last executing test programs: 8.883671279s ago: executing program 2 (id=2757): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x4d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x77b, &(0x7f0000000180)={0x0, 0x6614, 0x800, 0x3, 0x272}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_PBUF_RING(0x0, 0x37, 0x1, 0x10, r2, 0x82dd4939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x77) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f0000000140)='./file0\x00') truncate(0x0, 0x900000) 6.915439889s ago: executing program 2 (id=2760): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x44, 0xf6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x24ee, &(0x7f0000000340)={0x0, 0x2c28, 0x200, 0x0, 0x10000000, 0x0, r5}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4010001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 6.890096919s ago: executing program 3 (id=2761): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@obj_user}, {@fowner_gt}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x10004805, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) shutdown(r4, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 6.880930721s ago: executing program 0 (id=2762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x78}}, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pptp, &(0x7f00000006c0)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$ocfs2_control(0xffffff9c, 0x0, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041d0500c900000224e4654a7b4d3c29124ed684b3ad2a4004bc450f4da78764bd777e3260106f98d1343ae48b1d7bc228af238899f7a5938f81915aeb132f8514dd178960f78373b762fe8ba126b73e5ed02cd40c36"], 0x8) 6.214298338s ago: executing program 3 (id=2765): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x11) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) 5.91470251s ago: executing program 0 (id=2767): modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x6e, &(0x7f00000024c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\b\x00\b', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x3, 0x30, 0x0, @gue={{0x1, 0x1, 0x0, 0x1, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"}}}}}}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(0xffffffffffffffff, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000000) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r2, 0x5407, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "fa840e2fa1d09051", "efbf2ffdc02ad333eff00eeeae2c9bfc", "cc04abb3", "0c6dde20dea3b536"}, 0x28) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d00"], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000040)=""/2, 0x2) 5.846269187s ago: executing program 2 (id=2768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 5.425868587s ago: executing program 0 (id=2769): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000020701020000000000000000070000090c0007ffff0001400001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$hwrng(0xffffff9c, &(0x7f00000005c0), 0xa80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000080003"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 4.928882836s ago: executing program 2 (id=2770): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) writev(0xffffffffffffffff, 0x0, 0x0) 4.885044402s ago: executing program 1 (id=2771): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x4d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x77b, &(0x7f0000000180)={0x0, 0x6614, 0x800, 0x3, 0x272}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_PBUF_RING(0x0, 0x37, 0x1, 0x10, r2, 0x82dd4939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(0x0, 0x77) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f0000000140)='./file0\x00') truncate(0x0, 0x900000) 4.369965812s ago: executing program 3 (id=2772): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) syz_open_dev$mouse(&(0x7f0000000140), 0x5a21, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x2) clock_gettime(0x4, &(0x7f0000000180)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x0, 0x1c8, 0x94, 0x134, 0x1c8, 0x33c, 0x33c, 0x33c, 0x33c, 0x33c, 0x6, 0x0, {[{{@ip={@local, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x1, @multicast1}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x1, 0x4, 0x6, 0x0, 0x5], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x42c) 3.447409023s ago: executing program 1 (id=2773): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) syz_open_procfs(0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x3, r6, 0xfff, 0x3ff, 0x2, 0x944}) creat(0x0, 0x0) 3.447143412s ago: executing program 2 (id=2774): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) 3.073233519s ago: executing program 0 (id=2775): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/bnep\x00') preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1, 0xc4d, 0x8) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x40040c00) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xa, 0x148, 0x30c, 0x60, 0x3f4, 0x2a8, 0x2a8, 0x3f4, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x30c, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xa, [0x100, 0x4e22, 0x4e23, 0x4e23, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4e4) 2.38461647s ago: executing program 1 (id=2776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x200441d0}, 0x4008094) 2.181744507s ago: executing program 3 (id=2777): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x107, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754ce31d40d4038caa306ee486f4f651edfff757fc3124b573a316c8183de6194ffde82251403cd85689ba3447ee3c5615f0b7f882e5e2fdf6060f84efb"}, 0x107, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x144, r6, 0x4, 0x70bd28, 0x800, {}, [@WGDEVICE_A_PEERS={0x130, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf84f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f55e4cc60af2a6151b38290ce82474b7473b5bd92ca3fd0dc43d1898ea145677"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0x20008000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.180320139s ago: executing program 2 (id=2785): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(0x0, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r2, 0x0, 0x0, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_procfs$pagemap(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) mincore(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00), 0x0, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="0225", 0x2, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 1.568810472s ago: executing program 0 (id=2778): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r9, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000530400082bbd9200ffdbdf25"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 1.142497579s ago: executing program 1 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 1.07491789s ago: executing program 1 (id=2780): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000190c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010026bd7000fbdbdf2501000000e83e819f7ac0c25c33ab9688182265d409373372d0df398f14c3ec0ff15a"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004700070128bd700000000000017c000006000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 717.120578ms ago: executing program 3 (id=2781): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000190c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004700070128bd700000000000017c000006000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 3.451104ms ago: executing program 3 (id=2782): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x553, 0xd, 0x7, 0x8, 0x6, 0xcb8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x104) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 1.235546ms ago: executing program 0 (id=2791): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x0, 0x4, 0x9, 0x150}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES16], 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403e1301eb1e2bc"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="a6b1", 0x2}], 0x1) write$char_usb(r8, &(0x7f0000000000)="93", 0xf5) ioctl$HIDIOCGUSAGE(r6, 0x80045b09, 0x0) 0s ago: executing program 1 (id=2783): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000020701020000000000000000070000090c0007ffff000140000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$hwrng(0xffffff9c, &(0x7f00000005c0), 0xa80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000080003"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) kernel console output (not intermixed with test programs): edia controller created [ 700.149366][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.196596][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 700.199603][ T34] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 700.254315][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input26 [ 700.281055][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 700.285520][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 700.301989][ T34] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 700.452236][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 700.455145][ T34] dvb-usb: error while querying for an remote control event. [ 700.641147][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 700.643359][ T34] dvb-usb: error while querying for an remote control event. [ 700.695691][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1886'. [ 700.802996][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 700.805918][ T34] dvb-usb: error while querying for an remote control event. [ 700.971581][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 700.973919][ T34] dvb-usb: error while querying for an remote control event. [ 701.141348][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.143504][ T34] dvb-usb: error while querying for an remote control event. [ 701.305367][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.307244][ T34] dvb-usb: error while querying for an remote control event. [ 701.403822][T15718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 701.460821][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.463162][ T34] dvb-usb: error while querying for an remote control event. [ 701.479651][T15720] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 701.620879][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.622813][ T34] dvb-usb: error while querying for an remote control event. [ 701.790820][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.792744][ T34] dvb-usb: error while querying for an remote control event. [ 701.805209][T15726] lo speed is unknown, defaulting to 1000 [ 701.925402][T15734] netlink: 'syz.1.1893': attribute type 12 has an invalid length. [ 701.939304][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1893'. [ 701.950896][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 701.952843][ T34] dvb-usb: error while querying for an remote control event. [ 701.976244][T10590] usb 5-1: USB disconnect, device number 26 [ 702.024308][T10590] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 702.530842][T15754] lo speed is unknown, defaulting to 1000 [ 703.230614][T15766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 703.287163][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 703.420933][T15738] Set syz1 is full, maxelem 65536 reached [ 704.204653][T15794] lo speed is unknown, defaulting to 1000 [ 704.393085][T15802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1904'. [ 704.668632][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.804233][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'. [ 704.925326][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1907'. [ 705.572746][ T5858] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 705.725859][T15846] lo speed is unknown, defaulting to 1000 [ 705.761052][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 705.765806][ T5858] usb 5-1: config 0 has no interfaces? [ 705.772680][ T5858] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 705.775736][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 705.781690][ T5858] usb 5-1: Product: syz [ 705.784289][ T5858] usb 5-1: Manufacturer: syz [ 705.786759][ T5858] usb 5-1: SerialNumber: syz [ 705.793535][ T5858] usb 5-1: config 0 descriptor?? [ 706.105415][ T5858] usb 5-1: USB disconnect, device number 27 [ 706.406913][T15866] fuse: fd is not a fuse device [ 706.848761][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1918'. [ 707.123455][T15884] bridge1: entered promiscuous mode [ 707.125483][T15884] bridge1: entered allmulticast mode [ 707.156701][ T42] audit: type=1804 audit(1785266212.620:667): pid=15884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1921" name="/newroot/452/file0/file0" dev="9p" ino=78395335 res=1 errno=0 [ 707.229000][T15888] lo speed is unknown, defaulting to 1000 [ 707.832844][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1924'. [ 707.945509][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1925'. [ 709.030798][T15933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.205880][T15938] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 709.224402][T15938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.248959][T15938] bond6: (slave geneve3): making interface the new active one [ 709.256030][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 709.259023][T15938] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 709.261456][T15889] Bluetooth: hci4: command 0x1003 tx timeout [ 709.458986][T15933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.887261][T15933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.063598][T15933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.193541][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.225892][ T5896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.258848][T11042] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.302218][T15959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1933'. [ 710.305816][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.410713][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 710.416774][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1935'. [ 710.697699][T15979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1941'. [ 710.846312][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1943'. [ 711.089447][T15997] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.162580][T15997] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.234578][T15997] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.296878][T15997] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.368423][ T5794] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.376570][ T5794] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.384368][ T5794] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.393222][ T6539] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.559241][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1945'. [ 711.664879][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1947'. [ 712.513778][T16033] lo speed is unknown, defaulting to 1000 [ 712.602977][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 712.930834][ T5858] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 713.026036][T16049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1955'. [ 713.090724][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 713.094521][ T5858] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 713.098063][ T5858] usb 7-1: config 0 has no interface number 0 [ 713.100836][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 713.105320][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 713.110199][ T5858] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.114789][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 713.120274][ T5858] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 713.123800][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.129279][ T5858] usb 7-1: config 0 descriptor?? [ 713.147093][ T5858] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 713.741042][T16082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 714.204118][T16088] Device name cannot be null; rc = [-22] [ 714.209783][T16088] netlink: 'syz.1.1963': attribute type 30 has an invalid length. [ 714.217865][ T5821] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.223989][ T5821] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.229556][ T5821] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.234596][T16088] netlink: 'syz.1.1963': attribute type 30 has an invalid length. [ 714.237160][ T5821] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.376995][T16090] lo speed is unknown, defaulting to 1000 [ 714.737141][T16100] lo speed is unknown, defaulting to 1000 [ 715.495060][T16125] __nla_validate_parse: 7 callbacks suppressed [ 715.495072][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1971'. [ 715.706889][T16132] block device autoloading is deprecated and will be removed. [ 715.766127][ T34] usb 7-1: USB disconnect, device number 25 [ 715.838714][ T34] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 716.138627][T16150] siw: device registration error -23 [ 717.036334][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1978'. [ 717.184817][T16166] Cannot find add_set index 2 as target [ 717.749871][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 718.180415][T10590] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 718.330605][T16196] bridge1: entered promiscuous mode [ 718.337751][T16196] bridge1: entered allmulticast mode [ 718.340416][T10590] usb 7-1: Using ep0 maxpacket: 32 [ 718.343465][T10590] usb 7-1: config 0 has no interfaces? [ 718.347389][T10590] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 718.352135][T10590] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 718.358388][T10590] usb 7-1: Product: syz [ 718.359725][T10590] usb 7-1: Manufacturer: syz [ 718.362752][T10590] usb 7-1: SerialNumber: syz [ 718.367601][T10590] usb 7-1: config 0 descriptor?? [ 718.450877][ T34] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 718.589839][ T5858] usb 7-1: USB disconnect, device number 26 [ 718.611266][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 718.614348][ T34] usb 5-1: config 0 has no interfaces? [ 718.617834][ T34] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 718.621733][ T34] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 718.624340][ T34] usb 5-1: Product: syz [ 718.625687][ T34] usb 5-1: Manufacturer: syz [ 718.627197][ T34] usb 5-1: SerialNumber: syz [ 718.631660][ T34] usb 5-1: config 0 descriptor?? [ 718.852044][T10854] usb 5-1: USB disconnect, device number 28 [ 719.136296][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 719.206418][T16219] binder: 16218:16219 ioctl c00c6211 0 returned -14 [ 719.441890][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 719.497213][T16226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 719.566372][T16230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1993'. [ 720.155785][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'. [ 720.620785][T14044] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 720.650695][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 720.782256][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 720.791390][T14044] usb 5-1: Using ep0 maxpacket: 32 [ 720.798808][T14044] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.802624][T14044] usb 5-1: config 0 has no interfaces? [ 720.811905][T14044] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 720.814879][T14044] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 720.817660][T14044] usb 5-1: Product: syz [ 720.819189][T14044] usb 5-1: Manufacturer: syz [ 720.824486][T14044] usb 5-1: SerialNumber: syz [ 720.874922][T14044] usb 5-1: config 0 descriptor?? [ 721.037280][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'. [ 721.117053][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2003'. [ 721.240123][ T5858] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 721.471106][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 721.475435][ T5858] usb 7-1: config 0 has no interfaces? [ 721.481012][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 721.484793][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 721.488996][ T5858] usb 7-1: Product: syz [ 721.490963][ T5858] usb 7-1: Manufacturer: syz [ 721.493015][ T5858] usb 7-1: SerialNumber: syz [ 721.498498][ T5858] usb 7-1: config 0 descriptor?? [ 721.709863][ T34] usb 7-1: USB disconnect, device number 27 [ 721.746838][T14044] usb 5-1: USB disconnect, device number 29 [ 722.803239][T16305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'. [ 723.121151][T14871] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 723.218953][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2010'. [ 723.291194][T14871] usb 5-1: Using ep0 maxpacket: 32 [ 723.295373][T14871] usb 5-1: config 0 has no interfaces? [ 723.299911][T14871] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 723.308100][T14871] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 723.312768][T14871] usb 5-1: Product: syz [ 723.314351][T14871] usb 5-1: Manufacturer: syz [ 723.316268][T14871] usb 5-1: SerialNumber: syz [ 723.319851][T14871] usb 5-1: config 0 descriptor?? [ 723.550833][ T5858] usb 5-1: USB disconnect, device number 30 [ 723.623315][T16344] binder: 16338:16344 ioctl c0306201 800003c0 returned -14 [ 724.750731][T16398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2018'. [ 724.762498][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2019'. [ 724.800922][T14871] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 724.907783][T16414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.951117][T14871] usb 7-1: Using ep0 maxpacket: 32 [ 724.954774][T14871] usb 7-1: config 0 has no interfaces? [ 724.958803][T14871] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 724.968851][T14871] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 724.972959][T14871] usb 7-1: Product: syz [ 724.974314][T14871] usb 7-1: Manufacturer: syz [ 724.975953][T14871] usb 7-1: SerialNumber: syz [ 724.979433][T14871] usb 7-1: config 0 descriptor?? [ 725.129756][T16423] 9p: Bad value for 'rfdno' [ 725.190276][ T5858] usb 7-1: USB disconnect, device number 28 [ 725.762003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 726.201036][T14044] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 726.360402][T14044] usb 7-1: Using ep0 maxpacket: 32 [ 726.363942][T14044] usb 7-1: config 0 has no interfaces? [ 726.367626][T14044] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 726.371058][T14044] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 726.373753][T14044] usb 7-1: Product: syz [ 726.375192][T14044] usb 7-1: Manufacturer: syz [ 726.376757][T14044] usb 7-1: SerialNumber: syz [ 726.381600][T14044] usb 7-1: config 0 descriptor?? [ 726.435157][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 726.536676][T16467] efs: device does not support 512 byte blocks [ 726.538910][T16467] device does not support 512 byte blocks [ 726.538910][T16467] [ 726.593221][T14044] usb 7-1: USB disconnect, device number 29 [ 726.876024][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2029'. [ 726.909349][T16472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2030'. [ 726.980708][T16440] syz.3.2025 (16440) used greatest stack depth: 19104 bytes left [ 727.022911][T16477] fuse: fd is not a fuse device [ 727.192012][T16483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2035'. [ 727.740561][T10590] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 727.890473][T10590] usb 5-1: Using ep0 maxpacket: 32 [ 727.893351][T10590] usb 5-1: config 0 has no interfaces? [ 727.896872][T10590] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 727.899876][T10590] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 727.903298][T10590] usb 5-1: Product: syz [ 727.904665][T10590] usb 5-1: Manufacturer: syz [ 727.906267][T10590] usb 5-1: SerialNumber: syz [ 727.909482][T10590] usb 5-1: config 0 descriptor?? [ 728.171912][T14871] usb 5-1: USB disconnect, device number 31 [ 728.191002][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 728.367948][T16524] bridge2: entered promiscuous mode [ 728.372286][T16524] bridge2: entered allmulticast mode [ 729.422956][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2042'. [ 729.447772][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 729.464387][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 729.468975][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 729.472883][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 729.510786][T16539] 9pnet_virtio: no channels available for device syz [ 729.930540][T16551] overlayfs: failed to clone lowerpath [ 730.541596][T16584] ptrace attach of ""[16587] was attempted by "/syz-executor exec"[16584] [ 730.621177][ T42] audit: type=1800 audit(1785266236.070:668): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2047" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 730.710869][T16583] lo speed is unknown, defaulting to 1000 [ 731.825433][T16612] 9pnet_virtio: no channels available for device syz [ 732.204666][T16614] __nla_validate_parse: 8 callbacks suppressed [ 732.204680][T16614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2058'. [ 733.204565][T16629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2060'. [ 733.593996][T16651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2064'. [ 733.610887][ T5858] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 733.800025][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 733.812689][ T5858] usb 7-1: config 0 has no interfaces? [ 733.873402][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'. [ 733.878429][T16665] siw: device registration error -23 [ 734.217226][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'. [ 735.401695][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 735.411799][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 735.430775][ T5858] usb 7-1: Product: syz [ 735.432457][ T5858] usb 7-1: Manufacturer: syz [ 735.439099][ T5858] usb 7-1: SerialNumber: syz [ 735.446189][ T5858] usb 7-1: config 0 descriptor?? [ 735.451481][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2071'. [ 735.663104][T14871] usb 7-1: USB disconnect, device number 30 [ 735.844388][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2072'. [ 737.163999][T16700] set match dimension is over the limit! [ 737.361508][T16724] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.375892][T16737] siw: device registration error -23 [ 738.542026][T16742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2081'. [ 739.277068][T16747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2082'. [ 739.406727][T16747] can: request_module (can-proto-3) failed. [ 740.271592][T16789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2087'. [ 740.530085][ T5858] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 740.680295][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 740.684241][ T5858] usb 7-1: config 0 has no interfaces? [ 740.688384][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 740.692546][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 740.695546][ T5858] usb 7-1: Product: syz [ 740.697221][ T5858] usb 7-1: Manufacturer: syz [ 740.699076][ T5858] usb 7-1: SerialNumber: syz [ 740.703753][ T5858] usb 7-1: config 0 descriptor?? [ 740.966286][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2088'. [ 741.032029][ T5858] usb 7-1: USB disconnect, device number 31 [ 741.492479][T16806] x_tables: duplicate underflow at hook 1 [ 741.598916][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2092'. [ 741.930160][ T5858] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 742.103931][ T5858] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 742.111219][ T5858] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.120069][ T5858] usb 7-1: config 0 has no interface number 0 [ 742.127789][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.133474][ T5858] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 742.148193][ T5858] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 742.168314][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.172608][ T5858] usb 7-1: config 0 descriptor?? [ 742.175065][T16811] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.177596][T16814] lo speed is unknown, defaulting to 1000 [ 742.181075][ T5858] ldusb 7-1:0.55: Interrupt in endpoint not found [ 742.222889][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2095'. [ 742.267614][T16823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 743.330798][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 743.476314][T16869] overlay: Unknown parameter '/' [ 743.481240][T16869] netlink: zone id is out of range [ 743.483529][T16869] netlink: zone id is out of range [ 743.485761][T16869] netlink: zone id is out of range [ 743.545717][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2105'. [ 743.647478][T16875] lo speed is unknown, defaulting to 1000 [ 743.790780][T16880] batadv_slave_1: entered promiscuous mode [ 744.651094][ T5858] usb 7-1: USB disconnect, device number 32 [ 744.825162][T16892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2111'. [ 744.968915][ T42] audit: type=1326 audit(1785266250.430:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 744.984312][ T42] audit: type=1326 audit(1785266250.440:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.018147][ T42] audit: type=1326 audit(1785266250.450:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.034415][ T42] audit: type=1326 audit(1785266250.450:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.069489][ T42] audit: type=1326 audit(1785266250.450:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.097785][ T42] audit: type=1326 audit(1785266250.450:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.116442][ T42] audit: type=1326 audit(1785266250.450:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.135590][ T42] audit: type=1326 audit(1785266250.480:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.164643][ T42] audit: type=1326 audit(1785266250.560:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.191092][ T42] audit: type=1326 audit(1785266250.560:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.1.2112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.265283][T16911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2113'. [ 745.522087][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2114'. [ 745.801200][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2116'. [ 745.924273][T16936] lo speed is unknown, defaulting to 1000 [ 745.925414][T16938] binder: 16937:16938 ioctl c00c6211 0 returned -14 [ 746.139048][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 746.162290][T16946] binder: 16945:16946 ioctl c00c6211 0 returned -14 [ 746.322322][T16949] lo speed is unknown, defaulting to 1000 [ 746.418401][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 746.774309][T16966] IPVS: Scheduler module ip_vs_sip not found [ 746.774945][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.823585][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.988510][T16043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 747.308769][T16996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 747.310133][T16043] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 747.480048][T16043] usb 7-1: Using ep0 maxpacket: 32 [ 747.512036][T16043] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.517938][T16043] usb 7-1: config 0 has no interfaces? [ 747.558280][T16043] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 747.585566][T16043] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 747.614033][T16043] usb 7-1: Product: syz [ 747.631894][T16043] usb 7-1: Manufacturer: syz [ 747.657723][T16043] usb 7-1: SerialNumber: syz [ 747.773432][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2128'. [ 747.805661][T16043] usb 7-1: config 0 descriptor?? [ 747.913279][T17014] lo speed is unknown, defaulting to 1000 [ 748.880679][T14044] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 749.030407][T14044] usb 5-1: Using ep0 maxpacket: 32 [ 749.034962][T14044] usb 5-1: config 0 has no interfaces? [ 749.038733][T14044] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 749.042380][T14044] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 749.049197][T14044] usb 5-1: Product: syz [ 749.051046][T14044] usb 5-1: Manufacturer: syz [ 749.054964][T14044] usb 5-1: SerialNumber: syz [ 749.060986][T14044] usb 5-1: config 0 descriptor?? [ 749.267635][T16043] usb 7-1: USB disconnect, device number 33 [ 749.657228][T17051] lo speed is unknown, defaulting to 1000 [ 749.698047][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 749.861360][T14044] usb 5-1: USB disconnect, device number 32 [ 749.995908][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2135'. [ 749.999758][T17070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2135'. [ 750.005452][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2135'. [ 750.862985][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2138'. [ 751.305485][T17090] lo speed is unknown, defaulting to 1000 [ 751.424869][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 751.548245][T17095] binder: 17094:17095 ioctl c00c6211 0 returned -14 [ 752.724823][T17102] bridge2: entered promiscuous mode [ 752.726881][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 752.731663][T17102] bridge2: entered allmulticast mode [ 752.751818][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 752.816862][ T5794] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.819344][ T5794] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.840983][ T5794] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.844484][ T5794] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.882069][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 752.977037][T17112] lo speed is unknown, defaulting to 1000 [ 753.067996][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 753.188066][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 753.200801][T17119] 9p: Bad value for 'version' [ 753.420059][T17122] ptrace attach of ""[17124] was attempted by "/syz-executor exec"[17122] [ 753.585012][T17126] lo speed is unknown, defaulting to 1000 [ 753.777986][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 753.778001][ T42] audit: type=1800 audit(1785266259.190:737): pid=17122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2145" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 754.510442][T16043] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 754.660220][T16043] usb 5-1: Using ep0 maxpacket: 32 [ 754.664799][T16043] usb 5-1: config 0 has no interfaces? [ 754.669193][T16043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 754.672579][T16043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 754.675309][T16043] usb 5-1: Product: syz [ 754.675931][T17171] bridge2: entered promiscuous mode [ 754.676642][T16043] usb 5-1: Manufacturer: syz [ 754.676652][T16043] usb 5-1: SerialNumber: syz [ 754.685532][T17171] bridge2: entered allmulticast mode [ 754.686104][T16043] usb 5-1: config 0 descriptor?? [ 754.968563][T14871] usb 5-1: USB disconnect, device number 33 [ 755.005856][T17175] lo speed is unknown, defaulting to 1000 [ 755.021889][T17177] __nla_validate_parse: 9 callbacks suppressed [ 755.021901][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 755.532184][T17189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 755.593915][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'. [ 755.703580][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2163'. [ 755.908977][T17201] lo speed is unknown, defaulting to 1000 [ 756.432760][T17212] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 756.435829][T17212] netlink: 'syz.3.2168': attribute type 2 has an invalid length. [ 756.439176][T17212] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 756.442246][T17212] netlink: 'syz.3.2168': attribute type 2 has an invalid length. [ 756.502849][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2170'. [ 756.637825][T17205] trusted_key: syz.1.2166 sent an empty control message without MSG_MORE. [ 756.819316][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2172'. [ 757.735129][T17238] lo speed is unknown, defaulting to 1000 [ 758.630674][ T5849] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 758.800955][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 758.808379][ T5849] usb 7-1: config 0 has no interfaces? [ 758.823094][ T5849] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 758.833380][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 758.836034][ T5849] usb 7-1: Product: syz [ 758.849687][ T5849] usb 7-1: Manufacturer: syz [ 758.857000][ T5849] usb 7-1: SerialNumber: syz [ 758.867868][ T5849] usb 7-1: config 0 descriptor?? [ 759.096045][T17277] lo speed is unknown, defaulting to 1000 [ 759.132763][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 759.247287][T12818] usb 7-1: USB disconnect, device number 34 [ 759.635884][T17290] overlayfs: failed to clone lowerpath [ 760.131013][T17293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.285220][T17300] kAFS: unable to lookup cell 'ÿ' [ 760.288023][ T42] audit: type=1326 audit(1785266265.750:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.297094][ T42] audit: type=1326 audit(1785266265.750:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.305055][ T42] audit: type=1326 audit(1785266265.760:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.314361][ T42] audit: type=1326 audit(1785266265.760:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.322305][ T42] audit: type=1326 audit(1785266265.760:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.329937][ T42] audit: type=1326 audit(1785266265.770:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.338034][ T42] audit: type=1326 audit(1785266265.770:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.346528][ T42] audit: type=1326 audit(1785266265.770:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.354273][ T42] audit: type=1326 audit(1785266265.780:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.374904][ T42] audit: type=1326 audit(1785266265.840:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 760.725700][T17310] lo speed is unknown, defaulting to 1000 [ 761.197120][T17319] ptrace attach of ""[17321] was attempted by "/syz-executor exec"[17319] [ 762.138116][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2192'. [ 762.142007][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2192'. [ 762.573432][T17371] lo speed is unknown, defaulting to 1000 [ 762.780360][ T5858] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 762.950254][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 762.971218][ T5858] usb 7-1: config 0 has no interfaces? [ 762.981088][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 762.984377][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 762.994408][ T5858] usb 7-1: Product: syz [ 762.996985][ T5858] usb 7-1: Manufacturer: syz [ 762.999549][ T5858] usb 7-1: SerialNumber: syz [ 763.014287][ T5858] usb 7-1: config 0 descriptor?? [ 763.287047][ T5858] usb 7-1: USB disconnect, device number 35 [ 763.895728][T17411] lo speed is unknown, defaulting to 1000 [ 764.071303][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 764.124583][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2208'. [ 764.702060][T17424] 9p: Bad value for 'rfdno' [ 764.829416][T17454] lo speed is unknown, defaulting to 1000 [ 764.947029][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 766.834734][T17507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2211'. [ 767.027726][T17510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2212'. [ 767.574278][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2216'. [ 767.793561][T17522] binder: 17521:17522 ioctl c00c6211 0 returned -14 [ 767.898676][T17526] vlan2: entered promiscuous mode [ 767.906693][T17526] hsr0: entered promiscuous mode [ 767.909276][T17526] vlan2: entered allmulticast mode [ 767.913015][T17526] hsr0: entered allmulticast mode [ 767.915224][T17526] hsr_slave_0: entered allmulticast mode [ 767.917616][T17526] hsr_slave_1: entered allmulticast mode [ 767.954420][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 767.958857][T17526] hsr_slave_0: left promiscuous mode [ 767.963434][T17526] hsr_slave_1: left promiscuous mode [ 768.097414][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'. [ 768.305324][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 768.316041][T17531] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 768.321663][T17531] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 768.327356][T17531] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 768.335193][T17531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 768.551276][T17535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 768.709207][T17543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2225'. [ 770.041109][T17561] 9p: Bad value for 'rfdno' [ 770.471099][T14044] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 770.719624][T14044] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 770.743435][T14044] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 770.761234][T14044] usb 7-1: config 0 has no interface number 0 [ 770.770583][T14044] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 770.784697][T14044] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 770.805366][T14044] usb 7-1: config 0 interface 143 has no altsetting 0 [ 770.815980][T14044] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 770.821190][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.828560][T14044] usb 7-1: Product: syz [ 770.830158][T14044] usb 7-1: Manufacturer: syz [ 770.834329][T14044] usb 7-1: SerialNumber: syz [ 770.841517][T14044] usb 7-1: config 0 descriptor?? [ 771.078948][T14044] usb 7-1: USB disconnect, device number 36 [ 771.219665][T17578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2232'. [ 771.286746][T17580] lo speed is unknown, defaulting to 1000 [ 771.345828][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 771.555721][T17588] libceph: resolve '400' (ret=-3): failed [ 771.600866][T14044] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 771.770734][T14044] usb 7-1: Using ep0 maxpacket: 16 [ 771.784439][T14044] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 771.788544][T14044] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 771.793538][T14044] usb 7-1: config 0 has no interface number 0 [ 771.795460][T14044] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 771.799829][T14044] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 771.805998][T14044] usb 7-1: config 0 interface 143 has no altsetting 0 [ 771.811629][T14044] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 771.815446][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.818496][T14044] usb 7-1: Product: syz [ 771.827606][T14044] usb 7-1: Manufacturer: syz [ 771.829597][T14044] usb 7-1: SerialNumber: syz [ 771.832760][T17597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 771.837079][T14044] usb 7-1: config 0 descriptor?? [ 771.980018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 772.052296][T17557] capability: warning: `syz.2.2228' uses deprecated v2 capabilities in a way that may be insecure [ 772.119891][T17557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.126536][T17557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.341544][T14044] usb 7-1: USB disconnect, device number 37 [ 772.954578][T17619] netlink: zone id is out of range [ 772.957133][T17619] netlink: zone id is out of range [ 772.959295][T17619] netlink: zone id is out of range [ 772.963309][T17619] netlink: zone id is out of range [ 772.966550][T17619] netlink: zone id is out of range [ 772.969161][T17619] netlink: zone id is out of range [ 772.973020][T17619] netlink: zone id is out of range [ 772.975611][T17619] netlink: zone id is out of range [ 772.979254][T17619] netlink: zone id is out of range [ 772.982031][T17619] netlink: zone id is out of range [ 773.065928][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2241'. [ 774.011732][T17624] lo speed is unknown, defaulting to 1000 [ 774.043599][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2244'. [ 774.087942][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 774.218770][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2246'. [ 776.310825][T17663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 776.496588][T17680] kAFS: unable to lookup cell 'ÿ' [ 776.600875][T12818] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 776.753679][T12818] usb 7-1: Using ep0 maxpacket: 32 [ 776.761540][T12818] usb 7-1: config 0 has no interfaces? [ 776.768345][T12818] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 776.779871][T12818] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 776.793242][T12818] usb 7-1: Product: syz [ 776.797706][T12818] usb 7-1: Manufacturer: syz [ 776.805496][T12818] usb 7-1: SerialNumber: syz [ 776.829065][T12818] usb 7-1: config 0 descriptor?? [ 777.095515][T12818] usb 7-1: USB disconnect, device number 38 [ 777.254827][T17698] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 777.450767][T17702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 777.809608][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'. [ 778.224131][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2260'. [ 778.279570][T17714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2261'. [ 778.674357][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 778.708165][T17721] vlan2: entered promiscuous mode [ 778.739390][T17721] hsr0: entered promiscuous mode [ 778.783489][T17721] vlan2: entered allmulticast mode [ 778.785311][T17721] hsr0: entered allmulticast mode [ 778.817710][T17721] hsr_slave_0: entered allmulticast mode [ 778.819554][T17721] hsr_slave_1: entered allmulticast mode [ 778.895003][T17724] hsr_slave_0: left promiscuous mode [ 778.909268][T17724] hsr_slave_1: left promiscuous mode [ 779.771837][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'. [ 780.731382][T17776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2272'. [ 780.753970][T17777] lo speed is unknown, defaulting to 1000 [ 780.866102][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 782.271430][T17799] ptrace attach of ""[17800] was attempted by "/syz-executor exec"[17799] [ 782.553079][ T42] kauditd_printk_skb: 143 callbacks suppressed [ 782.553098][ T42] audit: type=1800 audit(1785266288.020:891): pid=17799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2277" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 783.158903][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2281'. [ 783.598714][T17816] lo speed is unknown, defaulting to 1000 [ 784.014391][T17821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 784.085258][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2286'. [ 784.616700][T17828] lo speed is unknown, defaulting to 1000 [ 785.129378][T17839] vlan2: entered promiscuous mode [ 785.137078][T17839] hsr0: entered promiscuous mode [ 785.141543][T17839] vlan2: entered allmulticast mode [ 785.143555][T17839] hsr0: entered allmulticast mode [ 785.157105][T17839] hsr_slave_0: entered allmulticast mode [ 785.165084][T17839] hsr_slave_1: entered allmulticast mode [ 785.250206][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 785.278215][T17839] hsr_slave_0: left promiscuous mode [ 785.297799][T17839] hsr_slave_1: left promiscuous mode [ 786.064964][T17855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 786.067177][T17855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 786.071130][T17855] vhci_hcd vhci_hcd.0: Device attached [ 786.341310][T12818] usb 42-1: SetAddress Request (46) to port 0 [ 786.344043][T12818] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 787.116361][T17857] vhci_hcd: connection reset by peer [ 787.147432][ T5821] vhci_hcd vhci_hcd.2: stop threads [ 787.149487][ T5821] vhci_hcd vhci_hcd.2: release socket [ 787.152503][ T5821] vhci_hcd vhci_hcd.2: disconnect device [ 787.464103][T17860] net_ratelimit: 11 callbacks suppressed [ 787.464118][T17860] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 787.899118][T17896] random: crng reseeded on system resumption [ 787.973757][T17897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.176467][T17900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2295'. [ 788.184415][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'. [ 788.680364][T17911] binder: 17910:17911 ioctl c00c6211 0 returned -14 [ 788.687761][T17909] lo speed is unknown, defaulting to 1000 [ 788.736151][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 788.761814][T17914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2297'. [ 789.301049][T14871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 789.451225][T14871] usb 5-1: Using ep0 maxpacket: 32 [ 789.457477][T14871] usb 5-1: config 0 has no interfaces? [ 789.471216][T14871] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 789.474643][T14871] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 789.477350][T17929] 9p: Bad value for 'rfdno' [ 789.478317][T14871] usb 5-1: Product: syz [ 789.507557][T14871] usb 5-1: Manufacturer: syz [ 789.509190][T14871] usb 5-1: SerialNumber: syz [ 789.577096][T14871] usb 5-1: config 0 descriptor?? [ 790.537208][T17937] infiniband syz0: set active [ 790.539544][T17937] infiniband syz0: added bond_slave_1 [ 790.591036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 790.970506][T17937] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 790.975259][T17937] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 790.987104][T17937] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 790.999137][T17937] RDS/IB: syz0: added [ 791.000811][T17937] smc: adding ib device syz0 with port count 1 [ 791.002851][T17937] smc: ib device syz0 port 1 has no pnetid [ 791.410851][T12818] usb 42-1: device descriptor read/8, error -110 [ 791.924681][ T5858] usb 5-1: USB disconnect, device number 34 [ 792.001515][T12818] usb usb42-port1: attempt power cycle [ 792.052961][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2306'. [ 792.512880][T17952] fuse: fd is not a fuse device [ 792.823421][T17955] kAFS: unable to lookup cell 'ÿ' [ 793.054738][T17958] netlink: 'syz.0.2308': attribute type 9 has an invalid length. [ 793.057767][T17958] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 793.061875][T17958] netlink: 'syz.0.2308': attribute type 8 has an invalid length. [ 793.171365][T12818] usb usb42-port1: unable to enumerate USB device [ 793.369573][T17939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2305'. [ 793.378598][T17960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2309'. [ 793.783336][ T42] audit: type=1800 audit(1785266299.250:892): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2312" name="UDC" dev="configfs" ino=54130 res=0 errno=0 [ 793.823411][T17967] configfs-gadget.g1 gadget.0: HOST MAC 3a:50:5e:88:a6:f2 [ 793.825914][T17967] configfs-gadget.g1 gadget.0: MAC c2:c3:94:4d:5b:4d [ 793.940131][ T42] audit: type=1326 audit(1785266299.320:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.947850][ T42] audit: type=1326 audit(1785266299.320:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.957675][ T42] audit: type=1326 audit(1785266299.320:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.966183][ T42] audit: type=1326 audit(1785266299.350:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.975143][ T42] audit: type=1326 audit(1785266299.350:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.982711][ T42] audit: type=1326 audit(1785266299.350:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.989486][ T42] audit: type=1326 audit(1785266299.350:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 793.996880][ T42] audit: type=1326 audit(1785266299.350:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 794.004432][ T42] audit: type=1326 audit(1785266299.350:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17961 comm="syz.3.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 794.141319][ T5849] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 794.292573][ T5849] usb 5-1: Dual-Role OTG device on HNP port [ 794.295376][ T5849] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 794.302004][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.336683][ T5849] gspca_main: spca501-2.14.0 probing 0000:0000 [ 794.339766][ T5849] gspca_spca501: reg write: error -32 [ 794.351949][ T5849] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 794.376906][ T5849] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 794.565123][T17979] lo speed is unknown, defaulting to 1000 [ 794.603165][ T5849] rndis_host 5-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 3a:50:5e:88:a6:f2 [ 794.722781][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 794.735012][T17991] gretap1: entered promiscuous mode [ 794.822587][T17975] 9p: p9: multiple sources not supported [ 795.340478][T14044] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 795.510698][T14044] usb 7-1: Using ep0 maxpacket: 32 [ 795.523953][T14044] usb 7-1: config 0 has no interfaces? [ 795.533381][T14044] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 795.542592][T14044] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 795.552178][T14044] usb 7-1: Product: syz [ 795.556655][T14044] usb 7-1: Manufacturer: syz [ 795.569161][T14044] usb 7-1: SerialNumber: syz [ 795.601430][T14044] usb 7-1: config 0 descriptor?? [ 796.260397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 796.535484][T18054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 796.537708][T18054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 796.576372][T18054] vhci_hcd vhci_hcd.0: Device attached [ 796.880827][T14044] usb 38-1: SetAddress Request (50) to port 0 [ 796.894614][T14044] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 797.364376][T14871] usb 7-1: USB disconnect, device number 39 [ 797.702868][T18055] vhci_hcd: connection reset by peer [ 797.705558][ T6983] vhci_hcd vhci_hcd.0: stop threads [ 797.708974][ T6983] vhci_hcd vhci_hcd.0: release socket [ 797.715052][ T6983] vhci_hcd vhci_hcd.0: disconnect device [ 797.954909][T18068] binder: 18067:18068 ioctl c00c6211 0 returned -14 [ 798.127916][T18073] fuse: fd is not a fuse device [ 798.138926][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 798.275007][T18077] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 799.225375][T18092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2331'. [ 799.362570][T18094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2332'. [ 800.065577][T18099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2333'. [ 800.231558][T18105] binder: 18104:18105 ioctl c00c6211 0 returned -14 [ 801.970789][T14044] usb 38-1: device descriptor read/8, error -110 [ 802.371061][T14044] usb usb38-port1: attempt power cycle [ 802.391077][T18128] batman_adv: batadv0: Interface deactivated: macvlan2 [ 802.400158][T18128] batadv_slave_1: left allmulticast mode [ 802.412059][T18128] bridge0: left promiscuous mode [ 802.421447][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 802.452470][T18136] vlan2: entered promiscuous mode [ 802.459406][T18136] hsr0: entered promiscuous mode [ 802.461225][T18136] vlan2: entered allmulticast mode [ 802.463254][T18136] hsr0: entered allmulticast mode [ 802.471165][T18136] hsr_slave_0: entered allmulticast mode [ 802.473548][T18136] hsr_slave_1: entered allmulticast mode [ 802.476111][T11042] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.480148][T11042] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.485332][T11042] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.491551][T11042] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.529919][T18140] hsr_slave_0: left promiscuous mode [ 802.546708][T18140] hsr_slave_1: left promiscuous mode [ 802.571648][T18143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2342'. [ 802.624317][T18141] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 802.626886][T18141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 802.630243][T18141] vhci_hcd vhci_hcd.0: Device attached [ 802.912620][T11042] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.915540][T11042] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.920136][T11042] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.924119][T11042] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.976009][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'. [ 802.980461][T14044] usb 38-1: SetAddress Request (52) to port 0 [ 802.983034][T14044] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd [ 803.068793][T18154] binder: 18153:18154 ioctl c00c6211 0 returned -14 [ 803.447589][T18144] vhci_hcd: connection reset by peer [ 803.450628][ T6539] vhci_hcd vhci_hcd.0: stop threads [ 803.452799][ T6539] vhci_hcd vhci_hcd.0: release socket [ 803.458260][ T6539] vhci_hcd vhci_hcd.0: disconnect device [ 804.515843][T18195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 805.104648][T18201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2355'. [ 806.469758][T18229] netlink: 'syz.3.2360': attribute type 9 has an invalid length. [ 806.472611][T18229] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 806.475232][T18229] netlink: 'syz.3.2360': attribute type 8 has an invalid length. [ 806.732087][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 806.732099][ T42] audit: type=1804 audit(1785266312.190:910): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2369" name="/newroot/534/file1/file0" dev="9p" ino=78395335 res=1 errno=0 [ 807.275836][T18245] overlayfs: failed to clone upperpath [ 807.869800][T18265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 808.050694][T14044] usb 38-1: device descriptor read/8, error -110 [ 808.138855][T18278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'. [ 808.212148][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.214631][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.452412][T14044] usb usb38-port1: unable to enumerate USB device [ 811.197299][T18303] lo speed is unknown, defaulting to 1000 [ 811.258624][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 811.350838][T12818] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 811.483919][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2376'. [ 811.507698][T12818] usb 7-1: Using ep0 maxpacket: 8 [ 811.512632][T12818] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 811.515602][T12818] usb 7-1: config 0 has no interface number 0 [ 811.517577][T12818] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 811.525152][T12818] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 811.528819][T12818] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.533211][T12818] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 811.537400][T12818] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 811.541316][T12818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.551723][T12818] usb 7-1: config 0 descriptor?? [ 811.566493][T12818] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 811.904791][T18319] lo speed is unknown, defaulting to 1000 [ 812.361897][T14044] usb 7-1: USB disconnect, device number 40 [ 812.361980][ C3] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 812.379235][T14044] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 812.379403][T18304] ldusb: No device or device unplugged -19 [ 812.680900][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2380'. [ 812.725679][T18328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2378'. [ 813.108743][T18335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2381'. [ 814.174848][T18353] tmpfs: Unknown parameter 'grpquota_block_hardlimi' [ 814.626703][T18358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2389'. [ 815.033432][T18363] warn_alloc: 1 callbacks suppressed [ 815.033447][T18363] syz.3.2390: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 815.040680][T18363] CPU: 0 UID: 0 PID: 18363 Comm: syz.3.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.040699][T18363] Tainted: [L]=SOFTLOCKUP [ 815.040703][T18363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 815.040711][T18363] Call Trace: [ 815.040715][T18363] [ 815.040719][T18363] dump_stack_lvl+0x100/0x190 [ 815.040767][T18363] warn_alloc.cold+0x94/0xa8 [ 815.040793][T18363] ? __pfx_warn_alloc+0x10/0x10 [ 815.040820][T18363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 815.040845][T18363] ? __pfx_get_page_from_freelist+0x10/0x10 [ 815.040861][T18363] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 815.040876][T18363] ? __lock_acquire+0x49f/0x1a40 [ 815.040908][T18363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 815.040922][T18363] ? find_held_lock+0x2b/0x80 [ 815.040936][T18363] ? __free_frozen_pages+0x747/0x1090 [ 815.040952][T18363] ? __free_frozen_pages+0x747/0x1090 [ 815.040970][T18363] ? do_raw_spin_unlock+0x145/0x1e0 [ 815.040983][T18363] ? _raw_spin_unlock+0x28/0x50 [ 815.040996][T18363] ? irqentry_exit+0x24d/0xa00 [ 815.041016][T18363] __folio_alloc_noprof+0x13/0x260 [ 815.041029][T18363] alloc_migration_target+0x1d7/0x6d0 [ 815.041053][T18363] migrate_pages_batch+0x5dc/0x45c0 [ 815.041071][T18363] ? __pfx_alloc_migration_target+0x10/0x10 [ 815.041103][T18363] ? migrate_pages_sync+0x12c/0x880 [ 815.041120][T18363] ? migrate_pages_sync+0x588/0x880 [ 815.041136][T18363] ? __pfx_migrate_pages_batch+0x10/0x10 [ 815.041155][T18363] ? __pfx_migrate_pages_sync+0x10/0x10 [ 815.041177][T18363] migrate_pages+0x1950/0x2850 [ 815.041195][T18363] ? __lock_acquire+0x49f/0x1a40 [ 815.041212][T18363] ? __pfx_alloc_migration_target+0x10/0x10 [ 815.041231][T18363] ? __pfx_migrate_pages+0x10/0x10 [ 815.041250][T18363] ? __lock_acquire+0x49f/0x1a40 [ 815.041268][T18363] ? mtree_load+0x32d/0xa90 [ 815.041284][T18363] move_pages_and_store_status+0xf1/0x230 [ 815.041303][T18363] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 815.041326][T18363] kernel_move_pages+0xc89/0x14a0 [ 815.041347][T18363] ? __pfx_kernel_move_pages+0x10/0x10 [ 815.041367][T18363] ? xfd_validate_state+0x129/0x190 [ 815.041391][T18363] __ia32_sys_move_pages+0xdd/0x1b0 [ 815.041408][T18363] ? __do_fast_syscall_32+0x98/0x970 [ 815.041426][T18363] ? lockdep_hardirqs_on+0x78/0x100 [ 815.041438][T18363] __do_fast_syscall_32+0xe7/0x970 [ 815.041454][T18363] do_fast_syscall_32+0x32/0x70 [ 815.041468][T18363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 815.041483][T18363] RIP: 0023:0xf6fdefec [ 815.041498][T18363] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 815.041503][T18363] RSP: 002b:00000000f4f6850c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 815.041514][T18363] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 815.041520][T18363] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 815.041527][T18363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 815.041533][T18363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.041540][T18363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 815.041553][T18363] [ 815.041603][T18363] Mem-Info: [ 815.146776][T18363] active_anon:9053 inactive_anon:3221 isolated_anon:12 [ 815.146776][T18363] active_file:6223 inactive_file:16433 isolated_file:0 [ 815.146776][T18363] unevictable:1768 dirty:907 writeback:0 [ 815.146776][T18363] slab_reclaimable:6600 slab_unreclaimable:63291 [ 815.146776][T18363] mapped:34218 shmem:11097 pagetables:1512 [ 815.146776][T18363] sec_pagetables:322 bounce:0 [ 815.146776][T18363] kernel_misc_reclaimable:0 [ 815.146776][T18363] free:29281 free_pcp:15001 free_cma:0 [ 815.161244][T18363] Node 0 active_anon:0kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1484kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 815.172225][T18363] Node 1 active_anon:36212kB inactive_anon:12864kB active_file:24888kB inactive_file:65732kB unevictable:5536kB isolated(anon):48kB isolated(file):0kB mapped:136844kB dirty:3624kB writeback:0kB shmem:42852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8308kB pagetables:4564kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 815.184435][T18363] Node 0 DMA free:2836kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.193406][T18363] lowmem_reserve[]: 0 280 280 280 280 [ 815.195428][T18363] Node 0 DMA32 free:24104kB boost:12288kB min:25060kB low:28252kB high:31444kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:520kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:2940kB local_pcp:1196kB free_cma:0kB [ 815.206200][T18363] lowmem_reserve[]: 0 0 0 0 0 [ 815.207812][T18363] Node 1 DMA32 free:90184kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36212kB inactive_anon:12864kB active_file:24888kB inactive_file:65732kB unevictable:5536kB writepending:3624kB zspages:8224kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:57028kB local_pcp:13080kB free_cma:0kB [ 815.219672][T18363] lowmem_reserve[]: 0 0 0 0 0 [ 815.222437][T18363] Node 0 DMA: 71*4kB (U) 13*8kB (U) 5*16kB (U) 14*32kB (U) 6*64kB (U) 4*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2836kB [ 815.228656][T18363] Node 0 DMA32: 680*4kB (UME) 221*8kB (UE) 60*16kB (UE) 153*32kB (UME) 45*64kB (UME) 23*128kB (UME) 7*256kB (ME) 6*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 24104kB [ 815.235224][T18363] Node 1 DMA32: 2*4kB (UM) 2*8kB (UE) 3*16kB (UME) 2*32kB (UE) 43*64kB (UME) 80*128kB (UME) 83*256kB (UM) 35*512kB (UM) 23*1024kB (UM) 7*2048kB (UM) 0*4096kB = 90184kB [ 815.242027][T18363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 815.245331][T18363] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 815.248315][T18363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 815.252194][T18363] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 815.255829][T18363] 32490 total pagecache pages [ 815.257371][T18363] 787 pages in swap cache [ 815.258836][T18363] Free swap = 1136kB [ 815.260906][T18363] Total swap = 124996kB [ 815.262360][T18363] 524155 pages RAM [ 815.263668][T18363] 0 pages HighMem/MovableOnly [ 815.265235][T18363] 211525 pages reserved [ 815.266703][T18363] 0 pages cma reserved [ 815.676637][T18370] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 815.678772][T18370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 815.682232][T18370] vhci_hcd vhci_hcd.0: Device attached [ 815.970513][T14044] usb 38-1: SetAddress Request (54) to port 0 [ 815.972815][T14044] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 816.185983][T18375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2392'. [ 816.225155][T18371] vhci_hcd: connection reset by peer [ 816.227243][T11042] vhci_hcd vhci_hcd.0: stop threads [ 816.229156][T11042] vhci_hcd vhci_hcd.0: release socket [ 816.232085][T11042] vhci_hcd vhci_hcd.0: disconnect device [ 817.335377][T18383] lo speed is unknown, defaulting to 1000 [ 817.512586][T18392] binder: 18391:18392 ioctl c00c6211 0 returned -14 [ 817.900378][T18396] lo speed is unknown, defaulting to 1000 [ 817.942495][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 818.368481][T18409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'. [ 818.801962][T18410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.806188][T18410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.443770][T18422] random: crng reseeded on system resumption [ 820.671864][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2414'. [ 821.016989][T18434] fuse: fd is not a fuse device [ 821.025778][T14044] usb 38-1: device descriptor read/8, error -110 [ 821.445152][T18440] lo speed is unknown, defaulting to 1000 [ 821.537556][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 822.001190][T14044] usb usb38-port1: attempt power cycle [ 822.117360][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 822.523745][T18452] binder: 18451:18452 ioctl c00c6211 0 returned -14 [ 822.533408][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2413'. [ 822.561059][T14044] usb usb38-port1: unable to enumerate USB device [ 823.269631][T18460] lo speed is unknown, defaulting to 1000 [ 823.883499][T18472] lo speed is unknown, defaulting to 1000 [ 824.267010][T18474] rdma_rxe: rxe_newlink: failed to add wg2 [ 825.548087][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2424'. [ 825.554422][T18489] binder: 18488:18489 ioctl c00c6211 0 returned -14 [ 825.622356][T18497] lo speed is unknown, defaulting to 1000 [ 825.676713][ T42] audit: type=1804 audit(1785266331.140:911): pid=18499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2421" name="/newroot/555/file1/file0" dev="9p" ino=78395335 res=1 errno=0 [ 825.735160][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2427'. [ 827.820424][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 828.362043][T18536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2435'. [ 828.468277][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'. [ 828.506635][T18541] lo speed is unknown, defaulting to 1000 [ 828.869062][T18552] overlayfs: failed to clone upperpath [ 829.318764][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.773248][T18557] batadv_slave_1: left promiscuous mode [ 829.910933][T18557] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 830.641287][T10854] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 830.790623][T10854] usb 7-1: Using ep0 maxpacket: 32 [ 830.795142][T10854] usb 7-1: config 0 has no interfaces? [ 830.806869][T10854] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 830.817157][T10854] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 830.826150][T10854] usb 7-1: Product: syz [ 830.827931][T10854] usb 7-1: Manufacturer: syz [ 830.833625][T10854] usb 7-1: SerialNumber: syz [ 830.860883][T10854] usb 7-1: config 0 descriptor?? [ 832.507520][ T5858] usb 7-1: USB disconnect, device number 41 [ 833.109191][T18586] lo speed is unknown, defaulting to 1000 [ 833.273813][T18593] ptrace attach of ""[18594] was attempted by "/syz-executor exec"[18593] [ 833.333441][ T42] audit: type=1800 audit(1785266338.780:912): pid=18593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2446" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 833.372162][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2449'. [ 834.198502][T18606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'. [ 834.348575][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'. [ 834.654588][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.661893][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.198257][T18617] overlayfs: failed to clone upperpath [ 837.067204][T18654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2459'. [ 837.557634][T18665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'. [ 838.518297][T18675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 839.050334][ T5858] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 839.200038][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 839.212255][ T5858] usb 7-1: config 0 has no interfaces? [ 839.224094][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 839.240859][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 839.252572][ T5858] usb 7-1: Product: syz [ 839.260871][ T5858] usb 7-1: Manufacturer: syz [ 839.266886][ T5858] usb 7-1: SerialNumber: syz [ 839.340042][ T5858] usb 7-1: config 0 descriptor?? [ 840.006283][T18685] lo speed is unknown, defaulting to 1000 [ 840.417518][ T5849] usb 7-1: USB disconnect, device number 42 [ 840.593560][T18693] lo speed is unknown, defaulting to 1000 [ 840.621166][ T42] audit: type=1326 audit(1785266346.090:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18694 comm="syz.1.2469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 840.638476][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 840.735888][T18699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 841.757364][T18712] fuse: Bad value for 'fd' [ 841.868698][T18714] netlink: 'syz.2.2472': attribute type 2 has an invalid length. [ 841.871906][T18714] netlink: 'syz.2.2472': attribute type 2 has an invalid length. [ 842.003166][T18720] lo speed is unknown, defaulting to 1000 [ 842.406666][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 843.064854][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 843.091251][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2481'. [ 843.198470][T18744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2484'. [ 843.488885][T18750] 9pnet_virtio: no channels available for device c::: [ 843.551272][T18737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.646940][T18737] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 843.734224][T18752] lo speed is unknown, defaulting to 1000 [ 844.298991][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'. [ 844.986270][T18779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2494'. [ 845.576436][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 845.576690][T15889] Bluetooth: hci4: command 0x1003 tx timeout [ 845.765355][T18804] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 845.767462][T18804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 845.773710][T18804] vhci_hcd vhci_hcd.0: Device attached [ 845.818134][T18806] vhci_hcd: connection closed [ 845.818503][T11042] vhci_hcd vhci_hcd.2: stop threads [ 845.823559][T11042] vhci_hcd vhci_hcd.2: release socket [ 845.825873][T11042] vhci_hcd vhci_hcd.2: disconnect device [ 845.832205][T18797] bridge0: left promiscuous mode [ 845.846754][T18797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.926130][T18797] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 845.933993][T10854] lo speed is unknown, defaulting to 1000 [ 845.936113][T10854] syz2: Port: 1 Link ACTIVE [ 846.362908][T18831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 847.380999][T18847] kernel profiling enabled (shift: 17) [ 848.601673][T18866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2513'. [ 848.773973][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'. [ 848.786144][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 848.864436][T18871] lo speed is unknown, defaulting to 1000 [ 848.902527][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 849.715684][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.726339][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.483639][T18918] overlayfs: failed to clone upperpath [ 851.622486][T18921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 851.625078][T18921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 851.644796][T18921] vhci_hcd vhci_hcd.0: Device attached [ 851.865395][T18921] rdma_rxe: rxe_newlink: failed to add wg2 [ 851.930815][ T56] usb 42-1: SetAddress Request (50) to port 0 [ 851.933131][ T56] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 852.528314][T18922] vhci_hcd: connection reset by peer [ 852.531423][ T6983] vhci_hcd vhci_hcd.2: stop threads [ 852.533864][ T6983] vhci_hcd vhci_hcd.2: release socket [ 852.536289][ T6983] vhci_hcd vhci_hcd.2: disconnect device [ 852.656964][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2522'. [ 853.226318][T18944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2524'. [ 853.387447][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2525'. [ 853.961037][T18954] syz.2.2527: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 853.969196][T18954] CPU: 2 UID: 0 PID: 18954 Comm: syz.2.2527 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.969240][T18954] Tainted: [L]=SOFTLOCKUP [ 853.969246][T18954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.969258][T18954] Call Trace: [ 853.969264][T18954] [ 853.969270][T18954] dump_stack_lvl+0x100/0x190 [ 853.969295][T18954] warn_alloc.cold+0x94/0xa8 [ 853.969307][T18954] ? __pfx_warn_alloc+0x10/0x10 [ 853.969325][T18954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.969347][T18954] ? __pfx_get_page_from_freelist+0x10/0x10 [ 853.969364][T18954] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 853.969381][T18954] ? __lock_acquire+0x49f/0x1a40 [ 853.969404][T18954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 853.969419][T18954] ? find_held_lock+0x2b/0x80 [ 853.969433][T18954] ? __free_frozen_pages+0x747/0x1090 [ 853.969451][T18954] ? __free_frozen_pages+0x747/0x1090 [ 853.969469][T18954] ? do_raw_spin_unlock+0x145/0x1e0 [ 853.969482][T18954] ? _raw_spin_unlock+0x28/0x50 [ 853.969496][T18954] ? irqentry_exit+0x24d/0xa00 [ 853.969518][T18954] __folio_alloc_noprof+0x13/0x260 [ 853.969531][T18954] alloc_migration_target+0x1d7/0x6d0 [ 853.969550][T18954] migrate_pages_batch+0x5dc/0x45c0 [ 853.969569][T18954] ? __pfx_alloc_migration_target+0x10/0x10 [ 853.969589][T18954] ? migrate_pages_sync+0x12c/0x880 [ 853.969606][T18954] ? migrate_pages_sync+0x588/0x880 [ 853.969623][T18954] ? __pfx_migrate_pages_batch+0x10/0x10 [ 853.969644][T18954] ? __pfx_migrate_pages_sync+0x10/0x10 [ 853.969660][T18954] ? __free_object+0x2a8/0x3f0 [ 853.969736][T18954] ? __lock_acquire+0x49f/0x1a40 [ 853.969752][T18954] ? __css_rstat_updated+0x1ce/0x5a0 [ 853.969780][T18954] migrate_pages+0x1950/0x2850 [ 853.969799][T18954] ? __lock_acquire+0x49f/0x1a40 [ 853.969816][T18954] ? __pfx_alloc_migration_target+0x10/0x10 [ 853.969836][T18954] ? __pfx_migrate_pages+0x10/0x10 [ 853.969864][T18954] ? __lock_acquire+0x49f/0x1a40 [ 853.969882][T18954] ? mtree_load+0x32d/0xa90 [ 853.969900][T18954] move_pages_and_store_status+0xf1/0x230 [ 853.969919][T18954] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 853.969955][T18954] kernel_move_pages+0xc89/0x14a0 [ 853.969980][T18954] ? __pfx_kernel_move_pages+0x10/0x10 [ 853.970001][T18954] ? xfd_validate_state+0x129/0x190 [ 853.970019][T18954] __ia32_sys_move_pages+0xdd/0x1b0 [ 853.970037][T18954] ? __do_fast_syscall_32+0x98/0x970 [ 853.970052][T18954] ? lockdep_hardirqs_on+0x78/0x100 [ 853.970064][T18954] __do_fast_syscall_32+0xe7/0x970 [ 853.970081][T18954] do_fast_syscall_32+0x32/0x70 [ 853.970095][T18954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.970110][T18954] RIP: 0023:0xf7fa5fec [ 853.970125][T18954] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 853.970130][T18954] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 853.970142][T18954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 853.970149][T18954] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 853.970156][T18954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.970162][T18954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 853.970169][T18954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.970183][T18954] [ 854.094652][T18954] Mem-Info: [ 854.096199][T18954] active_anon:7637 inactive_anon:1463 isolated_anon:12 [ 854.096199][T18954] active_file:8762 inactive_file:13829 isolated_file:0 [ 854.096199][T18954] unevictable:1768 dirty:922 writeback:0 [ 854.096199][T18954] slab_reclaimable:6628 slab_unreclaimable:64851 [ 854.096199][T18954] mapped:28251 shmem:7978 pagetables:1532 [ 854.096199][T18954] sec_pagetables:322 bounce:0 [ 854.096199][T18954] kernel_misc_reclaimable:0 [ 854.096199][T18954] free:34132 free_pcp:11383 free_cma:0 [ 854.114863][T18954] Node 0 active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1484kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 854.128206][T18954] Node 1 active_anon:30648kB inactive_anon:5832kB active_file:35048kB inactive_file:55312kB unevictable:5536kB isolated(anon):48kB isolated(file):0kB mapped:112976kB dirty:3684kB writeback:0kB shmem:30376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8164kB pagetables:4644kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 854.142177][T18954] Node 0 DMA free:2836kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 854.153326][T18954] lowmem_reserve[]: 0 280 280 280 280 [ 854.155100][T18954] Node 0 DMA32 free:23464kB boost:12288kB min:25060kB low:28252kB high:31444kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:4kB zspages:520kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:4248kB local_pcp:1348kB free_cma:0kB [ 854.165306][T18954] lowmem_reserve[]: 0 0 0 0 0 [ 854.166840][T18954] Node 1 DMA32 free:110228kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30848kB inactive_anon:5832kB active_file:35048kB inactive_file:55312kB unevictable:5536kB writepending:3684kB zspages:8232kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:41160kB local_pcp:12912kB free_cma:0kB [ 854.177441][T18954] lowmem_reserve[]: 0 0 0 0 0 [ 854.178976][T18954] Node 0 DMA: 71*4kB (U) 13*8kB (U) 5*16kB (U) 14*32kB (U) 6*64kB (U) 4*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2836kB [ 854.183820][T18954] Node 0 DMA32: 680*4kB (UME) 221*8kB (UE) 60*16kB (UE) 153*32kB (UME) 43*64kB (UME) 21*128kB (UME) 6*256kB (ME) 6*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 23464kB [ 854.189198][T18954] Node 1 DMA32: 865*4kB (UE) 84*8kB (UE) 383*16kB (UME) 165*32kB (UME) 70*64kB (UME) 62*128kB (UM) 31*256kB (UM) 17*512kB (UM) 14*1024kB (UM) 11*2048kB (UM) 7*4096kB (UM) = 110132kB [ 854.195346][T18954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.198307][T18954] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 854.201467][T18954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.204463][T18954] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 854.207351][T18954] 29323 total pagecache pages [ 854.208867][T18954] 804 pages in swap cache [ 854.210515][T18954] Free swap = 72kB [ 854.211774][T18954] Total swap = 124996kB [ 854.213095][T18954] 524155 pages RAM [ 854.214397][T18954] 0 pages HighMem/MovableOnly [ 854.215881][T18954] 211525 pages reserved [ 854.217223][T18954] 0 pages cma reserved [ 854.622767][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2531'. [ 854.704227][T15536] Bluetooth: hci4: Frame reassembly failed (-84) [ 854.707627][T15536] Bluetooth: hci4: Frame reassembly failed (-84) [ 854.723909][T15536] Bluetooth: hci4: Frame reassembly failed (-90) [ 854.752596][ T42] audit: type=1804 audit(1785266360.220:914): pid=18969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2530" name="/newroot/572/bus/bus" dev="overlay" ino=3097 res=1 errno=0 [ 856.487854][T18983] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 856.495769][T18983] Bluetooth: MGMT ver 1.23 [ 856.693695][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 856.786177][T18985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'. [ 857.010291][ T56] usb 42-1: device descriptor read/8, error -110 [ 857.425699][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'. [ 857.488150][ T56] usb usb42-port1: attempt power cycle [ 857.504986][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2539'. [ 857.508925][T18997] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 858.143478][T19011] fuse: fd is not a fuse device [ 858.295766][ T56] usb usb42-port1: unable to enumerate USB device [ 859.574797][T16043] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 859.759846][T16043] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 859.762525][T16043] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.770626][T16043] usb 7-1: config 0 has no interface number 0 [ 859.773992][T16043] usb 7-1: config 0 interface 205 has no altsetting 0 [ 859.806091][T16043] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 859.812721][T16043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.822016][T16043] usb 7-1: Product: syz [ 859.824767][T16043] usb 7-1: Manufacturer: syz [ 859.827639][T16043] usb 7-1: SerialNumber: syz [ 859.835404][T16043] usb 7-1: config 0 descriptor?? [ 859.853498][T16043] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 859.859320][T16043] dvb-usb: bulk message failed: -22 (3/0) [ 859.893583][T16043] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 859.899029][T16043] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 859.908207][T16043] usb 7-1: media controller created [ 859.912460][T16043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 859.924820][T16043] dvb-usb: bulk message failed: -22 (6/0) [ 859.928235][T16043] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 859.953643][T16043] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input31 [ 859.965369][T16043] dvb-usb: schedule remote query interval to 150 msecs. [ 859.969399][T16043] dvb-usb: bulk message failed: -22 (3/0) [ 859.990335][T16043] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 860.137064][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 860.138964][T16043] dvb-usb: error while querying for an remote control event. [ 860.265628][T19037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'. [ 860.310180][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 860.312163][T16043] dvb-usb: error while querying for an remote control event. [ 860.598104][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 860.599908][T16043] dvb-usb: error while querying for an remote control event. [ 860.760159][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 860.762180][T16043] dvb-usb: error while querying for an remote control event. [ 860.841607][T19049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2551'. [ 860.908170][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2552'. [ 860.921271][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 860.942391][T16043] dvb-usb: error while querying for an remote control event. [ 861.100057][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.103069][T16043] dvb-usb: error while querying for an remote control event. [ 861.260026][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.262892][T16043] dvb-usb: error while querying for an remote control event. [ 861.430091][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.436316][T16043] dvb-usb: error while querying for an remote control event. [ 861.600247][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.602841][T16043] dvb-usb: error while querying for an remote control event. [ 861.760111][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.762442][T16043] dvb-usb: error while querying for an remote control event. [ 861.930555][T16043] dvb-usb: bulk message failed: -22 (1/0) [ 861.935014][T16043] dvb-usb: error while querying for an remote control event. [ 861.972986][T14871] usb 7-1: USB disconnect, device number 43 [ 862.063117][T14871] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 862.138167][T19077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2556'. [ 862.204768][T19082] lo speed is unknown, defaulting to 1000 [ 862.416116][T19090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2559'. [ 863.514926][T19098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2561'. [ 863.533298][T19100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2562'. [ 864.455679][T19108] lo speed is unknown, defaulting to 1000 [ 864.560985][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 866.006528][T15561] Bluetooth: hci4: Frame reassembly failed (-84) [ 866.008864][T15561] Bluetooth: hci4: Frame reassembly failed (-84) [ 866.013696][T15561] Bluetooth: hci4: Frame reassembly failed (-84) [ 866.138544][ T42] audit: type=1804 audit(1785266371.600:915): pid=19135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2567" name="/newroot/587/bus/bus" dev="overlay" ino=3214 res=1 errno=0 [ 867.079735][ T42] audit: type=1326 audit(1785266372.540:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.098486][ T42] audit: type=1326 audit(1785266372.540:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.110435][ T42] audit: type=1326 audit(1785266372.550:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.131714][ T42] audit: type=1326 audit(1785266372.550:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.141352][ T42] audit: type=1326 audit(1785266372.550:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.150525][ T42] audit: type=1326 audit(1785266372.550:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.177750][ T42] audit: type=1326 audit(1785266372.550:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.200464][ T42] audit: type=1326 audit(1785266372.560:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.230686][ T42] audit: type=1326 audit(1785266372.560:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19145 comm="syz.1.2571" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 867.471769][T19153] input: syz0 as /devices/virtual/input/input32 [ 868.052169][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 868.054737][T15889] Bluetooth: hci4: command 0x1003 tx timeout [ 868.630255][ T5858] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 868.781024][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 868.786278][ T5858] usb 7-1: config 0 has no interfaces? [ 868.790917][ T5858] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 868.794185][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 868.796797][ T5858] usb 7-1: Product: syz [ 868.798231][ T5858] usb 7-1: Manufacturer: syz [ 868.799754][ T5858] usb 7-1: SerialNumber: syz [ 868.810368][ T5858] usb 7-1: config 0 descriptor?? [ 869.351650][ T5858] usb 7-1: USB disconnect, device number 44 [ 869.565600][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 869.682724][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.685085][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.129430][T19217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2581'. [ 870.421940][T19219] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 870.542496][T19226] lo speed is unknown, defaulting to 1000 [ 870.619549][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 871.145724][T19245] random: crng reseeded on system resumption [ 871.804518][T19249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 872.852616][T19266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 872.855841][T19266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.906820][T19266] vhci_hcd vhci_hcd.0: Device attached [ 873.170745][ T56] usb 38-1: SetAddress Request (58) to port 0 [ 873.170803][ T56] usb 38-1: new SuperSpeed USB device number 58 using vhci_hcd [ 873.310987][T16043] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 873.327154][T19252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.461298][T16043] usb 7-1: Using ep0 maxpacket: 32 [ 873.464466][T16043] usb 7-1: config 0 has no interfaces? [ 873.509462][T16043] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 873.515465][T16043] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 873.515506][T16043] usb 7-1: Product: syz [ 873.516312][T16043] usb 7-1: Manufacturer: syz [ 873.516346][T16043] usb 7-1: SerialNumber: syz [ 873.617831][T19274] rdma_rxe: rxe_newlink: failed to add wg2 [ 873.677445][T16043] usb 7-1: config 0 descriptor?? [ 874.036395][T19269] vhci_hcd: connection reset by peer [ 874.038616][ T6539] vhci_hcd vhci_hcd.0: stop threads [ 874.041794][ T6539] vhci_hcd vhci_hcd.0: release socket [ 874.044883][ T6539] vhci_hcd vhci_hcd.0: disconnect device [ 874.158287][T19300] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 874.277154][T12818] usb 7-1: USB disconnect, device number 45 [ 876.190051][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 876.190067][ T42] audit: type=1326 audit(1785266381.650:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.209925][ T42] audit: type=1326 audit(1785266381.670:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.220041][ T42] audit: type=1326 audit(1785266381.670:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.230962][ T42] audit: type=1326 audit(1785266381.670:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.241372][ T42] audit: type=1326 audit(1785266381.680:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.251268][ T42] audit: type=1326 audit(1785266381.680:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.264215][ T42] audit: type=1326 audit(1785266381.690:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.279461][ T42] audit: type=1326 audit(1785266381.690:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.289177][ T42] audit: type=1326 audit(1785266381.700:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.300104][ T42] audit: type=1326 audit(1785266381.710:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 877.377736][T19371] lo speed is unknown, defaulting to 1000 [ 877.857349][T19397] rdma_rxe: rxe_newlink: failed to add wg2 [ 878.220504][ T56] usb 38-1: device descriptor read/8, error -110 [ 878.260046][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 878.430592][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 878.462233][ T24] usb 7-1: config 0 has no interfaces? [ 878.508248][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 878.529068][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 878.552321][ T24] usb 7-1: Product: syz [ 878.561182][ T24] usb 7-1: Manufacturer: syz [ 878.573820][ T24] usb 7-1: SerialNumber: syz [ 878.670616][ T56] usb usb38-port1: attempt power cycle [ 878.696841][ T24] usb 7-1: config 0 descriptor?? [ 879.241009][ T56] usb usb38-port1: unable to enumerate USB device [ 879.393816][T19419] fuse: fd is not a fuse device [ 880.445441][T19450] overlayfs: failed to clone lowerpath [ 880.462224][T19450] overlayfs: failed to clone lowerpath [ 880.496158][T12818] usb 7-1: USB disconnect, device number 46 [ 881.066166][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2614'. [ 881.544081][T19485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2616'. [ 881.740950][ T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 881.920080][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 881.923722][ T24] usb 7-1: config 0 has no interfaces? [ 881.927511][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 881.931013][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 881.934009][ T24] usb 7-1: Product: syz [ 881.935667][ T24] usb 7-1: Manufacturer: syz [ 881.937206][ T24] usb 7-1: SerialNumber: syz [ 881.940387][ T24] usb 7-1: config 0 descriptor?? [ 882.168336][ T24] usb 7-1: USB disconnect, device number 47 [ 882.517125][T19500] overlayfs: failed to resolve './file0': -2 [ 882.766142][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 882.766158][ T42] audit: type=1326 audit(1785266388.230:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.794978][T19510] binder: 19509:19510 ioctl c00c6211 0 returned -14 [ 882.802398][ T42] audit: type=1326 audit(1785266388.240:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.812619][ T42] audit: type=1326 audit(1785266388.240:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.831994][ T42] audit: type=1326 audit(1785266388.240:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.851386][ T42] audit: type=1326 audit(1785266388.250:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.862112][ T42] audit: type=1326 audit(1785266388.250:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.876863][ T42] audit: type=1326 audit(1785266388.290:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.889087][ T42] audit: type=1326 audit(1785266388.290:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.901870][ T42] audit: type=1326 audit(1785266388.310:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702efec code=0x7ffc0000 [ 882.911982][ T42] audit: type=1326 audit(1785266388.340:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19503 comm="syz.1.2619" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702efec code=0x7ffc0000 [ 883.045670][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 883.051371][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 884.588515][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 885.055590][T19558] siw: device registration error -23 [ 886.115199][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2627'. [ 886.597924][T19569] lo speed is unknown, defaulting to 1000 [ 886.641752][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 886.688072][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 888.081595][T19582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.364848][T19611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2634'. [ 888.375759][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 888.375779][ T42] audit: type=1326 audit(1785266393.840:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.431397][ T42] audit: type=1326 audit(1785266393.840:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.442642][ T42] audit: type=1326 audit(1785266393.860:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.460979][ T42] audit: type=1326 audit(1785266393.860:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.467642][ T42] audit: type=1326 audit(1785266393.860:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.476158][ T42] audit: type=1326 audit(1785266393.860:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.487256][ T42] audit: type=1326 audit(1785266393.860:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.496649][ T42] audit: type=1326 audit(1785266393.860:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.513812][ T42] audit: type=1326 audit(1785266393.860:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.523045][ T42] audit: type=1326 audit(1785266393.860:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 888.895913][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2637'. [ 888.957162][T19624] CIFS: VFS: UNC: missing share name [ 888.962353][T19624] CIFS: VFS: Malformed UNC in devname [ 889.115808][T19628] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 889.406613][T19640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2639'. [ 889.493822][ T56] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 889.540674][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2640'. [ 889.660460][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 889.669126][ T56] usb 7-1: config 0 has no interfaces? [ 889.676169][ T56] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 889.679154][ T56] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 889.682160][ T56] usb 7-1: Product: syz [ 889.683500][ T56] usb 7-1: Manufacturer: syz [ 889.685033][ T56] usb 7-1: SerialNumber: syz [ 889.688690][ T56] usb 7-1: config 0 descriptor?? [ 889.898008][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 889.909782][ T10] usb 7-1: USB disconnect, device number 48 [ 889.923372][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 890.661677][T19667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2643'. [ 891.645319][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2648'. [ 891.999469][T19689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2649'. [ 892.664819][T19696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2652'. [ 892.995916][T19705] /dev/nullb0: Can't open blockdev [ 893.088136][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 893.210179][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 893.220507][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 897.130608][ T10] usb 5-1: USB disconnect, device number 35 [ 897.278172][T19741] Invalid ELF header magic: != ELF [ 897.456606][ T10] rndis_host 5-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 897.923118][T19761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2661'. [ 897.931319][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 898.022736][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 898.035620][T19765] lo speed is unknown, defaulting to 1000 [ 898.285103][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.293233][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 898.296387][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 898.301200][ T10] usb 5-1: Product: syz [ 898.302623][ T10] usb 5-1: Manufacturer: syz [ 898.309098][ T10] usb 5-1: SerialNumber: syz [ 898.673058][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 899.017629][ T10] usb 5-1: USB disconnect, device number 36 [ 899.025118][ T10] usblp0: removed [ 900.686848][T19797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.695062][T19836] lo speed is unknown, defaulting to 1000 [ 900.799036][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 900.928876][T19844] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 900.931026][T19844] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 900.934696][T19844] vhci_hcd vhci_hcd.0: Device attached [ 900.976481][T19844] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 901.200792][ T56] usb 42-1: SetAddress Request (54) to port 0 [ 901.203639][ T56] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 901.672646][T19845] vhci_hcd: connection reset by peer [ 901.674624][ T6539] vhci_hcd vhci_hcd.2: stop threads [ 901.676378][ T6539] vhci_hcd vhci_hcd.2: release socket [ 901.678418][ T6539] vhci_hcd vhci_hcd.2: disconnect device [ 901.846074][T19856] 9p: Bad value for 'rfdno' [ 902.537141][T19851] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 903.705762][T19898] binder: 19896:19898 ioctl 401c7012 0 returned -22 [ 903.793842][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'. [ 904.654397][T19905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 905.740049][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 905.985846][T19922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2685'. [ 906.300546][ T56] usb 42-1: device descriptor read/8, error -110 [ 906.558479][T19931] lo speed is unknown, defaulting to 1000 [ 906.653423][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'. [ 906.731787][ T56] usb usb42-port1: attempt power cycle [ 906.836707][T19939] lo speed is unknown, defaulting to 1000 [ 907.082372][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'. [ 907.287152][T19950] efs: device does not support 512 byte blocks [ 907.290863][T19950] device does not support 512 byte blocks [ 907.290863][T19950] [ 907.311344][ T56] usb usb42-port1: unable to enumerate USB device [ 908.212334][T19967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2696'. [ 908.225290][T19968] ehci-pci 0000:00:1d.7: remove, state 1 [ 908.228115][T19968] usb usb1: USB disconnect, device number 1 [ 908.231283][T19968] usb 1-1: USB disconnect, device number 2 [ 908.647532][T19968] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 908.960676][ T56] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 909.155864][ T56] usb 2-1: not running at top speed; connect to a high speed hub [ 909.157996][T19975] binder: 19974:19975 ioctl c00c6211 0 returned -14 [ 909.182411][ T56] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 909.185468][ T56] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 909.189080][ T56] usb 2-1: Product: QEMU USB Tablet [ 909.194023][ T56] usb 2-1: Manufacturer: QEMU [ 909.195742][ T56] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 909.515809][ T56] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input34 [ 909.654587][ T56] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 909.904384][T19983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'. [ 909.973557][T19985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2702'. [ 910.156518][T19987] lo speed is unknown, defaulting to 1000 [ 911.052279][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2707'. [ 911.951512][T20013] binder: 20012:20013 ioctl c00c6211 0 returned -14 [ 912.057175][T20016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'. [ 912.719807][T20019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2711'. [ 912.953321][T20021] binder: 20020:20021 ioctl c00c6211 0 returned -14 [ 913.896843][T20025] tipc: Started in network mode [ 913.898380][T20025] tipc: Node identity 4, cluster identity 4711 [ 913.900701][T20025] tipc: Node number set to 4 [ 913.932319][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 915.029637][ T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 915.190864][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 915.389049][ T10] usb 7-1: config 0 has no interfaces? [ 915.394232][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 915.397144][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 915.399783][ T10] usb 7-1: Product: syz [ 915.401638][ T10] usb 7-1: Manufacturer: syz [ 915.403148][ T10] usb 7-1: SerialNumber: syz [ 915.406323][ T10] usb 7-1: config 0 descriptor?? [ 915.587695][T20085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 915.643028][ T5858] usb 7-1: USB disconnect, device number 49 [ 915.713568][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2724'. [ 915.797571][T20092] binder: 20091:20092 ioctl c00c6211 0 returned -14 [ 916.082276][T20081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.110223][T14044] libceph: connect (1)[c::]:6789 error -101 [ 916.112923][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 916.383176][T14044] libceph: connect (1)[c::]:6789 error -101 [ 916.385370][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 916.565055][T20103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 916.585193][T20103] netlink: 'syz.2.2728': attribute type 29 has an invalid length. [ 916.596053][T20103] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 916.620062][T20103] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2728'. [ 916.628559][T20095] ceph: No mds server is up or the cluster is laggy [ 916.748563][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2729'. [ 916.971952][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2731'. [ 917.101373][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 917.908936][T20136] lo speed is unknown, defaulting to 1000 [ 917.942012][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'. [ 918.609519][T20149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2741'. [ 918.678026][T20153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2742'. [ 918.813037][T20158] binder: 20157:20158 ioctl c00c6211 0 returned -14 [ 920.806833][T20206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2750'. [ 921.715314][T20211] lo speed is unknown, defaulting to 1000 [ 921.767536][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 922.240055][T16043] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 922.413344][T16043] usb 5-1: Using ep0 maxpacket: 32 [ 922.430605][T16043] usb 5-1: config 0 has no interfaces? [ 922.447839][T16043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 922.460036][T16043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 922.478666][T16043] usb 5-1: Product: syz [ 922.484818][T16043] usb 5-1: Manufacturer: syz [ 922.496276][T16043] usb 5-1: SerialNumber: syz [ 922.554742][T16043] usb 5-1: config 0 descriptor?? [ 922.622079][T14044] libceph: connect (1)[c::]:6789 error -101 [ 922.642046][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 922.953931][T20235] ceph: No mds server is up or the cluster is laggy [ 922.959633][T14044] libceph: connect (1)[c::]:6789 error -101 [ 922.968528][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 923.415481][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 923.823567][T10590] usb 5-1: USB disconnect, device number 37 [ 924.525372][T20267] binder: 20265:20267 ioctl c00c6211 0 returned -14 [ 926.039073][T20290] lo speed is unknown, defaulting to 1000 [ 926.315298][T20310] lo speed is unknown, defaulting to 1000 [ 926.365512][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 926.377751][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'. [ 926.824740][T20332] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 927.325323][T20336] binder: 20335:20336 ioctl c00c6211 0 returned -14 [ 928.883589][T20341] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 930.071827][ T42] kauditd_printk_skb: 127 callbacks suppressed [ 930.071840][ T42] audit: type=1326 audit(1785266435.540:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.091467][ T42] audit: type=1326 audit(1785266435.560:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.134017][ T42] audit: type=1326 audit(1785266435.600:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.149875][ T42] audit: type=1326 audit(1785266435.600:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.163100][ T42] audit: type=1326 audit(1785266435.600:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.390256][ T42] audit: type=1326 audit(1785266435.600:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.433564][T14044] libceph: connect (1)[c::]:6789 error -101 [ 930.440417][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 930.503487][ T42] audit: type=1326 audit(1785266435.600:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.519286][ T42] audit: type=1326 audit(1785266435.600:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.536012][ T42] audit: type=1326 audit(1785266435.610:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.543011][ T42] audit: type=1326 audit(1785266435.610:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20356 comm="syz.1.2776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 930.746112][T14044] libceph: connect (1)[c::]:6789 error -101 [ 930.758347][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 930.994350][T20366] ceph: No mds server is up or the cluster is laggy [ 931.057365][T20381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2779'. [ 931.091784][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.471035][ T34] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 932.631456][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 932.635506][ T34] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 932.639094][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 932.643920][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 932.648117][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 932.653752][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 932.658138][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.665080][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.668934][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.892842][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 932.894863][ T34] usbtmc 5-1:16.0: can't read capabilities [ 932.977325][T20421] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 933.101353][T20416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.113188][T20416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.124522][T20416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.129785][T20416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.143196][ C3] ================================================================== [ 933.146710][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 933.149707][ C3] Read of size 1 at addr ffff8880554ff0e8 by task syz.0.2791/20416 [ 933.154324][ C3] [ 933.155974][ C3] CPU: 3 UID: 0 PID: 20416 Comm: syz.0.2791 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.156019][ C3] Tainted: [L]=SOFTLOCKUP [ 933.156027][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 933.156039][ C3] Call Trace: [ 933.156047][ C3] [ 933.156056][ C3] dump_stack_lvl+0x100/0x190 [ 933.156086][ C3] print_report+0x13d/0x4b0 [ 933.156115][ C3] ? __virt_addr_valid+0x239/0x430 [ 933.156170][ C3] ? find_endpoint+0x2a3/0x2c0 [ 933.156198][ C3] kasan_report+0xdf/0x1c0 [ 933.156229][ C3] ? find_endpoint+0x2a3/0x2c0 [ 933.156259][ C3] find_endpoint+0x2a3/0x2c0 [ 933.156288][ C3] dummy_timer+0x500/0x36f0 [ 933.156325][ C3] ? do_raw_spin_lock+0x128/0x260 [ 933.156348][ C3] ? find_held_lock+0x2b/0x80 [ 933.156372][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.156402][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.156431][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 933.156462][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.156489][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 933.156534][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 933.156556][ C3] ? mark_held_locks+0x40/0x70 [ 933.156584][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 933.156606][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 933.156625][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 933.156664][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 933.156689][ C3] handle_softirqs+0x1ea/0x9b0 [ 933.156721][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 933.156743][ C3] ? _raw_spin_unlock+0x28/0x50 [ 933.156762][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 933.156788][ C3] __irq_exit_rcu+0x162/0x210 [ 933.156810][ C3] irq_exit_rcu+0x9/0x30 [ 933.156831][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 933.156855][ C3] [ 933.156863][ C3] [ 933.156870][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.156895][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 933.156918][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 07 2a f6 48 89 df e8 fe 56 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 66 19 f6 65 8b 05 4e 77 a8 08 85 c0 74 16 5b [ 933.156938][ C3] RSP: 0000:ffffc9000052f9d0 EFLAGS: 00000246 [ 933.156956][ C3] RAX: 0000000000000006 RBX: ffff888021b8c000 RCX: 0000000000000040 [ 933.156983][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87b4 RDI: ffffffff8c400a80 [ 933.156999][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 933.157011][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000c0000000 [ 933.157023][ C3] R13: ffff88807ac8ec78 R14: 0000000000000000 R15: ffff88807ac8ec00 [ 933.157044][ C3] dummy_urb_enqueue+0x56c/0x880 [ 933.157067][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 933.157090][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 933.157111][ C3] ? find_held_lock+0x2b/0x80 [ 933.157136][ C3] usb_submit_urb+0x827/0x19b0 [ 933.157161][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 933.157184][ C3] usbtmc_write+0x7b1/0xcc0 [ 933.157226][ C3] ? __pfx_usbtmc_write+0x10/0x10 [ 933.157252][ C3] ? bpf_lsm_file_permission+0x9/0x10 [ 933.157282][ C3] ? security_file_permission+0x76/0x210 [ 933.157344][ C3] ? rw_verify_area+0xce/0x6d0 [ 933.157383][ C3] ? __pfx_usbtmc_write+0x10/0x10 [ 933.157409][ C3] vfs_writev+0x5ed/0xdd0 [ 933.157460][ C3] ? __pfx_vfs_writev+0x10/0x10 [ 933.157496][ C3] ? __fget_files+0x21f/0x3d0 [ 933.157520][ C3] ? do_writev+0x13e/0x340 [ 933.157546][ C3] do_writev+0x13e/0x340 [ 933.157575][ C3] ? __pfx_do_writev+0x10/0x10 [ 933.157606][ C3] __do_fast_syscall_32+0xe7/0x970 [ 933.157631][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 933.157655][ C3] do_fast_syscall_32+0x32/0x70 [ 933.157680][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.157705][ C3] RIP: 0023:0xf70cefec [ 933.157726][ C3] Code: Unable to access opcode bytes at 0xf70cefc2. [ 933.157737][ C3] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 933.157754][ C3] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800006c0 [ 933.157768][ C3] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.157780][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.157792][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 933.157802][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.157821][ C3] [ 933.157828][ C3] [ 933.339920][ C3] Allocated by task 20211: [ 933.341954][ C3] kasan_save_stack+0x30/0x50 [ 933.344057][ C3] kasan_save_track+0x14/0x30 [ 933.346152][ C3] __kasan_kmalloc+0xaa/0xb0 [ 933.348230][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 933.350624][ C3] rxrpc_alloc_peer+0xa7/0x400 [ 933.352750][ C3] rxrpc_service_prealloc_one+0xc5e/0x1040 [ 933.355316][ C3] rxrpc_kernel_charge_accept+0xdd/0x120 [ 933.357794][ C3] afs_charge_preallocation+0xd8/0x360 [ 933.360234][ C3] afs_open_socket+0x31e/0x3f0 [ 933.362375][ C3] afs_net_init+0x825/0xb00 [ 933.364401][ C3] ops_init+0x1e2/0x5f0 [ 933.366295][ C3] setup_net+0x118/0x3a0 [ 933.368198][ C3] copy_net_ns+0x46f/0x7c0 [ 933.370105][ C3] create_new_namespaces+0x3ea/0xac0 [ 933.372449][ C3] copy_namespaces+0x468/0x5e0 [ 933.374597][ C3] copy_process+0x385f/0x8030 [ 933.376723][ C3] kernel_clone+0x176/0x9d0 [ 933.378780][ C3] __do_compat_sys_ia32_clone+0xd4/0x120 [ 933.381201][ C3] __do_fast_syscall_32+0xe7/0x970 [ 933.383504][ C3] do_fast_syscall_32+0x32/0x70 [ 933.385677][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.388419][ C3] [ 933.389381][ C3] Freed by task 6539: [ 933.391154][ C3] kasan_save_stack+0x30/0x50 [ 933.393236][ C3] kasan_save_track+0x14/0x30 [ 933.394836][ C3] kasan_save_free_info+0x3b/0x70 [ 933.396437][ C3] __kasan_slab_free+0x5f/0x80 [ 933.397975][ C3] kfree+0x22b/0x6c0 [ 933.399238][ C3] rxrpc_discard_prealloc+0x1ef/0x9c0 [ 933.400954][ C3] rxrpc_listen+0x26c/0x330 [ 933.402398][ C3] afs_close_socket+0xb0/0x410 [ 933.404035][ C3] afs_net_exit+0x93/0x150 [ 933.405469][ C3] ops_undo_list+0x2ee/0xab0 [ 933.406973][ C3] cleanup_net+0x499/0x920 [ 933.408345][ C3] process_one_work+0xa23/0x1940 [ 933.409936][ C3] worker_thread+0x5ef/0xe50 [ 933.411424][ C3] kthread+0x370/0x450 [ 933.412741][ C3] ret_from_fork+0x72b/0xd50 [ 933.414271][ C3] ret_from_fork_asm+0x1a/0x30 [ 933.415825][ C3] [ 933.416598][ C3] The buggy address belongs to the object at ffff8880554ff000 [ 933.416598][ C3] which belongs to the cache kmalloc-512 of size 512 [ 933.421125][ C3] The buggy address is located 232 bytes inside of [ 933.421125][ C3] freed 512-byte region [ffff8880554ff000, ffff8880554ff200) [ 933.426366][ C3] [ 933.427261][ C3] The buggy address belongs to the physical page: [ 933.429331][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880554fc000 pfn:0x554fc [ 933.432500][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 933.435157][ C3] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 933.437873][ C3] page_type: f5(slab) [ 933.439166][ C3] raw: 04fff00000000240 ffff88801bc42c80 ffffea000182bd10 ffffea0001804b10 [ 933.441872][ C3] raw: ffff8880554fc000 0000000800100004 00000000f5000000 0000000000000000 [ 933.444620][ C3] head: 04fff00000000240 ffff88801bc42c80 ffffea000182bd10 ffffea0001804b10 [ 933.447324][ C3] head: ffff8880554fc000 0000000800100004 00000000f5000000 0000000000000000 [ 933.449945][ C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 933.452660][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 933.455390][ C3] page dumped because: kasan: bad access detected [ 933.457417][ C3] page_owner tracks the page as allocated [ 933.459231][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17967, tgid 17966 (syz.2.2312), ts 793813820629, free_ts 788984114476 [ 933.466735][ C3] post_alloc_hook+0xfd/0x120 [ 933.468700][ C3] get_page_from_freelist+0xf48/0x3530 [ 933.470537][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 933.472413][ C3] new_slab+0xa2/0x640 [ 933.473851][ C3] refill_objects+0xe3/0x410 [ 933.475651][ C3] __pcs_replace_empty_main+0x376/0x680 [ 933.477484][ C3] __kmalloc_cache_noprof+0x479/0x6c0 [ 933.479208][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 933.481104][ C3] snd_mixer_oss_build_test_all+0x230/0x6e0 [ 933.483015][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 933.484995][ C3] snd_mixer_oss_notify_handler+0x48d/0x990 [ 933.486900][ C3] snd_card_register+0x2af/0x760 [ 933.488470][ C3] f_midi2_bind+0x1198/0x2770 [ 933.489990][ C3] usb_add_function+0x219/0x890 [ 933.491579][ C3] configfs_composite_bind+0xd83/0x1960 [ 933.493352][ C3] gadget_bind_driver+0x28c/0xbf0 [ 933.495239][ C3] page last free pid 5153 tgid 5153 stack trace: [ 933.497251][ C3] __free_frozen_pages+0x79f/0x1090 [ 933.498916][ C3] qlist_free_all+0x47/0xf0 [ 933.500403][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 933.502141][ C3] __kasan_slab_alloc+0x69/0x90 [ 933.503720][ C3] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 933.505462][ C3] flock_lock_inode+0xccd/0x11a0 [ 933.507061][ C3] locks_lock_inode_wait+0x119/0x490 [ 933.508761][ C3] __do_sys_flock+0x462/0x4d0 [ 933.510259][ C3] do_syscall_64+0x115/0x840 [ 933.511767][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.513750][ C3] [ 933.514712][ C3] Memory state around the buggy address: [ 933.516502][ C3] ffff8880554fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 933.519037][ C3] ffff8880554ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 933.521573][ C3] >ffff8880554ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 933.524140][ C3] ^ [ 933.526478][ C3] ffff8880554ff100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 933.528998][ C3] ffff8880554ff180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 933.531531][ C3] ================================================================== [ 933.534127][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 933.536399][ C3] CPU: 3 UID: 0 PID: 20416 Comm: syz.0.2791 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.539800][ C3] Tainted: [L]=SOFTLOCKUP [ 933.541183][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 933.544369][ C3] Call Trace: [ 933.545437][ C3] [ 933.546362][ C3] dump_stack_lvl+0x100/0x190 [ 933.547894][ C3] vpanic+0x552/0x970 [ 933.549203][ C3] ? __pfx_vpanic+0x10/0x10 [ 933.550593][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 933.552164][ C3] ? find_endpoint+0x2a3/0x2c0 [ 933.553752][ C3] panic+0xd1/0xe0 [ 933.555019][ C3] ? __pfx_panic+0x10/0x10 [ 933.556441][ C3] ? end_report.part.0+0x23/0x90 [ 933.558030][ C3] ? rcu_is_watching+0x12/0xc0 [ 933.559581][ C3] ? end_report.part.0+0x23/0x90 [ 933.561178][ C3] ? check_panic_on_warn+0x1f/0x90 [ 933.562807][ C3] check_panic_on_warn.cold+0x19/0x34 [ 933.564735][ C3] end_report.part.0+0x3a/0x90 [ 933.566282][ C3] kasan_report.cold+0xe/0x18 [ 933.567794][ C3] ? find_endpoint+0x2a3/0x2c0 [ 933.569351][ C3] find_endpoint+0x2a3/0x2c0 [ 933.570820][ C3] dummy_timer+0x500/0x36f0 [ 933.572246][ C3] ? do_raw_spin_lock+0x128/0x260 [ 933.573897][ C3] ? find_held_lock+0x2b/0x80 [ 933.575438][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.577272][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.579067][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 933.580939][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 933.582786][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 933.584778][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 933.586375][ C3] ? mark_held_locks+0x40/0x70 [ 933.587936][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 933.589795][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 933.591360][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 933.592803][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 933.594675][ C3] handle_softirqs+0x1ea/0x9b0 [ 933.596421][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 933.598083][ C3] ? _raw_spin_unlock+0x28/0x50 [ 933.599627][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 933.601416][ C3] __irq_exit_rcu+0x162/0x210 [ 933.602923][ C3] irq_exit_rcu+0x9/0x30 [ 933.604519][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 933.606083][ C3] [ 933.606977][ C3] [ 933.607928][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.609813][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 933.611829][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 07 2a f6 48 89 df e8 fe 56 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 66 19 f6 65 8b 05 4e 77 a8 08 85 c0 74 16 5b [ 933.617989][ C3] RSP: 0000:ffffc9000052f9d0 EFLAGS: 00000246 [ 933.619833][ C3] RAX: 0000000000000006 RBX: ffff888021b8c000 RCX: 0000000000000040 [ 933.622322][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87b4 RDI: ffffffff8c400a80 [ 933.625039][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 933.627572][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000c0000000 [ 933.630043][ C3] R13: ffff88807ac8ec78 R14: 0000000000000000 R15: ffff88807ac8ec00 [ 933.632341][ C3] dummy_urb_enqueue+0x56c/0x880 [ 933.634128][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 933.635823][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 933.637506][ C3] ? find_held_lock+0x2b/0x80 [ 933.638964][ C3] usb_submit_urb+0x827/0x19b0 [ 933.640436][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 933.642234][ C3] usbtmc_write+0x7b1/0xcc0 [ 933.643758][ C3] ? __pfx_usbtmc_write+0x10/0x10 [ 933.645353][ C3] ? bpf_lsm_file_permission+0x9/0x10 [ 933.647083][ C3] ? security_file_permission+0x76/0x210 [ 933.648853][ C3] ? rw_verify_area+0xce/0x6d0 [ 933.650369][ C3] ? __pfx_usbtmc_write+0x10/0x10 [ 933.651942][ C3] vfs_writev+0x5ed/0xdd0 [ 933.653348][ C3] ? __pfx_vfs_writev+0x10/0x10 [ 933.654943][ C3] ? __fget_files+0x21f/0x3d0 [ 933.656457][ C3] ? do_writev+0x13e/0x340 [ 933.657864][ C3] do_writev+0x13e/0x340 [ 933.659217][ C3] ? __pfx_do_writev+0x10/0x10 [ 933.660742][ C3] __do_fast_syscall_32+0xe7/0x970 [ 933.662346][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 933.664182][ C3] do_fast_syscall_32+0x32/0x70 [ 933.666098][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 933.668544][ C3] RIP: 0023:0xf70cefec [ 933.669924][ C3] Code: Unable to access opcode bytes at 0xf70cefc2. [ 933.672049][ C3] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 933.674523][ C3] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800006c0 [ 933.676899][ C3] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.679345][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.681830][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 933.684332][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.686820][ C3] [ 933.688458][ C3] Kernel Offset: disabled [ 933.689653][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:20:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ebe7f80 RCX=ffffffff82856ae4 RDX=ffff888023424a80 RSI=ffffffff8285673f RDI=ffffffff8ebe7f80 RBP=ffffffff8285673f RSP=ffffc900064df3f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888041239880 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e56068 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955b8 CR3=0000000065b2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=f50fbfd8 ECX=8a6950f6 EDX=f50fbfd8 ESI=8a6950f6 EDI=ffffffff EBP=ffffffff ESP=fff69100 EIP=f701b258 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5768b480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033de7ff8 CR3=0000000079753000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000013800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91c33eaa RDX=1ffff920000a1d9d RSI=0000000000000001 RDI=ffffffff913ad6b0 RBP=ffffc9000050ecf8 RSP=ffffc9000050ec40 R8 =ffffffff91c33eae R9 =0000000000000007 R10=0000000000000200 R11=000000000000ad8d R12=ffffc9000050ed00 R13=ffffc9000050ecb0 R14=0000000000000003 R15=0000000000000000 RIP=ffffffff81b81753 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74742a4 CR3=00000000795b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefff000 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e045790a1381b9f2 792495acd1d46cbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae172ff850b66a2b 2195f0f4e830e116 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7898dad0578e73cc 3a0f85511c7a6b4b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb5441d44448cc77 13136ebf422487e3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41bb43009801aa00 0002361e00000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 95421800131d8500 e5c70a006edb4900 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4207330000000000 0002361e00000003 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000236220000000d e28b10000002361e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 14a973b36c6c0d25 4ccced8ff49050c7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 962f7b405ef7c971 f1050f421c2c3940 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752f302e6463685f 796d6d75642f6d72 6f6674616c702f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000303130373030 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc900005e8640 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b6f31e0 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033aceff8 CR3=0000000078ab0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000