 0x0, 0x4}, 0x30, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xef5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x2) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x30, 0x61, 0x3f, 0xfffff004}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.435766747s ago: executing program 1 (id=3278): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='ramfs\x00', 0x2080, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_usb_connect(0x6, 0x55, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) 2.387056539s ago: executing program 3 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xe, 0x0, 0xc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000600000000000070a11173857249d8881937ecfbd3cde5a9810000009500ff01"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x668080) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r6 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x38}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x1, 0x41) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES64=r8, @ANYRES32=r8, @ANYRESDEC, @ANYRES64, @ANYRES64=r6, @ANYRES8=r1], 0xfffffdcf) 1.644515664s ago: executing program 0 (id=3280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000080)="dd1cb1cb69ca6af2a9e9cf52f05ff7964a8c89c34eca57833ad7fd7176d0e19244fedcd882afec02e8c26de4d35b636d4f6a1dfebf4dee85a24bec37e4498a05992dfccc0bc81ebf3d5f893a283257382f301f66eec8a87bb92a1f") socket(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b0001"], 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24044014) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000180)=0x9, 0x2) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket(0x10, 0x803, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r10, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) write$dsp(r10, &(0x7f0000001080)="d50f655e18834d868e449c809ca96110756c457cef960e1d7fda280d12ecd2fcca4b7a0ca127fced6d2cbb6c2b643627da5a6f7f7b7d2397a52a705cbe19282ffbb9c2f130050981633abed348fb00d603044bd539c7480711c454555d18e20b6908951c55d9d104712ec0b08902dee7ec80d5e725879a45fb6561d81313cd39b113fd010abc89172e39bc49e52d244e510c65a71bd78c178d4ed17f7acb94e1abe09592e3dac91a37b2b3c0ab0bd9f883836ffda9e9e22f0bb3e96effcf51b27df3f0d523a8fe83b11eca6897d01930c96cb2494d60", 0xd6) close_range(r9, 0xffffffffffffffff, 0x0) 1.321859633s ago: executing program 3 (id=3281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) 1.170926207s ago: executing program 2 (id=3282): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000edffffffffffffff050000007311e00000000000185b00000c00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0643381c90c95f0c932b639be58f07d71c53dfa482d502947b05d647b336402235c36606b1d6c3e926a7af5b2df0f933a69e6ca643839462b4d85238dea8d80df89a21476f5ebed60ef0c4bd12d1eed6efe136a127314b2b8b218ce4f92784b5a4ac17c04bd12cc2c372e4a2f603528a9860e256063943e0a0f26e62c5b039458eda605e553f45ecb12b55ee67e6aced27f89c57c4373203425d4fdb1c301a9a2dc223c59ce03fd9f691574319b062b38cb651b9ea9ca044f9d8a8aaaefc6df744bbf687aa60cdcb856373f066b0089fff95baf57400", @ANYBLOB="010528bf7000fcdbdf251200000018000180140002006272696467655f736c6176655f30000008000700080000000800090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 286.214917ms ago: executing program 0 (id=3283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) r5 = syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r5, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) 285.858383ms ago: executing program 3 (id=3284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x2c, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/102], 0x8c) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 2 (id=3285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) kernel console output (not intermixed with test programs): s2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1027.053405][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4b15 instead [ 1027.053802][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0438 instead [ 1027.054000][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1027.054493][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1027.054542][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4b15 instead [ 1027.054592][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0438 instead [ 1027.054818][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1027.054866][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1027.054915][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4b15 instead [ 1027.055099][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0438 instead [ 1027.055291][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1027.055343][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1027.055392][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4b15 instead [ 1027.055443][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0438 instead [ 1027.055583][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1027.055631][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1027.055680][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4b15 instead [ 1027.055856][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0438 instead [ 1027.056067][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1027.056120][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1027.056170][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4b15 instead [ 1027.056314][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0438 instead [ 1027.056435][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1027.056652][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1027.056702][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4b15 instead [ 1027.057114][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0438 instead [ 1027.057198][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1027.057341][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1027.057444][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4b15 instead [ 1027.057547][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0438 instead [ 1027.057739][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1027.057790][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1027.057839][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4b15 instead [ 1027.057889][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0438 instead [ 1027.058193][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1027.058322][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1027.058427][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4b15 instead [ 1027.058530][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0438 instead [ 1027.058756][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1027.058806][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1027.058897][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4b15 instead [ 1027.058950][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0438 instead [ 1027.059152][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1027.059254][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1027.059306][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4b15 instead [ 1027.059357][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0438 instead [ 1027.059525][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1027.059623][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1027.059824][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4b15 instead [ 1027.059914][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0438 instead [ 1027.060827][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1027.061011][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1027.061064][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4b15 instead [ 1027.061301][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0438 instead [ 1027.061891][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1027.061968][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1027.062020][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4b15 instead [ 1027.062073][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0438 instead [ 1027.062433][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1027.063444][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1027.063554][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4b15 instead [ 1027.063731][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0438 instead [ 1027.064137][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1027.064233][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1027.064292][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4b15 instead [ 1027.064559][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0438 instead [ 1027.065572][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1027.065630][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1027.065689][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4b15 instead [ 1027.066081][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0438 instead [ 1027.066350][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1027.066407][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1027.066464][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4b15 instead [ 1027.066522][T16528] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0438 instead [ 1027.066796][T16528] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1027.066951][T16528] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1029.724774][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.145406][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 1033.145428][ T43] audit: type=1326 audit(1790979708.534:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145474][ T43] audit: type=1326 audit(1790979708.544:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145512][ T43] audit: type=1326 audit(1790979708.544:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145595][ T43] audit: type=1326 audit(1790979708.544:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145631][ T43] audit: type=1326 audit(1790979708.544:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145666][ T43] audit: type=1326 audit(1790979708.544:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145703][ T43] audit: type=1326 audit(1790979708.544:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145739][ T43] audit: type=1326 audit(1790979708.544:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145775][ T43] audit: type=1326 audit(1790979708.544:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1033.145812][ T43] audit: type=1326 audit(1790979708.544:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16572 comm="syz.1.2735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 1034.693950][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1034.693978][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1034.693996][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4b15 instead [ 1034.694016][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0438 instead [ 1034.694034][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1034.694050][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1034.694067][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1034.694086][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1034.694116][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1034.694146][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1034.694162][T16589] jffs2: Further such events for this erase block will not be printed [ 1034.695228][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1034.695273][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1034.695292][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4b15 instead [ 1034.695377][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0438 instead [ 1034.695427][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1034.695576][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1034.695702][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1034.695724][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1034.695980][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1034.696062][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1034.696080][T16589] jffs2: Further such events for this erase block will not be printed [ 1034.696973][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1034.697022][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1034.697071][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4b15 instead [ 1034.697122][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0438 instead [ 1034.697257][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1034.697383][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1034.697433][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4b15 instead [ 1034.697484][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0438 instead [ 1034.697700][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1034.697780][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1034.697831][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4b15 instead [ 1034.697882][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0438 instead [ 1034.697965][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1034.698094][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1034.698143][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4b15 instead [ 1034.698193][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0438 instead [ 1034.698362][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1034.698411][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1034.698460][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4b15 instead [ 1034.698550][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0438 instead [ 1034.698652][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1034.698730][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1034.698780][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4b15 instead [ 1034.698834][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0438 instead [ 1034.698883][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1034.698961][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1034.699031][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4b15 instead [ 1034.699082][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0438 instead [ 1034.699210][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1034.699257][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1034.699277][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4b15 instead [ 1034.699295][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0438 instead [ 1034.699466][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1034.699484][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1034.699595][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4b15 instead [ 1034.699619][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0438 instead [ 1034.700596][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1034.700656][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1034.700699][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4b15 instead [ 1034.700721][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0438 instead [ 1034.700997][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1034.701040][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1034.701060][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4b15 instead [ 1034.701195][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0438 instead [ 1034.701276][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1034.701314][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1034.701422][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4b15 instead [ 1034.701435][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0438 instead [ 1034.701526][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1034.701538][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1034.701576][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4b15 instead [ 1034.701590][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0438 instead [ 1034.701649][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1034.701692][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1034.701742][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4b15 instead [ 1034.701795][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0438 instead [ 1034.701944][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1034.701964][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1034.702017][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4b15 instead [ 1034.702071][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0438 instead [ 1034.714817][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1034.714861][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1034.714873][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4b15 instead [ 1034.718628][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0438 instead [ 1034.718776][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1034.718827][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1034.718877][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4b15 instead [ 1034.718926][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0438 instead [ 1034.734055][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1034.734098][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1034.738133][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4b15 instead [ 1034.738200][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0438 instead [ 1034.743473][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1034.743639][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1034.743686][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4b15 instead [ 1034.743980][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0438 instead [ 1034.916115][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1034.916129][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1034.916141][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4b15 instead [ 1034.916152][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0438 instead [ 1034.916182][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1034.916192][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1034.916202][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4b15 instead [ 1034.916212][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0438 instead [ 1034.916237][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1034.916247][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1034.916257][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4b15 instead [ 1034.916269][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0438 instead [ 1034.916293][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1034.916303][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1034.916313][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4b15 instead [ 1034.916324][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0438 instead [ 1034.916350][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1034.916359][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1034.916368][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4b15 instead [ 1034.916378][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0438 instead [ 1034.916402][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1034.916430][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1034.916447][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4b15 instead [ 1034.916464][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0438 instead [ 1034.916497][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1034.916506][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1034.916516][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4b15 instead [ 1034.916526][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0438 instead [ 1034.916550][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1034.916559][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1034.916569][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4b15 instead [ 1034.916579][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0438 instead [ 1034.916602][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1034.916611][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1034.916621][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4b15 instead [ 1034.916631][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0438 instead [ 1034.916655][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1034.916664][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1034.916674][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4b15 instead [ 1034.916684][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0438 instead [ 1034.916708][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1034.916717][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1034.916726][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4b15 instead [ 1034.916736][T16589] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0438 instead [ 1034.916755][T16589] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1034.916761][T16589] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1036.184304][T16596] syzkaller1: entered promiscuous mode [ 1036.184319][T16596] syzkaller1: entered allmulticast mode [ 1037.844523][T16611] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1040.286029][T16637] MINIX-fs: unable to read superblock [ 1040.595639][T16642] gadgetfs: bound to dummy_udc driver [ 1041.052509][ T30] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1041.052734][ C1] gadgetfs: connected [ 1041.055630][ T30] gadgetfs: disconnected [ 1041.214142][ C1] gadgetfs: connected [ 1041.215064][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1041.215346][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1041.215377][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.216588][T16642] gadgetfs: suspended from state 3 [ 1041.234650][ T30] usb 5-1: can't set config #1, error -71 [ 1041.236002][ T30] usb 5-1: USB disconnect, device number 20 [ 1041.240094][T16642] gadgetfs: disconnected [ 1042.393762][T16658] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1043.314033][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.200889][T16691] retu-mfd 0-0001: could not read Retu revision: -6 [ 1045.206450][T16691] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1046.058124][T16700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1049.780254][T16732] 9pnet_virtio: no channels available for device syz [ 1051.784304][T16754] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1052.068122][T16756] syzkaller1: entered promiscuous mode [ 1052.068140][T16756] syzkaller1: entered allmulticast mode [ 1054.123980][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.124033][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.051855][T16840] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1063.556604][T16860] IPVS: ip_vs_add_dest(): server weight less than zero [ 1063.623477][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 1063.623518][ T43] audit: type=1326 audit(1790979738.976:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.623628][ T43] audit: type=1326 audit(1790979738.976:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.623858][ T43] audit: type=1326 audit(1790979738.976:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 1063.624083][ T43] audit: type=1326 audit(1790979738.976:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.624477][ T43] audit: type=1326 audit(1790979738.976:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.624613][ T43] audit: type=1326 audit(1790979738.976:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.624772][ T43] audit: type=1326 audit(1790979738.976:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.624907][ T43] audit: type=1326 audit(1790979738.976:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.624971][ T43] audit: type=1326 audit(1790979738.976:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1063.625102][ T43] audit: type=1326 audit(1790979738.986:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.0.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1066.658894][T16883] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1067.933440][T16466] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1068.407035][T16774] syz.2.2780 (16774) used greatest stack depth: 17240 bytes left [ 1068.481256][T16466] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1068.482222][T16466] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1068.482237][T16466] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1068.482247][T16466] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1068.482268][T16466] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1068.482282][T16466] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1068.483899][T16466] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1068.483912][T16466] usb 6-1: Product: syz [ 1068.483920][T16466] usb 6-1: Manufacturer: syz [ 1068.486656][T16466] cdc_wdm 6-1:1.0: skipping garbage [ 1068.486666][T16466] cdc_wdm 6-1:1.0: skipping garbage [ 1068.614215][T16466] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1068.614239][T16466] cdc_wdm 6-1:1.0: Unknown control protocol [ 1069.322883][T16896] xt_CT: No such helper "pptp" [ 1069.469792][T16903] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1069.470411][T16903] CPU: 1 UID: 0 PID: 16903 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(full) [ 1069.470428][T16903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1069.470437][T16903] Call Trace: [ 1069.470442][T16903] [ 1069.470448][T16903] dump_stack_lvl+0x100/0x190 [ 1069.470483][T16903] sysfs_warn_dup.cold+0x1c/0x28 [ 1069.470502][T16903] sysfs_create_dir_ns+0x24b/0x2b0 [ 1069.470520][T16903] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1069.470535][T16903] ? find_held_lock+0x2b/0x80 [ 1069.470548][T16903] ? kobject_add_internal+0x25f/0x930 [ 1069.470567][T16903] ? kobject_add_internal+0x25f/0x930 [ 1069.470586][T16903] ? class_dir_child_ns_type+0xd/0x60 [ 1069.470600][T16903] kobject_add_internal+0x2c8/0x930 [ 1069.470619][T16903] kobject_add+0x16a/0x1e0 [ 1069.470637][T16903] ? __pfx_kobject_add+0x10/0x10 [ 1069.470656][T16903] ? preempt_schedule_thunk+0x16/0x40 [ 1069.470672][T16903] ? kobject_put+0xb9/0x640 [ 1069.470691][T16903] device_add+0x294/0x1970 [ 1069.470704][T16903] ? lockdep_init_map_type+0x5c/0x250 [ 1069.470723][T16903] ? __pfx_device_add+0x10/0x10 [ 1069.470735][T16903] ? lockdep_init_map_type+0x5c/0x250 [ 1069.470753][T16903] ? __init_waitqueue_head+0xca/0x150 [ 1069.470768][T16903] tty_register_device_attr+0x388/0x7f0 [ 1069.470787][T16903] ? lockdep_init_map_type+0x5c/0x250 [ 1069.470804][T16903] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1069.470826][T16903] ? tty_port_init+0x156/0x1c0 [ 1069.470845][T16903] gsm_activate_mux+0x155/0x2a0 [ 1069.470865][T16903] gsmld_ioctl+0xbbc/0x15c0 [ 1069.470881][T16903] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1069.470904][T16903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1069.470926][T16903] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1069.470938][T16903] tty_compat_ioctl+0x396/0x420 [ 1069.470955][T16903] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1069.470980][T16903] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1069.470997][T16903] __do_fast_syscall_32+0x13a/0x8b0 [ 1069.471015][T16903] do_fast_syscall_32+0x32/0x70 [ 1069.471032][T16903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1069.471048][T16903] RIP: 0023:0xf7f33fec [ 1069.471062][T16903] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 1069.471068][T16903] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1069.471080][T16903] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 1069.471088][T16903] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1069.471095][T16903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1069.471101][T16903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1069.471108][T16903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1069.471123][T16903] [ 1069.471195][T16903] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1070.275619][T16896] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 1071.608802][T16913] sctp_transport_update_pmtu: 81 callbacks suppressed [ 1071.608820][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.609273][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.609534][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.609919][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.609933][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.611915][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.611938][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.613041][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.613064][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.613686][T16913] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1071.811882][T16924] gadgetfs: bound to dummy_udc driver [ 1072.060987][T14998] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1072.063854][ C1] gadgetfs: connected [ 1072.065105][T14998] gadgetfs: disconnected [ 1072.150975][T16915] gadgetfs: suspended from state 2 [ 1072.422824][T14998] usb 5-1: device not accepting address 21, error -71 [ 1072.507769][ T30] usb 6-1: USB disconnect, device number 20 [ 1073.300299][T16936] gadgetfs: bound to dummy_udc driver [ 1073.690864][T14998] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1073.691066][ C1] gadgetfs: connected [ 1073.691181][T14998] gadgetfs: disconnected [ 1073.910708][ C1] gadgetfs: connected [ 1073.911514][T14998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1073.911757][T14998] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1073.911779][T14998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.991430][ C1] gadgetfs: configuration #1 [ 1074.825915][T16936] gadgetfs: suspended from state 3 [ 1074.827734][ T2340] usb 5-1: USB disconnect, device number 22 [ 1074.831965][T16936] gadgetfs: disconnected [ 1075.299824][T16958] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1075.745192][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 1075.745231][ T43] audit: type=1326 audit(1790979751.127:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.745360][ T43] audit: type=1326 audit(1790979751.127:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.745455][ T43] audit: type=1326 audit(1790979751.127:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.745551][ T43] audit: type=1326 audit(1790979751.127:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.745640][ T43] audit: type=1326 audit(1790979751.127:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.745726][ T43] audit: type=1326 audit(1790979751.127:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.746496][ T43] audit: type=1326 audit(1790979751.127:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.746701][ T43] audit: type=1326 audit(1790979751.127:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.746861][ T43] audit: type=1326 audit(1790979751.127:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1075.747017][ T43] audit: type=1326 audit(1790979751.137:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.0.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1076.911038][ C3] sctp_transport_update_pmtu: 162 callbacks suppressed [ 1076.911056][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1076.911102][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1076.943120][T16973] gadgetfs: bound to dummy_udc driver [ 1076.992598][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1076.992694][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.072632][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.072764][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.072845][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.073775][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.151979][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.152414][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1077.190590][T14998] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1077.190846][ C1] gadgetfs: connected [ 1077.190982][T14998] gadgetfs: disconnected [ 1077.387104][ C1] gadgetfs: connected [ 1077.388046][T14998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1077.388427][T14998] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1077.388462][T14998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.405487][ C1] gadgetfs: configuration #1 [ 1077.664146][T16969] gadgetfs: suspended from state 3 [ 1077.664484][T14998] usb 5-1: USB disconnect, device number 23 [ 1077.665318][T16969] gadgetfs: disconnected [ 1079.545311][T16990] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1080.486950][T16993] syzkaller1: entered promiscuous mode [ 1080.487050][T16993] syzkaller1: entered allmulticast mode [ 1084.058505][T17021] gadgetfs: bound to dummy_udc driver [ 1084.265087][T17028] ALSA: mixer_oss: invalid OSS volume 'OGAI‹' [ 1084.265505][T17028] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 1084.267978][T17028] ALSA: mixer_oss: invalid OSS volume '' [ 1086.061777][T17035] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1087.016208][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2836'. [ 1090.451002][T15000] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1090.719652][T15000] usb 8-1: Using ep0 maxpacket: 16 [ 1090.742602][T15000] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1090.742630][T15000] usb 8-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 1090.743612][T15000] usb 8-1: config 1 has an invalid interface number: 232 but max is 0 [ 1090.743626][T15000] usb 8-1: config 1 has no interface number 0 [ 1090.743646][T15000] usb 8-1: config 1 interface 232 has no altsetting 0 [ 1090.745590][T15000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.745605][T15000] usb 8-1: Product: syz [ 1090.745613][T15000] usb 8-1: Manufacturer: syz [ 1090.745621][T15000] usb 8-1: SerialNumber: syz [ 1091.135569][T15000] hub 8-1:1.232: bad descriptor, ignoring hub [ 1091.135592][T15000] hub 8-1:1.232: probe with driver hub failed with error -5 [ 1091.137348][T15000] option 8-1:1.232: GSM modem (1-port) converter detected [ 1091.161532][T15000] usb 8-1: USB disconnect, device number 20 [ 1091.164196][T15000] option 8-1:1.232: device disconnected [ 1094.343140][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 1094.343162][ T43] audit: type=1326 audit(1790979769.778:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.0.2849" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 1094.447707][T17102] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1099.791991][ T10] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1100.006919][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1100.045529][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.045559][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1100.132802][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.132821][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1100.416888][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.416906][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1100.667676][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1100.667788][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.390499][T17132] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1101.479824][ T43] audit: type=1804 audit(1790979776.898:1392): pid=17145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2860" name="/newroot/710/file0" dev="tmpfs" ino=3912 res=1 errno=0 [ 1101.852563][T17150] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1102.232221][T16466] usb 6-1: USB disconnect, device number 21 [ 1106.265274][T17180] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 1113.071638][T17214] Cache volume key already in use (9p,syz,) [ 1113.476863][T17229] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1115.550086][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.550147][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.599917][T17290] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1121.943570][T17330] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1123.609052][ T58] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1123.758707][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 1123.759595][ T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1123.761088][ T58] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1123.761130][ T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1123.761159][ T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1123.761180][ T58] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1123.761200][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1123.766112][ T58] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1123.766140][ T58] usb 7-1: Product: syz [ 1123.766155][ T58] usb 7-1: Manufacturer: syz [ 1123.766170][ T58] usb 7-1: SerialNumber: syz [ 1123.828585][ T58] usb 7-1: config 0 descriptor?? [ 1123.843358][ T58] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1123.879679][ T58] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1124.699618][ T58] usb 7-1: USB disconnect, device number 22 [ 1124.699752][ C3] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1124.700667][T17347] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1124.702372][ T58] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1124.702989][T17357] ldusb: No device or device unplugged -19 [ 1124.796641][T17364] futex_wake_op: syz.1.2907 tries to shift op by 144; fix this program [ 1126.510273][ C1] sctp_transport_update_pmtu: 46 callbacks suppressed [ 1126.510288][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1126.510368][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1126.599810][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1126.600052][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1126.910312][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1126.910873][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1127.002209][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1127.002304][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1127.002381][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1127.002466][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1127.234840][T17384] configfs-gadget.g1 gadget.0: HOST MAC 42:dc:b8:0c:bb:1e [ 1127.234866][T17384] configfs-gadget.g1 gadget.0: MAC b6:f1:f4:88:ba:2a [ 1129.817867][ T58] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1129.968192][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 1129.974852][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1129.975082][ T58] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 1129.986341][ T58] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 1129.986357][ T58] usb 6-1: config 1 has no interface number 0 [ 1129.986378][ T58] usb 6-1: config 1 interface 232 has no altsetting 0 [ 1129.999827][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.999852][ T58] usb 6-1: Product: syz [ 1129.999866][ T58] usb 6-1: Manufacturer: syz [ 1129.999879][ T58] usb 6-1: SerialNumber: syz [ 1132.354973][T17441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2922'. [ 1132.829813][ T58] hub 6-1:1.232: bad descriptor, ignoring hub [ 1132.829838][ T58] hub 6-1:1.232: probe with driver hub failed with error -5 [ 1132.830739][ T58] option 6-1:1.232: GSM modem (1-port) converter detected [ 1132.857889][ T58] usb 6-1: USB disconnect, device number 22 [ 1132.871015][ T58] option 6-1:1.232: device disconnected [ 1133.927083][ T1039] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1134.077857][T17464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2926'. [ 1134.098094][ T1039] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1134.100027][ T1039] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1134.100047][ T1039] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1134.100057][ T1039] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1134.100077][ T1039] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1134.100091][ T1039] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1134.103281][ T1039] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1134.103297][ T1039] usb 5-1: Product: syz [ 1134.103305][ T1039] usb 5-1: Manufacturer: syz [ 1134.109319][ T1039] cdc_wdm 5-1:1.0: skipping garbage [ 1134.109331][ T1039] cdc_wdm 5-1:1.0: skipping garbage [ 1134.112906][ T1039] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1134.112919][ T1039] cdc_wdm 5-1:1.0: Unknown control protocol [ 1134.829878][T17476] xt_CT: No such helper "pptp" [ 1134.884155][T17471] 9pnet_virtio: no channels available for device syz [ 1137.474607][T17492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2932'. [ 1137.512081][T15000] usb 5-1: USB disconnect, device number 26 [ 1144.774610][T17552] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 1144.783118][T17554] binder: Bad value for 'max' [ 1144.794184][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 1144.947200][T16466] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1145.101539][T17552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.117843][T16466] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1145.132866][T16466] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1145.132927][T16466] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1145.132977][T16466] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1145.133760][T16466] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1145.134240][T16466] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1145.185513][T16466] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1145.185533][T16466] usb 8-1: Product: syz [ 1145.185621][T16466] usb 8-1: Manufacturer: syz [ 1145.625638][T16466] cdc_wdm 8-1:1.0: skipping garbage [ 1145.625716][T16466] cdc_wdm 8-1:1.0: skipping garbage [ 1145.695091][T16466] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1145.695146][T16466] cdc_wdm 8-1:1.0: Unknown control protocol [ 1146.646544][T17560] xt_CT: No such helper "pptp" [ 1146.982905][T17563] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 1147.102648][T17557] kthread_run failed with err -4 [ 1147.433417][T17577] futex_wake_op: syz.0.2950 tries to shift op by 144; fix this program [ 1148.043723][T17571] loop5: detected capacity change from 0 to 7 [ 1148.047913][T17571] Dev loop5: unable to read RDB block 7 [ 1148.047949][T17571] loop5: unable to read partition table [ 1148.048132][T17571] loop5: partition table beyond EOD, truncated [ 1148.048150][T17571] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1148.348828][ T58] usb 8-1: USB disconnect, device number 21 [ 1148.814447][ T43] audit: type=1326 audit(1790979824.251:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.0.2954" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 1148.815549][T17582] ceph: No mds server is up or the cluster is laggy [ 1148.819441][ T58] libceph: connect (1)[c::]:6789 error -101 [ 1148.823834][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 1149.365264][ T2326] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1149.596079][T17591] input: syz0 as /devices/virtual/input/input151 [ 1149.898617][ T2326] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1149.903568][ T2326] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.903630][ T2326] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1149.932563][ T2326] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.932696][ T2326] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1149.948584][ T2326] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.948685][ T2326] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1149.992984][ T2326] usb 8-1: string descriptor 0 read error: -22 [ 1149.993409][ T2326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.325540][T17590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2952'. [ 1150.808177][ T1039] usb 8-1: USB disconnect, device number 22 [ 1150.972901][T17616] binder_alloc: 17615: binder_alloc_buf, no vma [ 1150.980749][T17616] tmpfs: Unknown parameter 'grpquota_boc½#Teýàôÿÿÿÿÿÿ_' [ 1151.347562][T17621] ALSA: mixer_oss: invalid OSS volume 'OGAI‹' [ 1151.347658][T17621] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 1151.348311][T17621] ALSA: mixer_oss: invalid OSS volume '' [ 1152.656249][T15000] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1152.816905][T15000] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1152.817861][T15000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.817875][T15000] usb 8-1: config 0 has no interfaces? [ 1152.817891][T15000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.820043][T15000] usb 8-1: config 0 descriptor?? [ 1153.109992][ T908] usb 8-1: USB disconnect, device number 23 [ 1157.318395][T17674] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1157.652197][ T908] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1157.816951][ T908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1157.818332][ T908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.818377][ T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.821249][ T908] usb 5-1: config 0 descriptor?? [ 1158.043067][ T908] ath6kl: Failed to submit usb control message: -71 [ 1158.043111][ T908] ath6kl: unable to send the bmi data to the device: -71 [ 1158.043127][ T908] ath6kl: Unable to send get target info: -71 [ 1158.065933][ T908] ath6kl: Failed to init ath6kl core: -71 [ 1158.066392][ T908] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1158.071006][ T908] usb 5-1: USB disconnect, device number 27 [ 1158.645926][T15000] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1158.655676][ T908] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1158.865940][T15000] usb 8-1: Using ep0 maxpacket: 32 [ 1158.866387][ T908] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1158.866611][T15000] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1158.871098][ T908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.871379][ T908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.880311][ T908] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1158.880464][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1158.880517][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1158.881168][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1158.881203][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1158.920040][ T908] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1158.930289][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1158.930327][ T908] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1158.940932][ T908] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1159.125284][T15000] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1159.125419][T15000] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1159.287075][T15000] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1159.287515][T15000] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1159.288364][T15000] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1159.314983][T15000] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1159.315744][T15000] usb 8-1: Product: syz [ 1159.315754][T15000] usb 8-1: Manufacturer: syz [ 1159.315762][T15000] usb 8-1: SerialNumber: syz [ 1159.941580][T15000] usb 8-1: config 0 descriptor?? [ 1159.955094][T15000] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1159.962446][T15000] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1160.387132][ T908] usb 8-1: USB disconnect, device number 24 [ 1160.387190][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 1160.422593][T17687] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1160.424892][T17707] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1160.651920][ T908] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1161.481652][T15000] usb 7-1: USB disconnect, device number 23 [ 1161.485269][T15000] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1161.493699][T15000] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1161.494130][T15000] keyspan 7-1:1.0: device disconnected [ 1165.060300][ T58] libceph: connect (1)[c::]:6789 error -101 [ 1165.060411][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 1165.060604][T17761] ceph: No mds server is up or the cluster is laggy [ 1165.062226][ T58] libceph: connect (1)[c::]:6789 error -101 [ 1165.063447][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 1165.528729][ T58] libceph: connect (1)[c::]:6789 error -101 [ 1165.591619][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 1166.095866][T11463] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1166.247288][T11463] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1166.248314][T11463] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.248340][T11463] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1166.249362][T11463] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.249385][T11463] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1166.250589][T11463] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.250606][T11463] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1166.253040][T11463] usb 5-1: string descriptor 0 read error: -22 [ 1166.253110][T11463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.479184][T17766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1166.908704][ T1039] usb 5-1: USB disconnect, device number 28 [ 1166.966095][T11463] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1167.116512][T11463] usb 6-1: Using ep0 maxpacket: 32 [ 1167.117245][T11463] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1167.118151][T11463] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1167.118182][T11463] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1167.118212][T11463] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1167.118233][T11463] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1167.118248][T11463] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1167.120108][T11463] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1167.120124][T11463] usb 6-1: Product: syz [ 1167.120132][T11463] usb 6-1: Manufacturer: syz [ 1167.120140][T11463] usb 6-1: SerialNumber: syz [ 1167.126079][T11463] usb 6-1: config 0 descriptor?? [ 1167.130534][T11463] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1167.133049][T11463] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1167.468626][ T1039] usb 6-1: USB disconnect, device number 23 [ 1167.468735][ C3] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1167.469675][T17777] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1167.470454][T17789] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1167.478345][ T1039] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1167.535422][T14998] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1167.775951][T14998] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 1167.777605][T14998] usb 5-1: Dual-Role OTG device on HNP port [ 1167.777856][T14998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.777871][T14998] usb 5-1: SerialNumber: 123456789 [ 1167.797249][T14998] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1167.797659][T14998] gspca_spca501: reg write: error -32 [ 1167.797670][T14998] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1167.797728][T14998] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1167.846580][T14998] cdc_ether 5-1:1.1 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:dc:b8:0c:bb:1e [ 1168.943261][T17816] 9pnet_virtio: no channels available for device syz [ 1169.019759][T17820] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 1169.067643][T17820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.117297][T17815] gadgetfs: bound to dummy_udc driver [ 1169.466510][T17803] gadgetfs: suspended from state 2 [ 1169.526043][T14998] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1170.090532][T17846] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1171.992923][T17869] futex_wake_op: syz.2.3008 tries to shift op by 144; fix this program [ 1172.278840][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1173.812093][T17880] netlink: 'syz.2.3012': attribute type 1 has an invalid length. [ 1173.820969][T17880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.188169][T17903] gadgetfs: bound to dummy_udc driver [ 1175.435516][T15000] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1175.435831][ C1] gadgetfs: connected [ 1175.436024][T15000] gadgetfs: disconnected [ 1176.544955][ T1039] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1176.695125][ T1039] usb 8-1: Using ep0 maxpacket: 8 [ 1176.762127][ T1039] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1176.763161][ T1039] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1176.763180][ T1039] usb 8-1: config 2 has no interface number 0 [ 1176.763205][ T1039] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1176.771431][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.771455][ T1039] usb 8-1: Product: syz [ 1176.771469][ T1039] usb 8-1: Manufacturer: syz [ 1176.771483][ T1039] usb 8-1: SerialNumber: syz [ 1176.997826][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.998033][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.726553][T17935] ALSA: mixer_oss: invalid OSS volume 'OGAI‹' [ 1177.726643][T17935] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 1177.730258][T17935] ALSA: mixer_oss: invalid OSS volume '' [ 1178.317072][ T1039] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1178.321453][ T1039] usb 8-1: USB disconnect, device number 25 [ 1178.405712][T17942] futex_wake_op: syz.3.3022 tries to shift op by 144; fix this program [ 1179.456665][T17952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.645371][T14998] Process accounting resumed [ 1180.391691][ T43] audit: type=1326 audit(1790979855.833:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17964 comm="syz.3.3027" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 1181.899538][T17989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1181.917446][T17988] ALSA: mixer_oss: invalid OSS volume 'OGAI‹' [ 1181.917502][T17988] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 1181.917886][T17988] ALSA: mixer_oss: invalid OSS volume '' [ 1183.435997][ T43] audit: type=1800 audit(1790979858.883:1395): pid=18020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3036" name="file1" dev="sda1" ino=2038 res=0 errno=0 [ 1185.113703][T18029] futex_wake_op: syz.2.3039 tries to shift op by 144; fix this program [ 1186.762855][T11463] usb 5-1: USB disconnect, device number 29 [ 1186.767783][T11463] cdc_ether 5-1:1.1 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1189.363986][ T1039] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1189.540737][ T1039] usb 7-1: Using ep0 maxpacket: 8 [ 1189.541224][ T1039] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1189.555263][ T1039] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 1189.555285][ T1039] usb 7-1: config 2 has no interface number 0 [ 1189.555305][ T1039] usb 7-1: config 2 interface 31 has no altsetting 0 [ 1189.557413][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.557435][ T1039] usb 7-1: Product: syz [ 1189.557447][ T1039] usb 7-1: Manufacturer: syz [ 1189.557459][ T1039] usb 7-1: SerialNumber: syz [ 1191.073044][ T1039] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 1191.077117][ T1039] usb 7-1: USB disconnect, device number 24 [ 1191.206545][T18155] futex_wake_op: syz.3.3053 tries to shift op by 144; fix this program [ 1193.038245][T18169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1193.673466][T17594] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1193.824068][T17594] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1193.825012][T17594] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.825032][T17594] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1193.825904][T17594] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.825923][T17594] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1193.826808][T17594] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.826827][T17594] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1193.829859][T17594] usb 7-1: string descriptor 0 read error: -22 [ 1193.830136][T17594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.237153][ T43] audit: type=1800 audit(1790979869.674:1396): pid=18190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3061" name="file0" dev="overlay" ino=4255 res=0 errno=0 [ 1194.313072][T18176] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1195.109653][ T1039] usb 7-1: USB disconnect, device number 25 [ 1195.175470][T18198] syzkaller0: entered promiscuous mode [ 1195.175486][T18198] syzkaller0: entered allmulticast mode [ 1198.733612][ T908] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1198.885413][ T908] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1198.887040][ T908] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.887065][ T908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.892881][ T908] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 1198.895520][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 1198.895553][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 1198.896162][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 1198.896196][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 1198.903636][ T908] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1198.904430][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 1198.904473][ T908] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 1198.909308][ T908] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1199.420827][T18243] IPv6: addrconf: prefix option has invalid lifetime [ 1200.177302][T18242] loop5: detected capacity change from 0 to 7 [ 1200.224988][T18242] Dev loop5: unable to read RDB block 7 [ 1200.225025][T18242] loop5: unable to read partition table [ 1200.225196][T18242] loop5: partition table beyond EOD, truncated [ 1200.225229][T18242] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1200.254159][T18251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.255042][T18253] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1200.599984][ T2326] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1201.044455][ T2326] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1201.062667][ T2326] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.062701][ T2326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.144056][ T2326] usb 6-1: config 0 descriptor?? [ 1201.531403][T14998] usb 8-1: USB disconnect, device number 26 [ 1201.533317][T14998] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1201.534527][T14998] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1201.534827][T14998] keyspan 8-1:1.0: device disconnected [ 1201.639442][ T2326] ath6kl: Failed to submit usb control message: -71 [ 1201.639488][ T2326] ath6kl: unable to send the bmi data to the device: -71 [ 1201.639501][ T2326] ath6kl: Unable to send get target info: -71 [ 1201.654388][ T2326] ath6kl: Failed to init ath6kl core: -71 [ 1201.654818][ T2326] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1201.671315][ T2326] usb 6-1: USB disconnect, device number 26 [ 1205.714001][ T2326] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1205.872895][ T2326] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1205.878198][ T2326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.878773][ T2326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.938482][ T2326] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1205.941647][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1205.942476][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1205.992047][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1205.994025][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1206.049003][ T2326] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1206.050531][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1206.050615][ T2326] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1206.056422][ T2326] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1208.131928][T18322] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1208.394059][ T30] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1208.482273][T14998] usb 6-1: USB disconnect, device number 27 [ 1208.498142][T14998] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1208.568447][ T30] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1208.569224][T14998] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1208.574823][ T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.574859][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.576820][ T30] usb 8-1: config 0 descriptor?? [ 1208.580115][T14998] keyspan 6-1:1.0: device disconnected [ 1208.835562][ T30] ath6kl: Failed to submit usb control message: -71 [ 1208.835591][ T30] ath6kl: unable to send the bmi data to the device: -71 [ 1208.835599][ T30] ath6kl: Unable to send get target info: -71 [ 1208.836105][ T30] ath6kl: Failed to init ath6kl core: -71 [ 1208.836343][ T30] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1208.839877][ T30] usb 8-1: USB disconnect, device number 27 [ 1210.313956][ T35] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1210.473883][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 1210.477597][ T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1210.481024][ T35] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1210.481319][ T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1210.482011][ T35] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1210.482221][ T35] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1210.491592][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1210.501531][ T35] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1210.501579][ T35] usb 5-1: Product: syz [ 1210.501589][ T35] usb 5-1: Manufacturer: syz [ 1210.501626][ T35] usb 5-1: SerialNumber: syz [ 1210.546323][ T35] usb 5-1: config 0 descriptor?? [ 1210.600143][ T35] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1210.730625][ T35] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1211.687987][ T1039] usb 5-1: USB disconnect, device number 30 [ 1211.695895][ T1039] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1211.774466][ T908] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1211.933035][ T908] usb 6-1: Using ep0 maxpacket: 8 [ 1211.933510][ T908] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1211.934344][ T908] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1211.934358][ T908] usb 6-1: config 0 has no interface number 0 [ 1211.934375][ T908] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1211.934387][ T908] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1211.934400][ T908] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1211.934413][ T908] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1211.934433][ T908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.935911][ T908] usb 6-1: config 0 descriptor?? [ 1211.975545][ T908] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1212.482926][ T30] usb 6-1: USB disconnect, device number 28 [ 1212.484584][ T30] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1213.314565][T18369] futex_wake_op: syz.0.3111 tries to shift op by 144; fix this program [ 1213.683764][ T35] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1213.846633][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1213.851666][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1213.855704][ T35] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1213.855913][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1213.856239][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1213.856305][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1213.867815][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1213.868700][ T35] usb 7-1: Product: syz [ 1213.869051][ T35] usb 7-1: Manufacturer: syz [ 1213.944681][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 1213.945038][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 1214.026393][ T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1214.026576][ T35] cdc_wdm 7-1:1.0: Unknown control protocol [ 1215.092593][ T908] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1215.253431][ T908] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1215.256090][ T908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.256134][ T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.263551][ T908] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1215.263795][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1215.263859][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1215.294329][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1215.294400][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1215.298876][ T908] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1215.335919][T18380] xt_CT: No such helper "pptp" [ 1215.340388][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1215.340431][ T908] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1215.341110][ T908] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1215.544152][T18380] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 1215.787750][T18395] IPv6: addrconf: prefix option has invalid lifetime [ 1216.279700][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1216.281782][T18399] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1217.405250][ T2326] usb 7-1: USB disconnect, device number 26 [ 1217.471693][T14998] usb 5-1: USB disconnect, device number 31 [ 1217.584544][T14998] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1217.587634][T14998] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1217.588266][T14998] keyspan 5-1:1.0: device disconnected [ 1219.062692][ T35] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1219.212586][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 1219.213072][ T35] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1219.214079][ T35] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1219.214093][ T35] usb 5-1: config 2 has no interface number 0 [ 1219.214111][ T35] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1219.215675][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.215689][ T35] usb 5-1: Product: syz [ 1219.215697][ T35] usb 5-1: Manufacturer: syz [ 1219.215705][ T35] usb 5-1: SerialNumber: syz [ 1220.626210][ T35] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1220.636368][ T35] usb 5-1: USB disconnect, device number 32 [ 1221.978107][T18458] netlink: 'syz.1.3124': attribute type 10 has an invalid length. [ 1221.984108][T18458] team0: Device wg2 is of different type [ 1221.998916][T18461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1222.050308][T18461] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 1222.090672][T18463] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1222.132279][T18465] Bluetooth: MGMT ver 1.23 [ 1222.269040][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1222.275408][T18466] gadgetfs: bound to dummy_udc driver [ 1222.513136][ T35] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1222.513393][ C3] gadgetfs: connected [ 1222.513614][ T35] gadgetfs: disconnected [ 1222.724583][T14998] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1223.333204][T14998] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1223.334250][T14998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.334291][T14998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.336635][T14998] usb 7-1: config 0 descriptor?? [ 1223.581481][T14998] ath6kl: Failed to submit usb control message: -71 [ 1223.581522][T14998] ath6kl: unable to send the bmi data to the device: -71 [ 1223.581534][T14998] ath6kl: Unable to send get target info: -71 [ 1223.585312][T14998] ath6kl: Failed to init ath6kl core: -71 [ 1223.585707][T14998] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1223.607203][T14998] usb 7-1: USB disconnect, device number 27 [ 1224.401492][T18483] syz.0.3130: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1224.401638][T18483] CPU: 2 UID: 0 PID: 18483 Comm: syz.0.3130 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.401668][T18483] Tainted: [L]=SOFTLOCKUP [ 1224.401676][T18483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1224.401690][T18483] Call Trace: [ 1224.401697][T18483] [ 1224.401706][T18483] dump_stack_lvl+0x100/0x190 [ 1224.401739][T18483] warn_alloc.cold+0x9e/0xb2 [ 1224.401770][T18483] ? __pfx_warn_alloc+0x10/0x10 [ 1224.401801][T18483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1224.401829][T18483] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1224.401860][T18483] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1224.401893][T18483] ? debug_check_no_obj_freed+0x300/0x630 [ 1224.401930][T18483] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1224.401958][T18483] ? find_held_lock+0x2b/0x80 [ 1224.401982][T18483] ? __free_frozen_pages+0x747/0x10f0 [ 1224.402012][T18483] ? __free_frozen_pages+0x747/0x10f0 [ 1224.402047][T18483] ? _raw_spin_unlock+0x28/0x50 [ 1224.402070][T18483] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.402093][T18483] ? irqentry_exit+0x24d/0xa10 [ 1224.402127][T18483] __folio_alloc_noprof+0x16/0x260 [ 1224.402153][T18483] alloc_migration_target+0x1d7/0x6d0 [ 1224.402187][T18483] migrate_pages_batch+0x5c4/0x4680 [ 1224.402221][T18483] ? __pfx_alloc_migration_target+0x10/0x10 [ 1224.402258][T18483] ? migrate_pages_sync+0x12c/0x880 [ 1224.402288][T18483] ? migrate_pages_sync+0x588/0x880 [ 1224.402316][T18483] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1224.402353][T18483] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1224.402384][T18483] ? __free_object+0x2a8/0x3f0 [ 1224.402417][T18483] ? __lock_acquire+0x5c0/0x1f40 [ 1224.402445][T18483] ? __css_rstat_updated+0x1ce/0x590 [ 1224.402480][T18483] migrate_pages+0x1950/0x2850 [ 1224.402504][T18483] ? __pfx_alloc_migration_target+0x10/0x10 [ 1224.402541][T18483] ? __pfx_migrate_pages+0x10/0x10 [ 1224.402572][T18483] ? mtree_load+0x3a4/0xb50 [ 1224.402604][T18483] move_pages_and_store_status+0xf1/0x230 [ 1224.402627][T18483] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1224.402659][T18483] kernel_move_pages+0xca4/0x14d0 [ 1224.402689][T18483] ? __pfx_kernel_move_pages+0x10/0x10 [ 1224.402717][T18483] ? xfd_validate_state+0x129/0x190 [ 1224.402761][T18483] __ia32_sys_move_pages+0xdd/0x1b0 [ 1224.402783][T18483] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1224.402808][T18483] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.402831][T18483] __do_fast_syscall_32+0x13a/0x8b0 [ 1224.402875][T18483] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.402899][T18483] do_fast_syscall_32+0x32/0x70 [ 1224.402925][T18483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.402949][T18483] RIP: 0023:0xf701efec [ 1224.402972][T18483] Code: Unable to access opcode bytes at 0xf701efc2. [ 1224.402983][T18483] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1224.403002][T18483] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1224.403017][T18483] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1224.403029][T18483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.403042][T18483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1224.403056][T18483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.403081][T18483] [ 1224.403109][T18483] Mem-Info: [ 1224.403121][T18483] active_anon:2583 inactive_anon:1195 isolated_anon:12 [ 1224.403121][T18483] active_file:1089 inactive_file:17282 isolated_file:0 [ 1224.403121][T18483] unevictable:1000 dirty:596 writeback:0 [ 1224.403121][T18483] slab_reclaimable:6743 slab_unreclaimable:59877 [ 1224.403121][T18483] mapped:25536 shmem:2980 pagetables:1463 [ 1224.403121][T18483] sec_pagetables:334 bounce:0 [ 1224.403121][T18483] kernel_misc_reclaimable:0 [ 1224.403121][T18483] free:42246 free_pcp:1967 free_cma:0 [ 1224.403170][T18483] Node 0 active_anon:8kB inactive_anon:40kB active_file:104kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1400kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1224.403219][T18483] Node 1 active_anon:10324kB inactive_anon:4740kB active_file:4252kB inactive_file:69100kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:102116kB dirty:2384kB writeback:0kB shmem:11920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5148kB pagetables:4452kB sec_pagetables:200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1224.403269][T18483] Node 0 DMA free:2832kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.403321][T18483] lowmem_reserve[]: 0 278 278 278 278 [ 1224.403356][T18483] Node 0 DMA32 free:35660kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:24kB active_file:104kB inactive_file:28kB unevictable:0kB writepending:0kB zspages:696kB present:1032196kB managed:284784kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.403409][T18483] lowmem_reserve[]: 0 0 0 0 0 [ 1224.403444][T18483] Node 1 DMA32 free:130492kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10424kB inactive_anon:4740kB active_file:4252kB inactive_file:69100kB unevictable:4000kB writepending:2384kB zspages:4968kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:7824kB local_pcp:0kB free_cma:0kB [ 1224.403496][T18483] lowmem_reserve[]: 0 0 0 0 0 [ 1224.403552][T18483] Node 0 DMA: 74*4kB (UM) 11*8kB (U) 8*16kB (UM) 15*32kB (UM) 17*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2848kB [ 1224.403707][T18483] Node 0 DMA32: 745*4kB (UME) 180*8kB (UME) 93*16kB (UME) 216*32kB (UME) 73*64kB (UME) 26*128kB (UME) 8*256kB (M) 11*512kB (ME) 3*1024kB (M) 2*2048kB (M) 0*4096kB = 35668kB [ 1224.403855][T18483] Node 1 DMA32: 241*4kB (UME) 1135*8kB (UME) 716*16kB (UME) 387*32kB (UME) 222*64kB (UME) 115*128kB (UME) 60*256kB (UME) 46*512kB (UME) 8*1024kB (UM) 6*2048kB (M) 2*4096kB (U) = 130396kB [ 1224.404004][T18483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.404020][T18483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1224.404036][T18483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.404052][T18483] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1224.404066][T18483] 22593 total pagecache pages [ 1224.404073][T18483] 1189 pages in swap cache [ 1224.404080][T18483] Free swap = 99692kB [ 1224.404087][T18483] Total swap = 124996kB [ 1224.404095][T18483] 524155 pages RAM [ 1224.404102][T18483] 0 pages HighMem/MovableOnly [ 1224.404108][T18483] 212067 pages reserved [ 1224.404115][T18483] 0 pages cma reserved [ 1224.566617][ T1039] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1225.052235][ T1039] usb 6-1: Using ep0 maxpacket: 8 [ 1225.052853][ T1039] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1225.054049][ T1039] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1225.054075][ T1039] usb 6-1: config 2 has no interface number 0 [ 1225.054108][ T1039] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1225.056324][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.056345][ T1039] usb 6-1: Product: syz [ 1225.056359][ T1039] usb 6-1: Manufacturer: syz [ 1225.056372][ T1039] usb 6-1: SerialNumber: syz [ 1226.680283][ T1039] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1227.418924][ T2326] usb 6-1: USB disconnect, device number 29 [ 1229.598805][T18549] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1229.731766][ T30] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1229.826364][ T43] audit: type=1800 audit(1790979905.256:1397): pid=18553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3143" name="file0" dev="overlay" ino=4307 res=0 errno=0 [ 1229.892360][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1229.894207][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1229.896175][ T30] usb 7-1: config index 0 descriptor too short (expected 8219, got 27) [ 1229.896202][ T30] usb 7-1: config 32 has an invalid descriptor of length 32, skipping remainder of the config [ 1229.896226][ T30] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 1229.911997][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1229.912029][ T30] usb 7-1: Product: syz [ 1229.912049][ T30] usb 7-1: Manufacturer: syz [ 1229.912067][ T30] usb 7-1: SerialNumber: syz [ 1229.982491][ T35] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1230.163587][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1230.173646][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.173710][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.492732][ T30] usb 7-1: USB disconnect, device number 28 [ 1230.675278][ T35] usb 5-1: config 0 descriptor?? [ 1231.084676][ T35] ath6kl: Failed to submit usb control message: -71 [ 1231.084719][ T35] ath6kl: unable to send the bmi data to the device: -71 [ 1231.084734][ T35] ath6kl: Unable to send get target info: -71 [ 1231.085823][ T35] ath6kl: Failed to init ath6kl core: -71 [ 1231.086271][ T35] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1231.090542][ T35] usb 5-1: USB disconnect, device number 34 [ 1231.775652][T18570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1233.367557][T18262] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1233.524187][T18262] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1233.529212][T18262] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1233.529275][T18262] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1233.529293][T18262] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1233.529503][T18262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1233.529564][T18262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1233.542759][T18262] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1233.542784][T18262] usb 7-1: Product: syz [ 1233.542844][T18262] usb 7-1: Manufacturer: syz [ 1233.597255][T18262] cdc_wdm 7-1:1.0: skipping garbage [ 1233.614434][T18262] cdc_wdm 7-1:1.0: skipping garbage [ 1233.652769][T18262] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1233.652821][T18262] cdc_wdm 7-1:1.0: Unknown control protocol [ 1234.300627][T18600] xt_CT: No such helper "pptp" [ 1234.648139][T18600] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 1235.201035][ T2326] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1235.383109][ T2326] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1235.384641][ T2326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.384669][ T2326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.390095][ T2326] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1235.390241][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1235.390278][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1235.391113][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1235.391166][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1235.393907][ T2326] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1235.397143][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1235.397184][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1235.398914][ T2326] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1236.061339][T18616] IPv6: addrconf: prefix option has invalid lifetime [ 1236.207551][ T35] usb 7-1: USB disconnect, device number 29 [ 1236.486436][T18620] openvswitch: netlink: Unknown key attributes 1 [ 1236.493510][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1236.564906][T18620] syz.3.3158 (18620): drop_caches: 2 [ 1238.236259][ T30] usb 5-1: USB disconnect, device number 35 [ 1238.423230][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.423269][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.441582][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1238.456009][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1238.457698][ T30] keyspan 5-1:1.0: device disconnected [ 1239.240347][T18652] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1243.227831][ T43] audit: type=1800 audit(1790979918.666:1398): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3174" name="file0" dev="overlay" ino=4378 res=0 errno=0 [ 1246.550422][ T2326] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1246.583807][T18737] fuse: root generation should be zero [ 1246.710513][ T2326] usb 8-1: Using ep0 maxpacket: 8 [ 1246.711245][ T2326] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1246.712140][ T2326] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1246.712160][ T2326] usb 8-1: config 0 has no interface number 0 [ 1246.712186][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1246.712204][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1246.712223][ T2326] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1246.712243][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1246.712274][ T2326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.715031][ T2326] usb 8-1: config 0 descriptor?? [ 1246.722744][ T2326] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1247.200054][ T2326] usb 8-1: USB disconnect, device number 28 [ 1247.208922][ T2326] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1248.526648][T18765] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1249.430537][T18768] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1249.430569][T18768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1249.430650][T18768] vhci_hcd vhci_hcd.0: Device attached [ 1249.732397][ T2326] usb 38-1: SetAddress Request (2) to port 0 [ 1249.732519][ T2326] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1251.181928][T18773] vhci_hcd: connection reset by peer [ 1251.184145][T14682] vhci_hcd vhci_hcd.0: stop threads [ 1251.184163][T14682] vhci_hcd vhci_hcd.0: release socket [ 1251.184189][T14682] vhci_hcd vhci_hcd.0: disconnect device [ 1253.859443][ T43] audit: type=1326 audit(1790979928.300:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18816 comm="syz.1.3199" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 1254.819988][ T2326] usb 38-1: device descriptor read/8, error -110 [ 1255.232443][ T2326] usb usb38-port1: attempt power cycle [ 1255.811904][ T2326] usb usb38-port1: unable to enumerate USB device [ 1261.623871][T18912] input: syz1 as /devices/virtual/input/input155 [ 1263.635339][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 1265.519639][ T2326] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1265.669296][ T2326] usb 8-1: Using ep0 maxpacket: 8 [ 1265.669787][ T2326] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1265.670645][ T2326] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1265.670660][ T2326] usb 8-1: config 0 has no interface number 0 [ 1265.670677][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1265.670689][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1265.670702][ T2326] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1265.670715][ T2326] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1265.670735][ T2326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.671919][ T2326] usb 8-1: config 0 descriptor?? [ 1265.690541][ T2326] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1266.403071][T18262] usb 8-1: USB disconnect, device number 29 [ 1266.403143][ C2] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 1266.404799][T18262] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1266.406868][T18966] ldusb: No device or device unplugged -19 [ 1267.083044][ T43] audit: type=1326 audit(1790979941.531:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18981 comm="syz.2.3233" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 1267.329640][ T2326] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1267.480099][ T2326] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1267.484907][ T2326] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.485282][ T2326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.579792][ T2326] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 1267.580674][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 1267.580933][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 1267.654758][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 1267.655774][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 1267.765225][ T2326] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1267.836128][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 1267.849917][ T2326] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 1267.874641][ T2326] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1268.441527][T18997] IPv6: addrconf: prefix option has invalid lifetime [ 1270.195562][T18262] usb 8-1: USB disconnect, device number 30 [ 1270.197649][T18262] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1270.247802][T18262] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1270.275943][T18262] keyspan 8-1:1.0: device disconnected [ 1270.295065][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1270.297973][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1270.297997][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1270.298008][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4b15 instead [ 1270.298020][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0438 instead [ 1270.298030][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1270.298039][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1270.298049][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1270.298062][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1270.298082][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1270.298181][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1270.298193][T19017] jffs2: Further such events for this erase block will not be printed [ 1270.298419][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1270.298429][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1270.298440][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4b15 instead [ 1270.298451][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0438 instead [ 1270.298461][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1270.298471][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1270.298481][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1270.298493][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1270.298512][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1270.298533][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1270.298543][T19017] jffs2: Further such events for this erase block will not be printed [ 1270.298781][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1270.298793][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1270.298804][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4b15 instead [ 1270.298816][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0438 instead [ 1270.298843][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1270.299822][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1270.299836][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4b15 instead [ 1270.299848][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0438 instead [ 1270.299877][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1270.299887][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1270.299898][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4b15 instead [ 1270.299910][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0438 instead [ 1270.299936][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1270.299946][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1270.299957][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4b15 instead [ 1270.299969][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0438 instead [ 1270.300000][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1270.300010][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1270.300021][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4b15 instead [ 1270.300033][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0438 instead [ 1270.300059][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1270.300069][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1270.300079][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4b15 instead [ 1270.300092][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0438 instead [ 1270.300119][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1270.300129][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1270.300140][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4b15 instead [ 1270.300151][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0438 instead [ 1270.300177][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1270.300186][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1270.300196][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4b15 instead [ 1270.300206][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0438 instead [ 1270.300230][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1270.300240][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1270.300249][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4b15 instead [ 1270.300260][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0438 instead [ 1270.300284][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1270.300293][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1270.300303][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4b15 instead [ 1270.300314][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0438 instead [ 1270.300338][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1270.300347][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1270.300357][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4b15 instead [ 1270.300368][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0438 instead [ 1270.300392][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1270.300401][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1270.300411][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4b15 instead [ 1270.300422][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0438 instead [ 1270.300446][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1270.300455][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1270.300465][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4b15 instead [ 1270.300476][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0438 instead [ 1270.300500][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1270.300509][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1270.300519][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4b15 instead [ 1270.300529][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0438 instead [ 1270.300553][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1270.300562][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1270.300572][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4b15 instead [ 1270.300583][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0438 instead [ 1270.300607][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1270.300616][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1270.300626][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4b15 instead [ 1270.300637][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0438 instead [ 1270.300661][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1270.300670][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1270.300680][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4b15 instead [ 1270.300690][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0438 instead [ 1270.300715][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1270.300724][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1270.300736][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4b15 instead [ 1270.300751][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0438 instead [ 1270.300790][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1270.300804][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1270.300816][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4b15 instead [ 1270.300832][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0438 instead [ 1270.300886][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1270.303408][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1270.303423][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4b15 instead [ 1270.303435][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0438 instead [ 1270.303475][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1270.303485][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1270.303496][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4b15 instead [ 1270.303507][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0438 instead [ 1270.303539][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1270.303549][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1270.303559][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4b15 instead [ 1270.303571][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0438 instead [ 1270.303597][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1270.303607][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1270.303618][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4b15 instead [ 1270.303629][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0438 instead [ 1270.303653][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1270.303662][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1270.303672][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4b15 instead [ 1270.303682][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0438 instead [ 1270.303708][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1270.303718][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1270.303728][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4b15 instead [ 1270.303739][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0438 instead [ 1270.303763][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1270.303772][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1270.304560][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4b15 instead [ 1270.304575][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0438 instead [ 1270.304934][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1270.304944][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1270.304955][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4b15 instead [ 1270.304966][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0438 instead [ 1270.304992][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1270.305001][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1270.305011][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4b15 instead [ 1270.305023][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0438 instead [ 1270.305048][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1270.305057][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1270.305067][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4b15 instead [ 1270.305077][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0438 instead [ 1270.305101][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1270.305109][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1270.305119][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4b15 instead [ 1270.305129][T19017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0438 instead [ 1270.305148][T19017] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1270.305153][T19017] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1271.043445][T19021] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1272.070112][ T35] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1272.223084][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 1272.225536][ T35] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1272.227509][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.227523][ T35] usb 5-1: config 0 has no interfaces? [ 1272.236092][ T35] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1272.236111][ T35] usb 5-1: Product: syz [ 1272.236118][ T35] usb 5-1: Manufacturer: syz [ 1272.236210][ T35] usb 5-1: SerialNumber: syz [ 1272.244809][ T35] usb 5-1: config 0 descriptor?? [ 1274.159752][T17594] usb 5-1: USB disconnect, device number 36 [ 1275.058846][T19083] 9pnet_virtio: no channels available for device syz [ 1278.147094][ T43] audit: type=1326 audit(1790979952.592:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19115 comm="syz.0.3256" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 1278.350142][T19123] can0: slcan on ttyS3. [ 1278.495400][T19123] can0 (unregistered): slcan off ttyS3. [ 1279.776901][T19153] 9pnet_virtio: no channels available for device syz [ 1280.548475][ T2326] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1280.972444][ T2326] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1280.974369][ T2326] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.974411][ T2326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.290255][T11463] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1281.440789][T11463] usb 6-1: Using ep0 maxpacket: 32 [ 1281.442032][T11463] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1281.446144][T11463] usb 6-1: config index 0 descriptor too short (expected 8219, got 27) [ 1281.446321][T11463] usb 6-1: config 32 has an invalid descriptor of length 124, skipping remainder of the config [ 1281.446456][T11463] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 32 [ 1281.464308][T11463] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1281.464507][T11463] usb 6-1: Product: syz [ 1281.464573][T11463] usb 6-1: Manufacturer: syz [ 1281.464616][T11463] usb 6-1: SerialNumber: syz [ 1282.341676][ T2326] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1282.341770][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1282.341798][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1282.342557][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1282.342590][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1282.343394][ T2326] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1282.344082][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1282.344115][ T2326] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1282.345920][ T2326] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1282.708072][T11463] usb 6-1: USB disconnect, device number 30 [ 1284.107036][T15000] usb 7-1: USB disconnect, device number 30 [ 1284.112866][T15000] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1284.123070][T15000] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1284.124091][T15000] keyspan 7-1:1.0: device disconnected [ 1284.324453][T19211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1284.860846][T19218] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1284.860877][T19218] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1284.861209][T19218] vhci_hcd vhci_hcd.0: Device attached [ 1285.148859][T16466] usb 40-1: SetAddress Request (2) to port 0 [ 1285.148900][T16466] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1285.460220][T19219] vhci_hcd: connection reset by peer [ 1285.562264][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1285.562299][ T13] vhci_hcd vhci_hcd.1: release socket [ 1285.562376][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1287.128646][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3279'. [ 1287.878107][T17594] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1288.060745][T17594] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1288.061737][T17594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.061751][T17594] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.064710][T17594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.064724][T17594] usb 5-1: Product: syz [ 1288.064732][T17594] usb 5-1: Manufacturer: syz [ 1288.064739][T17594] usb 5-1: SerialNumber: syz [ 1288.065995][T17594] usb 5-1: config 0 descriptor?? [ 1288.278528][T15000] usb 5-1: USB disconnect, device number 37 [ 1289.159274][ T35] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1289.309185][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 1289.313467][ T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1289.315831][ T35] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1289.315852][ T35] usb 5-1: config 0 has no interface number 0 [ 1289.315889][ T35] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1289.315909][ T35] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1289.315930][ T35] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1289.315951][ T35] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1289.315985][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.321442][ T35] usb 5-1: config 0 descriptor?? [ 1289.333072][ T35] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1289.539024][ C3] ================================================================== [ 1289.539039][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 1289.539112][ C3] Read of size 1 at addr ffff888061785512 by task syz.0.3283/19256 [ 1289.539127][ C3] [ 1289.539138][ C3] CPU: 3 UID: 0 PID: 19256 Comm: syz.0.3283 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.539163][ C3] Tainted: [L]=SOFTLOCKUP [ 1289.539170][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1289.539181][ C3] Call Trace: [ 1289.539188][ C3] [ 1289.539196][ C3] dump_stack_lvl+0x100/0x190 [ 1289.539223][ C3] print_report+0x13d/0x4b0 [ 1289.539271][ C3] ? __virt_addr_valid+0x239/0x430 [ 1289.539298][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1289.539317][ C3] kasan_report+0xdf/0x1c0 [ 1289.539344][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1289.539371][ C3] find_endpoint+0x2a3/0x2c0 [ 1289.539391][ C3] dummy_timer+0x500/0x3700 [ 1289.539421][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1289.539442][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1289.539472][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1289.539495][ C3] ? mark_held_locks+0x40/0x70 [ 1289.539520][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1289.539539][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1289.539562][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 1289.539586][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 1289.539608][ C3] handle_softirqs+0x1e6/0x9d0 [ 1289.539636][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1289.539661][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1289.539677][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1289.539701][ C3] __irq_exit_rcu+0x16a/0x210 [ 1289.539726][ C3] irq_exit_rcu+0x9/0x30 [ 1289.539750][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1289.539771][ C3] [ 1289.539792][ C3] [ 1289.539800][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.539821][ C3] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1289.539847][ C3] Code: bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 1a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 1289.539865][ C3] RSP: 0000:ffffc900033ff780 EFLAGS: 00000246 [ 1289.539880][ C3] RAX: 0000000000000007 RBX: ffff888027f22680 RCX: ffffffff82da67bd [ 1289.539892][ C3] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000080 [ 1289.539904][ C3] RBP: ffff8880515e2a00 R08: 0000000000000005 R09: 0000000000000000 [ 1289.539915][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000100 [ 1289.539927][ C3] R13: ffff888027f2247c R14: 0000000000000000 R15: 0000000000000000 [ 1289.539942][ C3] ? ext4_fill_raw_inode+0x106d/0x1eb0 [ 1289.539964][ C3] ext4_fill_raw_inode+0x106d/0x1eb0 [ 1289.539986][ C3] ext4_mark_iloc_dirty+0x5da/0x21b0 [ 1289.540010][ C3] ? ext4_inode_journal_mode+0x265/0x450 [ 1289.540033][ C3] ? ext4_fc_track_inode+0x16b/0x360 [ 1289.540057][ C3] ? ext4_reserve_inode_write+0x271/0x330 [ 1289.540082][ C3] __ext4_mark_inode_dirty+0x23a/0x910 [ 1289.540106][ C3] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1289.540128][ C3] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1289.540152][ C3] ? trace_jbd2_handle_start+0x83/0x240 [ 1289.540171][ C3] ? jbd2__journal_start+0xf7/0x6b0 [ 1289.540191][ C3] ? __ext4_journal_start_sb+0x314/0x610 [ 1289.540212][ C3] ? __ext4_journal_start_sb+0x17b/0x610 [ 1289.540233][ C3] ? ext4_dirty_inode+0xa1/0x130 [ 1289.540258][ C3] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1289.540282][ C3] ext4_dirty_inode+0xd9/0x130 [ 1289.540306][ C3] ? rcu_is_watching+0x13/0xc0 [ 1289.540326][ C3] __mark_inode_dirty+0x1f3/0x16e0 [ 1289.540353][ C3] file_update_time_flags+0x49c/0x520 [ 1289.540380][ C3] ext4_page_mkwrite+0x324/0x1860 [ 1289.540407][ C3] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1289.540431][ C3] ? debug_object_free+0x295/0x550 [ 1289.540460][ C3] do_page_mkwrite+0x17a/0x440 [ 1289.540482][ C3] do_fault+0x659/0x1830 [ 1289.540506][ C3] ? __pfx_filemap_map_pages+0x10/0x10 [ 1289.540533][ C3] ? __pfx_do_fault+0x10/0x10 [ 1289.540555][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1289.540572][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1289.540589][ C3] ? __pte_offset_map+0x179/0x310 [ 1289.540612][ C3] __handle_mm_fault+0x150b/0x2f60 [ 1289.540631][ C3] ? lock_vma_under_rcu+0x11d/0x590 [ 1289.540657][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 1289.540677][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 1289.540706][ C3] handle_mm_fault+0x363/0xa20 [ 1289.540725][ C3] do_user_addr_fault+0x59c/0x12f0 [ 1289.540748][ C3] exc_page_fault+0x6f/0xd0 [ 1289.540769][ C3] asm_exc_page_fault+0x26/0x30 [ 1289.540785][ C3] RIP: 0023:0xf705f262 [ 1289.540799][ C3] Code: 1c 01 00 00 ba 08 00 00 00 89 e8 e8 88 a2 fe ff 8b 45 20 8b 4c 24 08 8b 5c 24 0c 83 44 24 14 01 8d 50 f8 83 45 18 08 89 55 20 <89> 48 f8 89 58 fc 83 c6 01 3b 77 04 0f 82 9c fe ff ff 80 7d 34 00 [ 1289.540815][ C3] RSP: 002b:00000000ffb9eed0 EFLAGS: 00010202 [ 1289.540830][ C3] RAX: 000000003380e000 RBX: 00000000ffffffff RCX: 00000000829799b1 [ 1289.540842][ C3] RDX: 000000003380dff8 RSI: 00000000000000d4 RDI: 00000000f7415080 [ 1289.540854][ C3] RBP: 00000000f7f45610 R08: 0000000000000000 R09: 0000000000000000 [ 1289.540866][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1289.540877][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1289.540894][ C3] [ 1289.540901][ C3] [ 1289.540906][ C3] Allocated by task 19109: [ 1289.540915][ C3] kasan_save_stack+0x30/0x50 [ 1289.540937][ C3] kasan_save_track+0x14/0x30 [ 1289.540958][ C3] __kasan_kmalloc+0xaa/0xb0 [ 1289.540977][ C3] __kmalloc_noprof+0x32f/0x840 [ 1289.540996][ C3] io_cache_alloc_new+0x45/0xe0 [ 1289.541015][ C3] io_uring_alloc_async_data+0x17e/0x300 [ 1289.541033][ C3] io_send_zc_prep+0x49b/0xa60 [ 1289.541050][ C3] io_submit_sqes+0xa03/0x2480 [ 1289.541074][ C3] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1289.541100][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 1289.541121][ C3] do_fast_syscall_32+0x32/0x70 [ 1289.541141][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1289.541163][ C3] [ 1289.541167][ C3] Freed by task 19109: [ 1289.541175][ C3] kasan_save_stack+0x30/0x50 [ 1289.541196][ C3] kasan_save_track+0x14/0x30 [ 1289.541218][ C3] kasan_save_free_info+0x3b/0x70 [ 1289.541237][ C3] __kasan_slab_free+0x5f/0x80 [ 1289.541260][ C3] kfree+0x22b/0x6d0 [ 1289.541274][ C3] __io_submit_flush_completions+0x1570/0x1ac0 [ 1289.541300][ C3] io_submit_sqes+0xbd5/0x2480 [ 1289.541323][ C3] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1289.541353][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 1289.541375][ C3] do_fast_syscall_32+0x32/0x70 [ 1289.541396][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1289.541417][ C3] [ 1289.541422][ C3] The buggy address belongs to the object at ffff888061785400 [ 1289.541422][ C3] which belongs to the cache kmalloc-512 of size 512 [ 1289.541438][ C3] The buggy address is located 274 bytes inside of [ 1289.541438][ C3] freed 512-byte region [ffff888061785400, ffff888061785600) [ 1289.541456][ C3] [ 1289.541460][ C3] The buggy address belongs to the physical page: [ 1289.541470][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061787000 pfn:0x61784 [ 1289.541488][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1289.541504][ C3] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 1289.541523][ C3] page_type: f5(slab) [ 1289.541540][ C3] raw: 04fff00000000240 ffff88801c042c80 ffffea0001844510 ffffea0001846d10 [ 1289.541556][ C3] raw: ffff888061787000 000000000010000b 00000000f5000000 0000000000000000 [ 1289.541571][ C3] head: 04fff00000000240 ffff88801c042c80 ffffea0001844510 ffffea0001846d10 [ 1289.541587][ C3] head: ffff888061787000 000000000010000b 00000000f5000000 0000000000000000 [ 1289.541604][ C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1289.541621][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1289.541631][ C3] page dumped because: kasan: bad access detected [ 1289.541641][ C3] page_owner tracks the page as allocated [ 1289.541647][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5739, tgid 5739 (syz-executor), ts 51684264722 [ 1289.541677][ C3] post_alloc_hook+0xfd/0x120 [ 1289.541694][ C3] get_page_from_freelist+0x110d/0x35d0 [ 1289.541713][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1289.541732][ C3] new_slab+0xa9/0x6e0 [ 1289.541749][ C3] refill_objects+0xe3/0x410 [ 1289.541767][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 1289.541784][ C3] __kmalloc_noprof+0x67c/0x840 [ 1289.541804][ C3] fib6_info_alloc+0x40/0x160 [ 1289.541826][ C3] ip6_route_info_create+0x14c/0xad0 [ 1289.541849][ C3] addrconf_f6i_alloc+0x2d9/0x670 [ 1289.541867][ C3] ipv6_add_addr+0x580/0x1fb0 [ 1289.541888][ C3] inet6_addr_add+0x26f/0x9a0 [ 1289.541912][ C3] inet6_rtm_newaddr+0x147a/0x1bb0 [ 1289.541936][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 1289.541954][ C3] netlink_rcv_skb+0x159/0x420 [ 1289.541978][ C3] netlink_unicast+0x585/0x850 [ 1289.542002][ C3] page last free pid 5738 tgid 5738 ts 50085891607 stack trace: [ 1289.542015][ C3] __free_frozen_pages+0x79f/0x10f0 [ 1289.542040][ C3] qlist_free_all+0x47/0xf0 [ 1289.542059][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1289.542081][ C3] __kasan_slab_alloc+0x69/0x90 [ 1289.542103][ C3] __kmalloc_cache_noprof+0x278/0x6d0 [ 1289.542120][ C3] ref_tracker_alloc+0x190/0x590 [ 1289.542138][ C3] register_netdevice+0x17e7/0x25a0 [ 1289.542155][ C3] wg_newlink+0x3af/0x7a0 [ 1289.542172][ C3] rtnl_newlink+0x1697/0x2620 [ 1289.542189][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 1289.542205][ C3] netlink_rcv_skb+0x159/0x420 [ 1289.542228][ C3] netlink_unicast+0x585/0x850 [ 1289.542250][ C3] netlink_sendmsg+0x8b0/0xda0 [ 1289.542274][ C3] __sys_sendto+0x48b/0x4e0 [ 1289.542297][ C3] __ia32_compat_sys_socketcall+0x59a/0x770 [ 1289.542320][ C3] do_int80_emulation+0x166/0x650 [ 1289.542341][ C3] [ 1289.542350][ C3] Memory state around the buggy address: [ 1289.542359][ C3] ffff888061785400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.542372][ C3] ffff888061785480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.542384][ C3] >ffff888061785500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.542393][ C3] ^ [ 1289.542403][ C3] ffff888061785580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.542416][ C3] ffff888061785600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1289.542426][ C3] ================================================================== [ 1289.542436][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1289.895489][ C3] CPU: 3 UID: 0 PID: 19256 Comm: syz.0.3283 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.898641][ C3] Tainted: [L]=SOFTLOCKUP [ 1289.899923][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1289.903024][ C3] Call Trace: [ 1289.904139][ C3] [ 1289.905097][ C3] dump_stack_lvl+0x100/0x190 [ 1289.906562][ C3] vpanic+0x553/0x970 [ 1289.907882][ C3] ? __pfx_vpanic+0x10/0x10 [ 1289.909245][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 1289.910684][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1289.912098][ C3] panic+0xd1/0xe0 [ 1289.913215][ C3] ? __pfx_panic+0x10/0x10 [ 1289.914550][ C3] ? end_report.part.0+0x23/0x90 [ 1289.916033][ C3] ? rcu_is_watching+0x13/0xc0 [ 1289.917416][ C3] ? end_report.part.0+0x23/0x90 [ 1289.918884][ C3] check_panic_on_warn.cold+0x19/0x34 [ 1289.920481][ C3] end_report.part.0+0x3a/0x90 [ 1289.921962][ C3] kasan_report.cold+0xe/0x18 [ 1289.923425][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1289.924922][ C3] find_endpoint+0x2a3/0x2c0 [ 1289.926385][ C3] dummy_timer+0x500/0x3700 [ 1289.927833][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1289.929539][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1289.931171][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1289.932625][ C3] ? mark_held_locks+0x40/0x70 [ 1289.934022][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1289.935727][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1289.937184][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 1289.938679][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 1289.940213][ C3] handle_softirqs+0x1e6/0x9d0 [ 1289.941665][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1289.943243][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1289.944703][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1289.946418][ C3] __irq_exit_rcu+0x16a/0x210 [ 1289.947914][ C3] irq_exit_rcu+0x9/0x30 [ 1289.949200][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1289.950847][ C3] [ 1289.951760][ C3] [ 1289.952638][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.954372][ C3] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1289.956368][ C3] Code: bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 1a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 1289.961836][ C3] RSP: 0000:ffffc900033ff780 EFLAGS: 00000246 [ 1289.963603][ C3] RAX: 0000000000000007 RBX: ffff888027f22680 RCX: ffffffff82da67bd [ 1289.965930][ C3] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000080 [ 1289.968234][ C3] RBP: ffff8880515e2a00 R08: 0000000000000005 R09: 0000000000000000 [ 1289.970551][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000100 [ 1289.972942][ C3] R13: ffff888027f2247c R14: 0000000000000000 R15: 0000000000000000 [ 1289.975418][ C3] ? ext4_fill_raw_inode+0x106d/0x1eb0 [ 1289.977126][ C3] ext4_fill_raw_inode+0x106d/0x1eb0 [ 1289.978709][ C3] ext4_mark_iloc_dirty+0x5da/0x21b0 [ 1289.980262][ C3] ? ext4_inode_journal_mode+0x265/0x450 [ 1289.981892][ C3] ? ext4_fc_track_inode+0x16b/0x360 [ 1289.983468][ C3] ? ext4_reserve_inode_write+0x271/0x330 [ 1289.985114][ C3] __ext4_mark_inode_dirty+0x23a/0x910 [ 1289.986731][ C3] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1289.988357][ C3] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1289.990104][ C3] ? trace_jbd2_handle_start+0x83/0x240 [ 1289.991729][ C3] ? jbd2__journal_start+0xf7/0x6b0 [ 1289.993241][ C3] ? __ext4_journal_start_sb+0x314/0x610 [ 1289.994878][ C3] ? __ext4_journal_start_sb+0x17b/0x610 [ 1289.996586][ C3] ? ext4_dirty_inode+0xa1/0x130 [ 1289.998133][ C3] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1289.999810][ C3] ext4_dirty_inode+0xd9/0x130 [ 1290.001335][ C3] ? rcu_is_watching+0x13/0xc0 [ 1290.002905][ C3] __mark_inode_dirty+0x1f3/0x16e0 [ 1290.004602][ C3] file_update_time_flags+0x49c/0x520 [ 1290.006195][ C3] ext4_page_mkwrite+0x324/0x1860 [ 1290.007714][ C3] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1290.009316][ C3] ? debug_object_free+0x295/0x550 [ 1290.010793][ C3] do_page_mkwrite+0x17a/0x440 [ 1290.012201][ C3] do_fault+0x659/0x1830 [ 1290.013459][ C3] ? __pfx_filemap_map_pages+0x10/0x10 [ 1290.015046][ C3] ? __pfx_do_fault+0x10/0x10 [ 1290.016475][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1290.017891][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1290.019310][ C3] ? __pte_offset_map+0x179/0x310 [ 1290.020776][ C3] __handle_mm_fault+0x150b/0x2f60 [ 1290.022270][ C3] ? lock_vma_under_rcu+0x11d/0x590 [ 1290.023828][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 1290.025449][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 1290.026994][ C3] handle_mm_fault+0x363/0xa20 [ 1290.028449][ C3] do_user_addr_fault+0x59c/0x12f0 [ 1290.030020][ C3] exc_page_fault+0x6f/0xd0 [ 1290.031407][ C3] asm_exc_page_fault+0x26/0x30 [ 1290.032857][ C3] RIP: 0023:0xf705f262 [ 1290.034049][ C3] Code: 1c 01 00 00 ba 08 00 00 00 89 e8 e8 88 a2 fe ff 8b 45 20 8b 4c 24 08 8b 5c 24 0c 83 44 24 14 01 8d 50 f8 83 45 18 08 89 55 20 <89> 48 f8 89 58 fc 83 c6 01 3b 77 04 0f 82 9c fe ff ff 80 7d 34 00 [ 1290.039610][ C3] RSP: 002b:00000000ffb9eed0 EFLAGS: 00010202 [ 1290.041374][ C3] RAX: 000000003380e000 RBX: 00000000ffffffff RCX: 00000000829799b1 [ 1290.043661][ C3] RDX: 000000003380dff8 RSI: 00000000000000d4 RDI: 00000000f7415080 [ 1290.046264][ C3] RBP: 00000000f7f45610 R08: 0000000000000000 R09: 0000000000000000 [ 1290.048877][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1290.051634][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.053921][ C3] [ 1290.055515][ C3] Kernel Offset: disabled [ 1290.056855][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:26:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000001b1431f RBX=ffffffff8ea91580 RCX=ffffffff8bd08215 RDX=0000000000000001 RSI=ffffffff8e392125 RDI=ffffffff8c623f80 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd0674f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096955000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000339eeff8 CR3=000000004c92b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000009fe00000000 0000001900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000306bb4b RBX=ffff88801cbfcb00 RCX=ffffffff8bd08215 RDX=0000000000000001 RSI=ffffffff8e392125 RDI=ffffffff8c623f80 RBP=ffffed100397f960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bd0674f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7370274 CR3=000000004c92b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000009fe00000000 0000001900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=ffffea0001c8ba80 RCX=0000000000000000 RDX=dffffc0000000000 RSI=ffffffff828a5950 RDI=ffffea0001c8ba80 RBP=0000000000000001 RSP=ffffc90004c8f218 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=00000000000722ea R15=0000000000000001 RIP=ffffffff820ba480 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faaa8583300 ffffffff 00c00000 GS =0000 ffff888096b55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c06cc30f40 CR3=0000000051921000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=4da0891fba2017f2 e7922952c6c163f9 4da0891fba2017f2 e7922952c6c163f9 4da0891fba2017f2 e7922952c6c163f9 4da0891fba2017f2 e7922952c6c163f9 ZMM18=e822df30e44f5c0f b27ea21542affc10 e822df30e44f5c0f b27ea21542affc10 e822df30e44f5c0f b27ea21542affc10 e822df30e44f5c0f b27ea21542affc10 ZMM19=c120000000000000 0000000000000004 c120000000000000 0000000000000003 c120000000000000 0000000000000002 c120000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e71ffffffff8a75 39cfffffffff89e0 785cffffffff89df 37a1ffffffff81ba ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 85ffffffffff8bc7 d747ffffffff81c5 803bffffffff822b 9d01ffffffff89d6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bdfffffffff8a73 8102ffffffff855e 4ebbffffffff8965 ae81ffffffff8262 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8233a452 ffffffff8a72dd63 ffffffff89930e03 ffffffff826b0704 ZMM25=b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 b27ea215b27ea215 ZMM26=e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f e44f5c0fe44f5c0f ZMM27=e822df30e822df30 e822df30e822df30 e822df30e822df30 e822df30e822df30 e822df30e822df30 e822df30e822df30 e822df30e822df30 e822df30e822df30 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c0200000c0200000 c0200000c0200000 c0200000c0200000 c0200000c0200000 c0200000c0200000 c0200000c0200000 c0200000c0200000 c0200000c0200000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afd075 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc900005f83c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000038 R14=0000000000000004 R15=ffffc900005f86e0 RIP=ffffffff85afd09f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003380dff8 CR3=0000000056b4b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000dac00000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000