last executing test programs: 10.316340745s ago: executing program 1 (id=350): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='123456789', 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000), 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) socket(0x10, 0x803, 0x0) 9.786698752s ago: executing program 2 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="cea0ec0ea0f50000000600000000000000950000000000000000000000000000005e4dbb2b305612"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353b, 0x1}}, 0x20) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) userfaultfd(0x80001) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d756a29782c6e6f6465536d61702880"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x98, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x63}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c20605"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000000000000019ef1c4eda46ef1e2a201b93ebe13ad27774e6c288bb65e198713c19b8f939a8e9541463af70e515b93077d5af7ef047012de8fe89d7ed86"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.406391708s ago: executing program 1 (id=353): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) inotify_init() 9.04797111s ago: executing program 0 (id=355): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) 8.85035092s ago: executing program 3 (id=356): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x18, 0x3, 0x0) epoll_create1(0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000"], 0x0}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, 0x0, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, 0x0, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xa, 0x300) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 8.009130828s ago: executing program 0 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) 7.136011825s ago: executing program 1 (id=358): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89a0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) ioprio_set$pid(0x2, 0x0, 0x4004) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "fda7be45625260e4dfec5d53fcd2e074"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) 7.135651588s ago: executing program 3 (id=359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000180)=""/164) 7.038349903s ago: executing program 2 (id=360): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd64}, 0x30, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f0000ab1000/0x4000)=nil, 0x4000, 0x0, 0x40, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1e7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0xc0104d03, &(0x7f0000000900)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) openat$hpet(0xffffff9c, &(0x7f0000000140), 0x4500, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 6.676546191s ago: executing program 0 (id=361): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x1, 0x1, 0xf23}]}]}}, 0x0, 0x32}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, 0x0, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.846274764s ago: executing program 2 (id=362): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 5.845933943s ago: executing program 3 (id=363): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r6}}], 0x1c, 0x2400e044}, 0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1}) 5.773284682s ago: executing program 1 (id=364): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.222265745s ago: executing program 1 (id=365): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000001c0)=0x4) r2 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r3, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="91c71d68e839e5adb10dcd487bfcdb101b90de0864788969ff89a904f838bce0e3ad305ad16c0b7c77b53f965648fcb2435c5734d2d9c61374b5437cfe1c410a0e8dc435be"]) r9 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f00000002800200", 0x2c}], 0x1}, 0x24008080) ioctl$FS_IOC_FSGETXATTR(r8, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) close_range(r2, 0xffffffffffffffff, 0x0) 4.116267005s ago: executing program 0 (id=366): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000340)=""/153, 0x99, 0x0, &(0x7f0000000480)=""/204, 0xcc}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x40) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89b1, &(0x7f0000000440)={'sit0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r1, r3, 0x2f, 0x10, 0x4, @void, @value=r3, @void, @void, r9}, 0x20) setns(0xc9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 4.015756495s ago: executing program 3 (id=367): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x400, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb0}}, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) 2.17302199s ago: executing program 3 (id=368): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) inotify_init() 2.139013057s ago: executing program 2 (id=369): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x69, 0x2007, @fd=r4, 0x1, &(0x7f0000001900)=[{&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/99, 0x63}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, 0x2, 0x0, {0x3, 0x0, 0x9, '\x00', &(0x7f0000001a40)={0xa6, 0x9, 0xfc, &(0x7f0000001940)="bcfec613444c45a04919ada17a05f262a97f491ec65882db148c4bfe175db8a80f18ba4268ac6e88c5b539a54d9fa9dd1ac6327bbcb56776e9b72e33d5e0d519f4c65327252bfdfdd50a2f3c37d46b6789b830dc5e4a096e00f5ae8b12f8d0135ecc4255db514caa187933be6b60f5f2bc80cac3ffb7b227ef882d41a6467dea7df744088e812781db78d8855006a9908eb270e4f515858cc974a8c71c6faa62c53c3a4ac8527db46269ed6d897b916a34e0f58640670a0b9007bfce19a0090c09899900a41ce0ac3dc9f34d615ad43289458c60ac2a0e1a14b99c8609aef88aefc381d349148c7d6b6a75901b634eb3dd459851bf1d30fc28efa8ce", 0x9}, 0x5}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000cc0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.357673653s ago: executing program 0 (id=370): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) 1.127028826s ago: executing program 2 (id=371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000d00000000000c00000000000000000000080000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006004400050064010102000000000000000000000000000000003c00000002000000ac14"], 0xfc}}, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10cd6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) sendto$inet6(r1, 0x0, 0x0, 0x8fc, &(0x7f0000000140)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) sendmsg$nl_route(r1, 0x0, 0x2000405c) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008004) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x9, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc3}}}}}}}, 0x0) ioctl(r6, 0x40186f40, &(0x7f0000000100)="ffffffff000000") nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dir0\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='ubi0:testvol\x00', &(0x7f0000000500)='./dir0\x00', &(0x7f0000000700)='ubifs\x00', 0x0, 0x0) 680.692914ms ago: executing program 3 (id=372): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000340)=""/4096) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) read(r4, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_getoverrun(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r6, &(0x7f0000000000)=@known='system.posix_acl_default\x00') unlink(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x100000005, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 406.373657ms ago: executing program 0 (id=373): r0 = socket(0x15, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000183000000400000000000000000000001852000002000000000000000000000018170000", @ANYRES32=0x1, @ANYRES16=r1], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x0, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40) write(r2, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="340100003f0007012bbd700000000000017c00000400fc800c00018008000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt(r0, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000480)=0x10009) r5 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000042c0)={0x2020}, 0x749) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x100400c, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xd) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x200002) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', '', [], 0xa, "013723ddca4d31f5f8b8fd94b62c4dea44a5246f"}, 0x18) syz_io_uring_setup(0x37a3, 0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0), 0x0) syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x14, 0x0, 0x0, 0xd, 0x0, 0x1, 0xc}) 281.440398ms ago: executing program 1 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='ramfs\x00', 0x2080, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_usb_connect(0x6, 0x55, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) 0s ago: executing program 2 (id=375): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x7f, 0x20, 0x2}) kernel console output (not intermixed with test programs): BSS network, BSSID 50:50:50:50:50:50 [ 50.062200][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.062214][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.065164][ T5746] veth0_macvtap: entered promiscuous mode [ 50.066101][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.069046][ T5738] veth0_macvtap: entered promiscuous mode [ 50.085156][ T5746] veth1_macvtap: entered promiscuous mode [ 50.087366][ T5738] veth1_macvtap: entered promiscuous mode [ 50.099408][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.099426][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.111656][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.111669][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.118323][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.125903][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.129070][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.146242][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.165254][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.189227][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.199176][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.207428][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.223293][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.267163][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.267177][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.313522][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.313537][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.333424][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.333443][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.348616][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.348631][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.366913][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.367416][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368079][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368495][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.395954][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396266][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396432][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396451][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396467][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396484][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396500][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396524][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396541][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.396558][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522905][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.522943][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.522962][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.522979][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.523020][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.523039][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.523059][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.523077][ T2086] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 50.575109][ T2086] hid-generic 0000:0000:0001.0002: hidraw1: HID v0.10 Device [syz0] on syz1 [ 50.611815][ T43] audit: type=1326 audit(1790104018.322:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.614178][ T43] audit: type=1326 audit(1790104018.322:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.614222][ T43] audit: type=1326 audit(1790104018.322:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.614595][ T43] audit: type=1326 audit(1790104018.322:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.617603][ T43] audit: type=1326 audit(1790104018.332:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.617780][ T43] audit: type=1326 audit(1790104018.332:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.618789][ T43] audit: type=1326 audit(1790104018.332:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.620528][ T43] audit: type=1326 audit(1790104018.332:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.623737][ T43] audit: type=1326 audit(1790104018.332:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.623777][ T43] audit: type=1326 audit(1790104018.332:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 50.655703][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.824179][ T5898] fido_id[5898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.378412][ T5908] batman_adv: batadv0: Adding interface: dummy0 [ 51.378423][ T5908] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.378438][ T5908] batman_adv: batadv0: Interface activated: dummy0 [ 51.387229][ T5903] null_blk: disk nullb1 created [ 51.566763][ T5098] Bluetooth: hci1: command tx timeout [ 51.566791][ T5098] Bluetooth: hci2: command tx timeout [ 51.566809][ T5098] Bluetooth: hci3: command tx timeout [ 51.595652][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 51.602381][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 51.604377][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.604426][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.608003][ T50] usb 5-1: config 0 descriptor?? [ 51.612095][ T50] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 51.645982][ T5751] Bluetooth: hci0: command tx timeout [ 52.718530][ T5921] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 53.647449][ T5751] Bluetooth: hci3: command tx timeout [ 53.647479][ T5751] Bluetooth: hci2: command tx timeout [ 53.736076][ T5751] Bluetooth: hci0: command tx timeout [ 54.521949][ T42] usb 5-1: USB disconnect, device number 2 [ 55.351574][ T5751] Bluetooth: hci1: command tx timeout [ 55.827995][ T5751] Bluetooth: hci3: command tx timeout [ 55.828024][ T5751] Bluetooth: hci2: command tx timeout [ 55.828041][ T5751] Bluetooth: hci0: command tx timeout [ 57.548122][ T5988] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 57.728120][ T5993] input: syz0 as /devices/virtual/input/input5 [ 57.940519][ T43] kauditd_printk_skb: 2117 callbacks suppressed [ 57.940536][ T43] audit: type=1400 audit(1790104025.652:2129): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.368289][ T854] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 58.369894][ T854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.369916][ T854] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 58.369947][ T854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.592847][ T854] usb 8-1: USB disconnect, device number 2 [ 58.674235][ T5989] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 58.674260][ T5989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.675422][ T5989] vhci_hcd vhci_hcd.0: Device attached [ 59.431858][ T6013] jffs2: notice: (6013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.606085][ T50] usb 38-1: SetAddress Request (2) to port 0 [ 59.606141][ T50] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 61.810845][ T5987] syz.2.14 (5987): drop_caches: 3 [ 61.817776][ T6021] jffs2: notice: (6021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.440099][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 63.466678][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 63.550255][ T6035] ceph: No mds server is up or the cluster is laggy [ 63.596107][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 63.596253][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 63.858406][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 63.858542][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 63.965781][ T6003] vhci_hcd: connection reset by peer [ 63.967262][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 63.967935][ T5784] vhci_hcd vhci_hcd.0: release socket [ 63.971376][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 64.925602][ T50] usb 38-1: device descriptor read/8, error -110 [ 65.319155][ T50] usb usb38-port1: attempt power cycle [ 65.752494][ T6072] ======================================================= [ 65.752494][ T6072] WARNING: The mand mount option has been deprecated and [ 65.752494][ T6072] and is ignored by this kernel. Remove the mand [ 65.752494][ T6072] option from the mount to silence this warning. [ 65.752494][ T6072] ======================================================= [ 65.771339][ T6072] NILFS (loop3): device size too small [ 65.837757][ T6072] netlink: 'syz.3.33': attribute type 9 has an invalid length. [ 65.837807][ T6072] netlink: 'syz.3.33': attribute type 7 has an invalid length. [ 65.837847][ T6072] netlink: 'syz.3.33': attribute type 8 has an invalid length. [ 65.844826][ T6076] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 65.905874][ T50] usb usb38-port1: unable to enumerate USB device [ 66.315419][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.446773][ T25] usb 7-1: device descriptor read/64, error -71 [ 66.691470][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.835810][ T25] usb 7-1: device descriptor read/64, error -71 [ 66.957909][ T25] usb usb7-port1: attempt power cycle [ 67.315729][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.350277][ T25] usb 7-1: device descriptor read/8, error -71 [ 67.585580][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.620586][ T25] usb 7-1: device descriptor read/8, error -71 [ 67.744732][ T25] usb usb7-port1: unable to enumerate USB device [ 68.390477][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 68.405440][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 68.765567][ T3267] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.941432][ T3267] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.948067][ T3267] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.948090][ T3267] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.948370][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.972908][ T6082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 69.124812][ T3267] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.298400][ T6099] Zero length message leads to an empty skb [ 70.378949][ T3267] usb 5-1: USB disconnect, device number 3 [ 70.562956][ T6109] VFS: Mount too revealing [ 70.805966][ T6120] comedi comedi0: probed id does not match board id (0xf != 0x7) [ 70.975444][ T6107] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 71.108941][ T968] cfg80211: failed to load regulatory.db [ 71.136235][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.136275][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.471158][ T6122] mmap: syz.3.44 (6122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.079675][ T6129] kAFS: bad VL server IP address [ 72.870541][ T6138] NILFS (loop2): device size too small [ 72.906530][ T6138] netlink: 'syz.2.46': attribute type 9 has an invalid length. [ 72.906716][ T6138] netlink: 'syz.2.46': attribute type 7 has an invalid length. [ 72.906729][ T6138] netlink: 'syz.2.46': attribute type 8 has an invalid length. [ 74.520120][ T10] libceph: connect (1)[c::]:6789 error -101 [ 74.520438][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 74.620225][ T6153] ceph: No mds server is up or the cluster is laggy [ 74.685596][ T5751] Bluetooth: hci3: command 0x0405 tx timeout [ 75.075608][ T6161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 75.075633][ T6161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.076850][ T6161] vhci_hcd vhci_hcd.0: Device attached [ 75.215102][ T6165] jffs2: notice: (6165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.395490][ T73] usb 42-1: SetAddress Request (2) to port 0 [ 75.395544][ T73] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.474981][ T6174] syzkaller0: entered promiscuous mode [ 75.474995][ T6174] syzkaller0: entered allmulticast mode [ 76.387810][ T5751] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 78.389229][ T6162] vhci_hcd: connection reset by peer [ 78.389967][ T5784] vhci_hcd vhci_hcd.2: stop threads [ 78.389983][ T5784] vhci_hcd vhci_hcd.2: release socket [ 78.390205][ T5784] vhci_hcd vhci_hcd.2: disconnect device [ 78.586630][ T6201] netlink: 48 bytes leftover after parsing attributes in process `syz.3.62'. [ 78.998800][ T10] libceph: connect (1)[c::]:6789 error -101 [ 79.001018][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 79.030633][ T10] libceph: connect (1)[c::]:6789 error -101 [ 79.030758][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 79.080845][ T6210] ceph: No mds server is up or the cluster is laggy [ 79.105885][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 79.771169][ T43] audit: type=1326 audit(1790104046.480:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.771759][ T43] audit: type=1326 audit(1790104046.480:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.774006][ T43] audit: type=1326 audit(1790104046.480:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.774467][ T43] audit: type=1326 audit(1790104046.480:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.775051][ T43] audit: type=1326 audit(1790104046.480:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.808885][ T43] audit: type=1326 audit(1790104046.490:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.808913][ T43] audit: type=1326 audit(1790104046.490:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.808933][ T43] audit: type=1326 audit(1790104046.490:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.808953][ T43] audit: type=1326 audit(1790104046.490:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709efec code=0x7ffc0000 [ 79.808972][ T43] audit: type=1326 audit(1790104046.490:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.3.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 80.527809][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 80.527835][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.527939][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.534251][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 80.534276][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.534352][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.568044][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 80.568071][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.568108][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.570564][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 80.570586][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.570617][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.585502][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 80.585520][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.587762][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.592577][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 80.592600][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.592628][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.599581][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 80.599604][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.599635][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.612230][ T6231] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 80.612254][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.612307][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 80.775674][ T50] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 80.878648][ T73] usb 42-1: device descriptor read/8, error -110 [ 81.307621][ T6246] vhci_hcd: connection closed [ 81.308069][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.308140][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.308305][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.308386][ T6244] vhci_hcd: connection closed [ 81.309015][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.309030][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.309108][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.309304][ T6242] vhci_hcd: connection closed [ 81.309637][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.309651][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.309787][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.310301][ T6236] vhci_hcd: connection closed [ 81.310597][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.310611][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.310725][ T6240] vhci_hcd: connection closed [ 81.311042][ T6238] vhci_hcd: connection closed [ 81.311190][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.311351][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.311364][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.311969][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.312133][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.312146][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.312180][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.312239][ T6234] vhci_hcd: connection closed [ 81.312380][ T6232] vhci_hcd: connection reset by peer [ 81.312590][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.312603][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.312635][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.313053][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 81.313066][ T5784] vhci_hcd vhci_hcd.3: release socket [ 81.313127][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 81.338775][ T73] usb usb42-port1: attempt power cycle [ 81.959438][ T73] usb usb42-port1: unable to enumerate USB device [ 82.433943][ T6265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.473978][ T6260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.523325][ T6265] evm: overlay not supported [ 83.316311][ T6276] sctp: [Deprecated]: syz.2.75 (pid 6276) Use of int in maxseg socket option. [ 83.316311][ T6276] Use struct sctp_assoc_value instead [ 83.574172][ T6280] jffs2: notice: (6280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.033251][ T6285] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 84.040625][ T6285] Bluetooth: MGMT ver 1.23 [ 84.630786][ T6296] process 'syz.1.85' launched './file0' with NULL argv: empty string added [ 85.891365][ T50] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 87.835449][ T73] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.005424][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 88.010312][ T73] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.014722][ T73] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.014749][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.016060][ T73] usb 6-1: config 0 descriptor?? [ 88.018899][ T73] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 88.151896][ T5894] usb usb44-port8: attempt power cycle [ 88.792536][ T5894] usb usb44-port8: unable to enumerate USB device [ 90.387949][ T6347] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 92.879709][ T73] usb 6-1: USB disconnect, device number 2 [ 93.368337][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 94.156438][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355481][ T6374] sctp: [Deprecated]: syz.0.95 (pid 6374) Use of int in maxseg socket option. [ 94.355481][ T6374] Use struct sctp_assoc_value instead [ 94.830026][ T6380] jffs2: notice: (6380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.043168][ T6389] sctp: [Deprecated]: syz.1.108 (pid 6389) Use of int in maxseg socket option. [ 96.043168][ T6389] Use struct sctp_assoc_value instead [ 96.444703][ T6395] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.431277][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.110'. [ 99.765826][ T6429] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 99.765871][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.766366][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 99.816703][ T6432] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.039744][ T3267] usb 44-1: SetAddress Request (6) to port 0 [ 100.039801][ T3267] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 100.357926][ T5751] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 101.397012][ T6434] vhci_hcd: connection reset by peer [ 101.414940][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 101.415065][ T5784] vhci_hcd vhci_hcd.3: release socket [ 101.423299][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 102.992511][ T6477] jffs2: notice: (6477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.207070][ T6476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.127'. [ 104.171927][ T6497] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 104.171946][ T6497] netlink: 224 bytes leftover after parsing attributes in process `syz.3.124'. [ 105.085527][ T3267] usb 44-1: device descriptor read/8, error -110 [ 105.604080][ T3267] usb usb44-port1: attempt power cycle [ 106.245924][ T3267] usb usb44-port1: unable to enumerate USB device [ 106.853829][ T3267] usb usb44-port8: attempt power cycle [ 107.964347][ T3267] usb usb44-port8: unable to enumerate USB device [ 109.990039][ T6542] syz_tun: entered allmulticast mode [ 110.405467][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 110.405487][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.406797][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.410697][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 110.410717][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.410797][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.435946][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 110.435971][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.436004][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.467633][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 110.467650][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.467672][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.470052][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 110.470067][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.470082][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.471071][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 110.471084][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.471100][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.502751][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 110.524265][ T6564] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 110.524298][ T6564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.524417][ T6564] vhci_hcd vhci_hcd.0: Device attached [ 110.555493][ T6548] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 110.555510][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.556741][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 110.645395][ T50] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 110.664927][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.898161][ T6541] syz_tun: left allmulticast mode [ 111.098906][ T6552] vhci_hcd: connection closed [ 111.100864][ T6554] vhci_hcd: connection closed [ 111.100995][ T6556] vhci_hcd: connection closed [ 111.101031][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.101047][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.101073][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.101075][ T6562] vhci_hcd: connection closed [ 111.101151][ T6549] vhci_hcd: connection reset by peer [ 111.101189][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.101196][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.101217][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.101225][ T6560] vhci_hcd: connection closed [ 111.101294][ T6565] vhci_hcd: connection closed [ 111.101321][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.101329][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.101363][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.101368][ T6558] vhci_hcd: connection closed [ 111.102053][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.102062][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.102087][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.102202][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.102210][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.102258][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.102352][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.102359][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.102376][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.102467][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.102474][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.102522][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.102608][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 111.102615][ T5784] vhci_hcd vhci_hcd.3: release socket [ 111.102632][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 111.130860][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 111.131784][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 111.208292][ T6574] ceph: No mds server is up or the cluster is laggy [ 111.295427][ T5092] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.445411][ T5092] usb 7-1: Using ep0 maxpacket: 32 [ 111.445962][ T5092] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 111.446943][ T5092] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 111.446955][ T5092] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 111.446963][ T5092] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.446972][ T5092] usb 7-1: config 0 has no interface number 0 [ 111.446988][ T5092] usb 7-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 111.447001][ T5092] usb 7-1: config 0 interface 196 has no altsetting 0 [ 111.451598][ T5092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.451610][ T5092] usb 7-1: Product: syz [ 111.451617][ T5092] usb 7-1: Manufacturer: syz [ 111.451624][ T5092] usb 7-1: SerialNumber: syz [ 111.452916][ T5092] usb 7-1: config 0 descriptor?? [ 111.803894][ T6585] Console: switching to colour dummy device 80x25 [ 112.107078][ T3267] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.207767][ T6586] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 112.230958][ T6586] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 112.231097][ T6586] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 112.231336][ T6586] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 112.507578][ T6586] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 112.507768][ T6586] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 269384 usecs [ 112.661578][ T5092] usb 7-1: USB disconnect, device number 6 [ 112.674701][ T6586] pci 0000:00:01.0: Adding to iommu group 1 [ 112.708158][ T6586] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 112.708182][ T6586] pci 0000:00:01.0: vgaarb: bridge control possible [ 112.708194][ T6586] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 112.720026][ T3267] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 112.722660][ T3267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 112.722685][ T3267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 112.724490][ T3267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.724511][ T3267] usb 5-1: Product: syz [ 112.724521][ T3267] usb 5-1: Manufacturer: syz [ 112.724554][ T3267] usb 5-1: SerialNumber: syz [ 112.727863][ T6582] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 112.755416][ T6586] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 112.759303][ T6586] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 112.773323][ T6586] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 112.785916][ T6586] [drm] Found bochs VGA, ID 0xb0c5. [ 112.785926][ T6586] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 112.787864][ T6586] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 112.939353][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 112.941176][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 113.055030][ T6595] ceph: No mds server is up or the cluster is laggy [ 113.113954][ T6605] dummy0: entered allmulticast mode [ 113.114572][ T6605] dummy0: left allmulticast mode [ 113.210002][ T6582] 9p: Could not find request transport: uj)x [ 113.833923][ T6614] futex_wake_op: syz.3.148 tries to shift op by 144; fix this program [ 114.871605][ T6622] jffs2: notice: (6622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.971028][ T3267] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 115.287428][ T6628] vlan0: entered promiscuous mode [ 115.306186][ T3267] usb 5-1: USB disconnect, device number 4 [ 115.326023][ T3267] usblp0: removed [ 115.815552][ T50] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 116.092681][ T6637] pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 116.115919][ T6637] gadgetfs: bound to dummy_udc driver [ 116.366605][ T35] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.372632][ C3] gadgetfs: connected [ 116.390487][ T35] gadgetfs: disconnected [ 116.552155][ C3] gadgetfs: connected [ 116.562983][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 116.563700][ T35] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 116.563744][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.595823][ C3] gadgetfs: configuration #1 [ 117.164281][ T6043] usb usb44-port1: attempt power cycle [ 117.235674][ T6637] gadgetfs: suspended from state 3 [ 117.237134][ T25] usb 5-1: USB disconnect, device number 5 [ 117.251345][ T6637] gadgetfs: disconnected [ 118.265887][ T6043] usb usb44-port1: unable to enumerate USB device [ 118.495990][ T25] libceph: connect (1)[c::]:6789 error -101 [ 118.499940][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 118.584878][ T6674] ceph: No mds server is up or the cluster is laggy [ 118.602505][ T6660] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.762937][ T25] libceph: connect (1)[c::]:6789 error -101 [ 118.764822][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 119.278819][ T25] libceph: connect (1)[c::]:6789 error -101 [ 119.279746][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 119.767593][ T6694] 9p: Bad value for 'wfdno' [ 119.941272][ T6697] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 120.745484][ T43] kauditd_printk_skb: 145 callbacks suppressed [ 120.745500][ T43] audit: type=1326 audit(1790104085.459:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.745683][ T43] audit: type=1326 audit(1790104085.459:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.748033][ T43] audit: type=1326 audit(1790104085.459:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.748072][ T43] audit: type=1326 audit(1790104085.459:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.748106][ T43] audit: type=1326 audit(1790104085.459:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 120.748139][ T43] audit: type=1326 audit(1790104085.459:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 120.748172][ T43] audit: type=1326 audit(1790104085.459:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.748210][ T43] audit: type=1326 audit(1790104085.459:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.749365][ T43] audit: type=1326 audit(1790104085.459:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 120.749546][ T43] audit: type=1326 audit(1790104085.459:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 121.140290][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 121.144350][ T6710] FAULT_INJECTION: forcing a failure. [ 121.144350][ T6710] name failslab, interval 1, probability 0, space 0, times 1 [ 121.144378][ T6710] CPU: 3 UID: 0 PID: 6710 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(full) [ 121.144399][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.144410][ T6710] Call Trace: [ 121.144416][ T6710] [ 121.144425][ T6710] dump_stack_lvl+0x100/0x190 [ 121.144538][ T6710] should_fail_ex.cold+0x5/0xa [ 121.144566][ T6710] should_failslab+0xc2/0x120 [ 121.144616][ T6710] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.144646][ T6710] ? __might_fault+0xc5/0x140 [ 121.144674][ T6710] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 121.144729][ T6710] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 121.144766][ T6710] __get_filter+0x1e1/0x2c0 [ 121.144799][ T6710] sk_reuseport_attach_filter+0x20/0x260 [ 121.144823][ T6710] sk_setsockopt+0x398e/0x5d80 [ 121.144856][ T6710] ? __pfx_sk_setsockopt+0x10/0x10 [ 121.144887][ T6710] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.144915][ T6710] ? __fget_files+0x34/0x3d0 [ 121.144936][ T6710] ? find_held_lock+0x2b/0x80 [ 121.144960][ T6710] ? aa_sock_opt_perm+0x114/0x1e0 [ 121.144988][ T6710] do_sock_setsockopt+0x193/0x1d0 [ 121.145020][ T6710] __sys_setsockopt+0x119/0x190 [ 121.145047][ T6710] __ia32_sys_setsockopt+0xbc/0x160 [ 121.145068][ T6710] ? __do_fast_syscall_32+0xb3/0x8b0 [ 121.145123][ T6710] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.145152][ T6710] __do_fast_syscall_32+0x13a/0x8b0 [ 121.145180][ T6710] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.145208][ T6710] do_fast_syscall_32+0x32/0x70 [ 121.145237][ T6710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.145260][ T6710] RIP: 0023:0xf709efec [ 121.145292][ T6710] Code: Unable to access opcode bytes at 0xf709efc2. [ 121.145302][ T6710] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 121.145323][ T6710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 121.145335][ T6710] RDX: 0000000000000033 RSI: 0000000080000040 RDI: 0000000000000008 [ 121.145348][ T6710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.145361][ T6710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.145388][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.145412][ T6710] [ 121.183964][ T6711] jffs2: notice: (6711) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.472524][ T5751] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 123.474875][ T6743] warning: `syz.1.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.613482][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.613850][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.614089][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.614373][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.616813][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.617726][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.618386][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.620045][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.620843][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.623295][ T6760] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.727983][ T6795] jffs2: notice: (6795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.571752][ T5751] Bluetooth: hci0: command 0x0406 tx timeout [ 129.714851][ T6830] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 129.714871][ T6830] netlink: 224 bytes leftover after parsing attributes in process `syz.0.188'. [ 130.402117][ T6827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.595526][ T43] kauditd_printk_skb: 138 callbacks suppressed [ 130.595544][ T43] audit: type=1326 audit(1790104094.300:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.595589][ T43] audit: type=1326 audit(1790104094.300:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.595618][ T43] audit: type=1326 audit(1790104094.300:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.597310][ T43] audit: type=1326 audit(1790104094.310:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.597685][ T43] audit: type=1326 audit(1790104094.310:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.597893][ T43] audit: type=1326 audit(1790104094.310:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.599027][ T43] audit: type=1326 audit(1790104094.310:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.599191][ T43] audit: type=1326 audit(1790104094.310:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.599705][ T43] audit: type=1326 audit(1790104094.310:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 130.600399][ T43] audit: type=1326 audit(1790104094.310:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 131.609870][ T6848] FAULT_INJECTION: forcing a failure. [ 131.609870][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 131.609891][ T6848] CPU: 2 UID: 0 PID: 6848 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 131.609903][ T6848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.609909][ T6848] Call Trace: [ 131.609914][ T6848] [ 131.609918][ T6848] dump_stack_lvl+0x100/0x190 [ 131.609937][ T6848] should_fail_ex.cold+0x5/0xa [ 131.609952][ T6848] should_failslab+0xc2/0x120 [ 131.609968][ T6848] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.609986][ T6848] ? file_f_owner_allocate+0x84/0x130 [ 131.610005][ T6848] file_f_owner_allocate+0x84/0x130 [ 131.610020][ T6848] do_fcntl+0xbd8/0x1670 [ 131.610036][ T6848] ? __pfx_do_fcntl+0x10/0x10 [ 131.610050][ T6848] ? __fget_files+0x215/0x3d0 [ 131.610066][ T6848] ? tomoyo_file_fcntl+0x6c/0xc0 [ 131.610081][ T6848] do_compat_fcntl64+0x66d/0x720 [ 131.610097][ T6848] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 131.610113][ T6848] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 131.610126][ T6848] ? xfd_validate_state+0x129/0x190 [ 131.610147][ T6848] __do_fast_syscall_32+0x13a/0x8b0 [ 131.610165][ T6848] do_fast_syscall_32+0x32/0x70 [ 131.610182][ T6848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.610196][ T6848] RIP: 0023:0xf7fd2fec [ 131.610209][ T6848] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 131.610213][ T6848] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037 [ 131.610232][ T6848] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000000f [ 131.610239][ T6848] RDX: 00000000800023c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.610246][ T6848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.610253][ T6848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.610260][ T6848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.610274][ T6848] [ 131.649345][ T6850] jffs2: notice: (6850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.659989][ T6850] jffs2: warning: (6850) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000 [ 132.536841][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.737271][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 132.737293][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.737336][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.752991][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 132.753008][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.753030][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.754313][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 132.754326][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.754392][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.756320][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 132.756337][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.757546][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.758677][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 132.758699][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.758721][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.759903][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 132.759914][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.759936][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.760930][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 132.760947][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.760971][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.761933][ T6870] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 132.761950][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.762058][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 132.813447][ T6885] vhci_hcd: connection closed [ 132.814468][ T6883] vhci_hcd: connection closed [ 132.814612][ T6871] vhci_hcd: connection closed [ 132.814696][ T6881] vhci_hcd: connection closed [ 132.814771][ T6873] vhci_hcd: connection closed [ 132.814848][ T6879] vhci_hcd: connection closed [ 132.814922][ T6877] vhci_hcd: connection closed [ 132.814996][ T6875] vhci_hcd: connection closed [ 132.815142][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.815158][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.815169][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.815444][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.815454][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.815464][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.815574][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.815585][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.815604][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.815745][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.815753][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.815762][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.815855][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.815863][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.815872][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.817964][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.817975][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.817985][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.818086][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.818094][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.818103][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.818248][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.818259][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.818272][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 132.951537][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 133.895668][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.911182][ T6902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.057731][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 134.085075][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.086423][ T5886] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 134.097237][ T5886] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 134.097489][ T5886] usb 5-1: config 1 has no interface number 0 [ 134.098186][ T5886] usb 5-1: config 1 interface 232 has no altsetting 0 [ 134.109165][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.109255][ T5886] usb 5-1: Product: syz [ 134.109263][ T5886] usb 5-1: Manufacturer: syz [ 134.109270][ T5886] usb 5-1: SerialNumber: syz [ 134.847050][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 135.138513][ T5886] hub 5-1:1.232: bad descriptor, ignoring hub [ 135.138537][ T5886] hub 5-1:1.232: probe with driver hub failed with error -5 [ 135.139653][ T5886] option 5-1:1.232: GSM modem (1-port) converter detected [ 135.144638][ T6915] 9p: Bad value for 'wfdno' [ 135.636286][ T5886] usb 5-1: USB disconnect, device number 6 [ 136.045390][ T5751] Bluetooth: hci3: command 0x0405 tx timeout [ 136.050800][ T5886] option 5-1:1.232: device disconnected [ 136.270958][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.270985][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.271095][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.289943][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 136.289969][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.290054][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.295251][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 136.295290][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.295903][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.299135][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 136.299153][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.299213][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.300668][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 136.300685][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.300746][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.302237][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 136.302254][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.302322][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.303666][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 136.303681][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.303758][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.305184][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 136.305201][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.305531][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 136.349660][ T6940] vhci_hcd: connection closed [ 136.349751][ T6938] vhci_hcd: connection closed [ 136.349943][ T6936] vhci_hcd: connection closed [ 136.350125][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.350144][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.350158][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.350263][ T6932] vhci_hcd: connection closed [ 136.350469][ T6928] vhci_hcd: connection closed [ 136.350724][ T6934] vhci_hcd: connection closed [ 136.350830][ T6926] vhci_hcd: connection closed [ 136.350932][ T6930] vhci_hcd: connection closed [ 136.351127][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.351140][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.351153][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.352871][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.352883][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.352896][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.353010][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.353020][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.353032][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.353154][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.353167][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.353179][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.353503][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.353513][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.353525][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.353661][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.353671][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.353682][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.353810][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.353819][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.353830][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.409483][ T6944] syz_tun: entered allmulticast mode [ 136.796263][ T43] kauditd_printk_skb: 369 callbacks suppressed [ 136.796326][ T43] audit: type=1326 audit(1790104100.470:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796413][ T43] audit: type=1326 audit(1790104100.470:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796527][ T43] audit: type=1326 audit(1790104100.470:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796603][ T43] audit: type=1326 audit(1790104100.480:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796686][ T43] audit: type=1326 audit(1790104100.480:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796767][ T43] audit: type=1326 audit(1790104100.480:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796847][ T43] audit: type=1326 audit(1790104100.480:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.796927][ T43] audit: type=1326 audit(1790104100.480:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.797009][ T43] audit: type=1326 audit(1790104100.480:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 136.797116][ T43] audit: type=1326 audit(1790104100.480:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6946 comm="syz.1.210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 137.109811][ T30] usb usb42-port1: attempt power cycle [ 137.454846][ T6943] syz_tun: left allmulticast mode [ 137.679859][ T6960] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 137.804234][ T30] usb usb42-port1: unable to enumerate USB device [ 137.845530][ T6961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.845575][ T6961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.766844][ T6966] MINIX-fs: unable to read superblock [ 138.791595][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 138.791612][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.793305][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.815758][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 138.815782][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.815839][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.824117][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 138.824140][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.824555][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.835007][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 138.835028][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.835084][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.894025][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 138.894053][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.894123][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.896786][ T6985] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(14) [ 138.896808][ T6985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.896942][ T6985] vhci_hcd vhci_hcd.0: Device attached [ 138.898917][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 138.898937][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.899026][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.902272][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 138.902298][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.903449][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 138.925472][ T6992] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 139.024185][ T6978] vhci_hcd: connection closed [ 139.024896][ T6986] vhci_hcd: connection closed [ 139.025406][ T25] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 139.025444][ T6981] vhci_hcd: connection closed [ 139.025619][ T6990] vhci_hcd: connection closed [ 139.026019][ T6988] vhci_hcd: connection closed [ 139.026683][ T6974] vhci_hcd: connection closed [ 139.027573][ T6983] vhci_hcd: connection closed [ 139.033557][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.033574][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.033661][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.037514][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.037526][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.037600][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.037690][ T6972] vhci_hcd: connection reset by peer [ 139.038363][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.038436][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.038482][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.038917][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.038925][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.038972][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.039053][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.039061][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.039239][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.039707][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.039716][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.039776][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.040878][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.040887][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.041011][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.042029][ T12] vhci_hcd vhci_hcd.0: stop threads [ 139.042084][ T12] vhci_hcd vhci_hcd.0: release socket [ 139.042119][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 139.210847][ T6992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.223'. [ 140.058516][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 140.058548][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.058614][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.079075][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 140.079101][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.079143][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.082919][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 140.082942][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.082981][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.084606][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 140.084625][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.084663][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.121651][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 140.121669][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.121745][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.122894][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 140.122908][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.122931][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.123962][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 140.123974][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.123996][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.124942][ T7002] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 140.124954][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.124993][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 140.151490][ T7017] vhci_hcd: connection closed [ 140.151633][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.151649][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.151659][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.151787][ T7015] vhci_hcd: connection closed [ 140.151901][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.151909][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.151917][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.152057][ T7013] vhci_hcd: connection closed [ 140.152174][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.152181][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.152190][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.152304][ T7011] vhci_hcd: connection closed [ 140.152439][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.152447][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.152456][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.152577][ T7007] vhci_hcd: connection closed [ 140.152693][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.152700][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.152708][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.152830][ T7009] vhci_hcd: connection closed [ 140.153909][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.153920][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.153930][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.154092][ T7005] vhci_hcd: connection closed [ 140.154216][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.154224][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.154232][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 140.154356][ T7003] vhci_hcd: connection closed [ 140.154475][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.154483][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.154491][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 141.593515][ T5751] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 142.015002][ T7041] jffs2: notice: (7041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 142.494685][ T7049] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 142.494699][ T7049] netlink: 200 bytes leftover after parsing attributes in process `syz.3.227'. [ 142.494707][ T7049] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 142.494713][ T7049] netlink: 29 bytes leftover after parsing attributes in process `syz.3.227'. [ 142.505213][ T7049] netlink: 128 bytes leftover after parsing attributes in process `syz.3.227'. [ 142.505251][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 144.115381][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 144.422680][ T7061] syz_tun: entered allmulticast mode [ 145.406348][ T6043] usb usb38-port1: attempt power cycle [ 145.605148][ T7060] syz_tun: left allmulticast mode [ 146.007852][ T6043] usb usb38-port1: unable to enumerate USB device [ 146.015666][ T5846] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.348455][ T968] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 146.365669][ T5846] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 146.366238][ T5846] usb 5-1: Dual-Role OTG device on HNP port [ 146.366451][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.377286][ T5846] gspca_main: spca501-2.14.0 probing 0000:0000 [ 146.377666][ T5846] gspca_spca501: reg write: error -32 [ 146.377675][ T5846] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 146.377727][ T5846] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 146.519626][ T968] usb 7-1: Using ep0 maxpacket: 16 [ 146.520411][ T968] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.521362][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.523150][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.523162][ T968] usb 7-1: Product: syz [ 146.523169][ T968] usb 7-1: Manufacturer: syz [ 146.523176][ T968] usb 7-1: SerialNumber: syz [ 146.525639][ T968] usb 7-1: config 0 descriptor?? [ 146.547010][ T968] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.547029][ T968] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 146.944247][ T5751] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 147.228836][ T968] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 147.291742][ T7106] netlink: 96 bytes leftover after parsing attributes in process `syz.0.238'. [ 147.313523][ T7108] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 147.388905][ T7108] serio: Serial port ptm0 [ 147.437920][ T7110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 147.615314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 148.394920][ T968] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 148.395008][ T968] em28xx 7-1:0.0: board has no eeprom [ 149.141358][ T7130] Bluetooth: MGMT ver 1.23 [ 149.425115][ T7131] gadgetfs: bound to dummy_udc driver [ 149.511996][ T7080] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 149.575603][ T968] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 149.576571][ T968] em28xx 7-1:0.0: dvb set to bulk mode. [ 149.598438][ T9] em28xx 7-1:0.0: Binding DVB extension [ 149.634207][ T968] usb 7-1: USB disconnect, device number 7 [ 149.679625][ T968] em28xx 7-1:0.0: Disconnecting em28xx [ 149.687627][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.687812][ C2] gadgetfs: connected [ 149.687887][ T25] gadgetfs: disconnected [ 149.977953][ T9] em28xx 7-1:0.0: Registering input extension [ 149.979459][ T968] em28xx 7-1:0.0: Closing input extension [ 150.012005][ T968] em28xx: Freeing device [ 150.297085][ T968] libceph: connect (1)[c::]:6789 error -101 [ 150.298627][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 150.392514][ T7141] ceph: No mds server is up or the cluster is laggy [ 153.865749][ T5751] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 154.040255][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 154.119218][ T7206] jffs2: notice: (7206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 156.639339][ T7232] MINIX-fs: unable to read superblock [ 157.434819][ T7249] pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 157.511410][ T7249] gadgetfs: bound to dummy_udc driver [ 158.322923][ T7247] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 158.330753][ T7247] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 158.330833][ T7247] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 158.331073][ T7247] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 158.344184][ T7247] pci 0000:00:03.0: Adding to iommu group 3 [ 158.359795][ T7247] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 158.363133][ T7247] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 158.364737][ T7247] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 158.540702][ T7251] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 158.712942][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.713243][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.723409][ T7251] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 158.723624][ T7251] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 158.724038][ T7251] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 158.724923][ T7251] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 158.737286][ T7251] pci 0000:00:01.0: Adding to iommu group 1 [ 158.740608][ T7251] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 158.740632][ T7251] pci 0000:00:01.0: vgaarb: bridge control possible [ 158.740639][ T7251] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 158.746695][ T7251] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 158.746855][ T7251] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 158.748742][ T7251] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 158.758957][ T7251] [drm] Found bochs VGA, ID 0xb0c5. [ 158.758967][ T7251] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 158.799998][ T7251] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 158.977259][ T7251] Console: switching to colour frame buffer device 160x50 [ 159.062285][ T7251] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 159.196165][ T7271] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 159.196219][ T7271] CPU: 3 UID: 0 PID: 7271 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 159.196256][ T7271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.196267][ T7271] Call Trace: [ 159.196273][ T7271] [ 159.196280][ T7271] dump_stack_lvl+0x100/0x190 [ 159.196389][ T7271] sysfs_warn_dup.cold+0x1c/0x28 [ 159.196415][ T7271] sysfs_create_dir_ns+0x24b/0x2b0 [ 159.196461][ T7271] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 159.196480][ T7271] ? find_held_lock+0x2b/0x80 [ 159.196499][ T7271] ? kobject_add_internal+0x25f/0x930 [ 159.196543][ T7271] ? kobject_add_internal+0x25f/0x930 [ 159.196566][ T7271] ? class_dir_child_ns_type+0xd/0x60 [ 159.196597][ T7271] kobject_add_internal+0x2c8/0x930 [ 159.196620][ T7271] kobject_add+0x16a/0x1e0 [ 159.196638][ T7271] ? __pfx_kobject_add+0x10/0x10 [ 159.196660][ T7271] ? get_device_parent+0x1b3/0x4c0 [ 159.196685][ T7271] ? kobject_put+0xb9/0x640 [ 159.196710][ T7271] device_add+0x294/0x1970 [ 159.196735][ T7271] ? lockdep_init_map_type+0x5c/0x250 [ 159.196759][ T7271] ? __pfx_device_add+0x10/0x10 [ 159.196782][ T7271] ? lockdep_init_map_type+0x5c/0x250 [ 159.196805][ T7271] ? __init_waitqueue_head+0xca/0x150 [ 159.196836][ T7271] tty_register_device_attr+0x388/0x7f0 [ 159.196886][ T7271] ? lockdep_init_map_type+0x5c/0x250 [ 159.196911][ T7271] ? __pfx_tty_register_device_attr+0x10/0x10 [ 159.196941][ T7271] ? tty_port_init+0x156/0x1c0 [ 159.196969][ T7271] gsm_activate_mux+0x155/0x2a0 [ 159.196994][ T7271] gsmld_ioctl+0xbbc/0x15c0 [ 159.197026][ T7271] ? __pfx_gsmld_ioctl+0x10/0x10 [ 159.197068][ T7271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.197097][ T7271] ? __pfx_gsmld_ioctl+0x10/0x10 [ 159.197120][ T7271] tty_compat_ioctl+0x396/0x420 [ 159.197142][ T7271] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 159.197165][ T7271] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 159.197195][ T7271] __do_fast_syscall_32+0x13a/0x8b0 [ 159.197223][ T7271] do_fast_syscall_32+0x32/0x70 [ 159.197250][ T7271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.197272][ T7271] RIP: 0023:0xf702efec [ 159.197291][ T7271] Code: Unable to access opcode bytes at 0xf702efc2. [ 159.197299][ T7271] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 159.197316][ T7271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 159.197327][ T7271] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.197336][ T7271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.197347][ T7271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.197358][ T7271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.197381][ T7271] [ 159.197446][ T7271] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.254215][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 160.254233][ T43] audit: type=1804 audit(1790104122.960:2870): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.271" name="bus" dev="ramfs" ino=16429 res=1 errno=0 [ 160.256064][ T43] audit: type=1804 audit(1790104122.970:2871): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.271" name="bus" dev="ramfs" ino=16429 res=1 errno=0 [ 161.028009][ T7290] MINIX-fs: unable to read superblock [ 161.837229][ T7298] sctp_transport_update_pmtu: 68 callbacks suppressed [ 161.837249][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.837685][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.838102][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.838629][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.929461][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.929931][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.930369][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.930810][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.931263][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.931685][ T7298] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 162.119043][ T7299] Console: switching to colour dummy device 80x25 [ 162.632624][ T7306] CacheFiles: Failed to register: -95 [ 162.634236][ T7306] AppArmor: change_hat: Invalid input 'files' [ 162.695866][ T7301] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 162.724654][ T7301] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 162.724856][ T7301] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 162.725231][ T7301] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 162.742695][ T7301] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 162.785214][ T7301] pci 0000:00:01.0: Adding to iommu group 1 [ 162.805292][ T7301] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 162.805306][ T7301] pci 0000:00:01.0: vgaarb: bridge control possible [ 162.805313][ T7301] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 162.850125][ T7301] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 162.850346][ T7301] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 162.851736][ T7301] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 162.873622][ T7301] [drm] Found bochs VGA, ID 0xb0c5. [ 162.873635][ T7301] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 162.920501][ T7301] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 163.076205][ T7301] Console: switching to colour frame buffer device 160x50 [ 163.111847][ T7301] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 163.285325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 163.555475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 164.295632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 166.475411][ T5894] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 166.781195][ T5894] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 166.866688][ T5894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 166.866718][ T5894] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 166.962421][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.962450][ T5894] usb 7-1: Product: syz [ 166.962469][ T5894] usb 7-1: Manufacturer: syz [ 166.962481][ T5894] usb 7-1: SerialNumber: syz [ 166.968432][ T7343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.132744][ T7360] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 167.170532][ T7360] gadgetfs: bound to dummy_udc driver [ 167.250852][ T7343] 9p: Could not find request transport: uj)x [ 167.436069][ T968] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 167.437261][ C0] gadgetfs: connected [ 167.438432][ T968] gadgetfs: disconnected [ 167.586589][ C0] gadgetfs: connected [ 167.598315][ T968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 167.606276][ T968] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 167.606780][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.670657][ C0] gadgetfs: configuration #1 [ 168.428254][ T7370] Console: switching to colour dummy device 80x25 [ 168.661421][ T7360] gadgetfs: suspended from state 3 [ 168.661576][ T7360] gadgetfs: disconnected [ 168.664551][ T9] usb 6-1: USB disconnect, device number 5 [ 169.121423][ T7371] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 169.219332][ T7371] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 169.219481][ T7371] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 169.221209][ T7371] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 169.222430][ T7371] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 169.227162][ T5894] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 169.233559][ T5894] usb 7-1: USB disconnect, device number 8 [ 169.259899][ T7371] pci 0000:00:01.0: Adding to iommu group 1 [ 169.264052][ T7371] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 169.264074][ T7371] pci 0000:00:01.0: vgaarb: bridge control possible [ 169.264087][ T7371] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 169.268330][ T5894] usblp0: removed [ 169.292013][ T7371] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 169.292165][ T7371] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 169.293553][ T7371] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 169.304162][ T7371] [drm] Found bochs VGA, ID 0xb0c5. [ 169.304178][ T7371] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 169.306859][ T7371] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 169.499118][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 169.707904][ T30] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.707983][ T30] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 169.709605][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.710130][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.710155][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.711970][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.712038][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.712104][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.713177][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.713272][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.713332][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.714720][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.714795][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.714841][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.768590][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.772240][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.772290][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.774165][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.774258][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.774335][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.780463][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.780604][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.780624][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.809607][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.809958][ T30] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.810025][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.814505][ T30] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.814519][ T30] usb 6-1: Product: syz [ 169.814709][ T30] usb 6-1: Manufacturer: syz [ 169.814755][ T30] usb 6-1: SerialNumber: syz [ 169.821352][ T30] usb 6-1: config 0 descriptor?? [ 169.851843][ T30] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 170.131303][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.132251][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.204371][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.209526][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.236353][ T7378] vlan0: left promiscuous mode [ 170.240550][ T5846] usb 6-1: USB disconnect, device number 6 [ 170.353310][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.353591][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.353690][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.353850][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.392038][ T5846] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 170.415586][ T7394] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 170.446401][ T5753] Bluetooth: hci3: command 0x0405 tx timeout [ 170.446440][ T5751] Bluetooth: hci1: command 0x0406 tx timeout [ 170.529523][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 170.552945][ T7394] serio: Serial port ptm0 [ 170.615980][ T7401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.303'. [ 170.738943][ T7402] MINIX-fs: unable to read superblock [ 171.604906][ T7413] jffs2: notice: (7413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 171.679565][ T7378] Process accounting resumed [ 171.754701][ T43] audit: type=1326 audit(1790104134.460:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.1.299" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 172.855440][ T5894] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 173.015907][ T5894] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 173.016943][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 173.016960][ T5894] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 173.018865][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.018883][ T5894] usb 6-1: Product: syz [ 173.018896][ T5894] usb 6-1: Manufacturer: syz [ 173.018908][ T5894] usb 6-1: SerialNumber: syz [ 173.029189][ T7427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.560017][ T43] audit: type=1800 audit(1790104136.240:2873): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.306" name="file0" dev="overlay" ino=460 res=0 errno=0 [ 173.616279][ T7438] jffs2: notice: (7438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 173.641456][ T7427] 9p: Could not find request transport: uj)x [ 174.441094][ T7445] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 174.489923][ T7445] serio: Serial port ptm0 [ 174.523374][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 174.542252][ T7452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'. [ 174.887609][ T5894] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 174.896637][ T5894] usb 6-1: USB disconnect, device number 7 [ 174.903079][ T5894] usblp0: removed [ 176.018828][ T7468] batman_adv: batadv0: Adding interface: dummy0 [ 176.018840][ T7468] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.018854][ T7468] batman_adv: batadv0: Interface activated: dummy0 [ 176.064323][ T7468] batadv0: mtu less than device minimum [ 176.065372][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.065882][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.066806][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.067680][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.068489][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.068964][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.069429][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.069895][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.070361][ T7468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.607461][ T7479] capability: warning: `syz.1.316' uses deprecated v2 capabilities in a way that may be insecure [ 176.831274][ T7481] jffs2: notice: (7481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 177.487120][ T7485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.487148][ T7485] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 177.601458][ T7485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.601489][ T7485] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 177.931878][ T7485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.931904][ T7485] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 178.026507][ T7503] gfs2: error -5 reading superblock [ 178.040801][ T43] audit: type=1326 audit(1790104140.750:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.055578][ T43] audit: type=1326 audit(1790104140.770:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.055799][ T43] audit: type=1326 audit(1790104140.770:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.055828][ T43] audit: type=1326 audit(1790104140.770:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.055978][ T43] audit: type=1326 audit(1790104140.770:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.057237][ T43] audit: type=1326 audit(1790104140.770:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.057295][ T43] audit: type=1326 audit(1790104140.770:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.058338][ T43] audit: type=1326 audit(1790104140.770:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.058511][ T43] audit: type=1326 audit(1790104140.770:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.058538][ T43] audit: type=1326 audit(1790104140.770:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 178.100577][ T7503] netlink: 'syz.3.318': attribute type 21 has an invalid length. [ 178.100688][ T7503] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.326727][ T7485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.327020][ T7485] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 178.851276][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 178.851304][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.852266][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.861334][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 178.861360][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.861506][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.863012][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 178.863031][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.863140][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.864731][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 178.864750][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.864788][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.868752][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 178.868771][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.868825][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.870535][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 178.870557][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.870662][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.876591][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 178.876612][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.876747][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.882554][ T7524] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 178.882578][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.882792][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 178.982964][ T7540] vhci_hcd: connection closed [ 178.983072][ T7538] vhci_hcd: connection closed [ 178.983432][ T7529] vhci_hcd: connection closed [ 178.984307][ T12] vhci_hcd vhci_hcd.1: stop threads [ 178.984396][ T12] vhci_hcd vhci_hcd.1: release socket [ 178.984406][ T7536] vhci_hcd: connection closed [ 178.984414][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 178.984582][ T12] vhci_hcd vhci_hcd.1: stop threads [ 178.984594][ T12] vhci_hcd vhci_hcd.1: release socket [ 178.992602][ T7525] vhci_hcd: connection closed [ 178.992774][ T7533] vhci_hcd: connection closed [ 178.992932][ T7531] vhci_hcd: connection closed [ 178.993055][ T7527] vhci_hcd: connection closed [ 179.011017][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.011262][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.011275][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.011339][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.011583][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.011600][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.011799][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.012183][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.012195][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.012345][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.013800][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.013813][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.013851][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.014008][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.014015][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.014097][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.014194][ T12] vhci_hcd vhci_hcd.1: stop threads [ 179.014202][ T12] vhci_hcd vhci_hcd.1: release socket [ 179.014290][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 179.035423][ T30] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 179.049085][ T7522] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.185562][ T73] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 179.357806][ T73] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 179.362226][ T73] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 179.362393][ T73] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 179.369592][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.369617][ T73] usb 8-1: Product: syz [ 179.369628][ T73] usb 8-1: Manufacturer: syz [ 179.369636][ T73] usb 8-1: SerialNumber: syz [ 179.385861][ T7546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.336028][ T7546] 9p: Could not find request transport: uj)x [ 180.665133][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 180.665159][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.665697][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.675149][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 180.675164][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.682433][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.707385][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 180.707408][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.707552][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.712521][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 180.712542][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.712684][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.714174][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 180.714193][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.714363][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.715963][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 180.715981][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.716104][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.719851][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 180.719872][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.719964][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.723699][ T7566] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 180.723718][ T7566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.723865][ T7566] vhci_hcd vhci_hcd.0: Device attached [ 180.901021][ T73] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 180.913914][ T7581] vhci_hcd: connection closed [ 180.914150][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.914174][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.914253][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.914388][ T7583] vhci_hcd: connection closed [ 180.914506][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.914519][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.914608][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.914995][ T7579] vhci_hcd: connection closed [ 180.915798][ T7575] vhci_hcd: connection closed [ 180.915979][ T7573] vhci_hcd: connection closed [ 180.916058][ T7570] vhci_hcd: connection closed [ 180.916154][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.916164][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.916189][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.916211][ T7568] vhci_hcd: connection closed [ 180.916355][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.916364][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.916384][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.916488][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.916496][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.916513][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.916610][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.916617][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.916634][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.916818][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.916826][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.916845][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.917175][ T7577] vhci_hcd: connection closed [ 180.917375][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.917384][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.917402][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.979057][ T73] usb 8-1: USB disconnect, device number 3 [ 180.996447][ T73] usblp0: removed [ 181.845329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 181.865314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.875342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.942536][ T7608] jffs2: notice: (7608) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.822201][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 184.111464][ T7626] jffs2: notice: (7626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.934112][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 185.934139][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.934283][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 185.958906][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 185.958932][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.958973][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 185.960943][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 185.960966][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.961006][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 185.964146][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 185.964168][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.964231][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 185.966936][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 185.966957][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.966996][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 186.059523][ T7664] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 186.059550][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.059589][ T7664] vhci_hcd vhci_hcd.0: Device attached [ 186.063292][ T7664] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18) [ 186.063315][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 186.063376][ T7664] vhci_hcd vhci_hcd.0: Device attached [ 186.265449][ T10] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 186.313121][ T7670] pim6reg: entered allmulticast mode [ 186.330588][ T7649] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 186.330615][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.330751][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 186.334649][ T7667] vhci_hcd: connection closed [ 186.335022][ T7662] vhci_hcd: connection closed [ 186.336316][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.336340][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.337514][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.337776][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.337790][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.337901][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.338094][ T7665] vhci_hcd: connection closed [ 186.338406][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.338421][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.338462][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.339148][ T7660] vhci_hcd: connection closed [ 186.339734][ T7653] vhci_hcd: connection closed [ 186.340121][ T7658] vhci_hcd: connection closed [ 186.340357][ T7656] vhci_hcd: connection closed [ 186.340794][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.340809][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.341002][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.341229][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.341242][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.341370][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.341883][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.341896][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.341960][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.342215][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.342226][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.342788][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.342887][ T7650] vhci_hcd: connection reset by peer [ 186.343198][ T5784] vhci_hcd vhci_hcd.1: stop threads [ 186.343211][ T5784] vhci_hcd vhci_hcd.1: release socket [ 186.343267][ T5784] vhci_hcd vhci_hcd.1: disconnect device [ 186.407814][ T7663] FAULT_INJECTION: forcing a failure. [ 186.407814][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 186.407876][ T7663] CPU: 2 UID: 0 PID: 7663 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(full) [ 186.407913][ T7663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.407923][ T7663] Call Trace: [ 186.407929][ T7663] [ 186.407936][ T7663] dump_stack_lvl+0x100/0x190 [ 186.408027][ T7663] should_fail_ex.cold+0x5/0xa [ 186.408053][ T7663] should_failslab+0xc2/0x120 [ 186.408102][ T7663] __kmalloc_noprof+0xfc/0x840 [ 186.408125][ T7663] ? tomoyo_encode2+0xfb/0x3c0 [ 186.408149][ T7663] tomoyo_encode2+0xfb/0x3c0 [ 186.408172][ T7663] tomoyo_encode+0x29/0x50 [ 186.408192][ T7663] tomoyo_realpath_from_path+0x18c/0x690 [ 186.408232][ T7663] tomoyo_path_number_perm+0x23c/0x580 [ 186.408259][ T7663] ? tomoyo_path_number_perm+0x22e/0x580 [ 186.408285][ T7663] ? memory_min_write+0xc1/0xe0 [ 186.408319][ T7663] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.408352][ T7663] ? find_held_lock+0x2b/0x80 [ 186.408372][ T7663] ? d_splice_alias_ops+0x626/0x15b0 [ 186.408399][ T7663] ? current_check_access_path+0x262/0x420 [ 186.408428][ T7663] ? __pfx_current_check_access_path+0x10/0x10 [ 186.408455][ T7663] ? do_raw_spin_unlock+0x145/0x1e0 [ 186.408477][ T7663] ? simple_lookup+0xfc/0x1d0 [ 186.408500][ T7663] ? lookup_one_qstr_excl+0xaf/0x250 [ 186.408530][ T7663] tomoyo_path_mkdir+0x9b/0xe0 [ 186.408552][ T7663] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 186.408573][ T7663] ? lock_acquire+0x1d1/0x380 [ 186.408601][ T7663] security_path_mkdir+0x154/0x2e0 [ 186.408624][ T7663] filename_mkdirat+0x168/0x5e0 [ 186.408651][ T7663] ? __pfx_filename_mkdirat+0x10/0x10 [ 186.408675][ T7663] ? strncpy_from_user+0x19d/0x2d0 [ 186.408702][ T7663] ? do_getname+0x191/0x390 [ 186.408725][ T7663] __ia32_sys_mkdirat+0x88/0xc0 [ 186.408747][ T7663] __do_fast_syscall_32+0x13a/0x8b0 [ 186.408811][ T7663] do_fast_syscall_32+0x32/0x70 [ 186.408838][ T7663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.408862][ T7663] RIP: 0023:0xf7fd2fec [ 186.408880][ T7663] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 186.408888][ T7663] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 186.408907][ T7663] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 186.408918][ T7663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.408928][ T7663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.408939][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.408951][ T7663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.408978][ T7663] [ 186.409098][ T7663] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.605455][ T5797] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 189.755378][ T5797] usb 8-1: Using ep0 maxpacket: 16 [ 189.755857][ T5797] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.757985][ T5797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 189.762129][ T5797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.762143][ T5797] usb 8-1: Product: syz [ 189.762150][ T5797] usb 8-1: Manufacturer: syz [ 189.762157][ T5797] usb 8-1: SerialNumber: syz [ 189.763845][ T5797] usb 8-1: config 0 descriptor?? [ 189.771892][ T5797] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.771909][ T5797] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 190.139358][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 190.142032][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 190.142305][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 190.143618][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 190.716022][ T5797] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 190.955160][ T5797] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 190.955178][ T5797] em28xx 8-1:0.0: board has no eeprom [ 191.291059][ T5846] usb 5-1: USB disconnect, device number 7 [ 191.299003][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 191.299372][ T43] audit: type=1326 audit(1790104154.010:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.301844][ T43] audit: type=1326 audit(1790104154.010:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.302086][ T43] audit: type=1326 audit(1790104154.010:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.302122][ T43] audit: type=1326 audit(1790104154.010:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.302220][ T43] audit: type=1326 audit(1790104154.010:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.302256][ T43] audit: type=1326 audit(1790104154.010:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.302953][ T43] audit: type=1326 audit(1790104154.010:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.303164][ T43] audit: type=1326 audit(1790104154.010:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.304499][ T43] audit: type=1326 audit(1790104154.010:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.376759][ T7723] kvm [7722]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 191.378275][ T7723] kvm [7722]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 191.399785][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 191.402068][ T43] audit: type=1326 audit(1790104154.110:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.2.351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 191.684723][ T7721] jffs2: notice: (7721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.855461][ T968] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 191.971215][ T7696] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 192.027245][ T968] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 192.034177][ T968] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 1024 [ 192.034202][ T968] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 192.076829][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.077007][ T968] usb 7-1: Product: syz [ 192.077128][ T968] usb 7-1: Manufacturer: syz [ 192.077251][ T968] usb 7-1: SerialNumber: syz [ 192.088263][ T7727] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 192.136814][ T5797] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 192.136831][ T5797] em28xx 8-1:0.0: dvb set to bulk mode. [ 192.138809][ T42] em28xx 8-1:0.0: Binding DVB extension [ 192.197634][ T7733] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 192.198145][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.1.353 Not tainted syzkaller #0 PREEMPT(full) [ 192.198187][ T7733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.198196][ T7733] Call Trace: [ 192.198202][ T7733] [ 192.198209][ T7733] dump_stack_lvl+0x100/0x190 [ 192.198235][ T7733] sysfs_warn_dup.cold+0x1c/0x28 [ 192.198257][ T7733] sysfs_create_dir_ns+0x24b/0x2b0 [ 192.198275][ T7733] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 192.198291][ T7733] ? find_held_lock+0x2b/0x80 [ 192.198307][ T7733] ? kobject_add_internal+0x25f/0x930 [ 192.198324][ T7733] ? kobject_add_internal+0x25f/0x930 [ 192.198353][ T7733] ? class_dir_child_ns_type+0xd/0x60 [ 192.198378][ T7733] kobject_add_internal+0x2c8/0x930 [ 192.198398][ T7733] kobject_add+0x16a/0x1e0 [ 192.198414][ T7733] ? __pfx_kobject_add+0x10/0x10 [ 192.198430][ T7733] ? get_device_parent+0x1b3/0x4c0 [ 192.198456][ T7733] ? kobject_put+0xb9/0x640 [ 192.198477][ T7733] device_add+0x294/0x1970 [ 192.198500][ T7733] ? lockdep_init_map_type+0x5c/0x250 [ 192.198521][ T7733] ? __pfx_device_add+0x10/0x10 [ 192.198541][ T7733] ? lockdep_init_map_type+0x5c/0x250 [ 192.198560][ T7733] ? __init_waitqueue_head+0xca/0x150 [ 192.198586][ T7733] tty_register_device_attr+0x388/0x7f0 [ 192.198605][ T7733] ? lockdep_init_map_type+0x5c/0x250 [ 192.198625][ T7733] ? __pfx_tty_register_device_attr+0x10/0x10 [ 192.198648][ T7733] ? tty_port_init+0x156/0x1c0 [ 192.198669][ T7733] gsm_activate_mux+0x155/0x2a0 [ 192.198688][ T7733] gsmld_ioctl+0xbbc/0x15c0 [ 192.198714][ T7733] ? __pfx_gsmld_ioctl+0x10/0x10 [ 192.198748][ T7733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.198772][ T7733] ? __pfx_gsmld_ioctl+0x10/0x10 [ 192.198791][ T7733] tty_compat_ioctl+0x396/0x420 [ 192.198809][ T7733] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 192.198828][ T7733] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 192.198852][ T7733] __do_fast_syscall_32+0x13a/0x8b0 [ 192.198877][ T7733] do_fast_syscall_32+0x32/0x70 [ 192.198898][ T7733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.198915][ T7733] RIP: 0023:0xf707efec [ 192.198935][ T7733] Code: Unable to access opcode bytes at 0xf707efc2. [ 192.198942][ T7733] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 192.198959][ T7733] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 192.198969][ T7733] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.198978][ T7733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.198987][ T7733] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.198997][ T7733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.199016][ T7733] [ 192.199192][ T7733] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.205582][ T5797] usb 8-1: USB disconnect, device number 4 [ 192.213030][ T5797] em28xx 8-1:0.0: Disconnecting em28xx [ 192.213251][ T42] em28xx 8-1:0.0: Registering input extension [ 192.213413][ T5797] em28xx 8-1:0.0: Closing input extension [ 192.234346][ T5797] em28xx: Freeing device [ 192.367423][ T7727] 9p: Could not find request transport: uj)x [ 193.359894][ T30] usb usb40-port8: attempt power cycle [ 193.832369][ T7748] tipc: Started in network mode [ 193.832460][ T7748] tipc: Node identity 0010000000000000002, cluster identity 1 [ 193.843127][ T7748] Invalid ELF header magic: != ELF [ 193.849012][ T7748] overlayfs: overlapping lowerdir path [ 193.949420][ T30] usb usb40-port8: unable to enumerate USB device [ 193.968109][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176081][ T968] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 194.182409][ T968] usb 7-1: USB disconnect, device number 9 [ 194.198016][ T968] usblp0: removed [ 194.634718][ T7760] IPVS: ip_vs_add_dest(): server weight less than zero [ 194.668763][ T7761] gfs2: error -5 reading superblock [ 194.779159][ T7762] netlink: 'syz.1.358': attribute type 21 has an invalid length. [ 194.779234][ T7762] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.877631][ T5947] IPVS: starting estimator thread 0... [ 195.005404][ T7763] IPVS: using max 27 ests per chain, 64800 per kthread [ 195.760637][ T7774] jffs2: notice: (7774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.979164][ T7775] overlayfs: failed to resolve './file0': -2 [ 196.279105][ T7782] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 196.292164][ T7782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 196.292775][ T7782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 196.293269][ T7782] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 196.295791][ T7782] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 196.364389][ T7782] pci 0000:00:01.0: Adding to iommu group 1 [ 196.394302][ T7782] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 196.394323][ T7782] pci 0000:00:01.0: vgaarb: bridge control possible [ 196.394336][ T7782] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 196.404777][ T7782] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 196.405160][ T7782] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 196.414992][ T7782] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 196.480189][ T7782] [drm] Found bochs VGA, ID 0xb0c5. [ 196.480207][ T7782] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 196.595188][ T7782] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 197.305882][ T7782] Console: switching to colour frame buffer device 160x50 [ 197.397214][ T7782] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 197.426500][ T7792] tmpfs: Unknown parameter 'h9孱H{dxi80Zl |w?VHC\W4tC|A [ 197.426500][ T7792] 5' [ 197.701823][ T1158] Bluetooth: hci4: Frame reassembly failed (-84) [ 197.702619][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 198.667737][ T7791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.854940][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.860333][ T5745] Bluetooth: hci4: command 0x1003 tx timeout [ 200.130938][ T7812] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 200.131040][ T7812] CPU: 3 UID: 0 PID: 7812 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 200.131056][ T7812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.131063][ T7812] Call Trace: [ 200.131068][ T7812] [ 200.131073][ T7812] dump_stack_lvl+0x100/0x190 [ 200.131154][ T7812] sysfs_warn_dup.cold+0x1c/0x28 [ 200.131173][ T7812] sysfs_create_dir_ns+0x24b/0x2b0 [ 200.131207][ T7812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 200.131220][ T7812] ? find_held_lock+0x2b/0x80 [ 200.131233][ T7812] ? kobject_add_internal+0x25f/0x930 [ 200.131266][ T7812] ? kobject_add_internal+0x25f/0x930 [ 200.131279][ T7812] ? class_dir_child_ns_type+0xd/0x60 [ 200.131299][ T7812] kobject_add_internal+0x2c8/0x930 [ 200.131314][ T7812] kobject_add+0x16a/0x1e0 [ 200.131327][ T7812] ? __pfx_kobject_add+0x10/0x10 [ 200.131341][ T7812] ? get_device_parent+0x1b3/0x4c0 [ 200.131356][ T7812] ? kobject_put+0xb9/0x640 [ 200.131370][ T7812] device_add+0x294/0x1970 [ 200.131386][ T7812] ? lockdep_init_map_type+0x5c/0x250 [ 200.131402][ T7812] ? __pfx_device_add+0x10/0x10 [ 200.131430][ T7812] ? lockdep_init_map_type+0x5c/0x250 [ 200.131446][ T7812] ? __init_waitqueue_head+0xca/0x150 [ 200.131465][ T7812] tty_register_device_attr+0x388/0x7f0 [ 200.131480][ T7812] ? lockdep_init_map_type+0x5c/0x250 [ 200.131499][ T7812] ? __pfx_tty_register_device_attr+0x10/0x10 [ 200.131517][ T7812] ? tty_port_init+0x156/0x1c0 [ 200.131535][ T7812] gsm_activate_mux+0x155/0x2a0 [ 200.131550][ T7812] gsmld_ioctl+0xbbc/0x15c0 [ 200.131570][ T7812] ? __pfx_gsmld_ioctl+0x10/0x10 [ 200.131595][ T7812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.131613][ T7812] ? __pfx_gsmld_ioctl+0x10/0x10 [ 200.131628][ T7812] tty_compat_ioctl+0x396/0x420 [ 200.131642][ T7812] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 200.131669][ T7812] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 200.131688][ T7812] __do_fast_syscall_32+0x13a/0x8b0 [ 200.131707][ T7812] do_fast_syscall_32+0x32/0x70 [ 200.131723][ T7812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.131742][ T7812] RIP: 0023:0xf709efec [ 200.131755][ T7812] Code: Unable to access opcode bytes at 0xf709efc2. [ 200.131760][ T7812] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 200.131771][ T7812] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 200.131779][ T7812] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.131786][ T7812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.131793][ T7812] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.131800][ T7812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.131815][ T7812] [ 200.131887][ T7812] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.420049][ T7816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.371'. [ 200.601195][ T7816] ubi0: attaching mtd0 [ 200.626526][ T7816] ubi0: scanning is finished [ 200.626556][ T7816] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 200.703913][ T7821] UBIFS error (pid: 7821): cannot open "ubi0:testvol", error -19 [ 200.843428][ T7816] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 201.275394][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.425405][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 201.425991][ T30] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 201.430842][ T30] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.430911][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.442465][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.442491][ T30] usb 5-1: Product: syz [ 201.442506][ T30] usb 5-1: Manufacturer: syz [ 201.442519][ T30] usb 5-1: SerialNumber: syz [ 201.461223][ T30] usb 5-1: config 0 descriptor?? [ 201.683213][ C1] ================================================================== [ 201.683229][ C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 201.683252][ C1] Read of size 1 at addr ffff88805d780ce8 by task kworker/1:0/30 [ 201.683270][ C1] [ 201.683279][ C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 201.683299][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.683313][ C1] Workqueue: usb_hub_wq hub_event [ 201.683341][ C1] Call Trace: [ 201.683348][ C1] [ 201.683357][ C1] dump_stack_lvl+0x100/0x190 [ 201.683382][ C1] print_report+0x13d/0x4b0 [ 201.683417][ C1] ? __virt_addr_valid+0x239/0x430 [ 201.683442][ C1] ? find_endpoint+0x2a3/0x2c0 [ 201.683460][ C1] kasan_report+0xdf/0x1c0 [ 201.683484][ C1] ? find_endpoint+0x2a3/0x2c0 [ 201.683504][ C1] find_endpoint+0x2a3/0x2c0 [ 201.683524][ C1] dummy_timer+0x500/0x3700 [ 201.683544][ C1] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 201.683577][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.683603][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 201.683628][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 201.683651][ C1] ? mark_held_locks+0x40/0x70 [ 201.683675][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.683700][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 201.683719][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 201.683744][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 201.683764][ C1] handle_softirqs+0x1e6/0x9d0 [ 201.683790][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 201.683815][ C1] ? _raw_spin_unlock+0x28/0x50 [ 201.683836][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 201.683860][ C1] __irq_exit_rcu+0x16a/0x210 [ 201.683882][ C1] irq_exit_rcu+0x9/0x30 [ 201.683904][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 201.683930][ C1] [ 201.683934][ C1] [ 201.683941][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.683962][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 201.683984][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 201.684003][ C1] RSP: 0018:ffffc90000586db0 EFLAGS: 00000246 [ 201.684020][ C1] RAX: 0000000000000006 RBX: ffff888022598000 RCX: 0000000000000040 [ 201.684031][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 201.684044][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 201.684058][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 201.684084][ C1] R13: ffff888029bf1478 R14: 0000000000000000 R15: ffff888029bf1400 [ 201.684104][ C1] dummy_urb_enqueue+0x56c/0x880 [ 201.684148][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 201.684168][ C1] ? rcu_is_watching+0x13/0xc0 [ 201.684186][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 201.684209][ C1] usb_submit_urb+0x827/0x19b0 [ 201.684231][ C1] imon_probe+0xfb7/0x30a0 [ 201.684263][ C1] usb_probe_interface+0x386/0x9b0 [ 201.684283][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 201.684303][ C1] ? kernfs_put+0x3f/0x60 [ 201.684323][ C1] ? sysfs_create_link+0x68/0xc0 [ 201.684346][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 201.684361][ C1] really_probe+0x241/0xa60 [ 201.684387][ C1] __driver_probe_device+0x210/0x460 [ 201.684414][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.684440][ C1] driver_probe_device+0x4a/0x140 [ 201.684461][ C1] __device_attach_driver+0x1df/0x320 [ 201.684486][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 201.684510][ C1] bus_for_each_drv+0x159/0x1e0 [ 201.684529][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 201.684547][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.684574][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.684601][ C1] __device_attach+0x1e4/0x4d0 [ 201.684625][ C1] ? __pfx___device_attach+0x10/0x10 [ 201.684648][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.684668][ C1] device_initial_probe+0xaf/0xd0 [ 201.684693][ C1] bus_probe_device+0x64/0x160 [ 201.684713][ C1] device_add+0x121d/0x1970 [ 201.684741][ C1] ? __pfx_device_add+0x10/0x10 [ 201.684767][ C1] usb_set_configuration+0xd97/0x1c60 [ 201.684800][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 201.684822][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 201.684844][ C1] usb_probe_device+0xef/0x400 [ 201.684869][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 201.684897][ C1] really_probe+0x241/0xa60 [ 201.684922][ C1] __driver_probe_device+0x210/0x460 [ 201.684946][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.684967][ C1] driver_probe_device+0x4a/0x140 [ 201.684993][ C1] __device_attach_driver+0x1df/0x320 [ 201.685020][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 201.685044][ C1] bus_for_each_drv+0x159/0x1e0 [ 201.685062][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 201.685082][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.685106][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.685133][ C1] __device_attach+0x1e4/0x4d0 [ 201.685154][ C1] ? __pfx___device_attach+0x10/0x10 [ 201.685179][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.685196][ C1] device_initial_probe+0xaf/0xd0 [ 201.685220][ C1] bus_probe_device+0x64/0x160 [ 201.685240][ C1] device_add+0x121d/0x1970 [ 201.685266][ C1] ? __pfx_device_add+0x10/0x10 [ 201.685289][ C1] ? add_device_randomness+0xc9/0x110 [ 201.685313][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 201.685337][ C1] ? do_raw_spin_lock+0x128/0x260 [ 201.685365][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 201.685386][ C1] ? mark_held_locks+0x40/0x70 [ 201.685418][ C1] hub_event.cold+0x1e3/0xe90 [ 201.685442][ C1] ? __pfx_hub_event+0x10/0x10 [ 201.685469][ C1] ? down_read_killable_nested+0x2b0/0x520 [ 201.685488][ C1] ? lock_acquire+0x1d1/0x380 [ 201.685512][ C1] ? process_one_work+0xa2c/0x1b10 [ 201.685532][ C1] ? process_one_work+0x906/0x1b10 [ 201.685554][ C1] ? process_one_work+0x906/0x1b10 [ 201.685574][ C1] process_one_work+0xac7/0x1b10 [ 201.685602][ C1] ? __pfx_process_one_work+0x10/0x10 [ 201.685623][ C1] ? lock_acquire+0x1d1/0x380 [ 201.685649][ C1] ? __pfx_hub_event+0x10/0x10 [ 201.685677][ C1] worker_thread+0x5ef/0xe50 [ 201.685700][ C1] ? kthread+0x13a/0x450 [ 201.685719][ C1] ? __pfx_worker_thread+0x10/0x10 [ 201.685739][ C1] kthread+0x373/0x450 [ 201.685760][ C1] ? __pfx_kthread+0x10/0x10 [ 201.685777][ C1] ret_from_fork+0x730/0xd60 [ 201.685804][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 201.685832][ C1] ? __switch_to+0x800/0x10f0 [ 201.685855][ C1] ? __pfx_kthread+0x10/0x10 [ 201.685876][ C1] ret_from_fork_asm+0x1a/0x30 [ 201.685898][ C1] [ 201.685906][ C1] [ 201.685910][ C1] Allocated by task 7788: [ 201.685919][ C1] kasan_save_stack+0x30/0x50 [ 201.685938][ C1] kasan_save_track+0x14/0x30 [ 201.685956][ C1] __kasan_kmalloc+0xaa/0xb0 [ 201.685976][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 201.686003][ C1] vhost_task_create+0xee/0x370 [ 201.686020][ C1] kvm_mmu_post_init_vm+0x1b3/0x360 [ 201.686039][ C1] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 201.686057][ C1] kvm_vcpu_ioctl+0x730/0x1700 [ 201.686076][ C1] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 201.686095][ C1] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 201.686124][ C1] do_int80_emulation+0x166/0x650 [ 201.686150][ C1] asm_int80_emulation+0x1a/0x20 [ 201.686166][ C1] [ 201.686170][ C1] Freed by task 7788: [ 201.686177][ C1] kasan_save_stack+0x30/0x50 [ 201.686194][ C1] kasan_save_track+0x14/0x30 [ 201.686213][ C1] kasan_save_free_info+0x3b/0x70 [ 201.686238][ C1] __kasan_slab_free+0x5f/0x80 [ 201.686259][ C1] kfree+0x22b/0x6d0 [ 201.686282][ C1] vhost_task_create+0x2ff/0x370 [ 201.686300][ C1] kvm_mmu_post_init_vm+0x1b3/0x360 [ 201.686319][ C1] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 201.686337][ C1] kvm_vcpu_ioctl+0x730/0x1700 [ 201.686358][ C1] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 201.686377][ C1] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 201.686409][ C1] do_int80_emulation+0x166/0x650 [ 201.686437][ C1] asm_int80_emulation+0x1a/0x20 [ 201.686452][ C1] [ 201.686455][ C1] The buggy address belongs to the object at ffff88805d780c00 [ 201.686455][ C1] which belongs to the cache kmalloc-512 of size 512 [ 201.686470][ C1] The buggy address is located 232 bytes inside of [ 201.686470][ C1] freed 512-byte region [ffff88805d780c00, ffff88805d780e00) [ 201.686489][ C1] [ 201.686494][ C1] The buggy address belongs to the physical page: [ 201.686501][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d780800 pfn:0x5d780 [ 201.686519][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 201.686534][ C1] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 201.686550][ C1] page_type: f5(slab) [ 201.686568][ C1] raw: 04fff00000000240 ffff88801c042c80 ffffea00012fb210 ffffea0001389410 [ 201.686583][ C1] raw: ffff88805d780800 0000000000100007 00000000f5000000 0000000000000000 [ 201.686602][ C1] head: 04fff00000000240 ffff88801c042c80 ffffea00012fb210 ffffea0001389410 [ 201.686617][ C1] head: ffff88805d780800 0000000000100007 00000000f5000000 0000000000000000 [ 201.686633][ C1] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 201.686650][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 201.686658][ C1] page dumped because: kasan: bad access detected [ 201.686665][ C1] page_owner tracks the page as allocated [ 201.686670][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7074, tgid 7073 (syz.3.234), ts 145773576985 [ 201.686696][ C1] post_alloc_hook+0xfd/0x120 [ 201.686722][ C1] get_page_from_freelist+0x110d/0x35d0 [ 201.686738][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 201.686756][ C1] new_slab+0xa9/0x6e0 [ 201.686767][ C1] refill_objects+0xe3/0x410 [ 201.686783][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 201.686808][ C1] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 201.686834][ C1] snd_mixer_oss_build_test+0x7a/0x380 [ 201.686856][ C1] snd_mixer_oss_build_test_all+0x2b4/0x6e0 [ 201.686879][ C1] snd_mixer_oss_build_input+0x139/0xd50 [ 201.686902][ C1] snd_mixer_oss_notify_handler+0x48d/0x990 [ 201.686926][ C1] snd_card_register+0x2af/0x760 [ 201.686941][ C1] f_midi2_bind+0x1198/0x2770 [ 201.686965][ C1] usb_add_function+0x219/0x890 [ 201.686980][ C1] configfs_composite_bind+0xd83/0x1960 [ 201.686997][ C1] gadget_bind_driver+0x28c/0xbf0 [ 201.687018][ C1] page last free pid 5739 tgid 5739 ts 138718053915 stack trace: [ 201.687032][ C1] __free_frozen_pages+0x79f/0x10f0 [ 201.687057][ C1] qlist_free_all+0x47/0xf0 [ 201.687076][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 201.687095][ C1] __kasan_slab_alloc+0x69/0x90 [ 201.687115][ C1] __kmalloc_noprof+0x2cc/0x840 [ 201.687134][ C1] tomoyo_encode2+0xfb/0x3c0 [ 201.687150][ C1] tomoyo_encode+0x29/0x50 [ 201.687166][ C1] tomoyo_realpath_from_path+0x18c/0x690 [ 201.687182][ C1] tomoyo_path_perm+0x276/0x460 [ 201.687205][ C1] tomoyo_path_symlink+0x97/0xe0 [ 201.687222][ C1] security_path_symlink+0x152/0x2d0 [ 201.687243][ C1] filename_symlinkat+0x122/0x560 [ 201.687266][ C1] __x64_sys_symlink+0x79/0xb0 [ 201.687287][ C1] do_syscall_64+0x121/0x770 [ 201.687309][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.687326][ C1] [ 201.687331][ C1] Memory state around the buggy address: [ 201.687340][ C1] ffff88805d780b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.687352][ C1] ffff88805d780c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.687362][ C1] >ffff88805d780c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.687369][ C1] ^ [ 201.687379][ C1] ffff88805d780d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.687397][ C1] ffff88805d780d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.687406][ C1] ================================================================== [ 201.687415][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.156043][ C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 202.159788][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.164062][ C1] Workqueue: usb_hub_wq hub_event [ 202.166236][ C1] Call Trace: [ 202.167654][ C1] [ 202.168903][ C1] dump_stack_lvl+0x100/0x190 [ 202.170928][ C1] vpanic+0x553/0x970 [ 202.172676][ C1] ? __pfx_vpanic+0x10/0x10 [ 202.174626][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 202.176818][ C1] ? find_endpoint+0x2a3/0x2c0 [ 202.178864][ C1] panic+0xd1/0xe0 [ 202.180482][ C1] ? __pfx_panic+0x10/0x10 [ 202.182365][ C1] ? end_report.part.0+0x23/0x90 [ 202.184466][ C1] ? rcu_is_watching+0x13/0xc0 [ 202.186536][ C1] ? end_report.part.0+0x23/0x90 [ 202.188661][ C1] check_panic_on_warn.cold+0x19/0x34 [ 202.190917][ C1] end_report.part.0+0x3a/0x90 [ 202.193012][ C1] kasan_report.cold+0xe/0x18 [ 202.195046][ C1] ? find_endpoint+0x2a3/0x2c0 [ 202.197151][ C1] find_endpoint+0x2a3/0x2c0 [ 202.199073][ C1] dummy_timer+0x500/0x3700 [ 202.200994][ C1] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 202.203885][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.206629][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 202.209266][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 202.211311][ C1] ? mark_held_locks+0x40/0x70 [ 202.213189][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.215458][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 202.217590][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 202.219775][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 202.221953][ C1] handle_softirqs+0x1e6/0x9d0 [ 202.224011][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 202.226223][ C1] ? _raw_spin_unlock+0x28/0x50 [ 202.228331][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 202.230747][ C1] __irq_exit_rcu+0x16a/0x210 [ 202.232861][ C1] irq_exit_rcu+0x9/0x30 [ 202.234825][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 202.237311][ C1] [ 202.238585][ C1] [ 202.239892][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.242223][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 202.244782][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 202.252893][ C1] RSP: 0018:ffffc90000586db0 EFLAGS: 00000246 [ 202.255566][ C1] RAX: 0000000000000006 RBX: ffff888022598000 RCX: 0000000000000040 [ 202.258896][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 202.262300][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 202.265805][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 202.269142][ C1] R13: ffff888029bf1478 R14: 0000000000000000 R15: ffff888029bf1400 [ 202.272490][ C1] dummy_urb_enqueue+0x56c/0x880 [ 202.274580][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 202.276771][ C1] ? rcu_is_watching+0x13/0xc0 [ 202.278750][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 202.280739][ C1] usb_submit_urb+0x827/0x19b0 [ 202.282530][ C1] imon_probe+0xfb7/0x30a0 [ 202.284449][ C1] usb_probe_interface+0x386/0x9b0 [ 202.286575][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 202.289047][ C1] ? kernfs_put+0x3f/0x60 [ 202.290892][ C1] ? sysfs_create_link+0x68/0xc0 [ 202.293009][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 202.295602][ C1] really_probe+0x241/0xa60 [ 202.298117][ C1] __driver_probe_device+0x210/0x460 [ 202.300751][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.303235][ C1] driver_probe_device+0x4a/0x140 [ 202.305412][ C1] __device_attach_driver+0x1df/0x320 [ 202.307757][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 202.310257][ C1] bus_for_each_drv+0x159/0x1e0 [ 202.312340][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 202.314477][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.316720][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.319243][ C1] __device_attach+0x1e4/0x4d0 [ 202.321544][ C1] ? __pfx___device_attach+0x10/0x10 [ 202.324210][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 202.326718][ C1] device_initial_probe+0xaf/0xd0 [ 202.328896][ C1] bus_probe_device+0x64/0x160 [ 202.330617][ C1] device_add+0x121d/0x1970 [ 202.332536][ C1] ? __pfx_device_add+0x10/0x10 [ 202.334601][ C1] usb_set_configuration+0xd97/0x1c60 [ 202.336858][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 202.339379][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 202.341628][ C1] usb_probe_device+0xef/0x400 [ 202.343678][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 202.346003][ C1] really_probe+0x241/0xa60 [ 202.347906][ C1] __driver_probe_device+0x210/0x460 [ 202.350181][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.352680][ C1] driver_probe_device+0x4a/0x140 [ 202.354827][ C1] __device_attach_driver+0x1df/0x320 [ 202.356953][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 202.359406][ C1] bus_for_each_drv+0x159/0x1e0 [ 202.361520][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 202.363751][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.366012][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.368449][ C1] __device_attach+0x1e4/0x4d0 [ 202.370550][ C1] ? __pfx___device_attach+0x10/0x10 [ 202.372892][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 202.375103][ C1] device_initial_probe+0xaf/0xd0 [ 202.376927][ C1] bus_probe_device+0x64/0x160 [ 202.378488][ C1] device_add+0x121d/0x1970 [ 202.379818][ C1] ? __pfx_device_add+0x10/0x10 [ 202.381516][ C1] ? add_device_randomness+0xc9/0x110 [ 202.383434][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 202.385281][ C1] ? do_raw_spin_lock+0x128/0x260 [ 202.386993][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 202.388896][ C1] ? mark_held_locks+0x40/0x70 [ 202.390494][ C1] hub_event.cold+0x1e3/0xe90 [ 202.392098][ C1] ? __pfx_hub_event+0x10/0x10 [ 202.393839][ C1] ? down_read_killable_nested+0x2b0/0x520 [ 202.395768][ C1] ? lock_acquire+0x1d1/0x380 [ 202.397558][ C1] ? process_one_work+0xa2c/0x1b10 [ 202.399267][ C1] ? process_one_work+0x906/0x1b10 [ 202.400970][ C1] ? process_one_work+0x906/0x1b10 [ 202.402661][ C1] process_one_work+0xac7/0x1b10 [ 202.404484][ C1] ? __pfx_process_one_work+0x10/0x10 [ 202.406387][ C1] ? lock_acquire+0x1d1/0x380 [ 202.408307][ C1] ? __pfx_hub_event+0x10/0x10 [ 202.410085][ C1] worker_thread+0x5ef/0xe50 [ 202.412021][ C1] ? kthread+0x13a/0x450 [ 202.413620][ C1] ? __pfx_worker_thread+0x10/0x10 [ 202.415452][ C1] kthread+0x373/0x450 [ 202.416944][ C1] ? __pfx_kthread+0x10/0x10 [ 202.418783][ C1] ret_from_fork+0x730/0xd60 [ 202.420499][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 202.422679][ C1] ? __switch_to+0x800/0x10f0 [ 202.424714][ C1] ? __pfx_kthread+0x10/0x10 [ 202.426774][ C1] ret_from_fork_asm+0x1a/0x30 [ 202.428946][ C1] [ 202.431135][ C1] Kernel Offset: disabled [ 202.433068][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:09:29 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff91f9a626 RBX=ffffffff916a1b48 RCX=dffffc0000000000 RDX=1ffffffff22d4369 RSI=0000000000000000 RDI=ffffffff916a1b48 RBP=ffffffff916a1b48 RSP=ffffc9000375f0e0 R8 =ffffffff91f9a62c R9 =0000000000000007 R10=0000000000000200 R11=0000000000019b5a R12=ffffffff916a1b48 R13=ffffffff829b5a41 R14=ffffffff916a1b48 R15=ffffffff916a1b48 RIP=ffffffff81b93a20 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005f75b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc900005a03c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=000000000000000a R15=ffffc900005a06e0 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033718ff8 CR3=00000000268c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003e0c9d RBX=ffff88801cf0a580 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed10039e14b0 RSP=ffffc9000048fdd8 R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff810014f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72efa5c CR3=0000000024959000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff800000000000 RBX=ffff88802b528500 RCX=ffffffff81e70a29 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88802b528500 RBP=ffff88802b528500 RSP=ffffc900005f8e48 R8 =0000000000000001 R9 =0000000000000071 R10=ffff88802b528503 R11=0000000000000000 R12=1ffff920000bf1ce R13=ffff88802b528510 R14=ffff88802b528500 R15=0000000000000000 RIP=ffffffff827d9b7c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000024959000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000