last executing test programs: 14.236669097s ago: executing program 2 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000d8dbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 14.203260568s ago: executing program 2 (id=2030): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/file\x00', 0x41, 0x1ff) mount(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)='lowerdir=./lower,upperdir=./upper,workdir=./work,index=on,nfs_export=on\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000000500)='./lower/file\x00', &(0x7f0000000540), 0x18, 0x100) openat(r0, &(0x7f0000000200)='file\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) name_to_handle_at(r0, &(0x7f0000000200)='file\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="8000"/144], &(0x7f0000000300), 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000f8000000"], 0x0) 14.099199155s ago: executing program 2 (id=2031): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x4}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='prev_state.functi', 0x11) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r10, 0x1) openat$vcs(0xffffff9c, 0x0, 0x0, 0x0) writev(r10, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x9e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 13.963819733s ago: executing program 1 (id=2033): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='prev_state.', 0xb) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) writev(r8, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 12.956827115s ago: executing program 1 (id=2034): setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x5, 0x2, 0x2d19}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1fb) r0 = openat$sndtimer(0xffffff9c, 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 12.955115394s ago: executing program 2 (id=2035): syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006100)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff7}, {0x10, 0x5}]}, 0x18, 0x1) fchown(r4, 0x0, 0x0) r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xd0, 0xc, "", [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x7, 0x1, 0x2, 0xf0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x7, 0x8}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf252300000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xd000) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 12.878452965s ago: executing program 1 (id=2036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$setsig(0x4203, r1, 0x9, &(0x7f0000000300)={0x1b, 0x5, 0x40a2}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x8, 0x3, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000280)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, @pic={0x79, 0x81, 0x3, 0x3, 0x2, 0xc, 0x9, 0x8, 0x6, 0x2a, 0x2, 0x2, 0x40, 0x7, 0x2, 0x40}}) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x0, 0xfa, 0x1, 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.568401876s ago: executing program 0 (id=2040): r0 = syz_open_dev$ublk_bdev(&(0x7f0000000400), 0x0, 0x600000) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) lsetxattr$trusted_overlay_origin(&(0x7f0000000340)='./lower\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/file\x00', 0x41, 0x1ff) mount(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)='lowerdir=./lower,upperdir=./upper,workdir=./work,index=on,nfs_export=on\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) openat(r3, &(0x7f0000000200)='file\x00', 0x2, 0x0) name_to_handle_at(r3, &(0x7f0000000200)='file\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="8000"/144], &(0x7f0000000300), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x2, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8000, 0x80, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x7, 0x7, {{0x32, 0x4, 0x0, 0x5, 0xc8, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0x7ff, @loopback, {[@lsrr={0x83, 0xf, 0x58, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}]}, @lsrr={0x83, 0xf, 0xd4, [@rand_addr=0x64010100, @multicast1, @remote]}, @cipso={0x86, 0x2a, 0x0, [{0x6, 0x7, "07a17b3748"}, {0x6, 0xd, "7f125bdee4d1941a16b4a1"}, {0x5, 0x4, ' b'}, {0x2, 0xc, "78ce61948c0e06ecabc4"}]}, @generic={0x86, 0x5, "4395b5"}, @lsrr={0x83, 0x2b, 0xcd, [@private=0xa010100, @broadcast, @rand_addr=0x64010100, @multicast2, @local, @private=0xa010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}, @noop, @ra={0x94, 0x4, 0x9}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x1, [{@broadcast, 0x5}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0x19}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x3}, {@multicast2, 0x5}]}]}}}}}) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)=@delpolicy={0x220, 0x14, 0x400, 0x70bd26, 0x25dfdbff, {{@in6=@mcast1, @in6=@loopback, 0x4e21, 0x8, 0x4e22, 0x6, 0x2, 0x0, 0x20, 0x89, r4, 0xffffffffffffffff}, 0x6e6bb9, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @algo_auth_trunc={0xf5, 0x14, {{'tgr128-generic\x00'}, 0x548, 0x60, "edc525bebbfd0f704ff9a5dd66bd3389afc1af7deb783db0356533e807fb4676ef7051946850df281a8a5f0c6e5e82a687956ac360e93f1b6528825b2f9503277abebdfb8878fac9e3051db3166389181923f094304fde1fe9d15e264dcc3b8fa002c8085e2c540a74eeb883b08166f03d280afe6dae69c5cff8c4799812d9f26364e676106a009c60f3b4a79a723f33c60028b4644fa304479b8b883d1e081373c50d8a4fff834f72"}}, @extra_flags={0x8, 0x18, 0x6402}, @migrate={0x9c, 0x11, [{@in=@empty, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0, 0xa1, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in6=@local, @in6=@empty, @in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x32, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@rand_addr=0x64010100}}, @offload={0xc, 0x1c, {r5, 0x1}}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000f8000000"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 11.508597495s ago: executing program 0 (id=2042): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r6, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0003210000a99a00080004000025000008001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) splice(r0, 0x0, r2, 0x0, 0x3ff, 0x8) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x1) accept4$x25(r8, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a71a97b19b8a1f300c839efc88240b5c3916fdcc718ddad084b3369df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbc3f76d50922ecced439b393c2311961fe6bfbc8d5d39"}) write$apparmor_current(r9, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) r10 = memfd_create(&(0x7f0000000dc0)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\xd5\xec\x10\xd7\x01M\x7f\xb7\x17@)\x8fG&\xcb\xe3\xc2\x80\xc3MD\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xe7\x9d\x9a\x8a\x86>\f\xa8b\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xb6\x1c+\xf7gT\x9a\x02\x99\xc2\x00\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84X\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1\x00\x00\x00\x00\x00\x00E\xfc', 0x4) ioctl$FS_IOC_RESVSP(r10, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xa43a6d}) 11.419195256s ago: executing program 3 (id=2043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) r6 = dup3(r1, r0, 0x80000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde1391", 0x49}, {&(0x7f0000000ac0)="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", 0xb6e}, {&(0x7f0000000480)="d8a377abbbfb00686db5ec7c08f42f90f84cc42401bb188802f7dab39fd66669db6015d28b9037438483fd6715c48aa9422530ea0a6343e72b0314f1f972ef874bd39f7e1584c458b3718d613f7bcdc625e4f990962968045866241fbae3237854751d4c48b9e5540c3191eb85822e4c54ac4ba446bd45a466bd96b9ffb7c16b00096ddf1f2be2fbc7ec77b89be2f47a2d68d206d4f5ae1f6b057aeff507af484c4246385c032da080d928154420b578d41117176bddea8149fb82a2c0ce30054c85ac13829e215662bc788400c2409b9743cce8e29d57dfd41f869c4c803c2ef2", 0xe1}], 0x5, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r8, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r8, 0x0, 0x0, 0x0) 1.057689774s ago: executing program 0 (id=2044): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) 1.056243168s ago: executing program 3 (id=2045): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='prev_state.', 0xb) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x9e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 1.052470154s ago: executing program 0 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) r5 = syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r5, r2, 0x0) syz_io_uring_setup(0x2d64, 0x0, 0x0, &(0x7f0000011000), &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) 1.044407583s ago: executing program 3 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0x192, 0x1b}, 0x18) unlink(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.036375341s ago: executing program 3 (id=2048): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) 982.189933ms ago: executing program 2 (id=2049): listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0x6804, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r3, 0x125f, 0x1f) 981.285313ms ago: executing program 1 (id=2050): syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006100)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff7}, {0x10, 0x5}]}, 0x18, 0x1) fchown(r4, 0x0, 0x0) r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xd0, 0xc, "", [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x7, 0x1, 0x2, 0xf0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xa2, &(0x7f00000005c0)={0x5, 0xf, 0xa2, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x51, 0x6, 0x1ff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x13, 0x6, 0xff7f, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x9, 0xf00, 0x10, [0x0, 0x3ff0, 0x3f30, 0x3f00, 0xc00f, 0xc0c0]}, @generic={0x63, 0x10, 0xa, "8d802934c57c709bdd0f946a44eedcf5e20de2f633d2ddea7afa266812a1d088ba7beee26195629c1c9a19f45b05c66320be0b7b7872a0f3503ee0eb85e509b0bd3968ca4805d20d6445b296ec9204862c8c7c9882526b87e7760bbc9da14f56"}]}, 0x6, [{0xff, &(0x7f0000000680)=@string={0xff, 0x3, "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"}}, {0x56, &(0x7f0000000780)=@string={0x56, 0x3, "6c49cd1bcd3f3f62479725672b7ae31962a33ccf1e6949980c77197e8d5c48b7de9388423a74a6676563d9935252ab6d37b4464eede895945d59bda7fd0d6c059ab4b34f010b1dbe8718a1da6a7ed1decbfd59fc"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x443}}, {0x6c, &(0x7f00000009c0)=@string={0x6c, 0x3, "7e12877e929d61376465018061dcd34aec9b15c3c38c6c0489d6997a083c24226fb7a3870d9a2921cc01c6dd83eecd02d9cdfbcfe799a93eec3f59189b66e097c5e908d51527d73bc56183698f5483e09e233c78b18d1c00b60e5a57604354df167be6cbea690ed321f2"}}, {0x80, &(0x7f0000000b00)=@string={0x80, 0x3, "42990db7745766b2412ee59aa6d5ebca8a53e076c785a9a541cb9aae3479e0efa9052eae07506d2328e45b7a051ea788e8dd47f52e549c692da64ffab4cb4bcd49e743f384e0e10feb0112134a8c0f46b57f3d56c4796f0ffc2c3524fa05cfe9ab2ed2682dbf5ab017239d425d9a577e7b9bf9f8e5d97b9a1b89e53a3f80"}}]}) syz_usb_disconnect(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf252300000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xd000) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 977.509245ms ago: executing program 3 (id=2051): r0 = socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000140)={0x0, @frame_sync}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7df6165dc7f832e06000000ff4a70f3"}, 0x4000c}) openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x600000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') socket(0x2, 0x80805, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x20003657) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x204450, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r5, 0xffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 640.730559ms ago: executing program 0 (id=2052): socket$pppl2tp(0x18, 0x1, 0x1) chown(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x40000000, 0x0, 0x4, 0x40, 0x1}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0x8001, @remote, 0x5}, 0x1c) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 640.337189ms ago: executing program 1 (id=2053): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x4}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='prev_state.function ==', 0x16) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000c80)="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", 0x342, 0xbcff, 0x0, 0x0) shutdown(r10, 0x1) openat$vcs(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) writev(r10, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x9e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 640.119819ms ago: executing program 2 (id=2054): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006100)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff7}, {0x10, 0x5}]}, 0x18, 0x1) fchown(r4, 0x0, 0x0) r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xd0, 0xc, "", [{{0x9, 0x4, 0x0, 0x48, 0x1, 0x7, 0x1, 0x2, 0xf0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xf3, 0x2, 0xc, 0x10, 0xff}, 0xa2, &(0x7f00000005c0)={0x5, 0xf, 0xa2, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x51, 0x6, 0x1ff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x13, 0x6, 0xff7f, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x9, 0xf00, 0x10, [0x0, 0x3ff0, 0x3f30, 0x3f00, 0xc00f, 0xc0c0]}, @generic={0x63, 0x10, 0xa, "8d802934c57c709bdd0f946a44eedcf5e20de2f633d2ddea7afa266812a1d088ba7beee26195629c1c9a19f45b05c66320be0b7b7872a0f3503ee0eb85e509b0bd3968ca4805d20d6445b296ec9204862c8c7c9882526b87e7760bbc9da14f56"}]}, 0x6, [{0xff, &(0x7f0000000680)=@string={0xff, 0x3, "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"}}, {0x56, &(0x7f0000000780)=@string={0x56, 0x3, "6c49cd1bcd3f3f62479725672b7ae31962a33ccf1e6949980c77197e8d5c48b7de9388423a74a6676563d9935252ab6d37b4464eede895945d59bda7fd0d6c059ab4b34f010b1dbe8718a1da6a7ed1decbfd59fc"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x443}}, {0x6c, &(0x7f00000009c0)=@string={0x6c, 0x3, "7e12877e929d61376465018061dcd34aec9b15c3c38c6c0489d6997a083c24226fb7a3870d9a2921cc01c6dd83eecd02d9cdfbcfe799a93eec3f59189b66e097c5e908d51527d73bc56183698f5483e09e233c78b18d1c00b60e5a57604354df167be6cbea690ed321f2"}}, {0x80, &(0x7f0000000b00)=@string={0x80, 0x3, "42990db7745766b2412ee59aa6d5ebca8a53e076c785a9a541cb9aae3479e0efa9052eae07506d2328e45b7a051ea788e8dd47f52e549c692da64ffab4cb4bcd49e743f384e0e10feb0112134a8c0f46b57f3d56c4796f0ffc2c3524fa05cfe9ab2ed2682dbf5ab017239d425d9a577e7b9bf9f8e5d97b9a1b89e53a3f80"}}]}) syz_usb_disconnect(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf252300000008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xd000) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 639.964131ms ago: executing program 3 (id=2055): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) 582.338524ms ago: executing program 0 (id=2056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) r6 = dup3(r1, r0, 0x80000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde1391", 0x49}, {&(0x7f0000000ac0)="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", 0xb6e}, {&(0x7f0000000480)="d8a377abbbfb00686db5ec7c08f42f90f84cc42401bb188802f7dab39fd66669db6015d28b9037438483fd6715c48aa9422530ea0a6343e72b0314f1f972ef874bd39f7e1584c458b3718d613f7bcdc625e4f990962968045866241fbae3237854751d4c48b9e5540c3191eb85822e4c54ac4ba446bd45a466bd96b9ffb7c16b00096ddf1f2be2fbc7ec77b89be2f47a2d68d206d4f5ae1f6b057aeff507af484c4246385c032da080d928154420b578d41117176bddea8149fb82a2c0ce30054c85ac13829e215662bc788400c2409b9743cce8e29d57dfd41f869c4c803c2ef2", 0xe1}], 0x5, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r8, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r8, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2057): pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) kernel console output (not intermixed with test programs): fs" ino=30126 res=0 errno=0 [ 392.134155][ T42] audit: type=1800 audit(1785943291.145:132): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1178" name="zoned" dev="configfs" ino=30127 res=0 errno=0 [ 392.144331][T10387] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 392.147298][T10387] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1178'. [ 392.151125][T10387] netlink: 'syz.2.1178': attribute type 2 has an invalid length. [ 392.154843][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 392.172789][ T42] audit: type=1800 audit(1785943291.185:133): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1178" name="power" dev="configfs" ino=30133 res=0 errno=0 [ 392.305292][ T6514] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 392.482570][ T6514] usb 5-1: Using ep0 maxpacket: 8 [ 392.485589][ T6514] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.488287][ T6514] usb 5-1: config 0 has no interface number 0 [ 392.490417][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.494342][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 392.498175][ T6514] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.501722][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.506878][ T6514] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 392.511234][ T6514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.516167][ T6514] usb 5-1: config 0 descriptor?? [ 392.530173][ T6514] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 392.562655][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 392.722701][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 392.725960][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.728804][ T10] usb 7-1: config 0 has no interface number 0 [ 392.730889][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.735108][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 392.738916][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.742420][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.747185][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 392.750135][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.755854][ T10] usb 7-1: config 0 descriptor?? [ 392.775463][ T10] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 393.328984][ T6514] usb 5-1: USB disconnect, device number 29 [ 393.335459][ T6514] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 393.470142][T10414] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 393.474708][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1184'. [ 393.541067][ T6514] usb 7-1: USB disconnect, device number 21 [ 393.548924][ T6514] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 394.173061][T10431] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 394.182179][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1188'. [ 394.253342][ T5751] Bluetooth: hci3: command 0x0405 tx timeout [ 394.405392][T10444] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 394.409068][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1193'. [ 394.552667][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 394.702564][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 394.709272][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 394.748132][ T10] usb 8-1: config 0 has no interface number 0 [ 394.753738][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.767213][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 394.785255][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.814983][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 394.832609][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 394.836526][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.845174][ T10] usb 8-1: config 0 descriptor?? [ 394.867468][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 394.982706][ T42] audit: type=1800 audit(1785943293.985:134): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1196" name="memory_backed" dev="configfs" ino=28287 res=0 errno=0 [ 394.997349][T10455] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 395.000594][ T42] audit: type=1800 audit(1785943294.005:135): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1196" name="zoned" dev="configfs" ino=28288 res=0 errno=0 [ 395.008685][T10455] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1196'. [ 395.012637][T10455] netlink: 'syz.1.1196': attribute type 2 has an invalid length. [ 395.016199][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 395.037850][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 395.051448][ T42] audit: type=1800 audit(1785943294.055:136): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1196" name="power" dev="configfs" ino=30174 res=0 errno=0 [ 395.389771][T10457] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 395.732282][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-1) [ 395.734475][ T10] usb 8-1: USB disconnect, device number 22 [ 395.743329][ T10] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 396.791500][T10465] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 398.057265][T10507] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 399.502606][ T5836] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 399.652620][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 399.661210][ T5836] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 399.670127][ T5836] usb 7-1: config 0 has no interface number 0 [ 399.675935][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.687133][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 399.697776][ T5836] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.706349][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.717237][ T5836] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 399.724140][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.735552][ T5836] usb 7-1: config 0 descriptor?? [ 399.747193][ T5836] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 400.365823][ T5836] usb 7-1: USB disconnect, device number 22 [ 400.376208][ T5836] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 400.959453][T10552] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 400.963025][T10552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'. [ 401.727531][T10569] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 404.300311][T10597] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 404.306355][T10597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1229'. [ 404.364959][T10601] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 404.369431][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1230'. [ 404.552724][ T5836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 404.702583][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 404.711430][ T5836] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 404.720506][ T5836] usb 7-1: config 0 has no interface number 0 [ 404.723557][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.727439][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 404.732294][ T5836] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.740138][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.750296][ T5836] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 404.755655][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.768556][ T5836] usb 7-1: config 0 descriptor?? [ 404.784596][ T5836] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 404.856496][T10610] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 405.811845][ T42] audit: type=1800 audit(1785943304.815:137): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1237" name="memory_backed" dev="configfs" ino=29638 res=0 errno=0 [ 405.813999][T10627] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 405.825655][T10627] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1237'. [ 405.829168][T10627] netlink: 'syz.3.1237': attribute type 2 has an invalid length. [ 405.832145][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 405.872646][ T42] audit: type=1800 audit(1785943304.815:138): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1237" name="zoned" dev="configfs" ino=29639 res=0 errno=0 [ 405.915363][ T42] audit: type=1800 audit(1785943304.855:139): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1237" name="power" dev="configfs" ino=29645 res=0 errno=0 [ 407.088113][T10641] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 407.095786][T10641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1241'. [ 407.161672][T10643] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 407.168082][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1242'. [ 407.216066][ T1486] usb 7-1: USB disconnect, device number 23 [ 407.230937][ T1486] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 407.587878][T10655] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 407.655971][T10655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1246'. [ 407.693496][T10652] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 410.019303][T10685] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 410.033473][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1252'. [ 410.443344][ T34] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 410.613869][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 410.619895][ T34] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 410.624742][ T34] usb 5-1: config 0 has no interface number 0 [ 410.627448][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.632073][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 410.640130][ T34] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.644731][ T34] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.650345][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 410.655533][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.671153][ T34] usb 5-1: config 0 descriptor?? [ 410.691465][ T34] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 412.270053][T10723] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 412.845365][ T34] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 413.200588][ T6514] usb 5-1: USB disconnect, device number 30 [ 413.206697][ T6514] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 413.289913][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 413.294270][ T34] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 413.301461][ T34] usb 7-1: config 0 has no interface number 0 [ 413.308432][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.315610][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 413.323027][ T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 413.327502][ T34] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.331586][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 413.334798][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.339809][ T34] usb 7-1: config 0 descriptor?? [ 413.345922][ T34] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 413.766416][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 414.514233][ T5762] usb 7-1: USB disconnect, device number 24 [ 414.598394][ T5762] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 415.844644][T10770] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 415.848345][T10770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1272'. [ 417.112288][T10798] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 417.115325][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 418.002182][ T6514] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 418.162633][ T6514] usb 8-1: Using ep0 maxpacket: 8 [ 418.172933][ T6514] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.184748][ T6514] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.200829][ T6514] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 418.212580][ T6514] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.222102][T10823] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 418.226317][ T6514] usb 8-1: config 0 descriptor?? [ 418.746026][ T5828] usb 8-1: USB disconnect, device number 23 [ 419.340680][T10837] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 419.350359][T10837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1291'. [ 419.980271][T10832] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 421.922580][ T5849] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 422.092554][ T5849] usb 8-1: Using ep0 maxpacket: 8 [ 422.097671][ T5849] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.104434][ T5849] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.112563][ T5849] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 422.115417][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.123130][ T5849] usb 8-1: config 0 descriptor?? [ 422.407881][T10867] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 422.448425][ T5849] usb 8-1: USB disconnect, device number 24 [ 422.802272][T10877] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 423.792051][T10883] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 425.128356][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 425.179784][T10903] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 425.183807][T10903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1309'. [ 426.886289][T10924] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 427.791777][T10931] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 428.157059][T10934] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 428.176028][T10934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'. [ 428.730698][T10946] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 428.734109][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1320'. [ 430.133108][ T42] audit: type=1800 audit(1785943329.145:140): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1324" name="memory_backed" dev="configfs" ino=32009 res=0 errno=0 [ 430.157644][ T42] audit: type=1800 audit(1785943329.165:141): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1324" name="zoned" dev="configfs" ino=32010 res=0 errno=0 [ 430.184997][T10960] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 430.188064][T10960] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1324'. [ 430.190979][T10960] netlink: 'syz.0.1324': attribute type 2 has an invalid length. [ 430.196326][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 430.228802][ T42] audit: type=1800 audit(1785943329.235:142): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1324" name="power" dev="configfs" ino=32016 res=0 errno=0 [ 430.552612][ T1476] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 430.712599][ T1476] usb 5-1: Using ep0 maxpacket: 8 [ 430.715726][ T1476] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.720113][ T1476] usb 5-1: config 0 has no interface number 0 [ 430.722665][ T1476] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.726657][ T1476] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.730823][ T1476] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.738210][ T1476] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.744430][ T1476] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.758605][ T1476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.765118][ T1476] usb 5-1: config 0 descriptor?? [ 430.792207][ T1476] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.344066][ T5535] usb 5-1: USB disconnect, device number 31 [ 431.349283][ T5535] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 431.761169][T10986] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 434.775780][T11041] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 435.758570][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 436.391920][T11046] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 436.409075][T11049] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 437.161975][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 437.506054][T11069] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 438.385739][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 439.433296][T11099] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 439.614451][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.617228][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.652576][ T1476] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 439.803905][ T1476] usb 7-1: Using ep0 maxpacket: 16 [ 439.810611][ T1476] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 439.815391][ T1476] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.822312][ T1476] usb 7-1: Product: syz [ 439.827305][ T1476] usb 7-1: Manufacturer: syz [ 439.830024][ T1476] usb 7-1: SerialNumber: syz [ 440.050996][ T1476] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 440.061541][ T1476] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.068955][ T1476] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 440.075422][ T1476] usb 7-1: media controller created [ 440.090240][ T1476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.312815][ T1476] zl10353_read_register: readreg error (reg=127, ret==-110) [ 440.328103][ T1476] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 441.554736][T11106] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 442.082675][ T5535] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 442.232640][ T5535] usb 8-1: Using ep0 maxpacket: 16 [ 442.239586][ T5535] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 442.244112][ T5535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.247761][ T5535] usb 8-1: Product: syz [ 442.249644][ T5535] usb 8-1: Manufacturer: syz [ 442.251784][ T5535] usb 8-1: SerialNumber: syz [ 442.463337][ T5535] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 442.470561][ T5535] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.475194][ T5535] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 442.478998][ T5535] usb 8-1: media controller created [ 442.488385][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.713885][ T5535] zl10353_read_register: readreg error (reg=127, ret==-110) [ 442.724344][ T6514] usb 7-1: USB disconnect, device number 25 [ 442.771493][T11128] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 443.217401][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 444.191771][T11141] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 444.616596][T11143] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 444.634080][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1367'. [ 444.689589][T11145] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 444.693449][T11145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1368'. [ 445.052755][ T1486] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 445.155061][ T5535] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 445.161488][ T5535] usb 8-1: USB disconnect, device number 25 [ 445.203269][ T1486] usb 7-1: Using ep0 maxpacket: 8 [ 445.207984][ T1486] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 445.211565][ T1486] usb 7-1: config 0 has no interface number 0 [ 445.215083][ T1486] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.220169][ T1486] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 445.226584][ T1486] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.231160][ T1486] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.236864][ T1486] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 445.240209][ T1486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.247187][ T1486] usb 7-1: config 0 descriptor?? [ 445.254034][ T1486] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 446.385515][ T6514] usb 7-1: USB disconnect, device number 26 [ 446.405278][ T6514] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 447.025367][T11166] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 447.532558][ T5759] Bluetooth: hci3: command 0x0405 tx timeout [ 448.184650][T11184] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 448.191521][T11184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1377'. [ 448.782623][ T6514] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 448.942797][ T6514] usb 7-1: Using ep0 maxpacket: 16 [ 448.969414][ T6514] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 448.974724][ T6514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.979563][ T6514] usb 7-1: Product: syz [ 448.990700][ T6514] usb 7-1: Manufacturer: syz [ 449.002017][ T6514] usb 7-1: SerialNumber: syz [ 449.112576][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 449.262575][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 449.268234][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.281586][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.284477][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 449.287302][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.323391][ T24] usb 6-1: config 0 descriptor?? [ 449.627359][ T6514] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 449.650233][ T6514] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.656584][ T6514] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 449.659764][ T6514] usb 7-1: media controller created [ 449.693346][ T6514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.942774][ T6514] zl10353_read_register: readreg error (reg=127, ret==-110) [ 450.231395][ T24] usb 6-1: USB disconnect, device number 18 [ 451.586289][ T6514] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 451.607211][ T6514] usb 7-1: USB disconnect, device number 27 [ 451.828951][T11227] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 451.848515][T11227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1386'. [ 453.070339][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 455.138075][T11268] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 455.152381][T11268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1396'. [ 456.502612][ T5535] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 456.682616][ T5535] usb 5-1: Using ep0 maxpacket: 16 [ 456.820870][ T5535] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 457.314624][ T5535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.317170][ T5535] usb 5-1: Product: syz [ 457.318492][ T5535] usb 5-1: Manufacturer: syz [ 457.320476][ T5535] usb 5-1: SerialNumber: syz [ 458.319081][T11321] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 458.323759][T11321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1407'. [ 458.332848][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 458.372083][ T5535] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 458.379745][ T5535] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.383175][ T5535] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 458.385812][ T5535] usb 5-1: media controller created [ 458.392019][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.487590][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 458.496404][ T24] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 458.500606][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.504341][ T24] usb 7-1: Product: syz [ 458.505952][ T24] usb 7-1: Manufacturer: syz [ 458.507787][ T24] usb 7-1: SerialNumber: syz [ 458.602795][ T5535] zl10353_read_register: readreg error (reg=127, ret==-110) [ 458.617952][ T5535] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 458.760150][ T24] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 458.762756][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 458.764925][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.768806][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 458.771438][ T24] usb 7-1: media controller created [ 458.778047][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.892607][ T34] usb 6-1: device descriptor read/64, error -71 [ 459.002654][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 459.132569][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 459.282564][ T34] usb 6-1: device descriptor read/64, error -71 [ 459.323335][T11332] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 459.402863][ T34] usb usb6-port1: attempt power cycle [ 459.752884][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 459.783272][ T34] usb 6-1: device descriptor read/8, error -71 [ 460.032660][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 460.053334][ T34] usb 6-1: device descriptor read/8, error -71 [ 460.099725][ T6514] usb 5-1: USB disconnect, device number 32 [ 460.162986][ T34] usb usb6-port1: unable to enumerate USB device [ 461.236805][ T24] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 461.247037][ T24] usb 7-1: USB disconnect, device number 28 [ 461.400388][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 461.740672][T11342] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 461.882579][ T1476] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 462.052600][ T1476] usb 6-1: Using ep0 maxpacket: 8 [ 462.058918][ T1476] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.064788][ T1476] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.074436][ T1476] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 462.080237][ T1476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.091735][ T1476] usb 6-1: config 0 descriptor?? [ 462.364018][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 462.725766][ T5535] usb 6-1: USB disconnect, device number 23 [ 463.511170][T11384] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 465.142635][ T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 465.312694][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 466.214838][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.218367][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.221230][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 466.233040][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.238785][ T24] usb 8-1: config 0 descriptor?? [ 467.305216][ T5535] usb 8-1: USB disconnect, device number 26 [ 467.342578][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 467.502596][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 467.514245][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.520294][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.532607][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 467.537560][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.552358][ T10] usb 7-1: config 0 descriptor?? [ 467.792602][ T5828] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 467.932616][ T5828] usb 6-1: device descriptor read/64, error -71 [ 467.946368][ T5535] usb 7-1: USB disconnect, device number 29 [ 468.056571][T11451] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 468.182741][ T5828] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 468.332737][ T5828] usb 6-1: device descriptor read/64, error -71 [ 468.455655][ T5828] usb usb6-port1: attempt power cycle [ 468.809786][ T5828] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 468.889356][ T5828] usb 6-1: device descriptor read/8, error -71 [ 469.222729][ T5828] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 469.230981][T11470] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 469.240402][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 469.259408][ T5828] usb 6-1: device descriptor read/8, error -71 [ 469.377462][ T5828] usb usb6-port1: unable to enumerate USB device [ 470.151983][T11486] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 471.649605][T11498] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 473.512648][ T5537] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 473.663846][ T5537] usb 6-1: device descriptor read/64, error -71 [ 473.955750][ T5537] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 474.112592][ T5537] usb 6-1: device descriptor read/64, error -71 [ 474.212037][T11543] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 474.223947][ T5537] usb usb6-port1: attempt power cycle [ 474.282615][ T6514] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 474.442561][ T6514] usb 5-1: Using ep0 maxpacket: 8 [ 474.461623][ T6514] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 474.482326][ T6514] usb 5-1: config 0 has no interface number 0 [ 474.491450][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.495803][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 474.499574][ T6514] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.505345][ T6514] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 474.509609][ T6514] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 474.514214][ T6514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.525645][ T6514] usb 5-1: config 0 descriptor?? [ 474.572605][ T5537] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 474.583832][ T6514] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 474.602940][ T5537] usb 6-1: device descriptor read/8, error -71 [ 474.852665][ T5537] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 474.883274][ T5537] usb 6-1: device descriptor read/8, error -71 [ 474.993714][ T5537] usb usb6-port1: unable to enumerate USB device [ 475.238395][ T5537] usb 5-1: USB disconnect, device number 33 [ 475.254420][ T5537] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 476.394877][T11568] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 479.094732][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 479.252633][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 479.301540][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.343667][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.415250][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 479.665006][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.814814][ T24] usb 6-1: config 0 descriptor?? [ 482.342174][ T5762] usb 6-1: USB disconnect, device number 32 [ 482.417004][T11650] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 482.428428][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1484'. [ 484.249927][T11667] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 484.258566][T11661] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 485.663429][T11682] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 485.686984][T11682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1492'. [ 485.901870][T11686] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 485.907618][T11686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1494'. [ 486.789475][T11706] FAULT_INJECTION: forcing a failure. [ 486.789475][T11706] name failslab, interval 1, probability 0, space 0, times 1 [ 486.794848][T11706] CPU: 2 UID: 0 PID: 11706 Comm: syz.2.1498 Not tainted syzkaller #0 PREEMPT(full) [ 486.794876][T11706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.794891][T11706] Call Trace: [ 486.794909][T11706] [ 486.794914][T11706] dump_stack_lvl+0x100/0x190 [ 486.794938][T11706] should_fail_ex.cold+0x5/0xa [ 486.794954][T11706] should_failslab+0xc2/0x120 [ 486.794985][T11706] __kmalloc_noprof+0xfc/0x820 [ 486.795002][T11706] ? alloc_pipe_info+0x1ec/0x590 [ 486.795019][T11706] alloc_pipe_info+0x1ec/0x590 [ 486.795032][T11706] splice_direct_to_actor+0x78f/0xa30 [ 486.795048][T11706] ? __pfx_direct_splice_actor+0x10/0x10 [ 486.795060][T11706] ? __pfx_aa_file_perm+0x10/0x10 [ 486.795084][T11706] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 486.795100][T11706] do_splice_direct+0x174/0x240 [ 486.795113][T11706] ? __pfx_do_splice_direct+0x10/0x10 [ 486.795125][T11706] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 486.795137][T11706] ? bpf_lsm_file_permission+0x9/0x10 [ 486.795149][T11706] ? security_file_permission+0x76/0x210 [ 486.795168][T11706] ? rw_verify_area+0xce/0x6d0 [ 486.795186][T11706] do_sendfile+0xadc/0xe20 [ 486.795205][T11706] ? __pfx_do_sendfile+0x10/0x10 [ 486.795225][T11706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.795245][T11706] ? __fget_files+0x21f/0x3d0 [ 486.795259][T11706] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 486.795272][T11706] ? xfd_validate_state+0x129/0x190 [ 486.795287][T11706] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 486.795305][T11706] __do_fast_syscall_32+0xe7/0x970 [ 486.795321][T11706] ? lockdep_hardirqs_on+0x78/0x100 [ 486.795336][T11706] do_fast_syscall_32+0x32/0x70 [ 486.795352][T11706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.795368][T11706] RIP: 0023:0xf7fe5fec [ 486.795382][T11706] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 486.795396][T11706] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 486.795408][T11706] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000000a [ 486.795415][T11706] RDX: 0000000000000000 RSI: 000000008000fb00 RDI: 0000000000000000 [ 486.795421][T11706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.795428][T11706] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.795434][T11706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.795447][T11706] [ 487.370779][T11715] trusted_key: encrypted_key: insufficient parameters specified [ 487.376867][T11715] trusted_key: encrypted_key: insufficient parameters specified [ 487.400209][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 487.580249][T11719] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 487.586174][T11719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1503'. [ 487.724650][T11724] random: crng reseeded on system resumption [ 487.773095][T11724] IPVS: length: 4096 != 8 [ 487.947805][T11730] FAULT_INJECTION: forcing a failure. [ 487.947805][T11730] name failslab, interval 1, probability 0, space 0, times 0 [ 487.953203][T11730] CPU: 3 UID: 0 PID: 11730 Comm: syz.1.1505 Not tainted syzkaller #0 PREEMPT(full) [ 487.953243][T11730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.953254][T11730] Call Trace: [ 487.953260][T11730] [ 487.953266][T11730] dump_stack_lvl+0x100/0x190 [ 487.953294][T11730] should_fail_ex.cold+0x5/0xa [ 487.953313][T11730] should_failslab+0xc2/0x120 [ 487.953344][T11730] kmem_cache_alloc_noprof+0x91/0x6a0 [ 487.953367][T11730] ? create_new_namespaces+0x30/0xac0 [ 487.953392][T11730] create_new_namespaces+0x30/0xac0 [ 487.953408][T11730] ? bpf_lsm_capable+0x9/0x10 [ 487.953427][T11730] ? security_capable+0x80/0x260 [ 487.953447][T11730] unshare_nsproxy_namespaces+0xf2/0x220 [ 487.953467][T11730] ksys_unshare+0x438/0xab0 [ 487.953489][T11730] ? __pfx___schedule+0x10/0x10 [ 487.953508][T11730] ? __pfx_ksys_unshare+0x10/0x10 [ 487.953528][T11730] ? fput+0x79/0x100 [ 487.953547][T11730] ? exit_to_user_mode_loop+0x166/0x6f0 [ 487.953566][T11730] ? rcu_is_watching+0x12/0xc0 [ 487.953590][T11730] __ia32_sys_unshare+0x30/0x40 [ 487.953609][T11730] __do_fast_syscall_32+0xe7/0x970 [ 487.953632][T11730] ? lockdep_hardirqs_on+0x78/0x100 [ 487.953654][T11730] do_fast_syscall_32+0x32/0x70 [ 487.953676][T11730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.953696][T11730] RIP: 0023:0xf700efec [ 487.953716][T11730] Code: Unable to access opcode bytes at 0xf700efc2. [ 487.953724][T11730] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 487.953740][T11730] RAX: ffffffffffffffda RBX: 000000006a040200 RCX: 0000000000000000 [ 487.953751][T11730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.953760][T11730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.953770][T11730] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 487.953779][T11730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.953800][T11730] [ 488.957375][T11743] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 490.561334][T11757] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 490.567663][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1512'. [ 490.642086][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 491.014494][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1515'. [ 491.323264][ T5858] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 491.492537][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 491.497708][ T5858] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.506516][ T5858] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 491.513819][ T5858] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 491.522260][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.541875][ T5858] usb 8-1: config 0 descriptor?? [ 492.215356][ T5858] usb 8-1: USB disconnect, device number 27 [ 492.488662][T11793] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 492.493223][T11793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1522'. [ 493.007672][T11800] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 495.112571][ T5858] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 495.242612][ T5858] usb 5-1: device descriptor read/64, error -71 [ 495.396390][T11831] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 495.422417][T11825] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 495.612658][ T5759] Bluetooth: hci3: command 0x0405 tx timeout [ 496.482882][ T5858] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 496.665583][ T5858] usb 5-1: device descriptor read/64, error -71 [ 496.796956][ T5858] usb usb5-port1: attempt power cycle [ 497.152680][ T5858] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 497.173306][ T5858] usb 5-1: device descriptor read/8, error -71 [ 497.329689][T11842] FAULT_INJECTION: forcing a failure. [ 497.329689][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 497.334765][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.3.1533 Not tainted syzkaller #0 PREEMPT(full) [ 497.334789][T11842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.334800][T11842] Call Trace: [ 497.334807][T11842] [ 497.334815][T11842] dump_stack_lvl+0x100/0x190 [ 497.334840][T11842] should_fail_ex.cold+0x5/0xa [ 497.334862][T11842] should_failslab+0xc2/0x120 [ 497.334888][T11842] __kmalloc_noprof+0xfc/0x820 [ 497.334910][T11842] ? tomoyo_encode2+0xfb/0x3c0 [ 497.334941][T11842] tomoyo_encode2+0xfb/0x3c0 [ 497.334968][T11842] tomoyo_encode+0x29/0x50 [ 497.334992][T11842] tomoyo_realpath_from_path+0x18c/0x690 [ 497.335023][T11842] tomoyo_path_number_perm+0x23c/0x580 [ 497.335046][T11842] ? tomoyo_path_number_perm+0x22e/0x580 [ 497.335070][T11842] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.335094][T11842] ? get_pid_task+0x106/0x250 [ 497.335135][T11842] ? find_held_lock+0x2b/0x80 [ 497.335158][T11842] ? __fget_files+0x215/0x3d0 [ 497.335174][T11842] ? hook_file_ioctl_common+0x140/0x440 [ 497.335202][T11842] ? __fget_files+0x215/0x3d0 [ 497.335223][T11842] ? __fget_files+0x21f/0x3d0 [ 497.335242][T11842] security_file_ioctl_compat+0xd3/0x230 [ 497.335267][T11842] __ia32_compat_sys_ioctl+0xc2/0x360 [ 497.335296][T11842] __do_fast_syscall_32+0xe7/0x970 [ 497.335321][T11842] ? lockdep_hardirqs_on+0x78/0x100 [ 497.335345][T11842] do_fast_syscall_32+0x32/0x70 [ 497.335369][T11842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.335391][T11842] RIP: 0023:0xf7fb3fec [ 497.335413][T11842] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 497.335420][T11842] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 497.335438][T11842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 497.335449][T11842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.335459][T11842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.335470][T11842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 497.335479][T11842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.335501][T11842] [ 497.335520][T11842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.413214][T11844] FAULT_INJECTION: forcing a failure. [ 497.413214][T11844] name failslab, interval 1, probability 0, space 0, times 0 [ 497.422648][ T5858] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 497.425097][T11844] CPU: 2 UID: 0 PID: 11844 Comm: syz.2.1534 Not tainted syzkaller #0 PREEMPT(full) [ 497.425121][T11844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.425133][T11844] Call Trace: [ 497.425139][T11844] [ 497.425146][T11844] dump_stack_lvl+0x100/0x190 [ 497.425173][T11844] should_fail_ex.cold+0x5/0xa [ 497.425194][T11844] should_failslab+0xc2/0x120 [ 497.425221][T11844] __kmalloc_noprof+0xfc/0x820 [ 497.425244][T11844] ? tomoyo_encode2+0xfb/0x3c0 [ 497.425279][T11844] tomoyo_encode2+0xfb/0x3c0 [ 497.425310][T11844] tomoyo_encode+0x29/0x50 [ 497.425334][T11844] tomoyo_realpath_from_path+0x18c/0x690 [ 497.425368][T11844] tomoyo_path_number_perm+0x23c/0x580 [ 497.425393][T11844] ? tomoyo_path_number_perm+0x22e/0x580 [ 497.425418][T11844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.425443][T11844] ? get_pid_task+0x106/0x250 [ 497.425489][T11844] ? find_held_lock+0x2b/0x80 [ 497.425515][T11844] ? __fget_files+0x215/0x3d0 [ 497.425531][T11844] ? hook_file_ioctl_common+0x140/0x440 [ 497.425555][T11844] ? __fget_files+0x215/0x3d0 [ 497.425576][T11844] ? __fget_files+0x21f/0x3d0 [ 497.425618][T11844] security_file_ioctl_compat+0xd3/0x230 [ 497.425645][T11844] __ia32_compat_sys_ioctl+0xc2/0x360 [ 497.425682][T11844] __do_fast_syscall_32+0xe7/0x970 [ 497.425709][T11844] ? lockdep_hardirqs_on+0x78/0x100 [ 497.425735][T11844] do_fast_syscall_32+0x32/0x70 [ 497.425762][T11844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.425786][T11844] RIP: 0023:0xf7fe5fec [ 497.425806][T11844] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 497.425815][T11844] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 497.425835][T11844] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 497.425847][T11844] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.425857][T11844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.425868][T11844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 497.425878][T11844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.425901][T11844] [ 497.426038][T11844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.448740][ T5858] usb 5-1: device descriptor read/8, error -71 [ 497.613256][ T5858] usb usb5-port1: unable to enumerate USB device [ 497.718488][T11850] : renamed from vlan0 (while UP) [ 497.959240][ T5858] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 498.600331][T11863] sysfs: Unknown parameter '' [ 498.610002][T11863] Invalid option length (1047276) for dns_resolver key [ 498.705548][T11868] FAULT_INJECTION: forcing a failure. [ 498.705548][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 498.716701][T11868] CPU: 0 UID: 0 PID: 11868 Comm: syz.3.1542 Not tainted syzkaller #0 PREEMPT(full) [ 498.716728][T11868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.716739][T11868] Call Trace: [ 498.716746][T11868] [ 498.716753][T11868] dump_stack_lvl+0x100/0x190 [ 498.716781][T11868] should_fail_ex.cold+0x5/0xa [ 498.716802][T11868] should_failslab+0xc2/0x120 [ 498.716828][T11868] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 498.716876][T11868] ? __alloc_skb+0x5b7/0x710 [ 498.716902][T11868] ? __alloc_skb+0x140/0x710 [ 498.716929][T11868] __alloc_skb+0x140/0x710 [ 498.716951][T11868] ? __alloc_skb+0x5b7/0x710 [ 498.716974][T11868] ? __pfx___alloc_skb+0x10/0x10 [ 498.717004][T11868] netlink_alloc_large_skb+0x69/0x150 [ 498.717029][T11868] netlink_sendmsg+0x680/0xda0 [ 498.717054][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.717079][T11868] ? apparmor_socket_sendmsg+0x15b/0x270 [ 498.717104][T11868] ____sys_sendmsg+0xa4d/0xbe0 [ 498.717123][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.717146][T11868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.717176][T11868] ___sys_sendmsg+0x190/0x1e0 [ 498.717198][T11868] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.717230][T11868] ? find_held_lock+0x2b/0x80 [ 498.717267][T11868] __sys_sendmsg+0x160/0x210 [ 498.717293][T11868] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.717324][T11868] ? __pfx_ksys_write+0x10/0x10 [ 498.717346][T11868] __do_fast_syscall_32+0xe7/0x970 [ 498.717373][T11868] ? lockdep_hardirqs_on+0x78/0x100 [ 498.717397][T11868] do_fast_syscall_32+0x32/0x70 [ 498.717422][T11868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.717444][T11868] RIP: 0023:0xf7fb3fec [ 498.717464][T11868] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 498.717472][T11868] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 498.717490][T11868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 498.717501][T11868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.717511][T11868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.717521][T11868] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 498.717532][T11868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.717554][T11868] [ 498.964143][T11874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1543'. [ 498.974719][T11874] syzkaller1: entered promiscuous mode [ 498.976894][T11874] syzkaller1: entered allmulticast mode [ 499.175777][T11870] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 499.392579][ T5537] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 499.542781][ T5537] usb 6-1: Using ep0 maxpacket: 8 [ 499.546316][ T5537] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.552542][ T5537] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.560719][ T5537] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 499.567546][ T5537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.575459][ T5537] usb 6-1: config 0 descriptor?? [ 499.762939][ T5849] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 499.927314][ T5849] usb 7-1: Using ep0 maxpacket: 8 [ 499.937746][ T5849] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.942746][ T5849] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.952547][ T5849] usb 7-1: config 0 has no interface number 0 [ 499.954550][ T5849] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.962971][ T5849] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.972567][ T5849] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.979812][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.990539][ T5849] usb 7-1: config 0 descriptor?? [ 500.001167][ T5849] ldusb 7-1:0.55: Interrupt in endpoint not found [ 500.035183][ T5537] usb 6-1: USB disconnect, device number 33 [ 500.508528][ T5537] usb 7-1: USB disconnect, device number 30 [ 501.054272][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.056487][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.217606][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 501.492054][T11905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1549'. [ 503.438586][T11920] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 505.060740][T11945] gretap1: entered allmulticast mode [ 505.235187][T11947] syzkaller0: entered promiscuous mode [ 505.237581][T11947] syzkaller0: entered allmulticast mode [ 505.382309][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 505.398763][T11943] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 505.908750][T11959] sysfs: Unknown parameter '' [ 505.915750][T11959] Invalid option length (1047276) for dns_resolver key [ 507.251000][T11977] process 'syz.2.1568' launched '/dev/fd/11' with NULL argv: empty string added [ 508.362426][T11976] bond1 (unregistering): Released all slaves [ 509.694130][ T112] nvmet: connect request for invalid subsystem testnqn! [ 509.701330][T12006] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 510.678222][T12025] syz.3.1583 uses obsolete (PF_INET,SOCK_PACKET) [ 510.888916][T12037] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.1582'. [ 511.057996][T12035] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 511.101435][T12032] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 512.823548][T12044] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 514.307888][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 516.109899][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 516.591801][T12104] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 517.315224][T12115] binder: 12114:12115 ioctl c0306201 80000040 returned -14 [ 517.324310][T12117] CIFS: Attempting to mount //127.0.0.1/share [ 518.115930][T12117] CIFS: VFS: cifs_mount failed w/return code = -112 [ 518.742236][ T5849] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 519.282922][ T5849] usb 8-1: Using ep0 maxpacket: 8 [ 519.319885][ T5849] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 519.324201][ T5849] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.336590][ T5849] usb 8-1: config 0 has no interface number 0 [ 519.339708][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.353208][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.359379][ T5849] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 519.365875][T12141] ======================================================= [ 519.365875][T12141] WARNING: The mand mount option has been deprecated and [ 519.365875][T12141] and is ignored by this kernel. Remove the mand [ 519.365875][T12141] option from the mount to silence this warning. [ 519.365875][T12141] ======================================================= [ 519.390038][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.438098][ T5849] usb 8-1: config 0 descriptor?? [ 519.530668][ T5849] ldusb 8-1:0.55: Interrupt in endpoint not found [ 520.530877][ T5762] usb 8-1: USB disconnect, device number 28 [ 522.415293][T12177] FAULT_INJECTION: forcing a failure. [ 522.415293][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 522.432532][T12177] CPU: 3 UID: 0 PID: 12177 Comm: syz.0.1621 Not tainted syzkaller #0 PREEMPT(full) [ 522.432550][T12177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.432558][T12177] Call Trace: [ 522.432564][T12177] [ 522.432570][T12177] dump_stack_lvl+0x100/0x190 [ 522.432598][T12177] should_fail_ex.cold+0x5/0xa [ 522.432621][T12177] should_failslab+0xc2/0x120 [ 522.432646][T12177] __kmalloc_noprof+0xfc/0x820 [ 522.432669][T12177] ? tomoyo_encode2+0xfb/0x3c0 [ 522.432699][T12177] tomoyo_encode2+0xfb/0x3c0 [ 522.432729][T12177] tomoyo_encode+0x29/0x50 [ 522.432746][T12177] tomoyo_realpath_from_path+0x18c/0x690 [ 522.432766][T12177] tomoyo_path_number_perm+0x23c/0x580 [ 522.432780][T12177] ? tomoyo_path_number_perm+0x22e/0x580 [ 522.432795][T12177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 522.432811][T12177] ? get_pid_task+0x106/0x250 [ 522.432837][T12177] ? find_held_lock+0x2b/0x80 [ 522.432851][T12177] ? __fget_files+0x215/0x3d0 [ 522.432862][T12177] ? hook_file_ioctl_common+0x140/0x440 [ 522.432877][T12177] ? __fget_files+0x215/0x3d0 [ 522.432889][T12177] ? __fget_files+0x21f/0x3d0 [ 522.432917][T12177] security_file_ioctl_compat+0xd3/0x230 [ 522.432934][T12177] __ia32_compat_sys_ioctl+0xc2/0x360 [ 522.432953][T12177] __do_fast_syscall_32+0xe7/0x970 [ 522.432970][T12177] ? lockdep_hardirqs_on+0x78/0x100 [ 522.432986][T12177] do_fast_syscall_32+0x32/0x70 [ 522.433002][T12177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.433017][T12177] RIP: 0023:0xf7f97fec [ 522.433031][T12177] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 522.433036][T12177] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 522.433048][T12177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd02 [ 522.433055][T12177] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.433062][T12177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.433068][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.433075][T12177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.433089][T12177] [ 522.433139][T12177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.517703][T12177] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3774873600.0), cmd(2) [ 524.855128][T12220] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 524.875349][T12216] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 526.148050][T12231] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 526.167570][T12234] random: crng reseeded on system resumption [ 526.351161][T12233] IPVS: length: 4096 != 8 [ 526.635351][T12239] warning: `syz.2.1638' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 527.094606][ T34] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 527.252538][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 527.255618][ T34] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 527.259639][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.265412][ T34] usb 7-1: config 0 has no interface number 0 [ 527.267410][ T34] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.283274][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 527.286290][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.290196][ T34] usb 7-1: config 0 descriptor?? [ 527.294465][ T34] ldusb 7-1:0.55: Interrupt in endpoint not found [ 528.274989][ T34] usb 7-1: USB disconnect, device number 31 [ 530.847391][T12295] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 530.859776][T12295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1650'. [ 530.986114][T12293] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 531.223410][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 531.736071][T12308] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 532.916292][T12320] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 533.542602][ T5537] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 533.693033][ T5537] usb 6-1: Using ep0 maxpacket: 8 [ 533.699444][ T5537] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 533.702429][ T5537] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.706144][ T5537] usb 6-1: config 0 has no interface number 0 [ 533.708166][ T5537] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.712002][ T5537] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 533.715328][ T5537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.719708][ T5537] usb 6-1: config 0 descriptor?? [ 533.728025][ T5537] ldusb 6-1:0.55: Interrupt in endpoint not found [ 534.186814][ T34] usb 6-1: USB disconnect, device number 34 [ 534.440568][T12328] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 536.292698][T12353] random: crng reseeded on system resumption [ 536.446023][T12352] IPVS: length: 4096 != 8 [ 536.962878][T12363] sysfs: Unknown parameter '' [ 536.992714][T12363] Invalid option length (1047276) for dns_resolver key [ 537.429831][T12365] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 537.464425][T12368] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 537.986048][T12376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 537.994399][T12376] overlayfs: failed to set xattr on upper [ 538.003357][T12376] overlayfs: ...falling back to redirect_dir=nofollow. [ 538.005665][T12376] overlayfs: ...falling back to index=off. [ 538.007513][T12376] overlayfs: ...falling back to uuid=null. [ 538.025602][T12377] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 539.415778][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 542.148903][T12405] CIFS: Attempting to mount //127.0.0.1/share [ 542.160816][T12405] CIFS: VFS: Error connecting to socket. Aborting operation. [ 542.165762][T12405] CIFS: VFS: cifs_mount failed w/return code = -111 [ 542.228329][T12402] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 542.316703][T12410] binder: 12408:12410 ioctl c0306201 80000040 returned -14 [ 542.343511][T12410] CIFS: Attempting to mount //127.0.0.1/share [ 543.075315][T12410] CIFS: VFS: cifs_mount failed w/return code = -112 [ 543.423865][T12434] binder: 12433:12434 ioctl c0306201 80000040 returned -14 [ 543.427573][T12437] CIFS: Attempting to mount //127.0.0.1/share [ 544.131772][T12439] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 544.193976][T12437] CIFS: VFS: cifs_mount failed w/return code = -112 [ 544.299941][T12445] sysfs: Unknown parameter '' [ 544.310409][T12445] Invalid option length (1047276) for dns_resolver key [ 544.342706][ T5759] Bluetooth: hci3: command 0x0405 tx timeout [ 544.363094][T12448] random: crng reseeded on system resumption [ 544.462874][T12448] IPVS: length: 4096 != 8 [ 544.832578][ T6514] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 544.897375][T12458] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 544.982673][ T6514] usb 6-1: Using ep0 maxpacket: 8 [ 544.986896][ T6514] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 544.989880][ T6514] usb 6-1: config 0 has no interface number 0 [ 544.992384][ T6514] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.996081][ T6514] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 545.000287][ T6514] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 545.004163][ T6514] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 545.007635][ T6514] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.012292][ T6514] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 545.015392][ T6514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.027723][ T6514] usb 6-1: config 0 descriptor?? [ 545.037861][ T6514] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 545.247406][T12456] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 545.653592][ T5535] usb 6-1: USB disconnect, device number 35 [ 545.676423][ T5535] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 547.896592][T12489] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 547.903726][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 548.160702][T12496] random: crng reseeded on system resumption [ 548.284090][T12496] IPVS: length: 4096 != 8 [ 548.392623][ T5762] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 548.522548][ T5849] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 548.553852][ T5762] usb 7-1: Using ep0 maxpacket: 8 [ 548.557351][ T5762] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 548.560545][ T5762] usb 7-1: config 0 has no interface number 0 [ 548.564581][ T5762] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.568703][ T5762] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.573435][ T5762] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.582591][ T5762] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 548.587823][T12507] overlayfs: failed to resolve '/ile0': -2 [ 548.589808][ T5762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.597439][ T5762] usb 7-1: config 0 descriptor?? [ 548.599077][T12507] FAULT_INJECTION: forcing a failure. [ 548.599077][T12507] name failslab, interval 1, probability 0, space 0, times 0 [ 548.602411][ T5762] ldusb 7-1:0.55: Interrupt in endpoint not found [ 548.603823][T12507] CPU: 2 UID: 0 PID: 12507 Comm: syz.0.1702 Not tainted syzkaller #0 PREEMPT(full) [ 548.603839][T12507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.603847][T12507] Call Trace: [ 548.603851][T12507] [ 548.603855][T12507] dump_stack_lvl+0x100/0x190 [ 548.603874][T12507] should_fail_ex.cold+0x5/0xa [ 548.603888][T12507] should_failslab+0xc2/0x120 [ 548.603904][T12507] __kmalloc_noprof+0xfc/0x820 [ 548.603918][T12507] ? __pfx_dynamic_dname+0x10/0x10 [ 548.603934][T12507] ? tomoyo_encode2+0xfb/0x3c0 [ 548.603954][T12507] tomoyo_encode2+0xfb/0x3c0 [ 548.603973][T12507] tomoyo_encode+0x29/0x50 [ 548.603989][T12507] tomoyo_realpath_from_path+0x18c/0x690 [ 548.604009][T12507] tomoyo_path_number_perm+0x23c/0x580 [ 548.604024][T12507] ? tomoyo_path_number_perm+0x22e/0x580 [ 548.604039][T12507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.604055][T12507] ? get_pid_task+0x106/0x250 [ 548.604082][T12507] ? find_held_lock+0x2b/0x80 [ 548.604096][T12507] ? __fget_files+0x215/0x3d0 [ 548.604106][T12507] ? hook_file_ioctl_common+0x140/0x440 [ 548.604121][T12507] ? __fget_files+0x215/0x3d0 [ 548.604134][T12507] ? __fget_files+0x21f/0x3d0 [ 548.604146][T12507] security_file_ioctl_compat+0xd3/0x230 [ 548.604162][T12507] __ia32_compat_sys_ioctl+0xc2/0x360 [ 548.604181][T12507] __do_fast_syscall_32+0xe7/0x970 [ 548.604198][T12507] ? lockdep_hardirqs_on+0x78/0x100 [ 548.604214][T12507] do_fast_syscall_32+0x32/0x70 [ 548.604230][T12507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.604245][T12507] RIP: 0023:0xf7f97fec [ 548.604255][T12507] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 548.604266][T12507] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 548.604278][T12507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008933 [ 548.604284][T12507] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.604291][T12507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.604297][T12507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 548.604303][T12507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.604317][T12507] [ 548.604327][T12507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.682552][ T5849] usb 8-1: Using ep0 maxpacket: 8 [ 548.685590][ T5849] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 548.688530][ T5849] usb 8-1: config 0 has no interface number 0 [ 548.690525][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.694843][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 548.698706][ T5849] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.702294][ T5849] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 548.705872][ T5849] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.709966][ T5849] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 548.713040][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.719576][ T5849] usb 8-1: config 0 descriptor?? [ 548.726287][ T5849] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 548.808189][T12497] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 548.931159][T12500] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 549.139632][T12515] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 549.163163][ T5849] usb 7-1: USB disconnect, device number 32 [ 549.259422][ T34] usb 8-1: USB disconnect, device number 29 [ 549.264438][ T34] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 550.197398][T12532] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 550.201161][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 550.268637][T12535] random: crng reseeded on system resumption [ 550.394753][T12535] IPVS: length: 4096 != 8 [ 550.846353][T12540] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 551.294239][T12542] autofs4:pid:12542:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 551.304726][T12542] autofs4:pid:12542:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 552.046356][T12556] random: crng reseeded on system resumption [ 552.120748][T12549] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 552.211950][T12555] IPVS: length: 4096 != 8 [ 552.608211][T12558] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 555.008846][T12586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1720'. [ 555.486930][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 555.672770][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 555.687877][ T24] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 555.725602][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.728220][ T24] usb 5-1: Product: syz [ 555.730722][ T24] usb 5-1: Manufacturer: syz [ 555.732350][ T24] usb 5-1: SerialNumber: syz [ 556.427037][T12601] binder: 12600:12601 ioctl c0306201 80000040 returned -14 [ 556.435491][T12602] CIFS: Attempting to mount //127.0.0.1/share [ 556.488368][ T24] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 556.499193][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.505344][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 556.510649][ T24] usb 5-1: media controller created [ 556.519591][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.742823][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 556.780713][ T24] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 557.201333][T12602] CIFS: VFS: cifs_mount failed w/return code = -112 [ 557.244616][T12614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1727'. [ 557.882828][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 557.898539][T12622] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1729'. [ 558.052652][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 558.082245][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.112792][ T24] usb 8-1: config 0 has no interface number 0 [ 558.133872][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.154177][ T5849] usb 5-1: USB disconnect, device number 39 [ 558.156819][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.172994][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.181610][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.185855][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.189567][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.210178][ T24] usb 8-1: config 0 descriptor?? [ 558.218946][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 558.322716][ T6514] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 558.492830][ T6514] usb 7-1: Using ep0 maxpacket: 16 [ 558.503583][ T6514] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 558.509891][ T6514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.517973][ T6514] usb 7-1: Product: syz [ 558.519422][ T6514] usb 7-1: Manufacturer: syz [ 558.521221][ T6514] usb 7-1: SerialNumber: syz [ 558.761669][ T6514] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 558.772375][ T6514] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 558.780811][ T6514] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 558.785065][ T6514] usb 7-1: media controller created [ 558.800712][ T6514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.975208][ T34] usb 8-1: USB disconnect, device number 30 [ 559.004467][ T34] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 559.022807][ T6514] zl10353_read_register: readreg error (reg=127, ret==-110) [ 560.712230][T12657] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1736'. [ 561.201607][ T6514] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 561.216689][ T6514] usb 7-1: USB disconnect, device number 33 [ 562.552030][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.602707][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.950838][T12680] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 563.134864][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'. [ 563.229372][T12689] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 564.382326][T12700] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 565.497609][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 565.995971][T12721] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 570.843025][T12758] random: crng reseeded on system resumption [ 571.085838][T12757] IPVS: length: 4096 != 8 [ 571.215071][T12768] FAULT_INJECTION: forcing a failure. [ 571.215071][T12768] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 571.220349][T12768] CPU: 0 UID: 0 PID: 12768 Comm: syz.2.1768 Not tainted syzkaller #0 PREEMPT(full) [ 571.220387][T12768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 571.220396][T12768] Call Trace: [ 571.220404][T12768] [ 571.220410][T12768] dump_stack_lvl+0x100/0x190 [ 571.220438][T12768] should_fail_ex.cold+0x5/0xa [ 571.220459][T12768] strncpy_from_user+0x3b/0x2d0 [ 571.220490][T12768] do_getname+0x78/0x390 [ 571.220536][T12768] __ia32_sys_mkdirat+0x77/0xc0 [ 571.220556][T12768] __do_fast_syscall_32+0xe7/0x970 [ 571.220580][T12768] ? lockdep_hardirqs_on+0x78/0x100 [ 571.220604][T12768] do_fast_syscall_32+0x32/0x70 [ 571.220626][T12768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.220648][T12768] RIP: 0023:0xf7fe5fec [ 571.220668][T12768] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 571.220676][T12768] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 571.220693][T12768] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 571.220702][T12768] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 571.220712][T12768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.220721][T12768] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 571.220730][T12768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.220750][T12768] [ 571.824164][T12769] IPVS: length: 4096 != 8 [ 573.480160][T12792] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 573.588679][T12798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'. [ 574.062079][T12802] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 576.791160][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 577.076805][T12837] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 577.081073][T12828] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 577.294287][T12844] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 578.155946][T12855] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 579.143011][T12661] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 579.312629][T12661] usb 8-1: Using ep0 maxpacket: 8 [ 579.317596][T12661] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 579.323479][T12661] usb 8-1: config 0 has no interface number 0 [ 579.328608][T12661] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.335331][T12661] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.344327][T12661] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.351889][T12661] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.361118][T12661] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.367009][T12661] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.391392][T12661] usb 8-1: config 0 descriptor?? [ 579.402804][T12661] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 579.727149][T12867] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 580.115812][ T24] usb 8-1: USB disconnect, device number 31 [ 580.122983][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 582.596581][T12899] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 584.412682][ T5751] Bluetooth: hci3: command 0x0405 tx timeout [ 585.699360][T12933] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 586.351232][T12936] binder: 12934:12936 ioctl c0306201 80000040 returned -14 [ 586.351348][T12939] CIFS: Attempting to mount //127.0.0.1/share [ 586.366985][T12939] CIFS: VFS: Error connecting to socket. Aborting operation. [ 586.376087][T12939] CIFS: VFS: cifs_mount failed w/return code = -111 [ 587.275266][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 587.621224][T12961] random: crng reseeded on system resumption [ 587.663516][T12961] IPVS: length: 4096 != 8 [ 588.224575][T12968] Invalid option length (1047276) for dns_resolver key [ 588.225357][T12965] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 589.173914][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 589.235161][T12979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 589.238303][T12979] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.247285][T12979] vhci_hcd vhci_hcd.0: Device attached [ 589.590425][ T5762] usb 38-1: SetAddress Request (2) to port 0 [ 589.594661][ T5762] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 589.613685][T12980] /dev/sr0: Can't open blockdev [ 589.647547][T12979] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 590.597947][T12982] vhci_hcd: connection reset by peer [ 590.606926][ T5827] vhci_hcd vhci_hcd.0: stop threads [ 590.611228][ T5827] vhci_hcd vhci_hcd.0: release socket [ 590.624295][ T5827] vhci_hcd vhci_hcd.0: disconnect device [ 591.343990][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 592.023390][T13004] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 594.164165][T13025] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 594.559917][T13026] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 594.652971][ T5762] usb 38-1: device descriptor read/8, error -110 [ 595.078262][ T5762] usb usb38-port1: attempt power cycle [ 595.412566][ T1486] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 595.582609][ T1486] usb 8-1: Using ep0 maxpacket: 16 [ 595.589348][ T1486] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 595.595232][ T1486] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.598642][ T1486] usb 8-1: Product: syz [ 595.600389][ T1486] usb 8-1: Manufacturer: syz [ 595.601944][ T1486] usb 8-1: SerialNumber: syz [ 595.655194][ T5762] usb usb38-port1: unable to enumerate USB device [ 595.830064][ T1486] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 595.841578][ T1486] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 595.853736][ T1486] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 595.861600][ T1486] usb 8-1: media controller created [ 595.895567][ T1486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.133510][ T1486] zl10353_read_register: readreg error (reg=127, ret==-110) [ 596.632633][ T1476] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 596.794184][ T1476] usb 6-1: Using ep0 maxpacket: 16 [ 596.818138][ T1476] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 596.827186][ T1476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.834783][ T1476] usb 6-1: Product: syz [ 596.837098][ T1476] usb 6-1: Manufacturer: syz [ 596.838867][ T1476] usb 6-1: SerialNumber: syz [ 596.854506][T13045] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 596.865648][T13045] typec_fusb302 0-0022: failed to request gpio_int_n [ 596.887851][T13045] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 596.892090][T13045] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 596.905626][T13045] Invalid option length (1047276) for dns_resolver key [ 597.164406][ T1476] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 597.199481][ T1476] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.239854][ T1476] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 597.341071][ T1476] usb 6-1: media controller created [ 597.567726][ T1476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.903554][ T1476] zl10353_read_register: readreg error (reg=127, ret==-110) [ 597.982050][ T1476] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 599.318804][T13062] FAULT_INJECTION: forcing a failure. [ 599.318804][T13062] name failslab, interval 1, probability 0, space 0, times 0 [ 599.324426][T13062] CPU: 3 UID: 0 PID: 13062 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 599.324451][T13062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.324461][T13062] Call Trace: [ 599.324469][T13062] [ 599.324476][T13062] dump_stack_lvl+0x100/0x190 [ 599.324507][T13062] should_fail_ex.cold+0x5/0xa [ 599.324528][T13062] should_failslab+0xc2/0x120 [ 599.324556][T13062] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 599.324581][T13062] ? alloc_vmap_area+0x640/0x2bb0 [ 599.324608][T13062] alloc_vmap_area+0x640/0x2bb0 [ 599.324638][T13062] ? kasan_save_track+0x14/0x30 [ 599.324661][T13062] ? __kasan_kmalloc+0xaa/0xb0 [ 599.324681][T13062] ? __pfx_alloc_vmap_area+0x10/0x10 [ 599.324705][T13062] ? __get_vm_area_node+0x101/0x330 [ 599.324730][T13062] __get_vm_area_node+0x1ca/0x330 [ 599.324757][T13062] __vmalloc_node_range_noprof+0x228/0x1630 [ 599.324791][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.324810][T13062] ? find_held_lock+0x2b/0x80 [ 599.324826][T13062] ? process_measurement+0x4c8/0x2350 [ 599.324844][T13062] ? process_measurement+0x4c8/0x2350 [ 599.324865][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.324893][T13062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.324921][T13062] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 599.324956][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.324978][T13062] __vmalloc_node_noprof+0xad/0xf0 [ 599.325005][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.325031][T13062] __vmalloc_noprof+0xa3/0x120 [ 599.325056][T13062] ? __pfx___vmalloc_noprof+0x10/0x10 [ 599.325084][T13062] ? rcu_is_watching+0x12/0xc0 [ 599.325106][T13062] ? apparmor_capable+0x1d7/0x4d0 [ 599.325129][T13062] bpf_prog_alloc_no_stats+0x58/0x640 [ 599.325150][T13062] ? security_capable+0x80/0x260 [ 599.325171][T13062] bpf_prog_alloc+0x3b/0x200 [ 599.325197][T13062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.325227][T13062] bpf_prog_load+0x4a9/0x2fa0 [ 599.325254][T13062] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.325273][T13062] ? __lock_acquire+0x49f/0x1a40 [ 599.325321][T13062] __sys_bpf+0x18dc/0x4e80 [ 599.325347][T13062] ? __pfx___sys_bpf+0x10/0x10 [ 599.325367][T13062] ? find_held_lock+0x2b/0x80 [ 599.325387][T13062] ? get_pid_task+0xfc/0x250 [ 599.325411][T13062] ? get_pid_task+0xfc/0x250 [ 599.325440][T13062] ? proc_fail_nth_write+0x9f/0x220 [ 599.325466][T13062] ? find_held_lock+0x2b/0x80 [ 599.325492][T13062] ? rcu_read_lock_any_held+0x6a/0xa0 [ 599.325516][T13062] ? find_held_lock+0x2b/0x80 [ 599.325536][T13062] ? ksys_write+0x190/0x250 [ 599.325553][T13062] ? ksys_write+0x190/0x250 [ 599.325588][T13062] ? fput+0x79/0x100 [ 599.325610][T13062] ? __ia32_sys_bpf+0xcc/0x170 [ 599.325627][T13062] __ia32_sys_bpf+0xcc/0x170 [ 599.325645][T13062] ? __do_fast_syscall_32+0x98/0x970 [ 599.325672][T13062] __do_fast_syscall_32+0xe7/0x970 [ 599.325694][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 599.325718][T13062] do_fast_syscall_32+0x32/0x70 [ 599.325743][T13062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.325765][T13062] RIP: 0023:0xf7fe5fec [ 599.325785][T13062] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 599.325793][T13062] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 599.325811][T13062] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 599.325822][T13062] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.325832][T13062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.325842][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.325852][T13062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.325875][T13062] [ 599.326072][T13062] syz.2.1845: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 599.489987][T13062] CPU: 2 UID: 0 PID: 13062 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 599.490015][T13062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.490027][T13062] Call Trace: [ 599.490035][T13062] [ 599.490043][T13062] dump_stack_lvl+0x100/0x190 [ 599.490073][T13062] warn_alloc.cold+0x94/0xa8 [ 599.490095][T13062] ? __pfx_warn_alloc+0x10/0x10 [ 599.490119][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 599.490149][T13062] ? __get_vm_area_node+0x2cd/0x330 [ 599.490185][T13062] ? __get_vm_area_node+0x208/0x330 [ 599.490219][T13062] __vmalloc_node_range_noprof+0xccd/0x1630 [ 599.490257][T13062] ? find_held_lock+0x2b/0x80 [ 599.490283][T13062] ? process_measurement+0x4c8/0x2350 [ 599.490308][T13062] ? process_measurement+0x4c8/0x2350 [ 599.490336][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.490374][T13062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.490407][T13062] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 599.490444][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.490471][T13062] __vmalloc_node_noprof+0xad/0xf0 [ 599.490501][T13062] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 599.490531][T13062] __vmalloc_noprof+0xa3/0x120 [ 599.490561][T13062] ? __pfx___vmalloc_noprof+0x10/0x10 [ 599.490593][T13062] ? rcu_is_watching+0x12/0xc0 [ 599.490618][T13062] ? apparmor_capable+0x1d7/0x4d0 [ 599.490645][T13062] bpf_prog_alloc_no_stats+0x58/0x640 [ 599.490671][T13062] ? security_capable+0x80/0x260 [ 599.490695][T13062] bpf_prog_alloc+0x3b/0x200 [ 599.490720][T13062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.490748][T13062] bpf_prog_load+0x4a9/0x2fa0 [ 599.490774][T13062] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.490794][T13062] ? __lock_acquire+0x49f/0x1a40 [ 599.490851][T13062] __sys_bpf+0x18dc/0x4e80 [ 599.490880][T13062] ? __pfx___sys_bpf+0x10/0x10 [ 599.490904][T13062] ? find_held_lock+0x2b/0x80 [ 599.490926][T13062] ? get_pid_task+0xfc/0x250 [ 599.490949][T13062] ? get_pid_task+0xfc/0x250 [ 599.490979][T13062] ? proc_fail_nth_write+0x9f/0x220 [ 599.491029][T13062] ? find_held_lock+0x2b/0x80 [ 599.491061][T13062] ? rcu_read_lock_any_held+0x6a/0xa0 [ 599.491087][T13062] ? find_held_lock+0x2b/0x80 [ 599.491111][T13062] ? ksys_write+0x190/0x250 [ 599.491130][T13062] ? ksys_write+0x190/0x250 [ 599.491171][T13062] ? fput+0x79/0x100 [ 599.491197][T13062] ? __ia32_sys_bpf+0xcc/0x170 [ 599.491218][T13062] __ia32_sys_bpf+0xcc/0x170 [ 599.491247][T13062] ? __do_fast_syscall_32+0x98/0x970 [ 599.491278][T13062] __do_fast_syscall_32+0xe7/0x970 [ 599.491305][T13062] ? lockdep_hardirqs_on+0x78/0x100 [ 599.491333][T13062] do_fast_syscall_32+0x32/0x70 [ 599.491361][T13062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.491388][T13062] RIP: 0023:0xf7fe5fec [ 599.491411][T13062] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 599.491420][T13062] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 599.491440][T13062] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 599.491453][T13062] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.491465][T13062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.491477][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.491488][T13062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.491514][T13062] [ 599.491638][T13062] Mem-Info: [ 599.628949][T13062] active_anon:14456 inactive_anon:512 isolated_anon:0 [ 599.628949][T13062] active_file:1050 inactive_file:30951 isolated_file:0 [ 599.628949][T13062] unevictable:1768 dirty:165 writeback:0 [ 599.628949][T13062] slab_reclaimable:7749 slab_unreclaimable:55365 [ 599.628949][T13062] mapped:32357 shmem:10834 pagetables:1166 [ 599.628949][T13062] sec_pagetables:304 bounce:0 [ 599.628949][T13062] kernel_misc_reclaimable:0 [ 599.628949][T13062] free:57181 free_pcp:8440 free_cma:0 [ 599.646662][T13062] Node 0 active_anon:2160kB inactive_anon:60kB active_file:80kB inactive_file:60kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2000kB dirty:8kB writeback:0kB shmem:5508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1848kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.660725][T13062] Node 1 active_anon:55864kB inactive_anon:1988kB active_file:4120kB inactive_file:123744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:127428kB dirty:652kB writeback:0kB shmem:37828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4676kB pagetables:2816kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.672146][T13062] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:328kB local_pcp:40kB free_cma:0kB [ 599.683466][T13062] lowmem_reserve[]: 0 280 280 280 280 [ 599.685593][T13062] Node 0 DMA32 free:15912kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2160kB inactive_anon:60kB active_file:80kB inactive_file:60kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:6412kB local_pcp:648kB free_cma:0kB [ 599.697213][T13062] lowmem_reserve[]: 0 0 0 0 0 [ 599.699100][T13062] Node 1 DMA32 free:210752kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56364kB inactive_anon:1988kB active_file:4120kB inactive_file:123744kB unevictable:3536kB writepending:652kB zspages:1980kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:27052kB local_pcp:5068kB free_cma:0kB [ 599.713541][T13062] lowmem_reserve[]: 0 0 0 0 0 [ 599.715821][T13062] Node 0 DMA: 133*4kB (UM) 5*8kB (U) 5*16kB (UM) 8*32kB (U) 4*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2060kB [ 599.722154][T13062] Node 0 DMA32: 12*4kB (ME) 33*8kB (E) 23*16kB (UE) 16*32kB (ME) 28*64kB (UME) 19*128kB (UME) 9*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 15912kB [ 599.728963][T13062] Node 1 DMA32: 430*4kB (UM) 579*8kB (UME) 373*16kB (UME) 138*32kB (UME) 240*64kB (UME) 181*128kB (UME) 113*256kB (UME) 89*512kB (UME) 67*1024kB (U) 6*2048kB (U) 0*4096kB = 210656kB [ 599.736455][T13062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.740242][T13062] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.744049][T13062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.747868][T13062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.751409][T13062] 43544 total pagecache pages [ 599.755002][T13062] 712 pages in swap cache [ 599.756870][T13062] Free swap = 118740kB [ 599.758551][T13062] Total swap = 124996kB [ 599.760592][T13062] 524155 pages RAM [ 599.762320][T13062] 0 pages HighMem/MovableOnly [ 599.764704][T13062] 211533 pages reserved [ 599.766537][T13062] 0 pages cma reserved [ 599.810121][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'. [ 599.900304][ T5762] usb 6-1: USB disconnect, device number 36 [ 599.915067][T13068] CIFS: Attempting to mount //127.0.0.1/share [ 599.925873][ T1486] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 599.933870][ T1486] usb 8-1: USB disconnect, device number 32 [ 600.025137][T13059] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 600.745142][T13068] CIFS: VFS: cifs_mount failed w/return code = -112 [ 601.824557][T13095] random: crng reseeded on system resumption [ 601.848304][T13097] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 601.938196][T13095] IPVS: length: 4096 != 8 [ 602.249519][T13103] random: crng reseeded on system resumption [ 602.745314][T13112] IPVS: length: 4096 != 8 [ 602.768474][T13111] IPVS: length: 4096 != 8 [ 605.837209][T13135] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 610.034813][T13189] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 612.014178][T13218] CIFS: VFS: bad security option: ke>Iڏq^oVm [ 612.152661][ T5535] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 612.322687][ T5535] usb 7-1: Using ep0 maxpacket: 8 [ 612.330299][ T5535] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.337145][ T5535] usb 7-1: config 0 has no interface number 0 [ 612.342379][ T5535] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.349986][ T5535] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 612.360533][ T5535] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.371399][ T5535] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.381961][ T5535] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.388649][ T5535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.400097][ T5535] usb 7-1: config 0 descriptor?? [ 612.426551][ T5535] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 612.490209][T13227] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 613.556526][ T1476] usb 7-1: USB disconnect, device number 34 [ 613.574609][ T1476] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 616.322288][T13267] tmpfs: Unknown parameter 'nr_inoloc_nm' [ 617.503594][T13291] binder: 13290:13291 ioctl c0306201 80000640 returned -22 [ 617.509043][T13291] CIFS: Attempting to mount //127.0.0.1/share [ 617.698128][T13287] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 618.449837][T13291] CIFS: VFS: cifs_mount failed w/return code = -112 [ 618.469034][T13301] binder: 13300:13301 ioctl c0306201 80000640 returned -22 [ 618.505626][T13301] CIFS: Attempting to mount //127.0.0.1/share [ 619.327250][T13301] CIFS: VFS: cifs_mount failed w/return code = -112 [ 620.870522][T13324] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 622.145001][T13346] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 622.158323][T13346] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1913'. [ 622.342705][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 622.522587][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 622.529795][ T10] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 622.537325][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.544296][ T10] usb 8-1: Product: syz [ 622.546262][ T10] usb 8-1: Manufacturer: syz [ 622.553117][ T10] usb 8-1: SerialNumber: syz [ 622.777265][ T10] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 622.792961][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 622.802841][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 622.812773][ T10] usb 8-1: media controller created [ 622.842264][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.934240][T13359] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 623.075253][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 623.503339][T13360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 623.936054][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.938832][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.116154][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 624.517732][T13375] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 625.125482][ T10] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 625.146138][ T10] usb 8-1: USB disconnect, device number 33 [ 625.219596][T13390] random: crng reseeded on system resumption [ 625.532578][ T5759] Bluetooth: hci3: command 0x0405 tx timeout [ 627.015708][T13407] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 627.446342][T13413] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 628.322614][ T34] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 628.474523][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.479209][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.486301][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.494263][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.502789][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.510937][ T34] usb 7-1: config 0 descriptor?? [ 628.763336][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 628.820264][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 628.937492][T13431] random: crng reseeded on system resumption [ 628.944263][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.950397][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.957077][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.961083][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.964146][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.967549][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 628.971752][ T34] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 629.012746][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 629.270549][ T5828] usb 7-1: USB disconnect, device number 35 [ 630.456918][T13454] binder: 13453:13454 ioctl c0306201 80000040 returned -14 [ 630.462180][T13455] CIFS: Attempting to mount //127.0.0.1/share [ 630.882106][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 631.177531][T13458] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 631.240307][T13455] CIFS: VFS: cifs_mount failed w/return code = -512 [ 631.311895][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1942'. [ 632.913845][T13486] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 633.905267][T13506] FAULT_INJECTION: forcing a failure. [ 633.905267][T13506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.921016][T13506] CPU: 2 UID: 0 PID: 13506 Comm: syz.0.1951 Not tainted syzkaller #0 PREEMPT(full) [ 633.921046][T13506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.921057][T13506] Call Trace: [ 633.921065][T13506] [ 633.921073][T13506] dump_stack_lvl+0x100/0x190 [ 633.921101][T13506] should_fail_ex.cold+0x5/0xa [ 633.921121][T13506] _copy_from_iter+0x1f4/0x1690 [ 633.921162][T13506] ? __asan_memset+0x23/0x50 [ 633.921184][T13506] ? __pfx__copy_from_iter+0x10/0x10 [ 633.921210][T13506] ? __pfx___alloc_skb+0x10/0x10 [ 633.921246][T13506] netlink_sendmsg+0x808/0xda0 [ 633.921276][T13506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.921300][T13506] ? apparmor_socket_sendmsg+0x15b/0x270 [ 633.921324][T13506] ____sys_sendmsg+0xa4d/0xbe0 [ 633.921346][T13506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.921371][T13506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.921402][T13506] ___sys_sendmsg+0x190/0x1e0 [ 633.921425][T13506] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.921456][T13506] ? find_held_lock+0x2b/0x80 [ 633.921493][T13506] __sys_sendmsg+0x160/0x210 [ 633.921521][T13506] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.921554][T13506] ? __pfx_ksys_write+0x10/0x10 [ 633.921578][T13506] __do_fast_syscall_32+0xe7/0x970 [ 633.921606][T13506] ? lockdep_hardirqs_on+0x78/0x100 [ 633.921630][T13506] do_fast_syscall_32+0x32/0x70 [ 633.921655][T13506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 633.921680][T13506] RIP: 0023:0xf7f97fec [ 633.921703][T13506] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 633.921712][T13506] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 633.921729][T13506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 633.921742][T13506] RDX: 000000000000c804 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.921753][T13506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.921765][T13506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 633.921775][T13506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.921799][T13506] [ 635.972556][T13526] binder: 13525:13526 ioctl c0306201 80000040 returned -14 [ 636.010071][T13526] CIFS: Attempting to mount //127.0.0.1/share [ 636.789913][T13526] CIFS: VFS: cifs_mount failed w/return code = -512 [ 637.642615][ T5762] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 637.792615][ T5762] usb 8-1: Using ep0 maxpacket: 16 [ 637.798255][ T5762] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 637.801987][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.805628][ T5762] usb 8-1: Product: syz [ 637.807322][ T5762] usb 8-1: Manufacturer: syz [ 637.809216][ T5762] usb 8-1: SerialNumber: syz [ 638.028004][ T5762] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 638.035532][ T5762] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 638.039907][ T5762] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 638.043682][ T5762] usb 8-1: media controller created [ 638.055817][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 638.460643][ T5762] zl10353_read_register: readreg error (reg=127, ret==-110) [ 639.522356][T13576] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 639.535997][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 639.643773][T13577] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 639.749668][T13586] FAULT_INJECTION: forcing a failure. [ 639.749668][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 639.754402][T13586] CPU: 3 UID: 0 PID: 13586 Comm: syz.0.1972 Not tainted syzkaller #0 PREEMPT(full) [ 639.754425][T13586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 639.754434][T13586] Call Trace: [ 639.754440][T13586] [ 639.754447][T13586] dump_stack_lvl+0x100/0x190 [ 639.754470][T13586] should_fail_ex.cold+0x5/0xa [ 639.754487][T13586] should_failslab+0xc2/0x120 [ 639.754508][T13586] kmem_cache_alloc_noprof+0x91/0x6a0 [ 639.754527][T13586] ? do_getname+0x35/0x390 [ 639.754550][T13586] do_getname+0x35/0x390 [ 639.754569][T13586] user_path_at+0x26/0x60 [ 639.754593][T13586] __ia32_sys_mount+0x1fb/0x310 [ 639.754614][T13586] ? __pfx___ia32_sys_mount+0x10/0x10 [ 639.754633][T13586] ? ksys_write+0x1ac/0x250 [ 639.754647][T13586] ? __pfx_ksys_write+0x10/0x10 [ 639.754667][T13586] __do_fast_syscall_32+0xe7/0x970 [ 639.754690][T13586] ? lockdep_hardirqs_on+0x78/0x100 [ 639.754712][T13586] do_fast_syscall_32+0x32/0x70 [ 639.754734][T13586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 639.754754][T13586] RIP: 0023:0xf7f97fec [ 639.754773][T13586] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 639.754780][T13586] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 639.754796][T13586] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000040 [ 639.754806][T13586] RDX: 0000000000000000 RSI: 0000000000001001 RDI: 0000000000000000 [ 639.754815][T13586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.754825][T13586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 639.754834][T13586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.754854][T13586] [ 640.242664][ T5828] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 640.402636][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 640.408531][ T5828] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 640.412629][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.416119][ T5828] usb 6-1: Product: syz [ 640.417984][ T5828] usb 6-1: Manufacturer: syz [ 640.420154][ T5828] usb 6-1: SerialNumber: syz [ 640.581705][T13592] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 640.636071][ T5828] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 640.643475][ T5828] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 640.648151][ T5828] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 640.651915][ T5828] usb 6-1: media controller created [ 640.664656][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.338440][ T5828] zl10353_read_register: readreg error (reg=127, ret==-110) [ 641.358252][ T5828] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 642.309143][ T5762] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 642.333306][ T5762] usb 8-1: USB disconnect, device number 34 [ 642.772981][ T5762] usb 6-1: USB disconnect, device number 37 [ 642.798516][T13607] sysfs: Unknown parameter '' [ 642.823915][T13607] Invalid option length (1047276) for dns_resolver key [ 643.677143][ T5828] hid (null): invalid report_count 16064308 [ 643.696674][T13622] 9p: Bad value for 'wfdno' [ 643.702579][T13622] syz.3.1982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 643.710862][ T5828] hid-generic 0000:0900:FF000600.0003: collection stack underflow [ 643.715633][ T5828] hid-generic 0000:0900:FF000600.0003: item 0 0 0 12 parsing failed [ 643.721901][ T5828] hid-generic 0000:0900:FF000600.0003: probe with driver hid-generic failed with error -22 [ 643.951847][ C2] hpet: Lost 1 RTC interrupts [ 644.427918][T13639] random: crng reseeded on system resumption [ 644.892576][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 645.411350][T13658] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 645.420816][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 645.572607][ T5828] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 645.853744][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 645.865464][ T10] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 645.868465][T13666] binder: 13665:13666 ioctl c0306201 80000040 returned -14 [ 645.869721][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.874649][T13668] CIFS: Attempting to mount //127.0.0.1/share [ 645.876485][ T10] usb 6-1: Product: syz [ 645.880328][ T10] usb 6-1: Manufacturer: syz [ 645.882075][ T10] usb 6-1: SerialNumber: syz [ 646.093374][ T10] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 646.099836][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 646.107304][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 646.111264][ T10] usb 6-1: media controller created [ 646.121778][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.240710][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 646.345798][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 646.539167][ T5828] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 646.542359][ T5828] usb 5-1: config 0 has no interface number 0 [ 646.547434][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.562616][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 646.567100][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 646.572126][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.580293][ T5828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.585300][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.595380][ T5828] usb 5-1: config 0 descriptor?? [ 646.606262][ T5828] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 646.654560][T13668] CIFS: VFS: cifs_mount failed w/return code = -112 [ 647.286669][ T5828] usb 5-1: USB disconnect, device number 40 [ 647.292834][ T5828] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 647.600095][T13680] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 648.958083][T13699] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 648.971077][T13699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 649.122787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 649.229178][ T10] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 649.237977][ T10] usb 6-1: USB disconnect, device number 38 [ 649.381191][T13706] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 649.390251][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 650.742358][T13717] geneve2: entered promiscuous mode [ 650.745276][T13717] geneve2: entered allmulticast mode [ 650.784639][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 650.855827][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 650.858645][T13727] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 650.861466][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 651.472565][ T34] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 651.502560][T12661] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 651.624617][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 651.632028][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 651.639233][ T34] usb 8-1: config 0 has no interface number 0 [ 651.646507][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.652577][T12661] usb 7-1: Using ep0 maxpacket: 16 [ 651.659712][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 651.671913][T12661] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 651.677891][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.685116][T12661] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.688545][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.693983][T12661] usb 7-1: Product: syz [ 651.695313][T12661] usb 7-1: Manufacturer: syz [ 651.697495][T12661] usb 7-1: SerialNumber: syz [ 651.699432][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 651.703469][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.724022][ T34] usb 8-1: config 0 descriptor?? [ 651.730720][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 651.918300][T12661] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 652.441794][ T845] usb 8-1: USB disconnect, device number 35 [ 652.449998][ T845] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 652.593001][T12661] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 652.598044][T12661] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 652.600685][T12661] usb 7-1: media controller created [ 652.608288][T12661] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.122509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 653.221596][T12661] zl10353_read_register: readreg error (reg=127, ret==-110) [ 653.534027][T12661] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 653.600112][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2019'. [ 653.674939][ T42] audit: type=1804 audit(1785943552.675:143): pid=13774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2020" name="/newroot/507/merge/file" dev="overlay" ino=2767 res=1 errno=0 [ 653.846204][ T42] audit: type=1804 audit(1785943552.855:144): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2023" name="/newroot/517/merge/file" dev="overlay" ino=2838 res=1 errno=0 [ 654.065424][ T6514] usb 7-1: USB disconnect, device number 36 [ 655.095693][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 655.163582][ T42] audit: type=1804 audit(1785943554.175:145): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2030" name="/newroot/493/merge/file" dev="overlay" ino=2673 res=1 errno=0 [ 656.004008][T13823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 656.006825][T13823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 656.053331][T13823] vhci_hcd vhci_hcd.0: Device attached [ 656.374752][ T6514] usb 38-1: SetAddress Request (6) to port 0 [ 656.377652][ T6514] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 656.381404][T13831] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 656.392286][T13831] Invalid option length (1047276) for dns_resolver key [ 656.707191][T13827] vhci_hcd: connection reset by peer [ 656.711991][ T5827] vhci_hcd vhci_hcd.0: stop threads [ 656.713795][ T5827] vhci_hcd vhci_hcd.0: release socket [ 656.717210][ T5827] vhci_hcd vhci_hcd.0: disconnect device [ 656.892596][ T5857] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 657.052769][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 657.058926][T13844] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 657.163581][ T5857] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 657.172316][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.181562][ T5857] usb 6-1: Product: syz [ 657.188116][ T5857] usb 6-1: Manufacturer: syz [ 657.190590][ T5857] usb 6-1: SerialNumber: syz [ 657.494710][ T5857] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 657.540918][ T5857] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 657.553509][ T5857] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 657.564995][ T5857] usb 6-1: media controller created [ 657.586586][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.588391][T13846] FAULT_INJECTION: forcing a failure. [ 657.588391][T13846] name failslab, interval 1, probability 0, space 0, times 0 [ 657.600702][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.0.2038 Not tainted syzkaller #0 PREEMPT(full) [ 657.600726][T13846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 657.600736][T13846] Call Trace: [ 657.600742][T13846] [ 657.600748][T13846] dump_stack_lvl+0x100/0x190 [ 657.600774][T13846] should_fail_ex.cold+0x5/0xa [ 657.600794][T13846] should_failslab+0xc2/0x120 [ 657.600819][T13846] __kmalloc_cache_noprof+0x91/0x6c0 [ 657.600840][T13846] ? copy_mount_options+0x55/0x190 [ 657.600868][T13846] copy_mount_options+0x55/0x190 [ 657.600893][T13846] __ia32_sys_mount+0x1ab/0x310 [ 657.600916][T13846] ? __pfx___ia32_sys_mount+0x10/0x10 [ 657.600937][T13846] ? exit_to_user_mode_loop+0x166/0x6f0 [ 657.600955][T13846] ? rcu_is_watching+0x12/0xc0 [ 657.600987][T13846] __do_fast_syscall_32+0xe7/0x970 [ 657.601013][T13846] ? lockdep_hardirqs_on+0x78/0x100 [ 657.601036][T13846] do_fast_syscall_32+0x32/0x70 [ 657.601058][T13846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.601080][T13846] RIP: 0023:0xf7f97fec [ 657.601097][T13846] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 657.601102][T13846] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 657.601115][T13846] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 657.601122][T13846] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080000180 [ 657.601129][T13846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.601135][T13846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 657.601142][T13846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.601156][T13846] [ 657.788712][ T42] audit: type=1804 audit(1785943556.795:146): pid=13852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2040" name="/newroot/511/merge/file" dev="overlay" ino=2806 res=1 errno=0 [ 657.812964][ T5857] zl10353_read_register: readreg error (reg=127, ret==-110) [ 657.932640][T13864] lo: entered promiscuous mode [ 657.940933][T13864] bond0: entered promiscuous mode [ 657.953438][T13864] dummy0: entered promiscuous mode [ 657.958333][T13864] eql: entered promiscuous mode [ 657.961007][T13864] ifb0: entered promiscuous mode [ 657.965213][T13864] ifb1: entered promiscuous mode [ 657.974192][T13863] binder: 13862:13863 ioctl c0306201 80000040 returned -14 [ 657.975831][T13865] CIFS: Attempting to mount //127.0.0.1/share [ 658.102112][T13864] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 658.792757][T13865] CIFS: VFS: cifs_mount failed w/return code = -112 [ 659.942586][ T5828] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 660.093013][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 660.094343][ T5857] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 660.103444][ T5857] usb 6-1: USB disconnect, device number 39 [ 660.111438][ T5828] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 660.128390][ T5828] usb 5-1: config 0 has no interface number 0 [ 660.138246][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 660.163709][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 660.170047][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.174486][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.180858][ T1486] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 660.190429][ T5828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 660.198296][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.206670][ T5828] usb 5-1: config 0 descriptor?? [ 660.217678][ T5828] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 660.828493][T13913] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 660.873680][T13910] NILFS (loop3): device size too small [ 661.206081][ T10] usb 5-1: USB disconnect, device number 41 [ 661.219126][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 661.452672][ T6514] usb 38-1: device descriptor read/8, error -110 [ 661.855474][ T6514] usb usb38-port1: attempt power cycle [ 662.424858][ T6514] usb usb38-port1: unable to enumerate USB device [ 668.430415][T13943] binder: 13942:13943 ioctl c0306201 80000040 returned -14 [ 668.437099][T13947] CIFS: Attempting to mount //127.0.0.1/share [ 669.319352][T13947] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 669.331856][T13947] ------------[ cut here ]------------ [ 669.334608][T13947] server->in_flight == 0 [ 669.334647][T13947] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#0: syz.0.2056/13947 [ 669.342989][T13947] Modules linked in: [ 669.344862][T13947] CPU: 0 UID: 0 PID: 13947 Comm: syz.0.2056 Not tainted syzkaller #0 PREEMPT(full) [ 669.348851][T13947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 669.353115][T13947] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 669.355563][T13947] Code: c6 e8 41 3a b7 fe 84 db 0f 85 0a fb ff ff e8 24 40 b7 fe 48 8d 3d 3d da d7 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 0e 40 b7 fe 90 <0f> 0b 90 0f b6 05 5b 12 b8 0d 31 ff 89 c6 88 44 24 28 e8 06 3a b7 [ 669.363476][T13947] RSP: 0000:ffffc90002fdf1e8 EFLAGS: 00010287 [ 669.365964][T13947] RAX: 0000000000005044 RBX: ffff88801327e300 RCX: ffffc9000dfd1000 [ 669.369211][T13947] RDX: 0000000000080000 RSI: ffffffff835270f2 RDI: ffff888029112540 [ 669.372564][T13947] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 669.375781][T13947] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002fdf428 [ 669.379112][T13947] R13: 0000000000000200 R14: 0000000000000002 R15: ffff88801327e000 [ 669.382217][T13947] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5435b40 [ 669.385931][T13947] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 669.388643][T13947] CR2: 000000003401aff8 CR3: 000000005f3f3000 CR4: 0000000000352ef0 [ 669.391899][T13947] Call Trace: [ 669.393394][T13947] [ 669.394654][T13947] ? compound_send_recv+0xe30/0x2a10 [ 669.396828][T13947] compound_send_recv+0x1030/0x2a10 [ 669.399580][T13947] ? rcu_is_watching+0x12/0xc0 [ 669.401583][T13947] ? __pfx_compound_send_recv+0x10/0x10 [ 669.404430][T13947] ? __schedule+0x126e/0x6730 [ 669.406480][T13947] cifs_send_recv+0x43/0x60 [ 669.408364][T13947] SMB2_negotiate+0x15c4/0x5380 [ 669.410400][T13947] ? __schedule+0x126e/0x6730 [ 669.412380][T13947] ? __pfx_SMB2_negotiate+0x10/0x10 [ 669.414636][T13947] ? smb2_negotiate+0x57/0x80 [ 669.416597][T13947] ? smb2_negotiate+0x57/0x80 [ 669.418555][T13947] ? do_raw_spin_unlock+0x145/0x1e0 [ 669.420742][T13947] ? cifs_negotiate_protocol+0x268/0x4c0 [ 669.423068][T13947] cifs_negotiate_protocol+0x268/0x4c0 [ 669.425291][T13947] cifs_get_smb_ses+0xfc9/0x2170 [ 669.427332][T13947] cifs_mount_get_session+0xf8/0x460 [ 669.429656][T13947] dfs_mount_share+0x200/0x1e20 [ 669.431778][T13947] ? do_raw_spin_lock+0x128/0x260 [ 669.434069][T13947] ? __pfx_dfs_mount_share+0x10/0x10 [ 669.436361][T13947] ? __lock_acquire+0x49f/0x1a40 [ 669.438476][T13947] ? lockdep_hardirqs_on+0x78/0x100 [ 669.440686][T13947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 669.443266][T13947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 669.445482][T13947] cifs_mount+0xc4/0xdb0 [ 669.447241][T13947] ? find_held_lock+0x2b/0x80 [ 669.449192][T13947] ? find_nls+0x125/0x170 [ 669.451033][T13947] ? find_nls+0x125/0x170 [ 669.453024][T13947] ? __pfx_cifs_mount+0x10/0x10 [ 669.454918][T13947] ? do_raw_spin_unlock+0x145/0x1e0 [ 669.457136][T13947] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 669.459305][T13947] cifs_smb3_do_mount+0x2c0/0x1b20 [ 669.461435][T13947] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 669.463817][T13947] smb3_get_tree+0x1fd/0x440 [ 669.465725][T13947] vfs_get_tree+0x92/0x320 [ 669.467449][T13947] path_mount+0x7d0/0x23d0 [ 669.469330][T13947] ? __pfx_path_mount+0x10/0x10 [ 669.471344][T13947] ? lockdep_hardirqs_on+0x78/0x100 [ 669.473560][T13947] ? putname+0xb1/0x110 [ 669.475328][T13947] ? kmem_cache_free+0x127/0x6b0 [ 669.477392][T13947] ? __ia32_sys_mount+0x292/0x310 [ 669.479480][T13947] __ia32_sys_mount+0x292/0x310 [ 669.481518][T13947] ? __pfx___ia32_sys_mount+0x10/0x10 [ 669.483876][T13947] __do_fast_syscall_32+0xe7/0x970 [ 669.486050][T13947] do_fast_syscall_32+0x32/0x70 [ 669.488120][T13947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.490765][T13947] RIP: 0023:0xf7f97fec [ 669.492701][T13947] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 669.495485][T13947] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 669.498945][T13947] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000300 [ 669.502738][T13947] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000080000500 [ 669.505997][T13947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.509239][T13947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 669.512446][T13947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.516259][T13947] [ 669.517566][T13947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 669.520505][T13947] CPU: 0 UID: 0 PID: 13947 Comm: syz.0.2056 Not tainted syzkaller #0 PREEMPT(full) [ 669.524327][T13947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 669.528493][T13947] Call Trace: [ 669.529950][T13947] [ 669.531271][T13947] dump_stack_lvl+0x100/0x190 [ 669.533276][T13947] vpanic+0x552/0x970 [ 669.534992][T13947] ? __pfx_vpanic+0x10/0x10 [ 669.536944][T13947] panic+0xd1/0xe0 [ 669.538546][T13947] ? __pfx_panic+0x10/0x10 [ 669.540513][T13947] check_panic_on_warn.cold+0x19/0x34 [ 669.542778][T13947] ? smb2_add_credits+0x1213/0x1790 [ 669.544935][T13947] __warn.cold+0x191/0x318 [ 669.546778][T13947] __report_bug+0x30f/0x440 [ 669.548693][T13947] ? smb2_add_credits+0x1213/0x1790 [ 669.550811][T13947] ? __pfx___report_bug+0x10/0x10 [ 669.552840][T13947] ? lockdep_hardirqs_on+0x78/0x100 [ 669.554967][T13947] ? try_to_wake_up+0x158/0x1c90 [ 669.556994][T13947] ? smb2_add_credits+0x1213/0x1790 [ 669.559142][T13947] report_bug+0xb2/0x220 [ 669.560901][T13947] ? smb2_add_credits+0x1213/0x1790 [ 669.563037][T13947] handle_bug+0x16a/0x2a0 [ 669.564855][T13947] exc_invalid_op+0x17/0x50 [ 669.566604][T13947] asm_exc_invalid_op+0x1a/0x20 [ 669.568509][T13947] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 669.570903][T13947] Code: c6 e8 41 3a b7 fe 84 db 0f 85 0a fb ff ff e8 24 40 b7 fe 48 8d 3d 3d da d7 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 0e 40 b7 fe 90 <0f> 0b 90 0f b6 05 5b 12 b8 0d 31 ff 89 c6 88 44 24 28 e8 06 3a b7 [ 669.578657][T13947] RSP: 0000:ffffc90002fdf1e8 EFLAGS: 00010287 [ 669.581154][T13947] RAX: 0000000000005044 RBX: ffff88801327e300 RCX: ffffc9000dfd1000 [ 669.584368][T13947] RDX: 0000000000080000 RSI: ffffffff835270f2 RDI: ffff888029112540 [ 669.587561][T13947] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 669.590753][T13947] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002fdf428 [ 669.593972][T13947] R13: 0000000000000200 R14: 0000000000000002 R15: ffff88801327e000 [ 669.597230][T13947] ? smb2_add_credits+0x1212/0x1790 [ 669.599395][T13947] ? smb2_add_credits+0x1212/0x1790 [ 669.601548][T13947] ? compound_send_recv+0xe30/0x2a10 [ 669.603750][T13947] compound_send_recv+0x1030/0x2a10 [ 669.605906][T13947] ? rcu_is_watching+0x12/0xc0 [ 669.607985][T13947] ? __pfx_compound_send_recv+0x10/0x10 [ 669.610254][T13947] ? __schedule+0x126e/0x6730 [ 669.612253][T13947] cifs_send_recv+0x43/0x60 [ 669.614091][T13947] SMB2_negotiate+0x15c4/0x5380 [ 669.616111][T13947] ? __schedule+0x126e/0x6730 [ 669.618071][T13947] ? __pfx_SMB2_negotiate+0x10/0x10 [ 669.620255][T13947] ? smb2_negotiate+0x57/0x80 [ 669.622211][T13947] ? smb2_negotiate+0x57/0x80 [ 669.624268][T13947] ? do_raw_spin_unlock+0x145/0x1e0 [ 669.626460][T13947] ? cifs_negotiate_protocol+0x268/0x4c0 [ 669.628870][T13947] cifs_negotiate_protocol+0x268/0x4c0 [ 669.631195][T13947] cifs_get_smb_ses+0xfc9/0x2170 [ 669.633381][T13947] cifs_mount_get_session+0xf8/0x460 [ 669.635634][T13947] dfs_mount_share+0x200/0x1e20 [ 669.637708][T13947] ? do_raw_spin_lock+0x128/0x260 [ 669.639895][T13947] ? __pfx_dfs_mount_share+0x10/0x10 [ 669.641925][T13947] ? __lock_acquire+0x49f/0x1a40 [ 669.643609][T13947] ? lockdep_hardirqs_on+0x78/0x100 [ 669.645275][T13947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 669.647096][T13947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 669.648941][T13947] cifs_mount+0xc4/0xdb0 [ 669.650335][T13947] ? find_held_lock+0x2b/0x80 [ 669.651830][T13947] ? find_nls+0x125/0x170 [ 669.653196][T13947] ? find_nls+0x125/0x170 [ 669.654690][T13947] ? __pfx_cifs_mount+0x10/0x10 [ 669.656239][T13947] ? do_raw_spin_unlock+0x145/0x1e0 [ 669.657866][T13947] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 669.659624][T13947] cifs_smb3_do_mount+0x2c0/0x1b20 [ 669.661306][T13947] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 669.663475][T13947] smb3_get_tree+0x1fd/0x440 [ 669.665361][T13947] vfs_get_tree+0x92/0x320 [ 669.666993][T13947] path_mount+0x7d0/0x23d0 [ 669.668438][T13947] ? __pfx_path_mount+0x10/0x10 [ 669.670262][T13947] ? lockdep_hardirqs_on+0x78/0x100 [ 669.671960][T13947] ? putname+0xb1/0x110 [ 669.673381][T13947] ? kmem_cache_free+0x127/0x6b0 [ 669.675193][T13947] ? __ia32_sys_mount+0x292/0x310 [ 669.677104][T13947] __ia32_sys_mount+0x292/0x310 [ 669.678692][T13947] ? __pfx___ia32_sys_mount+0x10/0x10 [ 669.680483][T13947] __do_fast_syscall_32+0xe7/0x970 [ 669.682098][T13947] do_fast_syscall_32+0x32/0x70 [ 669.683773][T13947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.685868][T13947] RIP: 0023:0xf7f97fec [ 669.687236][T13947] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 669.689725][T13947] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 669.692928][T13947] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000300 [ 669.695460][T13947] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000080000500 [ 669.697904][T13947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.700542][T13947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 669.703194][T13947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.705748][T13947] [ 669.707356][T13947] Kernel Offset: disabled [ 669.708712][T13947] Rebooting in 86400 seconds..