last executing test programs: 8.894432064s ago: executing program 2 (id=332): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x110, &(0x7f0000001900)="8ebb2a9cddd819d4edb5054fe962df4b17ccddbd5e01000000000000802af7ac41740cfc96d51327d35776cab3bde2a1f017c2bacbe3764a42b57f5c2b8f6b75738c5d0a82710a4d810960ed1cb5557d49cf7fe28adb13a65040b2a1f84949672c99aa593315f698eaa46cd17ff97487e9bcc672f63e4625a5af9ab47a90fdef5739aba2724f8bd68ec0135067fc8c31f8194f7f1f43ed6d66144c0df0d05a7b611562bcbfd2ac6ae3a972a6e07c16000000002d73d65b708e29000000000000000005ac8704c3ab89d947000000000000000000000000e05a459e8ee35327d3f3a4c7d9e1e47f2f396e907ff08572129845302df2cdc72be761ea05880b4e6f28a448addfbb26183178e6c04559f93f"}, {0x5, 0x0, 0xeb, &(0x7f0000001600)="77ca707ca611ce4c8cc54758b39354f07248a11308b0a32fc1b621cd6a5fe894125d5426d84e9411417e552c2aa4e56d9a84394cb52f295a6f82a4240c46e10042ab6893b76cac29cf12e0416bb77f366e1ede49175ae57611560be8fcec3aceedcb76ad9b9c307a677d670d828cf13525782732de7f1039d185ebe7e374376fe9593560b0f7d96ff2f6806b472eda8dc899bd07bee241214097218be13f03bf2dfd02ad5fc4c2a5e6794a167c86a6200eed370c1c90f31d55f27ca46348885bcc530fdbf2ede07ca50b7be85665818d06f66a4503b9dfcab7b0847f1869cf5f7231ae300ea2633b30f4c9"}, {0x7, 0x1010, 0x40, &(0x7f0000001480)="0156e72606943fbdfe3b16ec80e2f4ad7543329bdd62b5ad7637391dc78029c4c66b90dbbd6e8e8b1f859156a8182e0bc926cd3a448f6292a070d87834868fe1"}], 0x26}) 8.836583528s ago: executing program 2 (id=333): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x806c5864, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000008000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000080)={0x10, 0x126, 0x7ff, 0x401, 0x8}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000000000000000080895"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x43, 'lblcr\x00', 0x1, 0xdf, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 7.227964586s ago: executing program 3 (id=347): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000c56}, 0x0) 7.007555698s ago: executing program 3 (id=349): fanotify_init(0x200, 0x48803) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x3f, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000001140)={{0x7000, 0xd000, 0x9, 0x8, 0x8, 0xbd, 0x4, 0x9, 0x40, 0x4, 0x24, 0x5}, {0x9000, 0x60000, 0x8, 0x5, 0x2, 0xfe, 0x40, 0x3, 0x8, 0xfd, 0x8, 0x9}, {0x70000, 0xeeecd000, 0x3, 0x2, 0xf, 0xfe, 0x6, 0x3, 0x40, 0xc, 0x6, 0x6}, {0xdddd1000, 0xb000, 0x4, 0xf7, 0x48, 0x0, 0xf, 0x5, 0x42, 0x9, 0xa, 0xfd}, {0x70000, 0xe000, 0xe, 0x81, 0x9, 0xf4, 0x1, 0x6, 0x3, 0x7, 0xf5, 0xd}, {0xeeee8000, 0x30000, 0x0, 0x1, 0x3, 0x5, 0x1, 0x7, 0x0, 0xd2, 0x62, 0x2}, {0x26000, 0xdddd0000, 0xd, 0xb5, 0x8, 0x1, 0xff, 0x6, 0x7f, 0x23, 0x9, 0xa}, {0x80a0000, 0x0, 0xd, 0x46, 0x5, 0x80, 0x9, 0x6, 0x6, 0x7, 0x6, 0x9}, {0x3000, 0x8}, {0x40000, 0xb}, 0xc0000008, 0x0, 0xdddd1000, 0x20000, 0x4, 0x2100, 0xe000, 0x0, [0x0, 0x2, 0x6, 0x7fffffffffffffff]}) open(&(0x7f0000000280)='./file1\x00', 0x140, 0xf1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000005303000008000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f040012800800034000000106140000001000010000000000000000000084000a7e0c0770b8b7343bcc0d8228ebd1499317b91490afc517e58e834edc"], 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x20050810) r6 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x7, 0x2) tkill(r6, 0x12) tkill(r6, 0x14) prctl$PR_GET_SECCOMP(0x15) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xeff, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r8, 0x40047457, 0x0) 5.421985515s ago: executing program 2 (id=356): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x3) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) tkill(r1, 0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_io_uring_setup(0x2998, &(0x7f0000000400)={0x0, 0x55cf, 0x10000, 0x2, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_INFO={0x2c, 0x3, "ac1a91d256ebf87b31fd38a2be95c85844a4f447fd7a4bfafc0f574e29fdc1532d88822344f6b765"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}}, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r12 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) 4.927955059s ago: executing program 1 (id=357): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c56}, 0x0) 4.867011986s ago: executing program 1 (id=358): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x2000, 0xc2b3, 0xe8, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xffffffffffffff51) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r9, &(0x7f0000003c80)=[{{0x0, 0xa5, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x153, 0x20000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) recvmmsg(r8, &(0x7f0000000b80), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 4.254199965s ago: executing program 0 (id=360): r0 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002680)={0x18, 0x0, r1, {0xfff}}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) close(r3) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x50, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x3c7, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x4, 0x0, 0xb, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) clock_settime(0x1ed5d7403, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000020601080000000000000b99ebc30f839f6102007379000000000000050004000000000010000300686173683a69702c6d6163000c0007800b0006400000000005000500020000000500010006000000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000ea00000000000000001a79f765ad6613ef2a17306c3800decb3e6b9f077f0100020073797a32000000e90400010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x8aec38bcd76dffaa) 3.844263181s ago: executing program 2 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x1000, 0xa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x18, 0x3, 'bas]\x90\xa3\xaa9o\xcf\x82>\xe2\xfc\xd1Q/ic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) r10 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a1007508000000009102c0c0", @ANYRESOCT=r10], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$HIDIOCSREPORT(r11, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 3.811381238s ago: executing program 1 (id=362): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x6, 0x20) ioctl$FE_SET_VOLTAGE(r0, 0x6f43, &(0x7f0000000240)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x20080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) set_mempolicy(0x3, 0x0, 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) 3.67418052s ago: executing program 0 (id=363): socket$inet6_sctp(0xa, 0x1, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x110, 0x0, 0x0, @pid}]}, 0x24}}, 0x4008094) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r4, 0x701, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x2c}}, 0x40) r8 = socket$rds(0x15, 0x5, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x800) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@private=0xa010100, @remote, @broadcast}, 0xc) setsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f0000000200)=0x81, 0x4) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x42}}], 0x2c, 0x4044004}, 0x40) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES64=0x77359400, @ANYRES64=r8, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 3.594462671s ago: executing program 0 (id=364): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {}, {}, 0x0, 0x0, 0xe08e, 0x0, 0x1, 0x9, 0x8, 0x3, 0x80001ff, 0x3d, 0x5, 0x4, 0x53, 0x202, 0x1, 0xc}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) 3.558178121s ago: executing program 3 (id=365): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x2000, 0xc2b3, 0xe8, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xffffffffffffff51) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r9, &(0x7f0000003c80)=[{{0x0, 0xa5, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x153, 0x20000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) recvmmsg(r8, &(0x7f0000000b80), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 2.637872291s ago: executing program 1 (id=366): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbaa7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e23, 0xc0, @local, 0xc58e}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x3, 0xff00, 0x0, '\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000004000)=""/4099, 0x1003) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03dd2dbd7000ffdbdf25010000001c000ace958bebd058194902e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.138095397s ago: executing program 0 (id=367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x3) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYBLOB="9180030000200000500012800b000100697036746e6c0000400002800400130008000800010000000800140003", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) tkill(r1, 0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_io_uring_setup(0x2998, &(0x7f0000000400)={0x0, 0x55cf, 0x10000, 0x2, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_INFO={0x2c, 0x3, "ac1a91d256ebf87b31fd38a2be95c85844a4f447fd7a4bfafc0f574e29fdc1532d88822344f6b765"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}}, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r12 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) 2.107745785s ago: executing program 3 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80201, 0x88) 2.037834913s ago: executing program 3 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, 0x0, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x84, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd79c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0x850003d1) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl(r9, 0xc138fd02, &(0x7f0000000000)="04") 1.50617846s ago: executing program 2 (id=370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfe}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf9}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xa}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4060}, 0x20000040) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r0) 891.224498ms ago: executing program 0 (id=371): r0 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002680)={0x18, 0x0, r1, {0xfff}}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) close(r3) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x50, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x3c7, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x4, 0x0, 0xb, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) clock_settime(0x1ed5d7403, &(0x7f0000000180)) r7 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000ea00000000000000001a79f765ad6613ef2a17306c3800decb3e6b9f077f0100020073797a32000000e90400010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x8aec38bcd76dffaa) 114.743012ms ago: executing program 0 (id=372): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000a80)={0x20, 0x14, 0xe, "ba575414d488a924d3fd79e4f41e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0xb1, {0xb1, 0xd, "bc116f4f55e1feffb7110401b16a22cf1678a71656af103c37e38ce381828e25bf4208f5ec0c0beb406f02c26bda900c23b1c221534b54cd824bc1617f33c1ebd64a767ddddc3ba09ad02657de4925ab9030698d001aa5a4c92e06c53a92d9d0de29d59d904bdbed5d6658991f4b8354bc11c52f3c678f9a9af073936a74ac0f00ae970cd3db21650b02a9a3b6b42ffe32b2e91de9ce7b756015230ea24db7300f5c2704ed2512d5d3292d340fa082"}}, &(0x7f0000000180)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "770ae46334e314cfab34bbe1c7f942b5145809343e1ff9b14324073302c80e3583e7ba7c2e8467b39186c314ef4dec4d50a9a61fec4ff90ab9651c599d845e47a0f0545938d6c6928b56a4e1855f780593b6230a0ff547f08f13a177203c8247f109fba5679962f017883a07bfa3c960b2523f974be713f4fa0f86f523248d79d7d4c7cf898b70abe5ec64d43c63c8724f7b2d0ac9fd3901d575e7afb0f9f297a696894681a5f375933a807f4dfe3637334b147d67be48586a47dc6eecd67db380f5a9ac1fa463991c0308"}}, &(0x7f0000000280)={0x0, 0x22, 0x13, {[@global=@item_012={0x1, 0x1, 0xa, '3'}, @main=@item_4={0x3, 0x0, 0xc, "a314ec22"}, @local=@item_012={0x1, 0x2, 0x9, '{'}, @main=@item_4={0x3, 0x0, 0xb, "731fb0f5"}, @local=@item_4={0x3, 0x2, 0x9, "40567798"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xf1, 0x1, {0x22, 0x673}}}}, &(0x7f00000005c0)={0x18, &(0x7f0000000340)={0x0, 0x18, 0xb1, "5db2317b81b6bebfe7e31335e7fbaaafdf2975f682a8619519d007c62149f585a7360494633989283cd3b9f9d4da8e3e288b48c387ac982e8405f9981a77a84ef5b956fc36eb79e82a5f7725ea348d782d17f5514e932f590d362e777da1a6a5974f550e0fb78fc75fa988ef02908a14b445de6cdf4d6f3db149efbbd86ca319a4c11f484878a595405785a6a5dfb60996f8f4158de644874c60f4a2cadaf96d9cb1f4cc69bf8ce1e91b2167cf73ad102c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xcb}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x1, 0xc0, "1bdfb487f22be84fe5aea95d684a08c41659ed9c3ae8bcca05f881d3af0565ac1217cb23de99ef97e43d1ab0b8a7eaf55625ef6808526dd41ee9a8455a87d3b599577feef6b4ddf65e000e0a109b4e6450323420fd0621d735b2dabe3c507ae4a8ba366843fd3cd6c2cc6e129287c30b6d1eec5d20e788a40896700522cefed7e0b6cc6da4ffaadb3e7fdb51bdc78c801da5f617afc62bb770f7a1687a0343a1f83a4f455c2f3831e2bd00421cad9dafff0ce900356f1a7b59346c9a14bee4ff"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xe0}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) 114.092957ms ago: executing program 1 (id=373): capget(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x7, 0x6, 0xfc, 0x50ed, 0xfffffff3, 0x200}) 102.998628ms ago: executing program 2 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/24, 0x18}], 0x1, 0xdc03, 0x2005) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 85.191789ms ago: executing program 3 (id=375): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {}, {}, 0x0, 0x0, 0xe08e, 0x0, 0x1, 0x9, 0x8, 0x3, 0x80001ff, 0x3d, 0x5, 0x4, 0x53, 0x202, 0x1, 0xc}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) 0s ago: executing program 1 (id=376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf042bbd7000ffdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099002f0001000005001301000000000600ed00ce060000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000002680)=[{&(0x7f0000000200)="2e171679aa5382ea7709fa73ce4c710499e65f0b2bf897357a880d0d31be3ca4679d0195cd32c8f10d39a636ee15bbd9733ff5b3922cc98e7c445533d5bef803a4e61639ac7b61478eae0e7222d30bcd6d22d880eb5ce73857a22395d9bfce22a342d5b715e29f78135b35c7730838fdbb573425cb", 0x75}, {&(0x7f00000003c0)="297cc89c07456a3041b8dce7feb88eaa29dbbcf73007cbba5da97ecde096de0f5cc1ccfdda4b733398b29579d3a63249c5104f890c111fd663e192a85b10d1689761ae64c2f148de968dc7638e6fc8018b661535ebb80947e2b4e81ce66cabcb118a01a0b78a10611c9351507b334a804fac550f8db723b4802f3fd71dd787a4f2e6ae24957e3c2eae24870ffae78c160b9ba8e703090fb4ab2d5a5501392ed691f229f2f15ac6fb08e3d30d11b37964d39ef63b5f48be6923393a4b5d95bdc6a9d43dc2e54e295f54c715b2595b96a61f83e2da8b058b301812b923e689", 0xde}, {&(0x7f0000000500)="d6891d0e0da61247f8ebac975fded2a960698945b57575f7b083c3b3016f9c8a8cb700f458305d2e7341e408adebea9d3ee5d9f0acdcb3e2ef924dd0c04a69281f557398e674f44f8079fe2b0301", 0x4e}, {&(0x7f0000000580)="9d14665f41c35b5178469cd2f0de653239e8d64f1859719e34e21b7565d5b502dbeac910860b38f34f9a519fbd301fa436be54c52a7515d3c9a63d787930f5dd666c731196d0ed274aa03b9bbe579f2c4d5a5b80dd4650a3ddb3f09614969e48ee3f6deb0bdce7802733504eba37ba74176748d8424bc15befdf8a8dd5470837dcb7d28023abc1e4cd11bb5c91f380b87ce18fac6e4462df15ae34716699c0af8f6d56caffddee65", 0xa8}, {&(0x7f0000001640)="777523ab0e63014f307ab9482e8c637768749a9f484a586a7f1240f8a70317a52f95595ab76e9b488159dd12f94550f57bf27dd631c3a516b031a39c2427d311d13c682ef271ba97e9af8099f9283fc93207d81837917847a3b3e2162800655b123c594af13d77d43482e50530098d283b4a033a9af9acf00f4dd3b1a6c4ff3c8a548f517e9fe3303341c8c314da4d52df49e60cdb9c66c52080881e93a1a93c1b88d5f1c1db41b7e7442e8283a11d466ee48367eeb6596c7b564028e34c39c4c2ffacf84dacb130b5c9a16aaee3b5a31850469dd0a9021f511f24ffa978d64c3659e6d10ad79342e2e2403e1334484406dde1a0d5c70998b261ef74a1b63385bb16597f6fd424eb92f9ae017675e3cac68e80be53f6670b5fe526e6a2838d9da63e068dc83b3cb2317a1b24ccb415ca1e9368f751f2cee306eb7d174d44a3e6b3429c5113f3a8f44010866bb2d6802ea7785ceb10cdfcbf2219c892521d0ec8edc856aea2559f86edb5fada01d598c539e4e6bab47b832d49aa799588f3bd8e98d8d490f19bee05216c7b47f28bccad2774f2cd3757908f0ce723b75662ab0d9c497206624f344c3914d0089892ccad3ec4567e8fd641a0f9ab9f80fbc93def364d49b6a0d78ca984d4c8df5dc667af2997b4afd33875c1b7c10195b9493455604970ead38efdc849c634f8c94fb54fc5674ec437774ba5d8b2d06789b370e3025d7d0ded30228975f9b1925155a7c99a52b5a16eae4110f76ee02e28a9c63284fd48f4d5ba3e3f4daaa781d6820e1a72ed473d69800dbcd6dd3bfff1dd70715b1114207332827a524b4d5c2cfb78144d4c024be1804973f41dfeeb54950ff7a3ca236a4f121c2d3adb61f61fb695773d88689ff9fabf1e982daea2dd197ac75a933f9d284fc4048627bc72dbd9e9388115ae065397b19e37c409a06ec69c9ee990a3e43ef2ee793f8d801ddf952cde157562a998db96d7ff1c2af909feeddfe9970e48bc07aa7622dfb0d08a88f2783a3a87e4af4dc89cf658856ea35d02f104b9e9334eb668a9037f851670079b149f47564b8639531d49d1e5c899738cd1d79b5910a0782f32e907355308a7f9dfc886c56cc3479c9edfb62195de8b1969c8474a024e1fdef7d999d98f11de4cde83cb9a199ed8da905e72aa50f9accf457359bf5214fdc2f09f161c4f333921764f3db1e9e77dcb35dc41bfee135f81342aa6cb721f066cdc6ca21f7561375fd68524897761b61d7c1260c20479ac533bb6431530da35acf199b4517a56f2e4985bc38a908ff632cbef033e0ab67ebf9c7a1d66c1f9fc8cf2aebd30bc76eff44416457cb4b13bb210930720d33bee5d19a66b2404ff3861848dfaf62ccea1c427c3cf51c2c43f34f3209b7439c447178a500eca797f9d52e909729f78f96f0a2a66f686218adf4675902636db791c15385e114db89bba858d321ada7e5a6520ca952e1ae8e6e21928dd8987301d4696302c123d654450f02172a7967f5c463a43017df71e3bc4e196b8db2e93d84633ad28f3b56ea79ca12357936a73a0aefb95acc21ef6c960a29ba26f7ea502a41d24d4cc4a9f1a0a06402e8dd41043ba281b86df483a206116644b4dd1481f276ae4d3ce195f32a0f56b26bae2988688c7c629fe817eb1e7f183ced4b34358c6643faa6fe3fec3127185163d606a052f920de87d684842436f8010ada9845186e6980f3ab0cbc7ce68ececf5fd3f89d0669ba20f0a1dfebe57fab23b9cd44548691eba036d7a128843bb1add0e4f13ad80989fff151d10313c8aae13120d3e960ef3bb0adac5137958860211441670a5fa2aadc0bbe693329284a95c13e47c48440a62a477d6f090583b078e5912b90fbed06ab4f6ecb30cede679f81639dc5e373efcebb045d5a36de4153ef29e9a745bd2f47f3f3ca7fbbaebf43d5b03e62c80d33005d2be6ff9928ca2d8c2874cfc83e6ab9a390ee6b7a8e6f75023b39c5d24f163d1e2975aff58f0fd24dce3266c06edaf6ee7b7380c3054ddd00bdb4555cd3b1fe950967b74d7919aea24e77d7a3db37d5c59cb7c8e474dc7d52b73ca8663bdb3b4ef884eaf1fdc232f230bbcb05c6cbd98b21182e54a7b4daff977ebdd0c1cdfb740e552abb0f0ae04b6f2c629e1c4e24594fd71455433bf58e7c5ced349fab506c10e1a9d24ea47decf88fc33db253937be8c01c58aeb8d22e57f05cebfa196d2c4bb1ef5b7207fa088e286406f08dab4673b15248379d77cc81d59d0990fdf352d768a06f5f658187110a9e6899e35830c3b251c19fd0b4c196bbbb0acb9e44137daf72d89ec06cfbbb66907f715014aeeb8a0882170152a09e0cde32db0f8e8007d5ed6d81b8e8dcf7ff9d6a0266e5af01d5b3b9511cc2cb7b4295a192fe064dc8f53d93088e74844ab8a41ea79fd3ee01af61e0f7a00188f268b9b9f1280c7fb73d682cf75db9be66f2ef2a2e99dfcef10ea64136a29f47742322695303ad6f7e5b1775070352f4880ffb3a3361b6136f1cc442e7ec562470fb92b698c34c644570fe2ca6a701fc3edf461e032781e4e0452891e3498f162200ee3ccea5fe903855a69b277e18b616e4f6c6a62b0a1efc37975ef695c1b74ce2bef5f2a0c472e79c458df9e57e6ccdccbd969390ff4533ea8c690a4096a26b0a7b7da44a80f491fb57da21b0f4f638a11b5db5a7aa027cb0c8ab2334819b338feae1159b97821de48f9c429ff6f3cc3f08cb49764efd5b3894bbc5114a4c7abde31159d111fa0c5c1c81fab50becb5228842d0dae1fa1848a0dc525c6424c2bd80a141b7fcffd4f1389aab253c39fdc230f814aacb9d6e12a7f68c7c6fe4e82cd53e406bb7f93490f4355118f06d79eae3914449e228e2ff1e2cc2e41400a8dd5cdeec21f6bf7b265a4d5c868e949c589f7dfe6e88d92c0e5563091409c938d74581e94e767a79db371654163bbfc1ed16b4f898312fb856aa4e5ff26da034d4c5c89491af086416e29659e6e130e3bf80cb4426fa044a0be188c9ef73fab9aaf15d41e3fd0036ddcccb0d882d8f322e382dc147c679c4ae43f69303df4cf6859d157712c3f5b46c0c3aa31d3d1fc39796db7eb0e20b33602cc739ca5c88d96938a9c93cc92655fb97f42156985b4709267cf4a211d5ac5e2dac62af76a2a8603d53e124ee6fa98b114facbf481f8b532cf1f15666d889ed835fabfdc5da36dbf50bf7933ac3734b8029bf654957e48596e795260ab9dee84a555213d47ba01f9c768f5a97bb1e209226ab37686ec95cec047eb01ff86eed0741fd5e1f810d460280a5faee3016843b5cc0c2d270cc2801742bc90d6779102c7dc8f36dbfd2f45669b8a607bf7adfdbb151b2f6e5a0300ef92a4aa50e253869da82a00b622c7666298e808b3f753838883fcbebb2d9ffb90474c3d8ed455f6fa0049cae4f90106b06d3cfe7fedf6b497b64abc9f621fd4c33308131c02d5bbaf2d064c47a02729d998c3323d99788fe26bcb8272a45870fcc3ab8820d10d254a234b7f8f365b276cac785a6a3d0f4384f6d57a5af53c3cde30b8b376b10722634742e5a7baf7644329d98d874bd1979d5efa2f192094fa73e824680860c0807554af9b1b415d796e0b8a7100715eb7a450a5df089ae38526d417154aff3cf0cf4730f6c2b1c49fe3dcc6bbfe4f9a787b27739881d433e3e173b61984c52ce8ab7c920b7ca9d915641dfd3c242087d557d86c950d79ac6859ab3aacefabe98fc9e9575c3afb30d0efb2b110a20347f85b651114497bacbf464980759a74ddaab31ac3985248a1f819242fb4e52b88c75c3b6405c603cb6d563af14ef904589b9a96dc25bfedaf7b5d0d4df9995d71ff214d9b1a5a839933dd1b076377dd57901b81630b2d0c546d441b037b8c8daddad622a62472b219de048028dff6b5224fadb534c949c34e0d93505df70ebd71cbcd941a14e1e134651b2f38f941be4e9e0b3904c2bcb0b31e9607b5b6ce671940c38abd354f8cd3c549b92ca8ccc653397dcf480f0a8e9db9c43823fd0fe3b050ea9a3bb2ef78e494bff84234449c28cf723a04d03cee9484a35ba66350b97e2f84a2d12889c403478fb77da8d912a42d2a7815b4500e7273d14e54b55dd1b40bfa7c60de48cfcaf118dbb3b19690d4bc17314709241edbd4c9a6f8647603b79376bf47eaa514c9b93ad6b5062c772d50a4ec713f02f6493208e09b6c46a60213b1b5c64b80c3ed9e0d01b79edbede40ea74c4e513c22eafbccc523bb5bca60e01418401e38cd07e4b591599250e283a7db1fec8b1e74b8ca4c417fa8cced69b905f871d32c699712419c6379fae47821f8d4e162b4080a0dfdde617593b94d3109d7bc76661520b0e24190d588dc8c64640f0a4d6babb34071c11497e5dc09d82f5349a20446ca7cea7deb9aae160614972d7fe36de6dc28be9886ca7f1534c52e6c6a1ef0d0e8086cc7c3aec3113af383343ded69e63e71531a297e1a38ca497ecf581d4e34949947e8639fb499c283522b7322900d6eadcdde96b10130084fe38bc9c8de5802bd4780c07c2aa3eb630f08cac3947e2a2ed63712d926b44c852811827fb9ae5fa2dd438d8a172f36cbfd08110047b194dd50bf125aa223e53f73b86097cde8e230444d3bbd2f387414fad7b09267dac62109e5453ebdd8aae0e33f24b38ee9e10f043d9078ad24880350e21e31c1dbe4f51f8f95fdd76be49a6f94ee3be54d3ce7280442d952ea4a69b26de2ea83ba8265cce5bd1c6236b662860a337cff858ab8c19aa10a4c072bb78d631d936553535ecd4774fa5720e2d3a8b14261c4a14bf757f692c889ceb43fff332e26cea4ef7f0f217d9215dd52fd7d40698d793dab882b80c2f5446d724818c6df62acecee59d26be6738265eaac1e8ede629a74a22ea61012db4d29007b8ae75b06b773dca518eee31136a8d26f05e130548897c6bae554e0ebeccbe176fe3ec5d28e2c2230f131f8eb5ccc3b30485de65acf11a3acb80371a8ea76e0fd70bbc285b5a8bdabd63cb2b2c0e7cbebd441c256a7309300f7bfeb72b5eb294fcd557f27aad71beaef9fa9d61faf383ab9162d9ef5af79f2f7d72e71eabb798ce6bde62b5ecf4909ad4cc09da4b3cb5e81f28b1bb78a9f38f725770dfee6de9282739552f1b850d6f940426ef8b6c031b0ff3749fcfd6595fa30c16fdfd042dba78913f669ceae48d6b96b2582d6ffbe17bbaa953bef55d1c09ff7066ea241b70c888ed5392d7e1d4a3f17a7d24e45a19b6169e4a97669d8d6bd05958a887981da9e714b48779c60c62ddb92f181ee2ee7f4054cd69f7b496cdc9ca723719b55a343ce9a3bc6091ad40ed2fb24b7145f46565c140723c66a1955d1ad851e508d5cbb8076683ebf708b4eb572d9f3c6c3883a83a1ddb866052b96b9dc55ac4adbf39f0557d4d25e6a3809991226017051604fd439d6097af92d7d2ac106557a3542cb167450898ccab20931d095cffbed454755b31340ff8e56e809efd519c7c5363285f3f57daba81d3c6435e6a9c7c1d1a727243bd2c7551389b9ef9281b91014ce31f825e1f38524902e99dac36ab26f96c5f844a6b6d74d1892be0fcd3fb22bf9a52d50be5421b77ebc593c2505c8c140048d5bc4e640b7eb4a63affd06d305b8f5cf37fdd436204bb85db56c5c22331cff35ed946ef45758f56460a5c1ed62161bd4f0c51e8a6bea6eb284756e19960dd148d7e74e359a9604176896ff2c2626b90801f57c98d500c953136fca6e1b3a1d1aeb0a6c66819e2a029bd96e50abe3403a14b95e7ff30fa7", 0x1000}, {&(0x7f0000002640)="1c50bc23f38def9b8c44be19f585de07786e9026226366f83a6c2b2668868d4186c3932925e586", 0x27}], 0x6) close(0xffffffffffffffff) timerfd_create(0x2, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x5392, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1000000, 0xff}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000280)={0x5, 0xffff, 0x4a, 0x1, 0x81, 0x1ff}) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r8}) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) (fail_nth: 8) kernel console output (not intermixed with test programs): adv_slave_0 [ 48.177212][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.187378][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.194257][ T5739] hsr_slave_0: entered promiscuous mode [ 48.196630][ T5739] hsr_slave_1: entered promiscuous mode [ 48.199041][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.200915][ T5739] Cannot create hsr debugfs directory [ 48.209961][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.212280][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.221409][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.271397][ T5754] hsr_slave_0: entered promiscuous mode [ 48.274138][ T5754] hsr_slave_1: entered promiscuous mode [ 48.276900][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 48.280239][ T5754] Cannot create hsr debugfs directory [ 48.336284][ T5741] hsr_slave_0: entered promiscuous mode [ 48.339401][ T5741] hsr_slave_1: entered promiscuous mode [ 48.342271][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.344558][ T5741] Cannot create hsr debugfs directory [ 48.561763][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.567883][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.580946][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.586770][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.593960][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.598548][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.605075][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.609784][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.627937][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.632352][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.635783][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.639689][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.644576][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.649788][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.662200][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.667271][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.702928][ T5754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.707480][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.712317][ T5754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.717611][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.725505][ T5754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.730623][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.734527][ T5754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.739240][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.791690][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.797159][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.800257][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.807235][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.810383][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.818324][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.822493][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.830104][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.906077][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.935466][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.952723][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.955407][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.972316][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.980191][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.983236][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.009952][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.022158][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.043061][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.053990][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.056420][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.066448][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.067804][ T5751] Bluetooth: hci3: command tx timeout [ 49.068581][ T5753] Bluetooth: hci2: command tx timeout [ 49.068611][ T5742] Bluetooth: hci1: command tx timeout [ 49.076446][ T5753] Bluetooth: hci0: command tx timeout [ 49.078185][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.084157][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.086346][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.090203][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.092479][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.108476][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.110885][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.135644][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.151670][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.154467][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.180162][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.182427][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.366819][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.401947][ T5740] veth0_vlan: entered promiscuous mode [ 49.409738][ T5740] veth1_vlan: entered promiscuous mode [ 49.429185][ T5740] veth0_macvtap: entered promiscuous mode [ 49.433714][ T5740] veth1_macvtap: entered promiscuous mode [ 49.445253][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.455234][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.486997][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.498466][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.518562][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.533156][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.534701][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.535803][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.540783][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.559426][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.561873][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.591939][ T5754] veth0_vlan: entered promiscuous mode [ 49.601021][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.604838][ T5739] veth0_vlan: entered promiscuous mode [ 49.613744][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.615811][ T5754] veth1_vlan: entered promiscuous mode [ 49.621758][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.624971][ T5739] veth1_vlan: entered promiscuous mode [ 49.630074][ T5741] veth0_vlan: entered promiscuous mode [ 49.631642][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.642644][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.646486][ T5741] veth1_vlan: entered promiscuous mode [ 49.677745][ T5754] veth0_macvtap: entered promiscuous mode [ 49.686203][ T5754] veth1_macvtap: entered promiscuous mode [ 49.696098][ T5739] veth0_macvtap: entered promiscuous mode [ 49.700377][ T5739] veth1_macvtap: entered promiscuous mode [ 49.709707][ T5741] veth0_macvtap: entered promiscuous mode [ 49.721654][ T5741] veth1_macvtap: entered promiscuous mode [ 49.728935][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.742312][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.748672][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.754650][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.765840][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.789474][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.914982][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.917567][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.937345][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.940403][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.976471][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.982937][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.986415][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.007474][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.010033][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.144220][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.148176][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.151006][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.154567][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.158032][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176317][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.181119][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.226595][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.230626][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.316543][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.321542][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.358316][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.361935][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.373997][ T5900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.381953][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.381982][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.390000][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.418947][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.433662][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.579575][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.583034][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.639950][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.644954][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.816346][ T5821] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.820143][ T5821] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.823123][ T5821] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.826016][ T5821] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.835406][ T5910] jffs2: notice: (5910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.942389][ T5917] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 51.129447][ T5919] syzkaller0: entered promiscuous mode [ 51.131729][ T5919] syzkaller0: entered allmulticast mode [ 51.147402][ T5755] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.150092][ T5100] Bluetooth: hci1: command tx timeout [ 51.150123][ T5751] Bluetooth: hci0: command tx timeout [ 51.152760][ T64] Bluetooth: hci3: command tx timeout [ 51.156137][ T5742] Bluetooth: hci2: command tx timeout [ 51.371882][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 51.391158][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.440435][ T5755] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 51.445244][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.449812][ T5755] usb 5-1: Product: syz [ 51.452023][ T5755] usb 5-1: Manufacturer: syz [ 51.454088][ T5755] usb 5-1: SerialNumber: syz [ 51.524045][ T5755] usb 5-1: config 0 descriptor?? [ 51.585080][ T5755] hub 5-1:0.0: bad descriptor, ignoring hub [ 51.605162][ T5755] hub 5-1:0.0: probe with driver hub failed with error -5 [ 51.726879][ T5755] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 52.589090][ T24] IPVS: starting estimator thread 0... [ 52.677780][ T5933] IPVS: using max 43 ests per chain, 103200 per kthread [ 53.036372][ T42] audit: type=1326 audit(1785957376.292:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.044046][ T42] audit: type=1326 audit(1785957376.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.051785][ T42] audit: type=1326 audit(1785957376.292:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 53.058964][ T42] audit: type=1326 audit(1785957376.292:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.062594][ T5947] IPVS: ip_vs_add_dest(): server weight less than zero [ 53.065555][ T42] audit: type=1326 audit(1785957376.292:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.082452][ T42] audit: type=1326 audit(1785957376.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.090856][ T42] audit: type=1326 audit(1785957376.302:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.102880][ T42] audit: type=1326 audit(1785957376.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.110204][ T42] audit: type=1326 audit(1785957376.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.121918][ T42] audit: type=1326 audit(1785957376.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 53.178766][ T29] IPVS: starting estimator thread 0... [ 53.227804][ T5100] Bluetooth: hci1: command tx timeout [ 53.230186][ T5742] Bluetooth: hci2: command tx timeout [ 53.232212][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 53.236213][ T5753] Bluetooth: hci0: command tx timeout [ 53.316311][ T5949] IPVS: using max 43 ests per chain, 103200 per kthread [ 53.501433][ T5950] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 53.580032][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.878274][ T5958] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 53.956410][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.962252][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.017571][ T1349] usb 5-1: USB disconnect, device number 2 [ 54.127096][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 54.133430][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.142221][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.155027][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.168038][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.176515][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.186862][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.192639][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.197735][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.201495][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.204567][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.208086][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.211473][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.214521][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.217499][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.220941][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.223950][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.226959][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.230665][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.233666][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.236880][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.240319][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.242639][ T5964] overlayfs: unescaped trailing colons in lowerdir mount option. [ 54.247403][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.250414][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.254211][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.258245][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 54.262244][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 54.264883][ T34] usb 7-1: Product: syz [ 54.268018][ T34] usb 7-1: Manufacturer: syz [ 54.270042][ T34] usb 7-1: SerialNumber: syz [ 54.278993][ T34] usb 7-1: config 0 descriptor?? [ 54.296791][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 54.502933][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 54.529311][ T24] usb 7-1: USB disconnect, device number 2 [ 54.542383][ T24] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 54.588862][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.597316][ T5971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.747540][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 54.753925][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.759439][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.764913][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 54.770795][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 54.776766][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 54.780385][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.791138][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 54.795154][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 54.797918][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 54.802140][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 54.805693][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 54.809619][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 54.938209][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.112610][ T5982] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 55.126554][ T5984] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 55.182740][ T41] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 55.217291][ T5982] bond2: entered promiscuous mode [ 55.267747][ T5984] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 55.313580][ T5753] Bluetooth: hci0: command tx timeout [ 55.313605][ T5100] Bluetooth: hci1: command tx timeout [ 55.317653][ T5742] Bluetooth: hci2: command tx timeout [ 55.320518][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 56.113883][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.139582][ T5991] syzkaller0: entered promiscuous mode [ 56.141360][ T5991] syzkaller0: entered allmulticast mode [ 56.733642][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.809507][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.817477][ T41] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.821327][ T41] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.823918][ T41] usb 5-1: Manufacturer: syz [ 56.828107][ T41] usb 5-1: config 0 descriptor?? [ 57.255024][ T41] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 57.293706][ T41] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 57.388462][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 57.548783][ T5755] usb 5-1: USB disconnect, device number 3 [ 57.746481][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.976254][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 58.006062][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 58.018292][ T41] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 58.025707][ T41] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 58.029783][ T41] usb 8-1: config 14 has no interface number 0 [ 58.032332][ T41] usb 8-1: config 14 has no interface number 1 [ 58.034722][ T41] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 58.038206][ T41] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 58.042144][ T41] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 58.046269][ T41] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 58.052227][ T41] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 58.059134][ T41] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.066492][ T41] usb 8-1: config 14 interface 57 has no altsetting 0 [ 58.075244][ T41] usb 8-1: config 14 interface 228 has no altsetting 0 [ 58.090471][ T41] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 58.095833][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.102440][ T41] usb 8-1: Product: syz [ 58.105992][ T41] usb 8-1: Manufacturer: syz [ 58.115946][ T41] usb 8-1: SerialNumber: syz [ 58.171852][ T34] usb 6-1: USB disconnect, device number 2 [ 58.181506][ T6012] netlink: 'syz.2.28': attribute type 10 has an invalid length. [ 58.185273][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.187764][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.195245][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.197679][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.200509][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.202742][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.208403][ T6012] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.430733][ T6025] kernel profiling enabled (shift: 7) [ 58.593848][ T6025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.646314][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.816303][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 58.825463][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 58.831746][ T34] usb 6-1: config 4 has an invalid interface number: 55 but max is 0 [ 58.836032][ T34] usb 6-1: config 4 has no interface number 0 [ 58.838237][ T34] usb 6-1: config 4 interface 55 has no altsetting 0 [ 58.847148][ T34] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 58.851027][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.853940][ T34] usb 6-1: Product: syz [ 58.855453][ T34] usb 6-1: Manufacturer: syz [ 58.857136][ T34] usb 6-1: SerialNumber: syz [ 58.908984][ T41] legousbtower 8-1:14.57: interrupt endpoints not found [ 59.178819][ T6029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 59.224809][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 59.284283][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 59.306058][ T6022] Zero length message leads to an empty skb [ 59.867108][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.064627][ T5836] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 60.075089][ T5836] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 60.106849][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.139954][ T6035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 60.184307][ T5836] opticon 5-1:1.0: opticon converter detected [ 60.298131][ T5836] usb 5-1: opticon converter now attached to ttyUSB0 [ 60.617101][ T41] legousbtower 8-1:14.228: get version request failed: -71 [ 60.707169][ T41] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 60.728805][ T34] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 60.730892][ T34] gspca_mr97310a: reg write [21] error -22 [ 60.732931][ T34] mr97310a 6-1:4.55: probe with driver mr97310a failed with error -22 [ 60.742029][ T41] usb 8-1: USB disconnect, device number 2 [ 60.742744][ T34] usb 6-1: USB disconnect, device number 3 [ 60.862217][ T6042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.975718][ T6042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.044250][ T6042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.167374][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 61.352856][ T24] usb 7-1: config 0 has no interfaces? [ 61.397357][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.406890][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 61.417201][ T24] usb 7-1: Product: syz [ 61.421103][ T24] usb 7-1: Manufacturer: syz [ 61.429796][ T24] usb 7-1: SerialNumber: syz [ 61.501488][ T24] usb 7-1: config 0 descriptor?? [ 62.022680][ T6042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.022780][ T6049] CacheFiles: Failed to register: -95 [ 62.122110][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 62.287026][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.306413][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.336310][ T5793] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.348151][ T5793] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.595017][ T1349] usb 7-1: USB disconnect, device number 3 [ 62.688350][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 62.956316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.555719][ T6107] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 64.660584][ T6107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.855287][ T6110] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 64.966417][ T6110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.597535][ T6117] netlink: Unknown conntrack attr (type=12, max=9) [ 65.600412][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.654589][ T6120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.47'. [ 65.913260][ T6123] process 'syz.2.45' launched './file2' with NULL argv: empty string added [ 66.071292][ T29] usb 5-1: USB disconnect, device number 4 [ 66.082932][ T29] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 66.090309][ T29] opticon 5-1:1.0: device disconnected [ 66.304472][ T6125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.396783][ T846] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 66.567679][ T846] usb 8-1: config 0 has no interfaces? [ 66.571295][ T846] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 66.574906][ T846] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 66.578930][ T846] usb 8-1: Product: syz [ 66.580373][ T846] usb 8-1: Manufacturer: syz [ 66.582013][ T846] usb 8-1: SerialNumber: syz [ 66.587426][ T846] usb 8-1: config 0 descriptor?? [ 66.666480][ T6125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.045547][ T6125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.118160][ T6125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.125734][ T6138] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 67.153930][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.356496][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.361798][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.367592][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.373363][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.432131][ T1349] usb 8-1: USB disconnect, device number 3 [ 67.744134][ T6150] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 68.066317][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 68.219099][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 68.223875][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.230605][ T24] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 68.234596][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.238140][ T24] usb 6-1: Product: syz [ 68.239991][ T24] usb 6-1: Manufacturer: syz [ 68.242014][ T24] usb 6-1: SerialNumber: syz [ 68.247787][ T24] usb 6-1: config 0 descriptor?? [ 68.255973][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 68.258520][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 68.266047][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 68.632803][ T41] IPVS: starting estimator thread 0... [ 68.726352][ T6164] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.786806][ T6166] Bluetooth: MGMT ver 1.23 [ 69.044368][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 69.586087][ T6197] ======================================================= [ 69.586087][ T6197] WARNING: The mand mount option has been deprecated and [ 69.586087][ T6197] and is ignored by this kernel. Remove the mand [ 69.586087][ T6197] option from the mount to silence this warning. [ 69.586087][ T6197] ======================================================= [ 69.616548][ T6197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.664074][ T6197] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 69.668018][ T6197] overlayfs: failed to look up (tracing) for ino (-66) [ 70.317285][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 70.920764][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.924300][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.173588][ T6227] 9pnet_virtio: no channels available for device syz [ 71.207637][ T41] usb 6-1: USB disconnect, device number 4 [ 71.289882][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 71.477642][ C0] select_fallback_rq: 28 callbacks suppressed [ 71.477665][ C0] process 6226 (syz.1.67) no longer affine to cpu1 [ 71.615764][ T6232] smpboot: CPU 1 is now offline [ 71.647762][ T6226] warning: `syz.1.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.576270][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 72.708140][ T6255] efs: cannot read volume header [ 72.734934][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 72.742241][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 72.750024][ T9] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 72.754200][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.760016][ T9] usb 8-1: Product: syz [ 72.763616][ T9] usb 8-1: Manufacturer: syz [ 72.765976][ T9] usb 8-1: SerialNumber: syz [ 72.779344][ T9] usb 8-1: config 0 descriptor?? [ 72.782310][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 72.786597][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 72.789726][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 72.802672][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 73.025458][ T6263] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.030270][ T6263] block device autoloading is deprecated and will be removed. [ 73.040659][ T6261] loop5: detected capacity change from 0 to 7 [ 73.128760][ T9] IPVS: starting estimator thread 0... [ 73.226338][ T6266] IPVS: using max 22 ests per chain, 52800 per kthread [ 73.281247][ T6261] Dev loop5: unable to read RDB block 7 [ 73.283216][ T6261] loop5: unable to read partition table [ 73.286093][ T6261] loop5: partition table beyond EOD, truncated [ 73.288231][ T6261] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 73.956347][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 74.120597][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 74.124989][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 74.133633][ T9] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 74.138167][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.142407][ T9] usb 7-1: Product: syz [ 74.144382][ T9] usb 7-1: Manufacturer: syz [ 74.146274][ T9] usb 7-1: SerialNumber: syz [ 74.150910][ T9] usb 7-1: config 0 descriptor?? [ 74.154866][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 74.156894][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 74.161888][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 74.175977][ T9] input: failed to attach handler mousedev to device input8, error: -5 [ 74.617768][ T6285] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3774873600.0), cmd(2) [ 75.276297][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 75.428860][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 75.437863][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.451327][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 75.460194][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.469655][ T9] usb 6-1: Product: syz [ 75.471388][ T9] usb 6-1: Manufacturer: syz [ 75.475649][ T9] usb 6-1: SerialNumber: syz [ 75.478481][ T5755] usb 8-1: USB disconnect, device number 4 [ 75.555752][ T9] usb 6-1: config 0 descriptor?? [ 75.581518][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 75.589577][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 75.639150][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9 [ 75.683163][ T9] input: failed to attach handler mousedev to device input9, error: -5 [ 76.403869][ T6310] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 76.446427][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 76.495439][ T6310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.856602][ T41] usb 7-1: USB disconnect, device number 4 [ 78.346926][ T34] usb 6-1: USB disconnect, device number 5 [ 78.408384][ T6356] Cannot find set identified by id 0 to match [ 78.993591][ T6363] overlayfs: missing 'lowerdir' [ 79.081530][ T6364] uhci_hcd 0000:00:1d.0: remove, state 4 [ 79.085045][ T6364] usb usb2: USB disconnect, device number 1 [ 79.112250][ T6364] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 79.189448][ T6363] syz.0.99 uses obsolete (PF_INET,SOCK_PACKET) [ 79.286925][ T6366] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 79.301485][ T6366] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 79.327156][ T6366] pci 0000:00:1d.0: Adding to iommu group 7 [ 79.339440][ T6366] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 79.500546][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 79.556976][ T6366] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 205525 usecs [ 79.646389][ T6366] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 79.748851][ T6366] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 79.752396][ T6366] uhci_hcd 0000:00:1d.0: detected 2 ports [ 79.766772][ T6366] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 79.786352][ T6366] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 79.794063][ T6366] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 79.800163][ T6366] usb usb2: Product: UHCI Host Controller [ 79.803856][ T6366] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 79.806406][ T6366] usb usb2: SerialNumber: 0000:00:1d.0 [ 79.842225][ T6366] hub 2-0:1.0: USB hub found [ 79.851229][ T6366] hub 2-0:1.0: 2 ports detected [ 79.860029][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 80.048473][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 80.052017][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.063142][ T34] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 80.066223][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.068997][ T34] usb 6-1: Product: syz [ 80.070333][ T34] usb 6-1: Manufacturer: syz [ 80.076322][ T34] usb 6-1: SerialNumber: syz [ 80.111508][ T34] usb 6-1: config 0 descriptor?? [ 80.117497][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 80.119453][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 80.123540][ T34] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 80.399133][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.430074][ T6387] Invalid ELF header magic: != ELF [ 80.446822][ T6387] overlayfs: failed to resolve 'func=MODULE_CHECK': -2 [ 80.541347][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 80.551666][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.106'. [ 80.726326][ T34] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 80.856276][ T34] usb 5-1: device descriptor read/64, error -71 [ 81.096266][ T34] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.165874][ T10] cfg80211: failed to load regulatory.db [ 81.226243][ T34] usb 5-1: device descriptor read/64, error -71 [ 81.252588][ T6396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.261136][ T6396] CIFS mount error: No usable UNC path provided in device string! [ 81.261136][ T6396] [ 81.264558][ T6396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.336647][ T34] usb usb5-port1: attempt power cycle [ 81.676412][ T34] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 81.686335][ T9] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 81.698220][ T34] usb 5-1: device descriptor read/8, error -71 [ 81.850136][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 81.853225][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.858130][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.862824][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.868775][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.873663][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 81.877084][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.880998][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.884492][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.888220][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.892643][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 81.895046][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.898667][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.902305][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.905859][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.912412][ T9] usb 8-1: string descriptor 0 read error: -22 [ 81.914495][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.917682][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.933676][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 81.936400][ T34] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 81.958701][ T34] usb 5-1: device descriptor read/8, error -71 [ 82.068864][ T34] usb usb5-port1: unable to enumerate USB device [ 82.613705][ T6412] lo: entered allmulticast mode [ 82.850697][ T9] usb 6-1: USB disconnect, device number 6 [ 83.006310][ T5755] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.131553][ T6419] lo speed is unknown, defaulting to 1000 [ 83.136787][ T6419] lo speed is unknown, defaulting to 1000 [ 83.141169][ T6419] lo speed is unknown, defaulting to 1000 [ 83.144037][ T6419] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.151040][ T6419] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.157310][ T6419] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 83.162781][ T6419] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.171507][ T6419] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.176775][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.180870][ T5755] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.185551][ T5755] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 83.191493][ T5755] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.194371][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.197490][ T5755] usb 7-1: Product: syz [ 83.198819][ T5755] usb 7-1: Manufacturer: syz [ 83.200576][ T5755] usb 7-1: SerialNumber: syz [ 83.231707][ T5755] cdc_mbim 7-1:1.0: skipping garbage [ 83.232574][ T6419] lo speed is unknown, defaulting to 1000 [ 83.257888][ T6419] lo speed is unknown, defaulting to 1000 [ 83.259959][ T6423] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19) [ 83.272094][ T6419] lo speed is unknown, defaulting to 1000 [ 83.276077][ T6419] lo speed is unknown, defaulting to 1000 [ 83.339647][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 83.346994][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 83.351292][ T9] usb 6-1: config 0 has no interface number 0 [ 83.353310][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.357158][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 83.361478][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.363046][ T6429] batadv_slave_1: entered promiscuous mode [ 83.364938][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.372826][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 83.375766][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.381533][ T9] usb 6-1: config 0 descriptor?? [ 83.390549][ T9] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 83.434490][ T6415] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 83.507006][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.117'. [ 83.531749][ T6428] batadv_slave_1: left promiscuous mode [ 83.653630][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 83.719841][ T6443] lo speed is unknown, defaulting to 1000 [ 83.820581][ T1349] usb 6-1: USB disconnect, device number 7 [ 83.835112][ T1349] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 83.839005][ T5755] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 83.840970][ T5755] cdc_mbim 7-1:1.0: bind() failure [ 83.848282][ T6446] syzkaller0: entered promiscuous mode [ 83.850110][ T6446] syzkaller0: entered allmulticast mode [ 83.857697][ T5755] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 83.862269][ T5755] cdc_ncm 7-1:1.1: bind() failure [ 83.874744][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 83.889862][ T6446] FAULT_INJECTION: forcing a failure. [ 83.889862][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.893799][ T6446] CPU: 3 UID: 0 PID: 6446 Comm: syz.3.120 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.893822][ T6446] Tainted: [L]=SOFTLOCKUP [ 83.893828][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.893837][ T6446] Call Trace: [ 83.893843][ T6446] [ 83.893849][ T6446] dump_stack_lvl+0x100/0x190 [ 83.893871][ T6446] should_fail_ex.cold+0x5/0xa [ 83.893887][ T6446] _copy_from_iter+0x1f4/0x1690 [ 83.893911][ T6446] ? __pfx__copy_from_iter+0x10/0x10 [ 83.893929][ T6446] ? find_held_lock+0x2b/0x80 [ 83.893945][ T6446] ? dev_get_by_index+0x180/0x380 [ 83.893961][ T6446] ? dev_get_by_index+0x180/0x380 [ 83.893979][ T6446] packet_sendmsg+0x1bb3/0x5100 [ 83.894000][ T6446] ? __pfx___might_resched+0x10/0x10 [ 83.894022][ T6446] ? aa_sk_perm+0x309/0xaa0 [ 83.894039][ T6446] ? __pfx_aa_sk_perm+0x10/0x10 [ 83.894053][ T6446] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.894072][ T6446] ? apparmor_socket_sendmsg+0x15b/0x270 [ 83.894086][ T6446] ____sys_sendmsg+0xa4d/0xbe0 [ 83.894097][ T6446] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.894113][ T6446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.894130][ T6446] ___sys_sendmsg+0x190/0x1e0 [ 83.894144][ T6446] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.894162][ T6446] ? find_held_lock+0x2b/0x80 [ 83.894183][ T6446] __sys_sendmsg+0x160/0x210 [ 83.894200][ T6446] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.894219][ T6446] ? __pfx_ksys_write+0x10/0x10 [ 83.894235][ T6446] __do_fast_syscall_32+0xe7/0x970 [ 83.894253][ T6446] ? lockdep_hardirqs_on+0x78/0x100 [ 83.894268][ T6446] do_fast_syscall_32+0x32/0x70 [ 83.894284][ T6446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.894299][ T6446] RIP: 0023:0xf705efec [ 83.894313][ T6446] Code: Unable to access opcode bytes at 0xf705efc2. [ 83.894325][ T6446] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 83.894337][ T6446] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 83.894343][ T6446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.894349][ T6446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.894355][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.894361][ T6446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.894374][ T6446] [ 84.126850][ T6457] tipc: Started in network mode [ 84.129452][ T6457] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 84.132502][ T6457] tipc: Enabled bearer , priority 21 [ 84.180898][ T6459] lo speed is unknown, defaulting to 1000 [ 84.254555][ T6461] [U]  [ 84.290747][ T5755] usb 7-1: USB disconnect, device number 5 [ 84.505258][ T6473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 84.507994][ T6473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.515811][ T6473] vhci_hcd vhci_hcd.0: Device attached [ 84.770552][ T1349] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 84.777031][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.824204][ T6488] 9pnet_fd: Insufficient options for proto=fd [ 84.981848][ T34] usb 6-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 64 [ 84.989541][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 85.015112][ T34] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 85.023939][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.030212][ T34] usb 6-1: Product: Љ [ 85.034989][ T34] usb 6-1: Manufacturer: Ч [ 85.043296][ T34] usb 6-1: SerialNumber:   [ 85.097447][ T5755] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 85.103124][ T6473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.103412][ T6494] syzkaller0: entered promiscuous mode [ 85.109263][ T6494] syzkaller0: entered allmulticast mode [ 85.158412][ T61] usb 8-1: USB disconnect, device number 5 [ 85.321178][ T5755] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 85.366779][ T6365] tipc: Node number set to 10398378 [ 85.509671][ T6474] vhci_hcd: connection reset by peer [ 85.551755][ T13] vhci_hcd vhci_hcd.1: stop threads [ 85.560206][ T34] usblp0: Disabling reads from problematic bidirectional printer [ 85.626062][ T5755] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 85.631902][ T5755] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 85.634845][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.637239][ T5755] usb 7-1: Product: syz [ 85.638563][ T5755] usb 7-1: Manufacturer: syz [ 85.640087][ T5755] usb 7-1: SerialNumber: syz [ 85.643967][ T13] vhci_hcd vhci_hcd.1: release socket [ 85.657409][ T5755] usb 7-1: config 0 descriptor?? [ 85.660338][ T5755] hub 7-1:0.0: bad descriptor, ignoring hub [ 85.662385][ T5755] hub 7-1:0.0: probe with driver hub failed with error -5 [ 85.666246][ T5755] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 85.702648][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 85.748516][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 254 proto 3 vid 0x03F0 pid 0x0004 [ 85.768739][ T34] usb 6-1: USB disconnect, device number 8 [ 85.807919][ T34] usblp0: removed [ 85.834869][ T6491] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 85.879492][ T6491] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 85.882850][ T6491] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 85.886462][ T6491] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 85.890030][ T6491] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 85.902002][ T6491] pci 0000:00:01.0: Adding to iommu group 1 [ 85.913135][ T6491] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 85.915913][ T6491] pci 0000:00:01.0: vgaarb: bridge control possible [ 85.918418][ T6491] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 85.930170][ T6491] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 85.943965][ T6491] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 85.957890][ T6491] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 85.983344][ T6491] [drm] Found bochs VGA, ID 0xb0c5. [ 85.985134][ T6491] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 85.992627][ T6491] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 86.953891][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 87.150194][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 88.006857][ T5755] usb 7-1: USB disconnect, device number 6 [ 88.516486][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.640897][ T6566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.678055][ T6566] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.681235][ T6566] overlayfs: failed to look up (tracing) for ino (-66) [ 88.736224][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 88.909210][ T6568] FAULT_INJECTION: forcing a failure. [ 88.909210][ T6568] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.951194][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.954563][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.954663][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.1.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.954681][ T6568] Tainted: [L]=SOFTLOCKUP [ 88.954685][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.954699][ T6568] Call Trace: [ 88.954704][ T6568] [ 88.954709][ T6568] dump_stack_lvl+0x100/0x190 [ 88.954751][ T6568] should_fail_ex.cold+0x5/0xa [ 88.954774][ T6568] ? prepare_alloc_pages+0x16d/0x5f0 [ 88.954805][ T6568] should_fail_alloc_page+0xeb/0x140 [ 88.954829][ T6568] prepare_alloc_pages+0x1f0/0x5f0 [ 88.954847][ T6568] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 88.954861][ T6568] ? __lock_acquire+0x49f/0x1a40 [ 88.954892][ T6568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.954906][ T6568] ? is_bpf_text_address+0x8a/0x1a0 [ 88.954930][ T6568] ? bpf_ksym_find+0x124/0x1c0 [ 88.954942][ T6568] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.954960][ T6568] ? is_bpf_text_address+0x94/0x1a0 [ 88.954976][ T6568] ? kernel_text_address+0x8d/0x100 [ 88.955020][ T6568] ? __lock_acquire+0x49f/0x1a40 [ 88.955038][ T6568] ? __lock_acquire+0x49f/0x1a40 [ 88.955055][ T6568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.955073][ T6568] ? policy_nodemask+0xed/0x4f0 [ 88.955091][ T6568] alloc_pages_mpol+0x1fb/0x540 [ 88.955107][ T6568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.955127][ T6568] ___kmalloc_large_node+0xe5/0x120 [ 88.955146][ T6568] __kmalloc_large_node_noprof+0x1c/0x70 [ 88.955163][ T6568] __kmalloc_noprof+0x5a1/0x820 [ 88.955176][ T6568] ? __import_iovec+0x1d2/0x640 [ 88.955204][ T6568] ? iovec_from_user+0x8d/0x140 [ 88.955216][ T6568] iovec_from_user+0x8d/0x140 [ 88.955227][ T6568] process_vm_rw+0x1e5/0x2d0 [ 88.955242][ T6568] ? __pfx_process_vm_rw+0x10/0x10 [ 88.955255][ T6568] ? find_held_lock+0x2b/0x80 [ 88.955272][ T6568] ? rcu_read_lock_any_held+0x6a/0xa0 [ 88.955300][ T6568] ? fput+0x79/0x100 [ 88.955320][ T6568] ? ksys_write+0x1ac/0x250 [ 88.955331][ T6568] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 88.955346][ T6568] ? __do_fast_syscall_32+0x98/0x970 [ 88.955389][ T6568] ? lockdep_hardirqs_on+0x78/0x100 [ 88.955404][ T6568] __do_fast_syscall_32+0xe7/0x970 [ 88.955419][ T6568] ? lockdep_hardirqs_on+0x78/0x100 [ 88.955435][ T6568] do_fast_syscall_32+0x32/0x70 [ 88.955451][ T6568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.955467][ T6568] RIP: 0023:0xf7f67fec [ 88.955481][ T6568] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 88.955492][ T6568] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 88.955504][ T6568] RAX: ffffffffffffffda RBX: 0000000000000076 RCX: 0000000080008400 [ 88.955512][ T6568] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 88.955519][ T6568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.955525][ T6568] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.955531][ T6568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.955545][ T6568] [ 89.070218][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.073744][ T34] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.076740][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.196197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.736992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.750347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.758544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 89.769471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 89.777064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.788031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.908749][ T6572] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 90.186713][ T34] hub 8-1:1.0: bad descriptor, ignoring hub [ 90.189135][ T34] hub 8-1:1.0: probe with driver hub failed with error -5 [ 90.190205][ T6572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.191792][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 90.195939][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 90.197725][ T34] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 90.246661][ T1349] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 90.370654][ T6583] netlink: 108 bytes leftover after parsing attributes in process `syz.1.156'. [ 90.381402][ T42] audit: type=1804 audit(1785957413.642:40): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.156" name="/newroot/35/merge/file" dev="overlay" ino=211 res=1 errno=0 [ 90.696425][ T34] usb 8-1: USB disconnect, device number 6 [ 91.151664][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 91.242100][ T42] audit: type=1800 audit(1785957414.502:41): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="bus" dev="tmpfs" ino=229 res=0 errno=0 [ 91.820204][ T6620] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.389201][ T6627] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 92.453257][ T6627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.667850][ T64] Bluetooth: hci1: command 0x0401 tx timeout [ 92.668445][ T6588] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 92.721452][ T6634] fuse: Bad value for 'rootmode' [ 92.726297][ T5755] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.878233][ T5755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.887011][ T5755] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.903361][ T5755] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.910737][ T5755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.930585][ T5755] usb 7-1: config 0 descriptor?? [ 92.938868][ T5755] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 93.018162][ T6646] xt_connbytes: Forcing CT accounting to be enabled [ 93.021558][ T6646] xt_SECMARK: invalid mode: 0 [ 93.136008][ T5755] usb 7-1: USB disconnect, device number 7 [ 93.240970][ T6656] evm: overlay not supported [ 93.576959][ T5755] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.728204][ T5755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.731396][ T5755] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.735585][ T5755] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.738812][ T5755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.745465][ T5755] usb 7-1: config 0 descriptor?? [ 93.754098][ T5755] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 93.962614][ T41] usb 7-1: USB disconnect, device number 8 [ 93.993195][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.009047][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.058006][ T6656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'. [ 94.362680][ T6670] netlink: 'syz.1.181': attribute type 7 has an invalid length. [ 94.597672][ T6673] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 94.599804][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.602943][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 94.776504][ T5755] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 94.836304][ T5755] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 95.433137][ T6674] vhci_hcd: connection reset by peer [ 95.441376][ T5849] vhci_hcd vhci_hcd.2: stop threads [ 95.443444][ T5849] vhci_hcd vhci_hcd.2: release socket [ 95.446677][ T5849] vhci_hcd vhci_hcd.2: disconnect device [ 96.063699][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 96.065775][ T6694] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 96.070351][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 96.075223][ T6692] netlink: 'syz.3.188': attribute type 20 has an invalid length. [ 96.533834][ T6712] FAULT_INJECTION: forcing a failure. [ 96.533834][ T6712] name failslab, interval 1, probability 0, space 0, times 0 [ 96.539652][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.3.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.539679][ T6712] Tainted: [L]=SOFTLOCKUP [ 96.539685][ T6712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.539695][ T6712] Call Trace: [ 96.539702][ T6712] [ 96.539708][ T6712] dump_stack_lvl+0x100/0x190 [ 96.539737][ T6712] should_fail_ex.cold+0x5/0xa [ 96.539760][ T6712] should_failslab+0xc2/0x120 [ 96.539788][ T6712] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.539815][ T6712] ? vm_area_dup+0x27/0x8e0 [ 96.539852][ T6712] vm_area_dup+0x27/0x8e0 [ 96.539869][ T6712] __split_vma+0x18c/0xda0 [ 96.539890][ T6712] ? __pfx___split_vma+0x10/0x10 [ 96.539913][ T6712] ? __pfx___vma_start_write+0x10/0x10 [ 96.539955][ T6712] ? __pfx_mas_prev+0x10/0x10 [ 96.539993][ T6712] vms_gather_munmap_vmas+0x3a5/0x1720 [ 96.540020][ T6712] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 96.540054][ T6712] __mmap_region+0x4a7/0x2db0 [ 96.540072][ T6712] ? __pfx___might_resched+0x10/0x10 [ 96.540096][ T6712] ? __pfx___mmap_region+0x10/0x10 [ 96.540110][ T6712] ? find_held_lock+0x2b/0x80 [ 96.540127][ T6712] ? process_measurement+0x4c8/0x2350 [ 96.540147][ T6712] ? process_measurement+0x4c8/0x2350 [ 96.540164][ T6712] ? down_write+0x146/0x1f0 [ 96.540198][ T6712] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 96.540260][ T6712] ? find_held_lock+0x2b/0x80 [ 96.540277][ T6712] ? is_bpf_text_address+0x8a/0x1a0 [ 96.540299][ T6712] ? is_bpf_text_address+0x8a/0x1a0 [ 96.540354][ T6712] mmap_region+0x35d/0x620 [ 96.540373][ T6712] ? __pfx_mmap_region+0x10/0x10 [ 96.540389][ T6712] ? shmem_get_unmapped_area+0x141/0x960 [ 96.540415][ T6712] ? cap_mmap_addr+0x4b/0x120 [ 96.540431][ T6712] ? bpf_lsm_mmap_addr+0x9/0x30 [ 96.540454][ T6712] ? security_mmap_addr+0x71/0x1e0 [ 96.540475][ T6712] ? __get_unmapped_area+0x255/0x3e0 [ 96.540504][ T6712] do_mmap+0xc63/0x12f0 [ 96.540528][ T6712] ? __pfx_do_mmap+0x10/0x10 [ 96.540548][ T6712] ? __pfx_down_write_killable+0x10/0x10 [ 96.540574][ T6712] vm_mmap_pgoff+0x29e/0x470 [ 96.540599][ T6712] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 96.540619][ T6712] ? __mutex_unlock_slowpath+0x35d/0x930 [ 96.540641][ T6712] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.540664][ T6712] ksys_mmap_pgoff+0xe4/0x610 [ 96.540684][ T6712] ? fput+0x79/0x100 [ 96.540700][ T6712] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 96.540717][ T6712] ? ksys_write+0x1ac/0x250 [ 96.540731][ T6712] ? __pfx_ksys_write+0x10/0x10 [ 96.540748][ T6712] __do_fast_syscall_32+0xe7/0x970 [ 96.540768][ T6712] ? lockdep_hardirqs_on+0x78/0x100 [ 96.540789][ T6712] do_fast_syscall_32+0x32/0x70 [ 96.540809][ T6712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.540828][ T6712] RIP: 0023:0xf705efec [ 96.540847][ T6712] Code: Unable to access opcode bytes at 0xf705efc2. [ 96.540854][ T6712] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 96.540869][ T6712] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 96.540878][ T6712] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 96.540887][ T6712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.540895][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.540903][ T6712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.540923][ T6712] [ 96.852785][ T6715] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 96.894458][ T6715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.025149][ T6720] openvswitch: netlink: IP tunnel dst address not specified [ 97.636461][ T6365] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 97.819156][ T6365] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.824342][ T6365] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.832030][ T6365] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.836530][ T6365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.856782][ T6365] usb 6-1: config 0 descriptor?? [ 97.866388][ T6365] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 98.065629][ T5898] usb 6-1: USB disconnect, device number 9 [ 98.346338][ T34] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 98.516678][ T6015] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 98.520708][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.524627][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.529665][ T34] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 98.532565][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.535150][ T34] usb 8-1: Product: syz [ 98.536669][ T34] usb 8-1: Manufacturer: syz [ 98.538408][ T34] usb 8-1: SerialNumber: syz [ 98.542879][ T34] usb 8-1: config 0 descriptor?? [ 98.548816][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 98.551122][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 98.555251][ T34] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 98.701215][ T6015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.704467][ T6015] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.708586][ T6015] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.711344][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.715226][ T6015] usb 6-1: config 0 descriptor?? [ 98.719000][ T6015] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 98.920185][ T41] usb 6-1: USB disconnect, device number 10 [ 99.622717][ T6769] syzkaller0: entered promiscuous mode [ 99.624859][ T6769] syzkaller0: entered allmulticast mode [ 99.692224][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.695152][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.957631][ T5755] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 100.138442][ T6791] input: syz1 as /devices/virtual/input/input13 [ 100.441799][ T6798] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 100.503667][ T1168] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 100.512677][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 100.519580][ T1168] (NULL device *): queue 0 connect admin queue failed (-6). [ 100.523311][ T1168] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 100.527319][ T1168] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 100.531086][ T6798] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:c6630d8f-7fbe-4a56-88eb-f7bff7490b26 [ 100.641784][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 100.645475][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.224'. [ 100.798479][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 100.823775][ T6811] smbdirect: ib_dev[syz0] removed [ 101.313709][ T6834] syz.0.231 (6834) used greatest stack depth: 19104 bytes left [ 101.374372][ T41] usb 8-1: USB disconnect, device number 7 [ 102.242541][ T6857] capability: warning: `syz.3.238' uses deprecated v2 capabilities in a way that may be insecure [ 102.589635][ T1165] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 102.661074][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 102.677144][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 102.691044][ T1165] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 102.710046][ T1165] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 102.733343][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.752174][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.300617][ T6881] syzkaller0: entered promiscuous mode [ 103.302368][ T6881] syzkaller0: entered allmulticast mode [ 103.556270][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 103.728296][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.734798][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.738598][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 103.741866][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.745829][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.752713][ T34] usb 7-1: config 0 descriptor?? [ 103.776853][ T5755] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 104.165274][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.170360][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.172443][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.181032][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.205233][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.219111][ T5755] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 104.233095][ T5755] usb 8-1: can't read configurations, error -71 [ 104.746314][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 104.766772][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 104.767813][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 104.778015][ T1163] (NULL device *): queue 0 connect admin queue failed (-6). [ 104.787239][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 104.790241][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 104.859999][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.863244][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.932807][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.939290][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.980885][ T6899] tipc: Resetting bearer [ 105.036416][ T6899] bond2: left promiscuous mode [ 105.166403][ T6614] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.170142][ T6614] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.173247][ T6614] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.176491][ T6614] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.472169][ T34] usb 7-1: USB disconnect, device number 9 [ 105.732896][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 105.738763][ T6910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.251'. [ 106.826905][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 106.843450][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 106.850266][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 106.853350][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 106.872356][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 107.233812][ T6927] FAULT_INJECTION: forcing a failure. [ 107.233812][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 107.237741][ T6927] CPU: 2 UID: 0 PID: 6927 Comm: syz.0.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.237759][ T6927] Tainted: [L]=SOFTLOCKUP [ 107.237763][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.237769][ T6927] Call Trace: [ 107.237774][ T6927] [ 107.237778][ T6927] dump_stack_lvl+0x100/0x190 [ 107.237797][ T6927] should_fail_ex.cold+0x5/0xa [ 107.237811][ T6927] should_failslab+0xc2/0x120 [ 107.237828][ T6927] __kvmalloc_node_noprof+0x116/0x970 [ 107.237844][ T6927] ? pipapo_realloc_scratch+0x122/0x3f0 [ 107.237866][ T6927] pipapo_realloc_scratch+0x122/0x3f0 [ 107.237884][ T6927] pipapo_maybe_clone.part.0+0x315/0xe00 [ 107.237900][ T6927] ? nft_add_set_elem+0x2e52/0x4050 [ 107.237913][ T6927] ? nf_tables_newsetelem+0x721/0xa60 [ 107.237926][ T6927] ? nfnetlink_rcv_batch+0x1410/0x2880 [ 107.237942][ T6927] ? nfnetlink_rcv+0x3bd/0x440 [ 107.237956][ T6927] ? netlink_unicast+0x585/0x850 [ 107.237969][ T6927] ? ___sys_sendmsg+0x190/0x1e0 [ 107.237985][ T6927] nft_pipapo_insert+0x546/0x1be0 [ 107.238011][ T6927] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 107.238032][ T6927] ? __kmalloc_noprof+0x343/0x820 [ 107.238046][ T6927] ? nft_trans_alloc+0x1d/0x2d0 [ 107.238061][ T6927] nft_add_set_elem+0x2fe4/0x4050 [ 107.238080][ T6927] ? __pfx_nft_add_set_elem+0x10/0x10 [ 107.238096][ T6927] ? __lock_acquire+0x49f/0x1a40 [ 107.238121][ T6927] ? find_held_lock+0x2b/0x80 [ 107.238134][ T6927] ? net_generic+0xea/0x2a0 [ 107.238146][ T6927] ? net_generic+0xea/0x2a0 [ 107.238162][ T6927] ? __nla_validate_parse+0x1e7/0x28b0 [ 107.238185][ T6927] ? nla_strcmp+0xff/0x130 [ 107.238198][ T6927] ? nft_set_lookup_global+0x163/0x390 [ 107.238217][ T6927] nf_tables_newsetelem+0x721/0xa60 [ 107.238233][ T6927] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 107.238250][ T6927] ? __nla_parse+0x40/0x60 [ 107.238264][ T6927] nfnetlink_rcv_batch+0x1410/0x2880 [ 107.238287][ T6927] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 107.238306][ T6927] ? kasan_save_stack+0x30/0x50 [ 107.238321][ T6927] ? kasan_save_track+0x14/0x30 [ 107.238334][ T6927] ? __kasan_slab_alloc+0x89/0x90 [ 107.238347][ T6927] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 107.238360][ T6927] ? kmalloc_reserve+0x148/0x350 [ 107.238391][ T6927] ? __nla_parse+0x40/0x60 [ 107.238405][ T6927] nfnetlink_rcv+0x3bd/0x440 [ 107.238421][ T6927] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.238440][ T6927] netlink_unicast+0x585/0x850 [ 107.238459][ T6927] ? __pfx_netlink_unicast+0x10/0x10 [ 107.238476][ T6927] netlink_sendmsg+0x8b0/0xda0 [ 107.238491][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.238505][ T6927] ? apparmor_socket_sendmsg+0x15b/0x270 [ 107.238520][ T6927] ____sys_sendmsg+0xa4d/0xbe0 [ 107.238531][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.238545][ T6927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.238563][ T6927] ___sys_sendmsg+0x190/0x1e0 [ 107.238577][ T6927] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.238603][ T6927] ? find_held_lock+0x2b/0x80 [ 107.238632][ T6927] __sys_sendmsg+0x160/0x210 [ 107.238654][ T6927] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.238678][ T6927] ? __pfx_ksys_write+0x10/0x10 [ 107.238692][ T6927] __do_fast_syscall_32+0xe7/0x970 [ 107.238709][ T6927] ? lockdep_hardirqs_on+0x78/0x100 [ 107.238724][ T6927] do_fast_syscall_32+0x32/0x70 [ 107.238740][ T6927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.238755][ T6927] RIP: 0023:0xf7fd8fec [ 107.238770][ T6927] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 107.238775][ T6927] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 107.238786][ T6927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 107.238793][ T6927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.238799][ T6927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.238805][ T6927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.238811][ T6927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.238824][ T6927] [ 107.385061][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 107.488510][ T6933] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 107.973525][ T6934] mmap: syz.1.254 (6934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.361864][ T6925] netlink: 52 bytes leftover after parsing attributes in process `syz.1.254'. [ 108.797765][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 108.916305][ T1168] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 108.926752][ T45] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 108.930925][ T1168] (NULL device *): queue 0 connect admin queue failed (-6). [ 108.944528][ T1168] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 108.954163][ T1168] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 109.025805][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 109.047003][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 109.078857][ T9] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 109.081869][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.093210][ T9] usb 7-1: Product: syz [ 109.094813][ T9] usb 7-1: Manufacturer: syz [ 109.101498][ T9] usb 7-1: SerialNumber: syz [ 109.135807][ T9] usb 7-1: config 0 descriptor?? [ 109.172541][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 109.174642][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 109.225526][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 110.211848][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 110.214183][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.227975][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 110.382299][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 110.389931][ T6966] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 110.404813][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 110.496258][ T6015] usb 44-1: SetAddress Request (2) to port 0 [ 110.498325][ T6015] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 110.525587][ T6971] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 110.568504][ T6971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.851276][ T6967] vhci_hcd: connection reset by peer [ 110.856229][ T6614] vhci_hcd vhci_hcd.3: stop threads [ 110.857909][ T6614] vhci_hcd vhci_hcd.3: release socket [ 110.863511][ T6614] vhci_hcd vhci_hcd.3: disconnect device [ 110.986292][ T1168] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 110.992946][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 110.996245][ T1168] (NULL device *): queue 0 connect admin queue failed (-6). [ 110.999696][ T1168] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 111.002954][ T1168] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 111.106076][ T6974] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 111.837295][ T34] usb 7-1: USB disconnect, device number 10 [ 112.387440][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 112.460720][ T6987] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 112.514634][ T36] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 112.599462][ T34] kernel write not supported for file /audio (pid: 34 comm: kworker/3:0) [ 112.603618][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 112.608171][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 112.610663][ T36] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 112.622101][ T36] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 112.625631][ T6987] nvme nvme1: NVME-FC{1}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:c6630d8f-7fbe-4a56-88eb-f7bff7490b26 [ 112.783009][ T1163] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 112.793715][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 112.800083][ T1163] (NULL device *): queue 0 connect admin queue failed (-6). [ 112.803508][ T1163] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 112.808486][ T1163] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 112.811465][ T6997] nvme nvme2: NVME-FC{2}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:c6630d8f-7fbe-4a56-88eb-f7bff7490b26 [ 112.892364][ T7005] jffs2: notice: (7005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.066447][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 113.076937][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 113.080345][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 113.082897][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 113.093188][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 114.150576][ T7014] ptrace attach of ""[7023] was attempted by "/syz-executor exec"[7014] [ 114.266681][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 114.489601][ T7020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.494863][ T7026] netlink: 140 bytes leftover after parsing attributes in process `syz.3.281'. [ 114.498492][ T7026] tc_dump_action: action bad kind [ 114.668531][ T36] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 114.673659][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 114.678524][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 114.681448][ T36] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 114.688874][ T36] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 114.826668][ T36] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 114.845347][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 114.856124][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 114.862712][ T36] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 114.881555][ T36] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 115.151670][ T1165] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 115.180389][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 115.185650][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 115.212033][ T1165] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 115.214686][ T1165] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 115.297547][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 115.854062][ T6015] usb 44-1: device descriptor read/8, error -110 [ 116.194422][ T7041] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 116.269486][ T7041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.366951][ T6015] usb usb44-port1: attempt power cycle [ 116.620257][ T45] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 116.632802][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.637302][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.642298][ T45] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 116.648834][ T45] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 116.654297][ T7045] nvme nvme3: NVME-FC{3}: new ctrl: NQN "n", hostnqn: nqn.2014-08.org.nvmexpress:uuid:c6630d8f-7fbe-4a56-88eb-f7bff7490b26 [ 116.719077][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.725100][ T7051] netlink: 100 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.730741][ T7051] netlink: 100 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.746638][ T1165] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.776546][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.784268][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.787857][ T1165] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 116.790248][ T1165] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 116.924743][ T1165] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.973972][ T45] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.982321][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.995982][ T1165] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 117.006028][ T1165] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 117.109995][ T6015] usb usb44-port1: unable to enumerate USB device [ 117.307179][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 117.312930][ T38] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 117.316029][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 117.320580][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 117.326096][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 117.389388][ T45] wlan0: Trigger new scan to find an IBSS to join [ 118.327508][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.666474][ T1165] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 118.676925][ T38] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 118.680403][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 118.682954][ T1165] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 118.692751][ T1165] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 118.910791][ T38] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 118.933727][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 118.940889][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 118.943112][ T38] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 118.956314][ T38] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 119.069042][ T1165] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 119.081965][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 119.085272][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 119.097073][ T1165] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 119.106472][ T1165] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 119.386548][ T1165] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 119.391886][ T38] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 119.465870][ T7090] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.720944.0), cmd(2) [ 119.752765][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 119.769421][ T1165] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 119.790287][ T1165] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 120.032547][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 120.538496][ T7106] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.550639][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 120.585751][ T7099] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.600828][ T7099] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 120.603788][ T7099] overlayfs: failed to look up (tracing) for ino (-66) [ 120.616006][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 120.747467][ T45] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 120.784685][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 120.828461][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 120.852369][ T45] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 120.887178][ T45] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 120.996670][ T38] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 121.034623][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 121.044341][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 121.062176][ T38] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 121.094141][ T38] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 121.157067][ T38] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 121.203594][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 121.211454][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 121.233005][ T38] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 121.248609][ T38] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 121.734589][ T7110] netlink: 228 bytes leftover after parsing attributes in process `syz.1.304'. [ 122.131520][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 122.137795][ T1168] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 122.142121][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 122.146429][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 122.151100][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 122.179875][ T7114] 9p: Bad value for 'wfdno' [ 122.242519][ T7125] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.258916][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.306'. [ 123.135567][ T38] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 123.163903][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 123.227374][ T45] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 123.394020][ T1165] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 123.411526][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 123.415209][ T1168] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 123.425216][ T38] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 123.430420][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 123.433661][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 123.437593][ T38] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 123.439949][ T45] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 123.442721][ T1165] (NULL device *): queue 0 connect admin queue failed (-6). [ 123.445760][ T45] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 123.449238][ T1165] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 123.452363][ T1165] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 123.885736][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 124.120634][ T7139] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.146069][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.186649][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 125.136803][ T7131] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.720944.0), cmd(2) [ 125.286309][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 125.769523][ T36] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 125.773855][ T45] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 125.778399][ T38] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 125.843344][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 125.846468][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 126.131723][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 126.134375][ T1168] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 126.149002][ T60] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 126.154867][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 126.161993][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 126.168458][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 126.176422][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 126.180535][ T36] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 126.180563][ T36] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 126.195646][ T38] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 126.204860][ T38] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 126.221969][ T45] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 126.230753][ T45] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 126.324734][ T36] nvmet: connect request for invalid subsystem testnqn! [ 126.337588][ T7147] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 126.977242][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 127.007394][ T7151] netlink: 64 bytes leftover after parsing attributes in process `syz.2.312'. [ 127.085338][ T7157] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.095927][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.099037][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.107027][ T7157] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 127.362821][ T7166] 9p: Bad value for 'rfdno' [ 127.478395][ T7173] 9p: Bad value for 'wfdno' [ 128.136360][ T6015] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 128.195314][ T7190] raw_sendmsg: syz.2.322 forgot to set AF_INET. Fix it! [ 128.275644][ T7190] ceph: No mds server is up or the cluster is laggy [ 128.302764][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.305756][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.308282][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.310385][ T7193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.340524][ T1163] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 128.345206][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 128.351666][ T1164] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 128.356954][ T45] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 128.361422][ T7193] 8021q: adding VLAN 0 to HW filter on device eth0 [ 128.361637][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 128.365226][ T7193] 8021q: adding VLAN 0 to HW filter on device eth1 [ 128.366328][ T60] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 128.366379][ T1163] (NULL device *): queue 0 connect admin queue failed (-6). [ 128.366392][ T1163] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 128.366402][ T1163] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 128.366824][ T1168] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 128.370965][ T7193] 8021q: adding VLAN 0 to HW filter on device eth2 [ 128.372024][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 128.377229][ T7193] 8021q: adding VLAN 0 to HW filter on device eth3 [ 128.380232][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 128.427241][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 128.430801][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 128.435797][ T45] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 128.443073][ T1164] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 128.453060][ T45] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 128.456007][ T1164] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 128.459944][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 128.468004][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 128.491622][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.506314][ T6015] usb 8-1: Using ep0 maxpacket: 32 [ 128.826720][ T7195] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 128.928398][ T6015] usb 8-1: unable to get BOS descriptor or descriptor too short [ 128.941664][ T6015] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 128.951399][ T6015] usb 8-1: can't read configurations, error -71 [ 129.116558][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.486103][ T7198] loop5: detected capacity change from 0 to 4095 [ 130.089362][ T7198] Buffer I/O error on dev loop5, logical block 511, async page read [ 130.095423][ T6040] Buffer I/O error on dev loop5, logical block 511, async page read [ 130.446258][ T36] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 130.506812][ T45] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 130.521570][ T60] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 130.526111][ T1168] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 130.530706][ T223] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 130.542757][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 130.545474][ T175] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 130.550228][ T136] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 130.550430][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 130.555301][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 130.557636][ T60] (NULL device *): queue 0 connect admin queue failed (-6). [ 130.567036][ T36] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 130.569518][ T60] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 130.571957][ T1168] (NULL device *): queue 0 connect admin queue failed (-6). [ 130.622249][ T45] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 130.624638][ T36] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 130.627606][ T1168] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 130.630058][ T60] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 130.637410][ T45] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 130.639604][ T1168] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 130.741443][ T7195] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.859617][ T7218] jffs2: notice: (7218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.092009][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 131.241647][ T7231] 9p: Bad value for 'rfdno' [ 131.256975][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 131.696283][ T1349] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 131.858495][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.862988][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.870858][ T1349] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 131.874506][ T1349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.880700][ T1349] usb 7-1: Product: syz [ 131.882375][ T1349] usb 7-1: Manufacturer: syz [ 131.884291][ T1349] usb 7-1: SerialNumber: syz [ 131.893393][ T1349] usb 7-1: config 0 descriptor?? [ 131.897964][ T1349] hub 7-1:0.0: bad descriptor, ignoring hub [ 131.900853][ T1349] hub 7-1:0.0: probe with driver hub failed with error -5 [ 131.910297][ T1349] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input15 [ 131.994351][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 132.349419][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.351914][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.567771][ T7294] 9p: Bad value for 'rfdno' [ 132.666687][ T1163] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 132.670501][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 132.671862][ T1168] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 132.672025][ T1164] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 132.672090][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 132.672122][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 132.672181][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 132.672197][ T1164] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 132.672211][ T1164] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 132.672243][ T1168] (NULL device *): queue 0 connect admin queue failed (-6). [ 132.682263][ T45] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 132.685623][ T1164] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 132.686451][ T1163] (NULL device *): queue 0 connect admin queue failed (-6). [ 132.692552][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 132.693725][ T1168] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 132.693739][ T1168] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 132.693760][ T1163] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 132.693770][ T1163] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 132.731431][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 132.737447][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 133.165350][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 133.903700][ T7331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 133.918572][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'. [ 134.794100][ T60] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 134.799306][ T38] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 134.804238][ T45] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 134.808059][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 134.813430][ T1168] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 134.819689][ T82] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 134.819688][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 134.822593][ T38] (NULL device *): queue 0 connect admin queue failed (-6). [ 134.822610][ T38] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 134.822620][ T38] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 134.832599][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 134.838514][ T60] (NULL device *): queue 0 connect admin queue failed (-6). [ 134.842060][ T60] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 134.845492][ T60] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 134.849738][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 134.853238][ T45] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 134.858306][ T45] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 134.877877][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 134.884486][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 134.892916][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 134.990412][ T5755] usb 7-1: USB disconnect, device number 11 [ 136.614191][ T7361] syzkaller0: entered promiscuous mode [ 136.618160][ T7361] syzkaller0: entered allmulticast mode [ 136.828763][ T1164] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 136.841771][ T45] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 136.846592][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 136.853421][ T1164] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 136.866258][ T1349] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 136.868721][ T1164] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 136.906494][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 136.906759][ T60] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 136.906790][ T45] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 136.906864][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 136.906924][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 136.906936][ T45] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 136.906947][ T45] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 136.917594][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 136.939500][ T45] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 136.959081][ T60] (NULL device *): queue 0 connect admin queue failed (-6). [ 136.961699][ T60] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 136.964749][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 136.967732][ T60] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 136.968716][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 136.976916][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 137.050040][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.053451][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.058656][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 137.068184][ T1349] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.073099][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.086716][ T1349] usb 7-1: config 0 descriptor?? [ 137.578983][ T7367] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 137.750354][ T7367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 137.782015][ T1349] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 138.090613][ T1349] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 138.094565][ T1349] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 138.097969][ T1349] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 138.119391][ T1349] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.127418][ T1349] usb 7-1: USB disconnect, device number 12 [ 138.272594][ T7376] fido_id[7376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 138.398464][ T7388] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.720944.0), cmd(2) [ 138.909098][ T60] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 138.914872][ T1165] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 138.979104][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 138.995332][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 139.013236][ T45] nvme nvme3: NVME-FC{3}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 139.079233][ T1164] nvme nvme2: NVME-FC{2}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 139.097519][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 139.107020][ T136] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 139.111873][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 139.114490][ T1164] nvme nvme2: NVME-FC{2}: reset: Reconnect attempt failed (-6) [ 139.117831][ T45] (NULL device *): queue 0 connect admin queue failed (-6). [ 139.120422][ T45] nvme nvme3: NVME-FC{3}: reset: Reconnect attempt failed (-6) [ 139.128057][ T136] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 139.131957][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 139.135005][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 139.140215][ T45] nvme nvme3: NVME-FC{3}: Reconnect attempt in 2 seconds [ 139.142903][ T1164] nvme nvme2: NVME-FC{2}: Reconnect attempt in 2 seconds [ 139.150507][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 139.349447][ T60] (NULL device *): queue 0 connect admin queue failed (-6). [ 139.352884][ T60] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 139.362289][ T60] nvme nvme1: NVME-FC{1}: Reconnect attempt in 2 seconds [ 140.271964][ T7399] syz.2.374: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.277738][ T7399] CPU: 3 UID: 0 PID: 7399 Comm: syz.2.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.277759][ T7399] Tainted: [L]=SOFTLOCKUP [ 140.277764][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.277771][ T7399] Call Trace: [ 140.277776][ T7399] [ 140.277782][ T7399] dump_stack_lvl+0x100/0x190 [ 140.277800][ T7399] warn_alloc.cold+0x94/0xa8 [ 140.277815][ T7399] ? __pfx_warn_alloc+0x10/0x10 [ 140.277833][ T7399] ? kasan_save_stack+0x3f/0x50 [ 140.277850][ T7399] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 140.277863][ T7399] ? xskq_create+0x52/0x1d0 [ 140.277878][ T7399] ? xsk_setsockopt+0x743/0xab0 [ 140.277891][ T7399] ? do_sock_setsockopt+0xf3/0x1d0 [ 140.277902][ T7399] ? __sys_setsockopt+0x119/0x190 [ 140.277917][ T7399] ? __ia32_sys_setsockopt+0xbc/0x160 [ 140.277931][ T7399] ? __do_fast_syscall_32+0xe7/0x970 [ 140.277947][ T7399] ? do_fast_syscall_32+0x32/0x70 [ 140.277965][ T7399] ? xskq_create+0xfb/0x1d0 [ 140.277979][ T7399] __vmalloc_node_range_noprof+0x136c/0x1630 [ 140.278003][ T7399] ? xskq_create+0xfb/0x1d0 [ 140.278019][ T7399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.278039][ T7399] ? kasan_save_track+0x14/0x30 [ 140.278052][ T7399] ? __kasan_kmalloc+0xaa/0xb0 [ 140.278065][ T7399] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 140.278077][ T7399] ? xskq_create+0xfb/0x1d0 [ 140.278089][ T7399] vmalloc_user_noprof+0x9e/0xe0 [ 140.278105][ T7399] ? xskq_create+0xfb/0x1d0 [ 140.278118][ T7399] xskq_create+0xfb/0x1d0 [ 140.278132][ T7399] xsk_setsockopt+0x743/0xab0 [ 140.278143][ T7399] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.278160][ T7399] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.278172][ T7399] ? find_held_lock+0x2b/0x80 [ 140.278188][ T7399] ? aa_sock_opt_perm+0xfe/0x1b0 [ 140.278200][ T7399] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.278213][ T7399] do_sock_setsockopt+0xf3/0x1d0 [ 140.278226][ T7399] __sys_setsockopt+0x119/0x190 [ 140.278245][ T7399] __ia32_sys_setsockopt+0xbc/0x160 [ 140.278261][ T7399] ? __do_fast_syscall_32+0x98/0x970 [ 140.278285][ T7399] ? lockdep_hardirqs_on+0x78/0x100 [ 140.278301][ T7399] __do_fast_syscall_32+0xe7/0x970 [ 140.278320][ T7399] do_fast_syscall_32+0x32/0x70 [ 140.278338][ T7399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.278354][ T7399] RIP: 0023:0xf705efec [ 140.278369][ T7399] Code: Unable to access opcode bytes at 0xf705efc2. [ 140.278374][ T7399] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 140.278385][ T7399] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 140.278392][ T7399] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 140.278399][ T7399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.278405][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.278411][ T7399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.278425][ T7399] [ 140.278430][ T7399] Mem-Info: [ 140.378455][ T7399] active_anon:21862 inactive_anon:5967 isolated_anon:0 [ 140.378455][ T7399] active_file:1663 inactive_file:35426 isolated_file:0 [ 140.378455][ T7399] unevictable:768 dirty:199 writeback:0 [ 140.378455][ T7399] slab_reclaimable:5977 slab_unreclaimable:53019 [ 140.378455][ T7399] mapped:25664 shmem:22789 pagetables:1197 [ 140.378455][ T7399] sec_pagetables:299 bounce:0 [ 140.378455][ T7399] kernel_misc_reclaimable:0 [ 140.378455][ T7399] free:39379 free_pcp:10617 free_cma:0 [ 140.421538][ T7399] Node 0 active_anon:60kB inactive_anon:64kB active_file:12kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8640kB pagetables:1512kB sec_pagetables:1128kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 140.456208][ T7408] FAULT_INJECTION: forcing a failure. [ 140.456208][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 140.461830][ T7408] CPU: 2 UID: 0 PID: 7408 Comm: syz.1.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.461856][ T7408] Tainted: [L]=SOFTLOCKUP [ 140.461861][ T7408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.461870][ T7408] Call Trace: [ 140.461875][ T7408] [ 140.461881][ T7408] dump_stack_lvl+0x100/0x190 [ 140.461904][ T7408] should_fail_ex.cold+0x5/0xa [ 140.461922][ T7408] should_failslab+0xc2/0x120 [ 140.461944][ T7408] __kmalloc_noprof+0xfc/0x820 [ 140.461962][ T7408] ? kasan_save_track+0x14/0x30 [ 140.461980][ T7408] ? alloc_trace_uprobe+0x86/0x370 [ 140.462007][ T7408] alloc_trace_uprobe+0x86/0x370 [ 140.462031][ T7408] __trace_uprobe_create+0x673/0x22f0 [ 140.462060][ T7408] ? __pfx___trace_uprobe_create+0x10/0x10 [ 140.462085][ T7408] ? __kmalloc_noprof+0x343/0x820 [ 140.462102][ T7408] ? argv_split+0x173/0x420 [ 140.462125][ T7408] ? argv_split+0x359/0x420 [ 140.462143][ T7408] ? __pfx___trace_uprobe_create+0x10/0x10 [ 140.462171][ T7408] trace_probe_create+0xef/0x100 [ 140.462191][ T7408] ? __pfx_trace_probe_create+0x10/0x10 [ 140.462216][ T7408] dyn_event_create+0x46/0x70 [ 140.462233][ T7408] create_or_delete_trace_uprobe+0x5a/0xb0 [ 140.462255][ T7408] trace_parse_run_command+0x1ab/0x3b0 [ 140.462276][ T7408] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 140.462301][ T7408] vfs_write+0x2aa/0x1050 [ 140.462316][ T7408] ? __pfx_probes_write+0x10/0x10 [ 140.462338][ T7408] ? __pfx_vfs_write+0x10/0x10 [ 140.462350][ T7408] ? find_held_lock+0x2b/0x80 [ 140.462368][ T7408] ? __fget_files+0x215/0x3d0 [ 140.462386][ T7408] ? __fget_files+0x21f/0x3d0 [ 140.462405][ T7408] ksys_write+0x12a/0x250 [ 140.462418][ T7408] ? __pfx_ksys_write+0x10/0x10 [ 140.462430][ T7408] ? ksys_write+0x1ac/0x250 [ 140.462443][ T7408] ? __pfx_ksys_write+0x10/0x10 [ 140.462460][ T7408] __do_fast_syscall_32+0xe7/0x970 [ 140.462480][ T7408] ? lockdep_hardirqs_on+0x78/0x100 [ 140.462501][ T7408] do_fast_syscall_32+0x32/0x70 [ 140.462521][ T7408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.462540][ T7408] RIP: 0023:0xf7f67fec [ 140.462558][ T7408] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 140.462564][ T7408] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 140.462579][ T7408] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 140.462588][ T7408] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 140.462596][ T7408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.462604][ T7408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.462612][ T7408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.462631][ T7408] [ 140.561110][ T7408] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 140.564861][ T7408] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 140.567523][ T7408] CPU: 2 UID: 0 PID: 7408 Comm: syz.1.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.570839][ T7408] Tainted: [L]=SOFTLOCKUP [ 140.572208][ T7408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.575340][ T7408] RIP: 0010:path_put+0x22/0x70 [ 140.576861][ T7408] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 43 74 79 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 df 82 04 00 48 89 da 48 b8 00 00 [ 140.582852][ T7408] RSP: 0000:ffffc90005e17a50 EFLAGS: 00010203 [ 140.585083][ T7408] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 140.588185][ T7408] RDX: 0000000000000008 RSI: ffffffff82903cbd RDI: 0000000000000044 [ 140.591284][ T7408] RBP: ffffc90005e17be0 R08: 0000000000000001 R09: 0000000000000000 [ 140.594375][ T7408] R10: ffffffff9b748c40 R11: 0000000000000000 R12: ffff888024bd5488 [ 140.597446][ T7408] R13: ffff888029803f20 R14: ffff888073b08500 R15: fffffffffffffff4 [ 140.600533][ T7408] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f5405b40 [ 140.603999][ T7408] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 140.606596][ T7408] CR2: 00000000f7f68000 CR3: 000000004b1d2000 CR4: 0000000000352ef0 [ 140.609695][ T7408] Call Trace: [ 140.611020][ T7408] [ 140.612217][ T7408] __trace_uprobe_create+0x96d/0x22f0 [ 140.614338][ T7408] ? __pfx___trace_uprobe_create+0x10/0x10 [ 140.616634][ T7408] ? __kmalloc_noprof+0x343/0x820 [ 140.618607][ T7408] ? argv_split+0x173/0x420 [ 140.620416][ T7408] ? argv_split+0x359/0x420 [ 140.622210][ T7408] ? __pfx___trace_uprobe_create+0x10/0x10 [ 140.624503][ T7408] trace_probe_create+0xef/0x100 [ 140.626467][ T7408] ? __pfx_trace_probe_create+0x10/0x10 [ 140.628639][ T7408] dyn_event_create+0x46/0x70 [ 140.630516][ T7408] create_or_delete_trace_uprobe+0x5a/0xb0 [ 140.632827][ T7408] trace_parse_run_command+0x1ab/0x3b0 [ 140.634971][ T7408] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 140.637531][ T7408] vfs_write+0x2aa/0x1050 [ 140.639250][ T7408] ? __pfx_probes_write+0x10/0x10 [ 140.641248][ T7408] ? __pfx_vfs_write+0x10/0x10 [ 140.643133][ T7408] ? find_held_lock+0x2b/0x80 [ 140.645002][ T7408] ? __fget_files+0x215/0x3d0 [ 140.646849][ T7408] ? __fget_files+0x21f/0x3d0 [ 140.648694][ T7408] ksys_write+0x12a/0x250 [ 140.650405][ T7408] ? __pfx_ksys_write+0x10/0x10 [ 140.652330][ T7408] ? ksys_write+0x1ac/0x250 [ 140.654121][ T7408] ? __pfx_ksys_write+0x10/0x10 [ 140.656040][ T7408] __do_fast_syscall_32+0xe7/0x970 [ 140.658042][ T7408] ? lockdep_hardirqs_on+0x78/0x100 [ 140.660126][ T7408] do_fast_syscall_32+0x32/0x70 [ 140.662046][ T7408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.664534][ T7408] RIP: 0023:0xf7f67fec [ 140.666153][ T7408] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 140.668747][ T7408] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 140.672006][ T7408] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 140.675100][ T7408] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 140.678201][ T7408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.681326][ T7408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.684423][ T7408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.687511][ T7408] [ 140.688757][ T7408] Modules linked in: [ 140.690684][ T7408] ---[ end trace 0000000000000000 ]--- [ 140.694309][ T7408] RIP: 0010:path_put+0x22/0x70 [ 140.695459][ T7399] Node 1 active_anon:87544kB inactive_anon:23804kB active_file:6640kB inactive_file:141708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102828kB dirty:808kB writeback:0kB shmem:89820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5648kB pagetables:3196kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 140.696849][ T7408] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 43 74 79 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 df 82 04 00 48 89 da 48 b8 00 00 [ 140.713505][ T7408] RSP: 0000:ffffc90005e17a50 EFLAGS: 00010203 [ 140.715634][ T7408] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 140.718480][ T7408] RDX: 0000000000000008 RSI: ffffffff82903cbd RDI: 0000000000000044 [ 140.721129][ T7408] RBP: ffffc90005e17be0 R08: 0000000000000001 R09: 0000000000000000 [ 140.724132][ T7408] R10: ffffffff9b748c40 R11: 0000000000000000 R12: ffff888024bd5488 [ 140.727261][ T7408] R13: ffff888029803f20 R14: ffff888073b08500 R15: fffffffffffffff4 [ 140.730122][ T7408] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f5405b40 [ 140.734602][ T7408] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 140.737608][ T7408] CR2: 00000000f71e8b50 CR3: 000000004b1d2000 CR4: 0000000000352ef0 [ 140.740319][ T7408] Kernel panic - not syncing: Fatal exception [ 140.742751][ T7408] Kernel Offset: disabled [ 140.744066][ T7408] Rebooting in 86400 seconds..