last executing test programs: 8.364856124s ago: executing program 3 (id=603): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x16e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000340)="723a732f70202e2f66696c65303a300c5f8d", 0x12) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) 7.754702214s ago: executing program 3 (id=604): openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x300, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1002130, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0xbf, 0x2000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000480)=""/59) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = userfaultfd(0x801) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1be}) mmap(&(0x7f00001a7000/0x3000)=nil, 0x3000, 0x2, 0x110, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0xfffffe40) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000600)=@mmap={0x401, 0x2, 0x4, 0x80, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x400}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000000180)=0xc2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r7 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x4}}, 0x4) 6.83413491s ago: executing program 3 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e7183492e", 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)="310a0000000000dbfb239d4626adee58fd754d323afc7b2736ee85757271dc7ae4b98aabaf55146547cfc59abe3efec26a7b3f2f2bc29baf7919e5c0646c889b14b3adb8dbd6e3d08ba3fa0f98168f27810f97edb89937bcb0943a0004cb0508e65cb5c49bbaeb3b7d7faa89c8538e3f469d3e86db9e3e785f8a7da23b55abd9d0d4993407125f74a74b320ec0e7cf127fbf9b0000000000", 0xd9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) 6.648032041s ago: executing program 2 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0x55) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x4, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 6.491612264s ago: executing program 0 (id=609): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x16e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, 0x0, 0x0) 6.268014543s ago: executing program 2 (id=610): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r2, r2, 0x0, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010000000000000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', 'dir0/tracing_on/file0', [], 0xa, "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"}, 0xfd7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x5) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') read$FUSE(r5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905", @ANYRES16, @ANYRESHEX], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x541b, 0x0) 5.955062896s ago: executing program 0 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$nl_generic(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r6) 5.59931585s ago: executing program 3 (id=612): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x5555555555553bb, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c0001000400"], 0x114}], 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r7, &(0x7f0000000140)='\x00\x00', 0x2) openat(r7, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7ff, &(0x7f0000000040)) 5.425997101s ago: executing program 1 (id=613): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x16e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000340)="723a732f70202e2f66696c65303a300c5f8d", 0x12) socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) 5.289610608s ago: executing program 1 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000300)=0xa90) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x1c0014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef006", 0xb4) r8 = fcntl$dupfd(r0, 0x0, r7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRES16=r8, @ANYRES8=r7, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) 4.661235185s ago: executing program 0 (id=615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0xba, 0x1, 0x12, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x1, 0x40, 0x80000000, 0xff}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40800) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1000, 0x200}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x44180, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r9, 0x1, 0x10000000000009, &(0x7f0000000200)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={r12, 0x4, 0x8ff, 0x5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000380)={r12, 0x3}, &(0x7f00000003c0)=0x8) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r13}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) 3.929349517s ago: executing program 1 (id=616): write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) 3.713577543s ago: executing program 1 (id=617): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) r10 = openat$cgroup(r9, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0xffffff64) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r14, 0x1, 0x1, 0x1, 0x0, 0x0) syz_ublk_setup_queues(r13, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0xd9, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.992780646s ago: executing program 0 (id=618): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd2c, 0x80000002, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000df2502100000fc00fe070015000006001500060000000c0016800500040002000000"], 0x30}}, 0x40044) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x16) r6 = openat$nmem0(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) accept4$alg(r6, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) 2.756386816s ago: executing program 1 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) recvmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r6) 1.924516567s ago: executing program 2 (id=620): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x16e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000340), 0x0) 1.68505651s ago: executing program 2 (id=621): socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x61) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) sendto$llc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40085) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[], 0x6c}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @remote, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setrlimit(0x0, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000), 0x0, 0x2200) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './dev/sda1'}, 0xe) 1.502122611s ago: executing program 3 (id=622): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x16e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000340)="723a732f70202e2f66696c65303a300c5f8d", 0x12) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) 1.474824458s ago: executing program 3 (id=623): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000370000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x15c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x45, 0x255, 0x0, r12}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad54, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0x0, 0x1ae, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c00, 0x200, 0x0, 0x326, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c10, 0x992, 0x40002, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x53, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r9, '\x00', {0xfef6, 0x0, 0x0, 0x0}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x3acd, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, 0x0, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r13, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 1.308054301s ago: executing program 2 (id=624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000300)=0xa90) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x1c0014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef006", 0xb4) r9 = fcntl$dupfd(r0, 0x0, r8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r9, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r7, @ANYRES16=r9, @ANYRES8=r8, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) 1.083563583s ago: executing program 0 (id=625): write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) 270.729869ms ago: executing program 1 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000300)=0xa90) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x1c0014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef006", 0xb4) r9 = fcntl$dupfd(r0, 0x0, r8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r9, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r7, @ANYRES16=r9, @ANYRES8=r8, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) 96.996053ms ago: executing program 0 (id=627): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_ublk_setup_io_uring(0x2333, &(0x7f0000000240)={0x0, 0xb61f, 0x1000, 0x3, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r2, 0x8b5, 0x1, 0x5, 0xe, 0x0, {0x0, 0x0, r2}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x653}}}, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x5, 0x0, &(0x7f00000000c0)) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe57c, 0x0, 0x10000000, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x40000, 0x1, 0x287, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x3bc, 0x0, r7}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 2 (id=628): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r2, r2, 0x0, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010000000000000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', 'dir0/tracing_on/file0', [], 0xa, "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"}, 0xfd7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x5) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') read$FUSE(r5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905", @ANYRES16, @ANYRESHEX], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x541b, 0x0) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.0.256'. [ 207.584083][ T7268] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 207.584093][ T7268] netlink: 29 bytes leftover after parsing attributes in process `syz.0.256'. [ 207.642111][ T7267] netlink: 128 bytes leftover after parsing attributes in process `syz.0.256'. [ 207.725620][ T5888] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 207.976017][ T5888] usb 8-1: Using ep0 maxpacket: 8 [ 207.983194][ T5888] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 208.065399][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.065423][ T5888] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.065451][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.171409][ T5888] usb 8-1: config 0 descriptor?? [ 208.851178][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 208.851197][ T43] audit: type=1800 audit(1789436229.094:569): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122234 res=0 errno=0 [ 208.878845][ T43] audit: type=1800 audit(1789436229.094:570): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122246 res=0 errno=0 [ 208.894928][ T43] audit: type=1800 audit(1789436229.094:571): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122258 res=0 errno=0 [ 209.194877][ T43] audit: type=1800 audit(1789436229.394:572): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 209.421000][ T6137] usb 38-1: device descriptor read/8, error -110 [ 209.769048][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.2.259'. [ 209.839647][ T6137] usb usb38-port1: attempt power cycle [ 209.840903][ T1167] IPVS: starting estimator thread 0... [ 210.018822][ T7300] IPVS: using max 29 ests per chain, 69600 per kthread [ 210.666163][ T43] audit: type=1800 audit(1789436230.904:573): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.258" name="bus" dev="ramfs" ino=15632 res=0 errno=0 [ 210.681286][ T43] audit: type=1800 audit(1789436230.904:574): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 210.880273][ T43] audit: type=1800 audit(1789436231.124:575): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 210.946657][ T6137] usb usb38-port1: unable to enumerate USB device [ 211.031497][ T43] audit: type=1800 audit(1789436231.254:576): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122270 res=0 errno=0 [ 211.183465][ T43] audit: type=1800 audit(1789436231.424:577): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.261" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.288535][ T43] audit: type=1800 audit(1789436231.524:578): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 211.290761][ T7308] random: crng reseeded on system resumption [ 212.382913][ T7318] random: crng reseeded on system resumption [ 214.014931][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 214.014947][ T43] audit: type=1800 audit(1789436234.244:582): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 214.188401][ T7337] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 214.188424][ T7337] netlink: 200 bytes leftover after parsing attributes in process `syz.1.267'. [ 214.188438][ T7337] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 214.188447][ T7337] netlink: 29 bytes leftover after parsing attributes in process `syz.1.267'. [ 214.258443][ T7338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.267'. [ 214.287292][ T43] audit: type=1800 audit(1789436234.504:583): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122385 res=0 errno=0 [ 214.287339][ T43] audit: type=1800 audit(1789436234.504:584): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=122389 res=0 errno=0 [ 214.381169][ T43] audit: type=1800 audit(1789436234.584:585): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122468 res=0 errno=0 [ 214.489883][ T43] audit: type=1800 audit(1789436234.734:586): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122478 res=0 errno=0 [ 214.538185][ T7327] syzkaller0: entered promiscuous mode [ 214.538209][ T7327] syzkaller0: entered allmulticast mode [ 216.670258][ T7355] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 216.843779][ T7355] tipc: Started in network mode [ 216.843809][ T7355] tipc: Node identity 7f000001, cluster identity 4711 [ 216.929170][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.929535][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.939915][ T7355] tipc: New replicast peer: 0.0.0.0 [ 216.941131][ T7355] tipc: Enabled bearer , priority 10 [ 217.031931][ T43] audit: type=1800 audit(1789436237.254:587): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 217.275741][ T7361] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 217.757511][ T43] audit: type=1800 audit(1789436238.004:588): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 217.979458][ T1684] tipc: Node number set to 2130706433 [ 218.304253][ T43] audit: type=1800 audit(1789436238.434:589): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 218.347464][ T7263] Set syz1 is full, maxelem 65536 reached [ 218.390802][ T1684] usb 8-1: USB disconnect, device number 5 [ 218.516303][ T43] audit: type=1800 audit(1789436238.744:590): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 218.649264][ T43] audit: type=1800 audit(1789436238.894:591): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122589 res=0 errno=0 [ 218.835279][ T7380] random: crng reseeded on system resumption [ 219.294564][ T43] audit: type=1800 audit(1789436239.494:592): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 219.552422][ T43] audit: type=1800 audit(1789436239.784:593): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.275" name="b_vendor_code" dev="configfs" ino=17055 res=0 errno=0 [ 219.555170][ T43] audit: type=1800 audit(1789436239.784:594): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 219.598560][ T43] audit: type=1800 audit(1789436239.784:595): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.274" name="attach" dev="sysfs" ino=36174 res=0 errno=0 [ 219.641957][ T7391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 219.641983][ T7391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.642119][ T7391] vhci_hcd vhci_hcd.0: Device attached [ 219.648839][ T43] audit: type=1800 audit(1789436239.874:596): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122608 res=0 errno=0 [ 219.754759][ T43] audit: type=1800 audit(1789436239.944:597): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122627 res=0 errno=0 [ 219.811315][ T43] audit: type=1800 audit(1789436240.034:598): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122639 res=0 errno=0 [ 219.891501][ T7396] bond0: Error: CAN devices cannot be enslaved [ 219.935382][ T43] audit: type=1800 audit(1789436240.154:599): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 219.937085][ T43] audit: type=1800 audit(1789436240.184:600): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122651 res=0 errno=0 [ 220.067505][ T5949] usb 38-1: SetAddress Request (6) to port 0 [ 220.067565][ T5949] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 220.101512][ T43] audit: type=1800 audit(1789436240.314:601): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=122671 res=0 errno=0 [ 220.161972][ T7400] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 220.161993][ T7400] netlink: 200 bytes leftover after parsing attributes in process `syz.3.278'. [ 220.162014][ T7400] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 220.162024][ T7400] netlink: 29 bytes leftover after parsing attributes in process `syz.3.278'. [ 220.168149][ T7400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.278'. [ 220.252654][ T7392] vhci_hcd: connection reset by peer [ 220.253216][ T12] vhci_hcd vhci_hcd.0: stop threads [ 220.253243][ T12] vhci_hcd vhci_hcd.0: release socket [ 220.253292][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 220.296003][ T5888] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 220.478803][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 220.479928][ T5888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.485548][ T5888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.485575][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.485662][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.485681][ T5888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.485713][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.802955][ T5888] usb 7-1: GET_CAPABILITIES returned 0 [ 220.802999][ T5888] usbtmc 7-1:16.0: can't read capabilities [ 221.021096][ T7395] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 221.021120][ T7395] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 221.116008][ T1684] usb 7-1: USB disconnect, device number 9 [ 221.721806][ T7418] jffs2: notice: (7418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.189790][ T7436] lo speed is unknown, defaulting to 1000 [ 224.427196][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 224.427219][ T43] audit: type=1800 audit(1789436244.414:616): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 225.132203][ T7445] xt_connbytes: Forcing CT accounting to be enabled [ 225.137038][ T7445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.175873][ T43] audit: type=1800 audit(1789436245.394:617): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123702 res=0 errno=0 [ 225.177826][ T76] libceph: connect (1)[c::]:6789 error -101 [ 225.183726][ T76] libceph: mon0 (1)[c::]:6789 connect error [ 225.227433][ T7445] ceph: No mds server is up or the cluster is laggy [ 225.237610][ T5949] usb 38-1: device descriptor read/8, error -110 [ 225.436150][ T76] libceph: connect (1)[c::]:6789 error -101 [ 225.436385][ T76] libceph: mon0 (1)[c::]:6789 connect error [ 225.785975][ T5949] usb usb38-port1: attempt power cycle [ 225.877325][ T43] audit: type=1800 audit(1789436246.094:618): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123721 res=0 errno=0 [ 225.992670][ T7454] random: crng reseeded on system resumption [ 226.480545][ T5949] usb usb38-port1: unable to enumerate USB device [ 226.651199][ T43] audit: type=1800 audit(1789436246.774:619): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 228.549048][ T7467] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 228.549068][ T7467] netlink: 200 bytes leftover after parsing attributes in process `syz.0.288'. [ 228.549080][ T7467] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 228.549091][ T7467] netlink: 29 bytes leftover after parsing attributes in process `syz.0.288'. [ 228.621685][ T7467] netlink: 128 bytes leftover after parsing attributes in process `syz.0.288'. [ 228.631541][ T43] audit: type=1800 audit(1789436248.844:620): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123740 res=0 errno=0 [ 228.674777][ T43] audit: type=1800 audit(1789436248.914:621): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=123744 res=0 errno=0 [ 229.243712][ T43] audit: type=1800 audit(1789436249.484:622): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 229.332972][ T7476] pim6reg: entered allmulticast mode [ 229.374587][ T43] audit: type=1800 audit(1789436249.584:623): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123823 res=0 errno=0 [ 229.883278][ T43] audit: type=1800 audit(1789436250.094:624): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 230.880786][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 232.144438][ T7476] pim6reg: left allmulticast mode [ 232.994793][ T43] audit: type=1800 audit(1789436253.174:625): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 233.238628][ T43] audit: type=1800 audit(1789436253.474:626): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.293" name="dbroot" dev="configfs" ino=17865 res=0 errno=0 [ 233.340887][ T43] audit: type=1800 audit(1789436253.544:627): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123959 res=0 errno=0 [ 233.535279][ T7506] db_root: cannot open: ./my_ [ 233.632663][ T43] audit: type=1800 audit(1789436253.834:628): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 233.798740][ T7510] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 234.251866][ T43] audit: type=1800 audit(1789436254.474:629): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.294" name="attach" dev="sysfs" ino=36174 res=0 errno=0 [ 234.416119][ T7515] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 234.416151][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.448866][ T7515] vhci_hcd vhci_hcd.0: Device attached [ 234.716383][ T1684] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 234.819570][ T7513] syzkaller1: entered promiscuous mode [ 234.819593][ T7513] syzkaller1: entered allmulticast mode [ 234.858461][ T7519] vhci_hcd: connection reset by peer [ 234.950193][ T7250] vhci_hcd vhci_hcd.3: stop threads [ 234.950222][ T7250] vhci_hcd vhci_hcd.3: release socket [ 234.950268][ T7250] vhci_hcd vhci_hcd.3: disconnect device [ 235.465070][ T43] audit: type=1800 audit(1789436255.704:630): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 235.465117][ T43] audit: type=1800 audit(1789436255.704:631): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25889 res=0 errno=0 [ 235.726593][ T43] audit: type=1800 audit(1789436255.924:632): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 235.902855][ T43] audit: type=1800 audit(1789436256.054:633): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26015 res=0 errno=0 [ 235.906238][ T43] audit: type=1800 audit(1789436256.104:634): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26202 res=0 errno=0 [ 235.975657][ T7533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.975806][ T7533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.982803][ T7533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.900177][ T7545] sctp_transport_update_pmtu: 107 callbacks suppressed [ 236.900244][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.901005][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.901348][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 236.901713][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.057951][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.081651][ T43] audit: type=1800 audit(1789436257.294:635): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="wakeup_count" dev="sysfs" ino=580 res=0 errno=0 [ 237.089574][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.090104][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.107237][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.107683][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.108088][ T7545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.039169][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.039212][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.039236][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.314755][ T43] audit: type=1804 audit(1789436259.504:636): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.298" name="/newroot/74/bus" dev="tmpfs" ino=440 res=1 errno=0 [ 239.430505][ T43] audit: type=1800 audit(1789436259.654:637): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 239.804971][ T7570] syzkaller0: entered promiscuous mode [ 239.805046][ T7570] syzkaller0: entered allmulticast mode [ 239.865510][ T1684] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 239.867378][ T7570] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.698402][ T43] audit: type=1800 audit(1789436260.914:638): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124206 res=0 errno=0 [ 240.730418][ T43] audit: type=1800 audit(1789436260.914:639): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=124210 res=0 errno=0 [ 240.775065][ T7581] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 240.775087][ T7581] netlink: 200 bytes leftover after parsing attributes in process `syz.0.301'. [ 240.775100][ T7581] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 240.775111][ T7581] netlink: 29 bytes leftover after parsing attributes in process `syz.0.301'. [ 240.779052][ T7581] netlink: 128 bytes leftover after parsing attributes in process `syz.0.301'. [ 241.048466][ T43] audit: type=1800 audit(1789436261.294:640): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 241.245257][ T43] audit: type=1800 audit(1789436261.484:641): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 241.441687][ T43] audit: type=1800 audit(1789436261.624:642): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.303" name="file1" dev="overlay" ino=458 res=0 errno=0 [ 241.484711][ T7593] evm: overlay not supported [ 241.723521][ T7561] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 241.905419][ T43] audit: type=1800 audit(1789436262.134:643): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 241.933902][ T76] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 242.007825][ T7601] jffs2: notice: (7601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.204054][ T76] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 242.205460][ T76] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 242.205505][ T76] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024 [ 242.205524][ T76] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 242.205604][ T76] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.208028][ T76] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 242.208049][ T76] usb 7-1: Product: syz [ 242.208062][ T76] usb 7-1: Manufacturer: syz [ 242.236584][ T7590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.238889][ T76] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 242.241958][ T43] audit: type=1800 audit(1789436262.454:644): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124326 res=0 errno=0 [ 242.244223][ T43] audit: type=1800 audit(1789436262.454:645): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=124357 res=0 errno=0 [ 242.244266][ T43] audit: type=1800 audit(1789436262.454:646): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=124333 res=0 errno=0 [ 242.244298][ T43] audit: type=1800 audit(1789436262.454:647): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=124334 res=0 errno=0 [ 242.406907][ T7601] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.421847][ T76] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 242.687405][ T7590] uhci_hcd 0000:00:1d.0: remove, state 4 [ 242.687786][ T7590] usb usb2: USB disconnect, device number 1 [ 242.988374][ T7590] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 243.107272][ T7590] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 243.166260][ T7590] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 243.562238][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.307'. [ 244.052156][ T153] IPVS: starting estimator thread 0... [ 244.271325][ T1684] usb 7-1: USB disconnect, device number 10 [ 244.327433][ T7622] IPVS: using max 32 ests per chain, 76800 per kthread [ 244.541779][ T1684] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 244.561836][ T1684] garmin_gps 7-1:1.0: device disconnected [ 246.138651][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 246.138670][ T43] audit: type=1800 audit(1789436266.374:667): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 246.310717][ T7644] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 246.310741][ T7644] netlink: 200 bytes leftover after parsing attributes in process `syz.0.313'. [ 246.310802][ T7644] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 246.310814][ T7644] netlink: 29 bytes leftover after parsing attributes in process `syz.0.313'. [ 246.346846][ T43] audit: type=1800 audit(1789436266.574:668): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124608 res=0 errno=0 [ 246.350443][ T43] audit: type=1800 audit(1789436266.574:669): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=124612 res=0 errno=0 [ 246.580360][ T7650] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 246.581958][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 246.588125][ T43] audit: type=1800 audit(1789436266.804:670): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124691 res=0 errno=0 [ 247.712987][ T43] audit: type=1800 audit(1789436267.944:671): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 248.378230][ T7653] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 248.378253][ T7653] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 248.432804][ T7653] netlink: Conntrack attr has 8 unknown bytes [ 248.432832][ T7653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.843734][ T43] audit: type=1800 audit(1789436269.054:672): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124753 res=0 errno=0 [ 249.726619][ C2] hpet: Lost 1 RTC interrupts [ 250.263560][ C2] hpet: Lost 1 RTC interrupts [ 250.666673][ C2] hpet: Lost 2 RTC interrupts [ 250.786845][ C2] hpet: Lost 3 RTC interrupts [ 251.297007][ T43] audit: type=1800 audit(1789436271.454:673): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 251.438514][ C2] hpet: Lost 1 RTC interrupts [ 251.490472][ C2] hpet: Lost 1 RTC interrupts [ 251.575108][ C2] hpet: Lost 1 RTC interrupts [ 251.642593][ C2] hpet: Lost 1 RTC interrupts [ 251.942882][ T43] audit: type=1800 audit(1789436272.164:674): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 252.010539][ C2] hpet: Lost 1 RTC interrupts [ 252.281043][ T7684] tipc: Started in network mode [ 252.281073][ T7684] tipc: Node identity 7f000001, cluster identity 4711 [ 252.281270][ T7684] tipc: New replicast peer: 0.0.0.0 [ 252.282134][ T7684] tipc: Enabled bearer , priority 10 [ 252.671830][ C2] hpet: Lost 1 RTC interrupts [ 252.721109][ C2] hpet: Lost 1 RTC interrupts [ 252.923456][ T43] audit: type=1800 audit(1789436273.114:675): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 253.357640][ T1684] tipc: Node number set to 2130706433 [ 253.695449][ T7705] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 254.011174][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 255.416023][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.015567][ T5817] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 256.377777][ T5817] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 256.405212][ C2] hpet_rtc_timer_reinit: 26 callbacks suppressed [ 256.405233][ C2] hpet: Lost 1 RTC interrupts [ 256.498893][ C2] hpet: Lost 1 RTC interrupts [ 256.532236][ C2] hpet: Lost 1 RTC interrupts [ 256.568562][ T7730] 9p: Bad value for 'rfdno' [ 256.600146][ C2] hpet: Lost 1 RTC interrupts [ 256.695694][ T43] audit: type=1800 audit(1789436276.754:681): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="compressor" dev="sysfs" ino=58003 res=0 errno=0 [ 256.695756][ T43] audit: type=1800 audit(1789436276.834:682): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="remove" dev="sysfs" ino=116254 res=0 errno=0 [ 256.757726][ T7730] Console: switching to colour dummy device 80x25 [ 256.825470][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.869333][ T43] audit: type=1800 audit(1789436277.104:683): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 256.872065][ T5817] usb 8-1: config 0 descriptor?? [ 256.948214][ T43] audit: type=1800 audit(1789436277.154:684): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124931 res=0 errno=0 [ 256.951509][ T43] audit: type=1800 audit(1789436277.154:685): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=124960 res=0 errno=0 [ 256.987549][ T43] audit: type=1800 audit(1789436277.234:686): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=124938 res=0 errno=0 [ 257.123423][ T7729] zswap: compressor z not available [ 257.199333][ T7720] batman_adv: batadv0: Adding interface: macvtap1 [ 257.199352][ T7720] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.199450][ T7720] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 258.391586][ T7741] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 258.409164][ T7720] batman_adv: batadv0: Removing interface: macvtap1 [ 258.559478][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.333459][ T5817] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 259.339969][ T5817] [drm:udl_init] *ERROR* Selecting channel failed [ 259.391194][ T5817] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 259.391550][ T5817] [drm] Initialized udl on minor 2 [ 259.410562][ T5817] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 259.423770][ T5817] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 259.436706][ T5817] usb 8-1: USB disconnect, device number 6 [ 259.578496][ T7751] tipc: Cannot configure node identity twice [ 259.579766][ T7751] tipc: Enabled bearer , priority 1 [ 260.315029][ T7751] tipc: Resetting bearer [ 260.330080][ T7757] Bluetooth: MGMT ver 1.23 [ 260.492311][ T7757] gadgetfs: bound to dummy_udc driver [ 260.704308][ T7751] tipc: Disabling bearer [ 260.748574][ T6137] tipc: Node number set to 2990658584 [ 260.825648][ T76] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 260.825902][ C0] gadgetfs: connected [ 260.826081][ T76] gadgetfs: disconnected [ 261.088575][ C0] gadgetfs: connected [ 261.091770][ T76] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 261.095608][ T76] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.100747][ C0] gadgetfs: configuration #1 [ 261.166822][ T76] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input13 [ 261.415024][ T7756] gadgetfs: suspended from state 3 [ 261.415074][ T7756] gadgetfs: disconnected [ 261.417752][ T76] usb 6-1: USB disconnect, device number 10 [ 261.417882][ C0] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 261.444592][ C2] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 261.444615][ C2] hpet: Lost 1 RTC interrupts [ 261.486617][ C2] hpet: Lost 2 RTC interrupts [ 261.538182][ C2] hpet: Lost 1 RTC interrupts [ 261.559640][ T43] audit: type=1800 audit(1789436281.684:699): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125370 res=0 errno=0 [ 261.559861][ T43] audit: type=1800 audit(1789436281.684:700): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=125386 res=0 errno=0 [ 261.560036][ T43] audit: type=1800 audit(1789436281.684:701): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=125389 res=0 errno=0 [ 261.627553][ C2] hpet: Lost 1 RTC interrupts [ 261.666420][ T43] audit: type=1800 audit(1789436281.864:702): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=125388 res=0 errno=0 [ 261.666526][ T43] audit: type=1800 audit(1789436281.864:703): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=125387 res=0 errno=0 [ 261.666558][ T43] audit: type=1800 audit(1789436281.864:704): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=125378 res=0 errno=0 [ 262.509852][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 263.352056][ T7770] trusted_key: syz.0.340 sent an empty control message without MSG_MORE. [ 263.842371][ T7775] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 263.842453][ T7775] netlink: 200 bytes leftover after parsing attributes in process `syz.3.342'. [ 263.842467][ T7775] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 263.842478][ T7775] netlink: 29 bytes leftover after parsing attributes in process `syz.3.342'. [ 263.848928][ T7775] netlink: 128 bytes leftover after parsing attributes in process `syz.3.342'. [ 266.377106][ T7802] netlink: 88 bytes leftover after parsing attributes in process `syz.2.345'. [ 266.754634][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 266.754653][ T43] audit: type=1800 audit(1789436286.954:722): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 266.942407][ C2] hpet: Lost 1 RTC interrupts [ 267.104415][ C2] hpet: Lost 1 RTC interrupts [ 267.449036][ C2] hpet: Lost 2 RTC interrupts [ 267.495347][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 267.506098][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 267.530429][ C2] hpet: Lost 1 RTC interrupts [ 267.652291][ C2] hpet: Lost 1 RTC interrupts [ 267.682513][ C2] hpet: Lost 1 RTC interrupts [ 267.877553][ C2] hpet: Lost 1 RTC interrupts [ 268.098390][ C2] hpet: Lost 3 RTC interrupts [ 268.124953][ T43] audit: type=1800 audit(1789436288.324:723): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 270.425114][ T7847] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 270.425140][ T7847] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 270.425151][ T7847] PKCS7: Unsupported data type 106 [ 270.537619][ T7847] bond0: (slave dummy0): Releasing backup interface [ 270.612308][ T7847] bond0: (slave bond_slave_0): Releasing backup interface [ 270.770396][ T7847] bond0: (slave bond_slave_1): Releasing backup interface [ 270.851174][ T7847] team0: Port device team_slave_0 removed [ 271.122213][ T7847] team0: Port device team_slave_1 removed [ 271.122925][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.122943][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.199784][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.199807][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.331769][ T7857] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 271.331794][ T7857] netlink: 200 bytes leftover after parsing attributes in process `syz.3.355'. [ 271.331863][ T7857] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 271.331873][ T7857] netlink: 29 bytes leftover after parsing attributes in process `syz.3.355'. [ 271.361096][ T7847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.366363][ T7848] team0: Port device xfrm0 added [ 271.460449][ T7857] netlink: 128 bytes leftover after parsing attributes in process `syz.3.355'. [ 271.769179][ C2] hpet_rtc_timer_reinit: 32 callbacks suppressed [ 271.769199][ C2] hpet: Lost 1 RTC interrupts [ 271.962560][ T43] audit: type=1800 audit(1789436292.174:731): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125724 res=0 errno=0 [ 271.995936][ T43] audit: type=1800 audit(1789436292.174:732): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125734 res=0 errno=0 [ 272.127281][ C2] hpet: Lost 1 RTC interrupts [ 272.270401][ C2] hpet: Lost 1 RTC interrupts [ 272.349523][ C2] hpet: Lost 2 RTC interrupts [ 272.440661][ C2] hpet: Lost 1 RTC interrupts [ 272.533224][ T43] audit: type=1800 audit(1789436292.774:733): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 272.579991][ T43] audit: type=1800 audit(1789436292.794:734): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 272.727536][ C2] hpet: Lost 1 RTC interrupts [ 277.080774][ C2] hpet_rtc_timer_reinit: 34 callbacks suppressed [ 277.080872][ C2] hpet: Lost 2 RTC interrupts [ 277.187205][ C2] hpet: Lost 1 RTC interrupts [ 277.301657][ T43] audit: type=1800 audit(1789436297.534:748): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 277.452632][ C2] hpet: Lost 1 RTC interrupts [ 277.669671][ C2] hpet: Lost 1 RTC interrupts [ 277.735567][ C2] hpet: Lost 1 RTC interrupts [ 277.786810][ C2] hpet: Lost 2 RTC interrupts [ 278.074388][ C2] hpet: Lost 1 RTC interrupts [ 278.234754][ C2] hpet: Lost 1 RTC interrupts [ 278.560342][ C2] hpet: Lost 4 RTC interrupts [ 279.747761][ T7925] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 279.747788][ T7925] netlink: 200 bytes leftover after parsing attributes in process `syz.3.368'. [ 279.747802][ T7925] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 279.747815][ T7925] netlink: 29 bytes leftover after parsing attributes in process `syz.3.368'. [ 280.028215][ T7925] netlink: 128 bytes leftover after parsing attributes in process `syz.3.368'. [ 281.421662][ T7950] null_blk: disk my_zoned_dev created [ 281.461668][ T7950] netlink: 200 bytes leftover after parsing attributes in process `syz.0.373'. [ 282.286542][ T7967] Set syz0 is full, maxelem 0 reached [ 282.322342][ C2] hpet_rtc_timer_reinit: 41 callbacks suppressed [ 282.322367][ C2] hpet: Lost 1 RTC interrupts [ 282.324477][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 282.383395][ C2] hpet: Lost 1 RTC interrupts [ 282.561718][ C2] hpet: Lost 1 RTC interrupts [ 282.691574][ C2] hpet: Lost 1 RTC interrupts [ 282.722353][ C2] hpet: Lost 1 RTC interrupts [ 282.728181][ T43] audit: type=1800 audit(1789436302.824:762): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126173 res=0 errno=0 [ 282.863710][ T7964] netlink: 'syz.2.375': attribute type 6 has an invalid length. [ 282.879723][ T1684] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 282.922294][ C2] hpet: Lost 1 RTC interrupts [ 282.965169][ C2] hpet: Lost 1 RTC interrupts [ 283.078473][ C2] hpet: Lost 1 RTC interrupts [ 283.191187][ C2] hpet: Lost 1 RTC interrupts [ 283.713945][ T7974] lo speed is unknown, defaulting to 1000 [ 284.317801][ T7976] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.161392][ T7976] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.601862][ T8003] nvmet: adding nsid 1 to subsystem testsubsys [ 285.662951][ T7976] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.687068][ T8005] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 285.687092][ T8005] netlink: 200 bytes leftover after parsing attributes in process `syz.3.382'. [ 285.687103][ T8005] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 285.687113][ T8005] netlink: 29 bytes leftover after parsing attributes in process `syz.3.382'. [ 285.727248][ T8005] netlink: 128 bytes leftover after parsing attributes in process `syz.3.382'. [ 286.312233][ T7976] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.735461][ T8027] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.1.3), cmd(8) [ 286.940984][ T1684] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 287.354003][ T8034] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 287.354721][ T8034] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 287.354737][ T8034] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.387'. [ 287.473882][ T8035] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.554822][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 287.554839][ T43] audit: type=1800 audit(1789436307.774:783): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 287.572799][ C2] hpet: Lost 1 RTC interrupts [ 287.700728][ T8035] kAFS: No cell specified [ 287.802368][ T1684] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.017047][ C2] hpet: Lost 1 RTC interrupts [ 288.155268][ T1684] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.155295][ T1684] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.155311][ T1684] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.270307][ C2] hpet: Lost 1 RTC interrupts [ 288.440385][ C2] hpet: Lost 1 RTC interrupts [ 288.890000][ T1684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.890025][ T1684] usb 8-1: Product: syz [ 288.890037][ T1684] usb 8-1: Manufacturer: syz [ 288.890050][ T1684] usb 8-1: SerialNumber: syz [ 288.895448][ T43] audit: type=1800 audit(1789436309.094:784): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126860 res=0 errno=0 [ 288.904034][ T43] audit: type=1800 audit(1789436309.094:785): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=126892 res=0 errno=0 [ 288.904119][ T43] audit: type=1800 audit(1789436309.094:786): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=126867 res=0 errno=0 [ 288.904169][ T43] audit: type=1800 audit(1789436309.094:787): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=126868 res=0 errno=0 [ 289.046836][ C2] hpet: Lost 2 RTC interrupts [ 289.101338][ T1684] hub 8-1:1.0: bad descriptor, ignoring hub [ 289.101363][ T1684] hub 8-1:1.0: probe with driver hub failed with error -5 [ 289.461414][ T1684] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 289.791716][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.792071][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.313846][ T6137] usb 8-1: USB disconnect, device number 7 [ 291.388889][ T6137] usblp0: removed [ 293.354464][ C2] hpet_rtc_timer_reinit: 21 callbacks suppressed [ 293.354487][ C2] hpet: Lost 1 RTC interrupts [ 294.359810][ C2] hpet: Lost 1 RTC interrupts [ 294.390128][ C2] hpet: Lost 1 RTC interrupts [ 294.560687][ C2] hpet: Lost 2 RTC interrupts [ 295.642762][ C2] hpet: Lost 1 RTC interrupts [ 296.520728][ C2] hpet: Lost 1 RTC interrupts [ 297.628249][ C2] hpet: Lost 1 RTC interrupts [ 298.470301][ C2] hpet: Lost 1 RTC interrupts [ 298.910526][ C2] hpet: Lost 1 RTC interrupts [ 298.952079][ C2] hpet: Lost 1 RTC interrupts [ 298.980280][ T43] audit: type=1800 audit(1789436319.224:795): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.391" name="b_vendor_code" dev="configfs" ino=19340 res=0 errno=0 [ 299.078278][ C2] hpet: Lost 1 RTC interrupts [ 299.114320][ C2] hpet: Lost 1 RTC interrupts [ 299.114900][ T43] audit: type=1800 audit(1789436319.294:796): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.388" name="new_array" dev="sysfs" ino=64415 res=0 errno=0 [ 299.174349][ C2] hpet: Lost 2 RTC interrupts [ 299.176492][ T43] audit: type=1800 audit(1789436319.374:797): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 299.235196][ C2] hpet: Lost 1 RTC interrupts [ 299.262012][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 299.529744][ T8053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.844968][ T8057] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 301.718784][ T8057] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 301.725514][ T8087] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 301.725536][ T8087] netlink: 200 bytes leftover after parsing attributes in process `syz.0.394'. [ 301.725548][ T8087] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 301.725558][ T8087] netlink: 29 bytes leftover after parsing attributes in process `syz.0.394'. [ 301.746630][ T8087] netlink: 128 bytes leftover after parsing attributes in process `syz.0.394'. [ 303.209578][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 303.390028][ T1684] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 303.660899][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 303.660921][ C2] hpet: Lost 1 RTC interrupts [ 303.665241][ T43] audit: type=1800 audit(1789436323.874:804): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127179 res=0 errno=0 [ 303.665382][ T43] audit: type=1800 audit(1789436323.874:805): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=127183 res=0 errno=0 [ 303.700591][ C2] hpet: Lost 1 RTC interrupts [ 303.731902][ C2] hpet: Lost 1 RTC interrupts [ 303.840787][ C2] hpet: Lost 1 RTC interrupts [ 303.915635][ C2] hpet: Lost 1 RTC interrupts [ 304.196719][ T8107] netlink: 'syz.1.397': attribute type 2 has an invalid length. [ 304.218401][ T43] audit: type=1800 audit(1789436324.434:806): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 304.262864][ C2] hpet: Lost 1 RTC interrupts [ 304.403259][ C2] hpet: Lost 1 RTC interrupts [ 304.579440][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'. [ 305.443279][ T8118] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 305.451569][ T8118] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 305.551188][ T8118] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 305.551371][ T8118] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 305.551634][ T8118] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 305.552415][ T8118] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 305.834240][ T8118] pci 0000:00:01.0: Adding to iommu group 1 [ 305.844014][ T8118] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 305.844045][ T8118] pci 0000:00:01.0: vgaarb: bridge control possible [ 305.844058][ T8118] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 305.859409][ T8118] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 305.897390][ T8118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 305.897619][ T8118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 305.897777][ T8118] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 305.899652][ T8118] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 305.900587][ T8118] pci 0000:00:04.0: enabling Extended Tags [ 305.989501][ T8118] pci 0000:00:04.0: Adding to iommu group 4 [ 306.017805][ T8118] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 306.022593][ T8118] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 306.043637][ T8118] pci 0000:00:1d.0: Adding to iommu group 7 [ 306.059226][ T8118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 306.063856][ T8118] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 306.063912][ T8118] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 306.064213][ T8118] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 306.064424][ T8118] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 306.064457][ T8118] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 306.064554][ T8118] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 306.164887][ T8118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 306.164984][ T8118] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 306.188355][ T8118] pci 0000:00:04.0: PCI bridge to [bus 01] [ 306.188500][ T8118] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 306.191066][ T8118] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 306.192680][ T8118] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 306.241739][ T8118] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 306.382495][ T8118] [drm] Found bochs VGA, ID 0xb0c5. [ 306.382514][ T8118] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 306.687275][ T8118] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 307.133657][ T8118] Console: switching to colour frame buffer device 160x50 [ 307.173633][ T8118] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 307.185179][ T8118] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 307.346986][ T8118] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 307.406899][ T8118] pcieport 0000:00:04.0: PCI INT A: failed to register GSI [ 307.406955][ T8118] pcieport 0000:00:04.0: probe with driver pcieport failed with error -16 [ 307.408304][ T8118] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 307.520543][ T8118] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 307.558972][ T8118] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 307.720660][ T8118] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 307.765411][ T8118] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 349074 usecs [ 307.768101][ T8118] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 307.959919][ T8118] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 307.994476][ T8118] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 308.026596][ T8118] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 308.026997][ T8118] uhci_hcd 0000:00:1d.0: detected 2 ports [ 308.065973][ T8118] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 308.089711][ T8118] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 308.165012][ T8118] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 308.165042][ T8118] usb usb2: Product: UHCI Host Controller [ 308.165058][ T8118] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 308.165074][ T8118] usb usb2: SerialNumber: 0000:00:1d.0 [ 308.385364][ T8118] hub 2-0:1.0: USB hub found [ 308.389058][ T8118] hub 2-0:1.0: 2 ports detected [ 308.870201][ C2] hpet_rtc_timer_reinit: 60 callbacks suppressed [ 308.870221][ C2] hpet: Lost 1 RTC interrupts [ 308.982243][ C2] hpet: Lost 1 RTC interrupts [ 309.022229][ C2] hpet: Lost 1 RTC interrupts [ 309.032870][ T43] audit: type=1800 audit(1789436329.204:833): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 309.070260][ C2] hpet: Lost 1 RTC interrupts [ 309.227545][ T43] audit: type=1800 audit(1789436329.444:834): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 309.470298][ C2] hpet: Lost 1 RTC interrupts [ 309.644131][ C2] hpet: Lost 1 RTC interrupts [ 309.705181][ C2] hpet: Lost 1 RTC interrupts [ 310.126230][ C2] hpet: Lost 3 RTC interrupts [ 314.070412][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 314.070434][ C2] hpet: Lost 2 RTC interrupts [ 314.372468][ C2] hpet: Lost 2 RTC interrupts [ 314.744676][ C2] hpet: Lost 1 RTC interrupts [ 314.844671][ C2] hpet: Lost 2 RTC interrupts [ 315.546648][ C2] hpet: Lost 1 RTC interrupts [ 316.626693][ C2] hpet: Lost 1 RTC interrupts [ 316.811619][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.716807][ C2] hpet: Lost 1 RTC interrupts [ 317.824638][ C2] hpet: Lost 1 RTC interrupts [ 318.119395][ C2] hpet: Lost 1 RTC interrupts [ 318.370449][ C2] hpet: Lost 1 RTC interrupts [ 318.443542][ T8173] loop5: detected capacity change from 0 to 7 [ 318.466558][ T8173] Dev loop5: unable to read RDB block 7 [ 318.466603][ T8173] loop5: unable to read partition table [ 318.466796][ T8173] loop5: partition table beyond EOD, truncated [ 318.466813][ T8173] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.765000][ T8180] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 318.765033][ T8180] CIFS mount error: No usable UNC path provided in device string! [ 318.765033][ T8180] [ 318.765284][ T8180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 318.974867][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 319.095363][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 319.095385][ C2] hpet: Lost 1 RTC interrupts [ 319.294124][ C2] hpet: Lost 1 RTC interrupts [ 319.358266][ C2] hpet: Lost 1 RTC interrupts [ 319.514537][ C2] hpet: Lost 1 RTC interrupts [ 319.744613][ T43] audit: type=1800 audit(1789436339.944:835): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 319.817111][ T43] audit: type=1800 audit(1789436340.054:836): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="b_vendor_code" dev="configfs" ino=22557 res=0 errno=0 [ 319.846405][ T43] audit: type=1800 audit(1789436340.054:837): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 320.006532][ C2] hpet: Lost 1 RTC interrupts [ 320.099352][ C2] hpet: Lost 1 RTC interrupts [ 320.214012][ T43] audit: type=1800 audit(1789436340.434:838): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 320.419513][ T8205] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 320.419537][ T8205] netlink: 200 bytes leftover after parsing attributes in process `syz.1.411'. [ 320.419552][ T8205] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 320.419564][ T8205] netlink: 29 bytes leftover after parsing attributes in process `syz.1.411'. [ 320.459436][ T8205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.411'. [ 322.094989][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 322.096142][ T8229] sctp_transport_update_pmtu: 45 callbacks suppressed [ 322.096160][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.096627][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.097036][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.097548][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.120378][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.120776][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.121213][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.121599][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.122032][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 322.122428][ T8229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 323.576243][ T8237] nvme nvme0: rdma_resolve_addr failed (-19). [ 324.229319][ C2] hpet_rtc_timer_reinit: 35 callbacks suppressed [ 324.229344][ C2] hpet: Lost 1 RTC interrupts [ 324.266186][ C2] hpet: Lost 1 RTC interrupts [ 324.451050][ C2] hpet: Lost 2 RTC interrupts [ 324.510163][ C2] hpet: Lost 1 RTC interrupts [ 324.636258][ C2] hpet: Lost 1 RTC interrupts [ 324.748526][ C2] hpet: Lost 1 RTC interrupts [ 325.033209][ C2] hpet: Lost 1 RTC interrupts [ 325.146170][ C2] hpet: Lost 1 RTC interrupts [ 325.218339][ C2] hpet: Lost 2 RTC interrupts [ 325.378168][ C2] hpet: Lost 1 RTC interrupts [ 326.168562][ T8249] syzkaller0: entered promiscuous mode [ 326.168586][ T8249] syzkaller0: entered allmulticast mode [ 326.922936][ T8252] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 326.922959][ T8252] netlink: 200 bytes leftover after parsing attributes in process `syz.0.417'. [ 326.922972][ T8252] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 326.922983][ T8252] netlink: 29 bytes leftover after parsing attributes in process `syz.0.417'. [ 326.952523][ T8252] netlink: 128 bytes leftover after parsing attributes in process `syz.0.417'. [ 328.198327][ T8269] random: crng reseeded on system resumption [ 328.433697][ T8276] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 328.433723][ T8276] netlink: 200 bytes leftover after parsing attributes in process `syz.1.421'. [ 328.433737][ T8276] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 328.433748][ T8276] netlink: 29 bytes leftover after parsing attributes in process `syz.1.421'. [ 328.438821][ T8276] netlink: 128 bytes leftover after parsing attributes in process `syz.1.421'. [ 329.255842][ C2] hpet_rtc_timer_reinit: 45 callbacks suppressed [ 329.255864][ C2] hpet: Lost 4 RTC interrupts [ 329.282144][ C2] hpet: Lost 1 RTC interrupts [ 329.547598][ C2] hpet: Lost 2 RTC interrupts [ 329.735233][ T43] audit: type=1800 audit(1789436349.984:860): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128306 res=0 errno=0 [ 329.738376][ T43] audit: type=1800 audit(1789436349.984:861): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=128310 res=0 errno=0 [ 329.836471][ C2] hpet: Lost 3 RTC interrupts [ 329.905782][ T8290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.929385][ C2] hpet: Lost 1 RTC interrupts [ 329.947817][ T43] audit: type=1800 audit(1789436350.174:862): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.425" name="use" dev="configfs" ino=22056 res=0 errno=0 [ 329.989741][ C2] hpet: Lost 1 RTC interrupts [ 330.054104][ C2] hpet: Lost 1 RTC interrupts [ 330.966080][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.114021][ T8306] tmpfs: Unknown parameter 'nr_inodesD5' [ 331.617602][ T8320] smbdirect: ib_dev[syz2] removed [ 331.843097][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 331.843278][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 331.846861][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 331.851705][ T8318] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 331.851812][ T8318] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 331.851852][ T8318] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 331.870017][ T8318] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 331.992554][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 331.994530][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 332.002978][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 332.006027][ T8318] wlan0 speed is unknown, defaulting to 1000 [ 332.477536][ T8336] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1056, id = 0 [ 332.504933][ T56] IPVS: starting estimator thread 0... [ 332.877474][ T8337] IPVS: using max 28 ests per chain, 67200 per kthread [ 333.062574][ T8345] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 333.062610][ T8345] netlink: 200 bytes leftover after parsing attributes in process `syz.2.432'. [ 333.062625][ T8345] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 333.062706][ T8345] netlink: 29 bytes leftover after parsing attributes in process `syz.2.432'. [ 333.127331][ T8349] netlink: 128 bytes leftover after parsing attributes in process `syz.2.432'. [ 334.295654][ C2] hpet_rtc_timer_reinit: 38 callbacks suppressed [ 334.295679][ C2] hpet: Lost 1 RTC interrupts [ 334.331494][ T43] audit: type=1800 audit(1789436354.544:881): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128711 res=0 errno=0 [ 334.451777][ T43] audit: type=1800 audit(1789436354.684:882): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.433" name="/" dev="fuse" ino=1 res=0 errno=0 [ 334.541921][ C2] hpet: Lost 1 RTC interrupts [ 334.543092][ T8359] random: crng reseeded on system resumption [ 334.611311][ T43] audit: type=1800 audit(1789436354.824:883): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 334.668871][ C2] hpet: Lost 1 RTC interrupts [ 334.744946][ T43] audit: type=1800 audit(1789436354.984:884): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="control" dev="configfs" ino=22745 res=0 errno=0 [ 334.800583][ C2] hpet: Lost 3 RTC interrupts [ 334.824025][ T43] audit: type=1800 audit(1789436355.054:885): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="enable" dev="configfs" ino=22746 res=0 errno=0 [ 334.863050][ C2] hpet: Lost 1 RTC interrupts [ 334.926970][ T8366] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 335.532139][ T8378] futex_wake_op: syz.0.438 tries to shift op by 144; fix this program [ 338.886347][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 338.967827][ T8385] jffs2: notice: (8385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.229969][ T8393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 339.229995][ T8393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 339.230097][ T8393] vhci_hcd vhci_hcd.0: Device attached [ 339.254940][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.255084][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.255845][ T5825] wlan0 speed is unknown, defaulting to 1000 [ 339.255996][ T5825] syz0: Port: 1 Link ACTIVE [ 339.508022][ T5817] wlan0 speed is unknown, defaulting to 1000 [ 339.785870][ C2] hpet_rtc_timer_reinit: 39 callbacks suppressed [ 339.785893][ C2] hpet: Lost 1 RTC interrupts [ 339.892527][ T5912] usb 44-1: SetAddress Request (2) to port 0 [ 339.892581][ T5912] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 339.945993][ T43] audit: type=1800 audit(1789436360.184:892): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128782 res=0 errno=0 [ 339.981047][ C2] hpet: Lost 1 RTC interrupts [ 340.043134][ C2] hpet: Lost 1 RTC interrupts [ 340.192937][ C2] hpet: Lost 1 RTC interrupts [ 340.239247][ C2] hpet: Lost 1 RTC interrupts [ 340.277349][ C2] hpet: Lost 1 RTC interrupts [ 340.318248][ T8396] vhci_hcd: connection reset by peer [ 340.338435][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 340.338464][ T5815] vhci_hcd vhci_hcd.3: release socket [ 340.338510][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 340.373969][ C2] hpet: Lost 1 RTC interrupts [ 340.392548][ T8410] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 340.392576][ T8410] netlink: 200 bytes leftover after parsing attributes in process `syz.0.442'. [ 340.392592][ T8410] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 340.392606][ T8410] netlink: 29 bytes leftover after parsing attributes in process `syz.0.442'. [ 340.442388][ T8410] netlink: 128 bytes leftover after parsing attributes in process `syz.0.442'. [ 340.445359][ T43] audit: type=1800 audit(1789436360.674:893): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128795 res=0 errno=0 [ 340.476379][ C2] hpet: Lost 1 RTC interrupts [ 342.503628][ T8435] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 342.503651][ T8435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.448'. [ 342.504133][ T8435] dummy0: entered promiscuous mode [ 342.506063][ T8435] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 342.554302][ T8435] fuse: Bad value for 'fd' [ 343.043850][ T8448] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 343.043874][ T8448] netlink: 200 bytes leftover after parsing attributes in process `syz.3.449'. [ 343.043889][ T8448] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 343.043902][ T8448] netlink: 29 bytes leftover after parsing attributes in process `syz.3.449'. [ 343.059745][ T8448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.449'. [ 343.258183][ T8440] random: crng reseeded on system resumption [ 344.595577][ T1684] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 344.802385][ C2] hpet_rtc_timer_reinit: 41 callbacks suppressed [ 344.802413][ C2] hpet: Lost 2 RTC interrupts [ 344.838151][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 344.843075][ C2] hpet: Lost 1 RTC interrupts [ 344.876251][ T43] audit: type=1804 audit(1789436365.084:907): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.452" name="/newroot/104/sec/tomoyo/profile" dev="securityfs" ino=2089 res=1 errno=0 [ 344.934257][ C2] hpet: Lost 1 RTC interrupts [ 345.001234][ C2] hpet: Lost 1 RTC interrupts [ 345.125699][ T5912] usb 44-1: device descriptor read/8, error -110 [ 345.187821][ C2] hpet: Lost 1 RTC interrupts [ 345.215331][ C2] hpet: Lost 1 RTC interrupts [ 345.292471][ T1684] usb 7-1: Using ep0 maxpacket: 8 [ 345.393003][ C2] hpet: Lost 1 RTC interrupts [ 345.480001][ T1684] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.596385][ T5912] usb usb44-port1: attempt power cycle [ 345.766133][ T43] audit: type=1800 audit(1789436366.004:908): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 345.848272][ T1684] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 345.848319][ T1684] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 345.848340][ T1684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 345.848360][ T1684] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 345.848382][ T1684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 345.848399][ T1684] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.848428][ T1684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.876573][ T43] audit: type=1800 audit(1789436366.084:909): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129200 res=0 errno=0 [ 346.296343][ T5912] usb usb44-port1: unable to enumerate USB device [ 346.446314][ T1684] usb 7-1: usb_control_msg returned -71 [ 346.446363][ T1684] usbtmc 7-1:16.0: can't read capabilities [ 346.488980][ T1684] usb 7-1: USB disconnect, device number 11 [ 346.986158][ T8497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 348.579997][ T8502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 348.580049][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 348.615845][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 349.075833][ T76] usb 44-1: SetAddress Request (6) to port 0 [ 349.075886][ T76] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 349.082017][ T8519] random: crng reseeded on system resumption [ 349.695090][ T8514] vhci_hcd: connection reset by peer [ 349.719634][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 349.719662][ T5815] vhci_hcd vhci_hcd.3: release socket [ 349.719740][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 349.878221][ C2] hpet_rtc_timer_reinit: 28 callbacks suppressed [ 349.878242][ C2] hpet: Lost 1 RTC interrupts [ 350.229637][ C2] hpet: Lost 2 RTC interrupts [ 350.231101][ T43] audit: type=1800 audit(1789436370.464:922): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.462" name="b_vendor_code" dev="configfs" ino=22885 res=0 errno=0 [ 350.282079][ C2] hpet: Lost 1 RTC interrupts [ 350.370102][ C2] hpet: Lost 1 RTC interrupts [ 350.426629][ C2] hpet: Lost 1 RTC interrupts [ 350.515994][ C2] hpet: Lost 1 RTC interrupts [ 350.823735][ T8536] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 350.914071][ C2] hpet: Lost 3 RTC interrupts [ 351.090015][ C2] hpet: Lost 1 RTC interrupts [ 351.189667][ T43] audit: type=1800 audit(1789436371.394:923): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 351.229281][ T8532] jffs2: notice: (8532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 353.390049][ T8556] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 354.153083][ T76] usb 44-1: device descriptor read/8, error -110 [ 354.637893][ T76] usb usb44-port1: attempt power cycle [ 354.932131][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 354.932151][ T43] audit: type=1800 audit(1789436375.174:926): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.472" name="/" dev="fuse" ino=1 res=0 errno=0 [ 355.039788][ T8563] random: crng reseeded on system resumption [ 355.079957][ T43] audit: type=1800 audit(1789436375.304:927): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129471 res=0 errno=0 [ 355.081717][ T43] audit: type=1800 audit(1789436375.304:928): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=129475 res=0 errno=0 [ 355.110725][ T8565] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 355.110747][ T8565] netlink: 200 bytes leftover after parsing attributes in process `syz.0.473'. [ 355.110761][ T8565] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 355.110772][ T8565] netlink: 29 bytes leftover after parsing attributes in process `syz.0.473'. [ 355.114806][ T8565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.473'. [ 355.124604][ C2] hpet: Lost 2 RTC interrupts [ 355.237955][ C2] hpet: Lost 1 RTC interrupts [ 355.322055][ C2] hpet: Lost 1 RTC interrupts [ 355.342018][ C2] hpet: Lost 1 RTC interrupts [ 355.388511][ C2] hpet: Lost 1 RTC interrupts [ 355.424444][ C2] hpet: Lost 1 RTC interrupts [ 355.504729][ T76] usb usb44-port1: unable to enumerate USB device [ 355.533013][ C2] hpet: Lost 1 RTC interrupts [ 356.691824][ T8585] gadgetfs: bound to dummy_udc driver [ 357.046310][ T5825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 357.064463][ T8585] gadgetfs: suspended from state 2 [ 358.974100][ T8613] xt_HMARK: proto mask must be zero with L3 mode [ 360.015347][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 360.015370][ T43] audit: type=1800 audit(1789436380.234:937): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 360.099956][ C2] hpet: Lost 1 RTC interrupts [ 360.307015][ C2] hpet: Lost 1 RTC interrupts [ 360.372535][ T43] audit: type=1800 audit(1789436380.554:938): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129620 res=0 errno=0 [ 360.401180][ C2] hpet: Lost 1 RTC interrupts [ 360.434117][ C2] hpet: Lost 1 RTC interrupts [ 360.553170][ C2] hpet: Lost 1 RTC interrupts [ 360.621668][ T43] audit: type=1800 audit(1789436380.844:939): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129639 res=0 errno=0 [ 360.651628][ T43] audit: type=1800 audit(1789436380.874:940): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=129643 res=0 errno=0 [ 360.652692][ T43] audit: type=1800 audit(1789436380.874:941): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="/" dev="fuse" ino=1 res=0 errno=0 [ 360.653154][ T8625] random: crng reseeded on system resumption [ 360.742226][ T8628] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 360.742248][ T8628] netlink: 200 bytes leftover after parsing attributes in process `syz.1.486'. [ 360.742324][ T8628] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 360.742337][ T8628] netlink: 29 bytes leftover after parsing attributes in process `syz.1.486'. [ 360.766210][ T8628] netlink: 128 bytes leftover after parsing attributes in process `syz.1.486'. [ 364.004380][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 364.327502][ T8673] ubi0: attaching mtd0 [ 364.331235][ T8673] ubi0: scanning is finished [ 364.331349][ T8673] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 364.424776][ T8680] UBIFS error (pid: 8680): cannot open "ubi0:testvol", error -19 [ 364.754738][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 365.085870][ C2] hpet_rtc_timer_reinit: 29 callbacks suppressed [ 365.085888][ C2] hpet: Lost 1 RTC interrupts [ 365.157926][ C2] hpet: Lost 2 RTC interrupts [ 365.464647][ C2] hpet: Lost 1 RTC interrupts [ 365.623201][ C2] hpet: Lost 2 RTC interrupts [ 365.721312][ T8673] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 365.934601][ T43] audit: type=1400 audit(1789436386.144:948): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8687 comm="syz.0.496" [ 365.948403][ T8690] 9p: Bad value for 'wfdno' [ 365.995346][ C2] hpet: Lost 1 RTC interrupts [ 366.306177][ C2] hpet: Lost 1 RTC interrupts [ 366.337948][ C2] hpet: Lost 1 RTC interrupts [ 366.382676][ C2] hpet: Lost 1 RTC interrupts [ 366.445607][ C2] hpet: Lost 1 RTC interrupts [ 367.510459][ T8703] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 367.510479][ T8703] netlink: 200 bytes leftover after parsing attributes in process `syz.1.500'. [ 367.510492][ T8703] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 367.510506][ T8703] netlink: 29 bytes leftover after parsing attributes in process `syz.1.500'. [ 367.514018][ T8703] netlink: 128 bytes leftover after parsing attributes in process `syz.1.500'. [ 369.042484][ T8726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 369.042514][ T8726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 369.042792][ T8726] vhci_hcd vhci_hcd.0: Device attached [ 369.094272][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.094652][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.582575][ T5825] usb 42-1: SetAddress Request (2) to port 0 [ 369.582641][ T5825] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 369.694938][ T8727] vhci_hcd: connection reset by peer [ 369.770913][ T12] vhci_hcd vhci_hcd.2: stop threads [ 369.770938][ T12] vhci_hcd vhci_hcd.2: release socket [ 369.770980][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 370.176969][ C2] hpet_rtc_timer_reinit: 22 callbacks suppressed [ 370.176991][ C2] hpet: Lost 1 RTC interrupts [ 370.412370][ C2] hpet: Lost 3 RTC interrupts [ 370.527572][ C2] hpet: Lost 1 RTC interrupts [ 370.597998][ C2] hpet: Lost 1 RTC interrupts [ 370.871823][ C2] hpet: Lost 1 RTC interrupts [ 370.979943][ C2] hpet: Lost 1 RTC interrupts [ 371.013904][ C2] hpet: Lost 1 RTC interrupts [ 371.175034][ C2] hpet: Lost 1 RTC interrupts [ 371.332091][ T8724] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.416253][ C2] hpet: Lost 3 RTC interrupts [ 371.454242][ C2] hpet: Lost 1 RTC interrupts [ 372.450240][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 372.675706][ T8724] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.714224][ T8748] 9pnet_fd: p9_fd_create_tcp (8748): problem connecting socket to 127.0.0.1 [ 372.766657][ T8746] jffs2: notice: (8746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 372.870232][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 373.250473][ T8724] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.651450][ T8724] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.167933][ T8763] syzkaller0: entered promiscuous mode [ 374.167956][ T8763] syzkaller0: entered allmulticast mode [ 374.282039][ T8763] input: syz0 as /devices/virtual/input/input14 [ 374.686443][ T5825] usb 42-1: device descriptor read/8, error -110 [ 374.715660][ T5815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.715845][ T5815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.716024][ T5815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.716162][ T5815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.079765][ T8774] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 375.079786][ T8774] netlink: 200 bytes leftover after parsing attributes in process `syz.3.514'. [ 375.079801][ T8774] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 375.079812][ T8774] netlink: 29 bytes leftover after parsing attributes in process `syz.3.514'. [ 375.084308][ T8774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.514'. [ 375.219170][ T5825] usb usb42-port1: attempt power cycle [ 375.266606][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 375.266626][ T43] audit: type=1800 audit(1789436395.494:975): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130632 res=0 errno=0 [ 375.275047][ T43] audit: type=1800 audit(1789436395.494:976): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130642 res=0 errno=0 [ 375.355801][ C2] hpet: Lost 2 RTC interrupts [ 375.445172][ C2] hpet: Lost 3 RTC interrupts [ 375.953610][ C2] hpet: Lost 1 RTC interrupts [ 375.955657][ T5825] usb usb42-port1: unable to enumerate USB device [ 376.045240][ C2] hpet: Lost 2 RTC interrupts [ 376.107757][ T43] audit: type=1800 audit(1789436396.354:977): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 376.155384][ C2] hpet: Lost 1 RTC interrupts [ 376.159135][ T43] audit: type=1800 audit(1789436396.404:978): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="b_vendor_code" dev="configfs" ino=24963 res=0 errno=0 [ 376.198526][ C2] hpet: Lost 1 RTC interrupts [ 376.235659][ T5817] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 376.420656][ T5817] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 376.442200][ T5817] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 376.442228][ T5817] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 376.442244][ T5817] usb 7-1: config 0 has no interface number 0 [ 376.442269][ T5817] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 376.442299][ T5817] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 376.442322][ T5817] usb 7-1: config 0 interface 143 has no altsetting 0 [ 376.497078][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.497101][ T5817] usb 7-1: Product: syz [ 376.497112][ T5817] usb 7-1: Manufacturer: syz [ 376.497124][ T5817] usb 7-1: SerialNumber: syz [ 376.532521][ T5817] usb 7-1: config 0 descriptor?? [ 376.764033][ T5817] usb 7-1: USB disconnect, device number 12 [ 376.826580][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.519'. [ 376.826604][ T8811] openvswitch: netlink: Flow key attr not present in new flow. [ 377.490029][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 377.725596][ T5817] usb 7-1: Using ep0 maxpacket: 16 [ 377.727118][ T5817] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 377.729653][ T5817] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 377.729703][ T5817] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 377.729721][ T5817] usb 7-1: config 0 has no interface number 0 [ 377.729802][ T5817] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 377.729835][ T5817] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 377.729858][ T5817] usb 7-1: config 0 interface 143 has no altsetting 0 [ 377.733735][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.733821][ T5817] usb 7-1: Product: syz [ 377.733833][ T5817] usb 7-1: Manufacturer: syz [ 377.733844][ T5817] usb 7-1: SerialNumber: syz [ 377.808544][ T5817] usb 7-1: config 0 descriptor?? [ 378.111308][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.111997][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.187603][ T5817] usb 7-1: USB disconnect, device number 13 [ 378.334945][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.007209][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 379.182225][ T8827] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 379.182248][ T8827] netlink: 200 bytes leftover after parsing attributes in process `syz.3.523'. [ 379.182259][ T8827] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 379.182269][ T8827] netlink: 29 bytes leftover after parsing attributes in process `syz.3.523'. [ 379.186064][ T8827] netlink: 128 bytes leftover after parsing attributes in process `syz.3.523'. [ 379.701824][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 380.371984][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 380.372048][ T43] audit: type=1800 audit(1789436400.584:998): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 380.414485][ C2] hpet: Lost 1 RTC interrupts [ 380.561118][ T5912] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.651870][ T8848] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 380.651892][ T8848] netlink: 200 bytes leftover after parsing attributes in process `syz.0.527'. [ 380.651903][ T8848] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 380.651912][ T8848] netlink: 29 bytes leftover after parsing attributes in process `syz.0.527'. [ 380.712212][ T8848] netlink: 128 bytes leftover after parsing attributes in process `syz.0.527'. [ 380.789880][ T43] audit: type=1800 audit(1789436400.974:999): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131075 res=0 errno=0 [ 380.800996][ T43] audit: type=1800 audit(1789436401.044:1000): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=131079 res=0 errno=0 [ 380.850904][ T43] audit: type=1800 audit(1789436401.084:1001): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131158 res=0 errno=0 [ 380.878641][ C2] hpet: Lost 1 RTC interrupts [ 381.175629][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.175659][ T5912] usb 6-1: config 0 has no interface number 0 [ 381.175695][ T5912] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.175717][ T5912] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 381.175742][ T5912] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 381.175779][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.182649][ T5912] usb 6-1: config 0 descriptor?? [ 381.184354][ T43] audit: type=1800 audit(1789436401.414:1002): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131168 res=0 errno=0 [ 381.185991][ T43] audit: type=1800 audit(1789436401.414:1003): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=131197 res=0 errno=0 [ 381.186708][ T43] audit: type=1800 audit(1789436401.414:1004): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=131175 res=0 errno=0 [ 381.187323][ T43] audit: type=1800 audit(1789436401.414:1005): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=131176 res=0 errno=0 [ 381.406764][ T5912] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 382.130570][ T5825] usb 6-1: USB disconnect, device number 12 [ 382.968569][ T8867] block nbd3: shutting down sockets [ 385.395288][ C2] hpet_rtc_timer_reinit: 26 callbacks suppressed [ 385.395312][ C2] hpet: Lost 1 RTC interrupts [ 386.116739][ C2] hpet: Lost 1 RTC interrupts [ 386.310481][ C2] hpet: Lost 1 RTC interrupts [ 386.546986][ T8900] FAULT_INJECTION: forcing a failure. [ 386.546986][ T8900] name failslab, interval 1, probability 0, space 0, times 1 [ 386.547020][ T8900] CPU: 3 UID: 0 PID: 8900 Comm: syz.0.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.547048][ T8900] Tainted: [L]=SOFTLOCKUP [ 386.547056][ T8900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.547069][ T8900] Call Trace: [ 386.547076][ T8900] [ 386.547085][ T8900] dump_stack_lvl+0x100/0x190 [ 386.547116][ T8900] should_fail_ex.cold+0x5/0xa [ 386.547140][ T8900] should_failslab+0xc2/0x120 [ 386.547220][ T8900] __kmalloc_noprof+0xfc/0x840 [ 386.547241][ T8900] ? trace_kmalloc+0xeb/0x110 [ 386.547267][ T8900] ? lsm_blob_alloc+0x68/0x90 [ 386.547294][ T8900] lsm_blob_alloc+0x68/0x90 [ 386.547314][ T8900] security_sk_alloc+0x2d/0x290 [ 386.547341][ T8900] sk_prot_alloc+0x12a/0x2a0 [ 386.547374][ T8900] sk_alloc+0x36/0xe80 [ 386.547401][ T8900] can_create+0x1e5/0x630 [ 386.547429][ T8900] __sock_create+0x339/0x860 [ 386.547453][ T8900] __sys_socket+0x14d/0x260 [ 386.547471][ T8900] ? xfd_validate_state+0x129/0x190 [ 386.547500][ T8900] ? __pfx___sys_socket+0x10/0x10 [ 386.547528][ T8900] __ia32_sys_socket+0x72/0xb0 [ 386.547546][ T8900] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.547602][ T8900] __do_fast_syscall_32+0x13a/0x8b0 [ 386.547637][ T8900] do_fast_syscall_32+0x32/0x70 [ 386.547672][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.547696][ T8900] RIP: 0023:0xf708efec [ 386.547716][ T8900] Code: Unable to access opcode bytes at 0xf708efc2. [ 386.547726][ T8900] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 386.547744][ T8900] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000000002 [ 386.547756][ T8900] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.547767][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.547777][ T8900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.547788][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.547812][ T8900] [ 386.689081][ C2] hpet: Lost 1 RTC interrupts [ 386.718230][ C2] hpet: Lost 1 RTC interrupts [ 386.813052][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 386.813190][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 386.813908][ T43] audit: type=1800 audit(1789436407.054:1021): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131381 res=0 errno=0 [ 387.100445][ C2] hpet: Lost 1 RTC interrupts [ 387.152112][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 387.152281][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 387.234274][ C2] hpet: Lost 1 RTC interrupts [ 387.244614][ T8900] ceph: No mds server is up or the cluster is laggy [ 387.301864][ C2] hpet: Lost 1 RTC interrupts [ 387.371097][ T43] audit: type=1800 audit(1789436407.584:1022): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 387.872500][ T1684] libceph: connect (1)[c::]:6789 error -101 [ 387.881784][ T1684] libceph: mon0 (1)[c::]:6789 connect error [ 388.553429][ T5912] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 389.186785][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 389.410952][ T5912] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.841009][ T5912] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.841035][ T5912] usb 8-1: config 0 has no interface number 0 [ 389.841075][ T5912] usb 8-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.841095][ T5912] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 389.841115][ T5912] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 389.841145][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.843172][ T5912] usb 8-1: config 0 descriptor?? [ 390.064568][ T5912] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 390.787666][ C2] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 390.787686][ C2] hpet: Lost 2 RTC interrupts [ 390.885105][ C2] hpet: Lost 3 RTC interrupts [ 391.060767][ C2] hpet: Lost 1 RTC interrupts [ 391.102027][ C2] hpet: Lost 1 RTC interrupts [ 391.147937][ C2] hpet: Lost 1 RTC interrupts [ 391.244740][ C2] hpet: Lost 1 RTC interrupts [ 391.422785][ T8940] md: array md0 already has disks! [ 391.481967][ T5888] usb 8-1: USB disconnect, device number 8 [ 391.522364][ C2] hpet: Lost 1 RTC interrupts [ 391.533872][ T43] audit: type=1800 audit(1789436411.754:1032): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 391.649953][ C2] hpet: Lost 1 RTC interrupts [ 391.701945][ T43] audit: type=1800 audit(1789436411.884:1033): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131918 res=0 errno=0 [ 391.844085][ T8948] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 391.844110][ T8948] netlink: 200 bytes leftover after parsing attributes in process `syz.3.546'. [ 391.844124][ T8948] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 391.844136][ T8948] netlink: 29 bytes leftover after parsing attributes in process `syz.3.546'. [ 391.966838][ T8948] netlink: 128 bytes leftover after parsing attributes in process `syz.3.546'. [ 392.148116][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 392.430881][ T8957] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 392.699660][ T8957] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 393.041054][ T8969] overlay: Unknown parameter 'fscontext' [ 393.175501][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 393.393425][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 393.558293][ T8980] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 395.295746][ T8983] cgroup: fork rejected by pids controller in /syz1 [ 395.716464][ T8983] netlink: 216 bytes leftover after parsing attributes in process `syz.1.552'. [ 395.716764][ T8983] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.967412][ C2] hpet_rtc_timer_reinit: 30 callbacks suppressed [ 395.967432][ C2] hpet: Lost 1 RTC interrupts [ 396.059695][ C2] hpet: Lost 1 RTC interrupts [ 396.324417][ C2] hpet: Lost 1 RTC interrupts [ 397.466121][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.469524][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.547421][ C2] hpet: Lost 1 RTC interrupts [ 397.635272][ C2] hpet: Lost 1 RTC interrupts [ 398.016507][ T43] audit: type=1800 audit(1789436418.254:1043): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 398.048706][ T9019] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.081801][ C2] hpet: Lost 1 RTC interrupts [ 398.231120][ T43] audit: type=1800 audit(1789436418.424:1044): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.555" name="b_vendor_code" dev="configfs" ino=25852 res=0 errno=0 [ 398.449591][ C2] hpet: Lost 1 RTC interrupts [ 398.582815][ T43] audit: type=1800 audit(1789436418.764:1045): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 398.721622][ T9019] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.115024][ T9019] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.396566][ T9019] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.446962][ T9063] jffs2: notice: (9063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 402.528995][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 402.529018][ C2] hpet: Lost 1 RTC interrupts [ 402.581843][ C2] hpet: Lost 1 RTC interrupts [ 402.640262][ T9066] tipc: New replicast peer: 255.255.255.255 [ 402.706631][ T9066] tipc: Enabled bearer , priority 10 [ 402.936926][ C2] hpet: Lost 1 RTC interrupts [ 403.014068][ T43] audit: type=1800 audit(1789436423.244:1048): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132465 res=0 errno=0 [ 403.014138][ T43] audit: type=1800 audit(1789436423.244:1049): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=132469 res=0 errno=0 [ 403.019868][ T9068] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 403.019891][ T9068] netlink: 200 bytes leftover after parsing attributes in process `syz.1.563'. [ 403.019904][ T9068] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 403.019915][ T9068] netlink: 29 bytes leftover after parsing attributes in process `syz.1.563'. [ 403.055223][ T9068] netlink: 128 bytes leftover after parsing attributes in process `syz.1.563'. [ 403.093711][ T5815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.119989][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.120031][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.120061][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.127464][ T43] audit: type=1800 audit(1789436423.354:1050): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132720 res=0 errno=0 [ 403.131346][ T43] audit: type=1800 audit(1789436423.354:1051): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132730 res=0 errno=0 [ 403.234545][ T43] audit: type=1800 audit(1789436423.454:1052): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 403.245749][ C2] hpet: Lost 1 RTC interrupts [ 403.401324][ C2] hpet: Lost 1 RTC interrupts [ 405.192690][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 405.646437][ T5912] hid-generic 0005:046E:0007.0004: unknown main item tag 0x1 [ 405.731074][ T9114] netlink: Conntrack attr has 4 unknown bytes [ 405.731107][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.733123][ T5912] hid-generic 0005:046E:0007.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 405.798086][ T9043] nvmet: connect request for invalid subsystem testsubsys! [ 405.801051][ T9116] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 405.911580][ T9121] wlan0 speed is unknown, defaulting to 1000 [ 405.926599][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 407.170027][ T5888] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 407.455551][ T5888] usb 8-1: Using ep0 maxpacket: 8 [ 407.456597][ T5888] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 407.458865][ T5888] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.458891][ T5888] usb 8-1: config 0 has no interface number 0 [ 407.458926][ T5888] usb 8-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.459025][ T5888] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 407.459051][ T5888] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 407.459088][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.518958][ C2] hpet_rtc_timer_reinit: 29 callbacks suppressed [ 407.518984][ C2] hpet: Lost 6 RTC interrupts [ 407.596004][ C2] hpet: Lost 1 RTC interrupts [ 407.612025][ T43] audit: type=1800 audit(1789436427.854:1063): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133681 res=0 errno=0 [ 407.620241][ T43] audit: type=1800 audit(1789436427.854:1064): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=133685 res=0 errno=0 [ 407.622901][ T9139] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 407.622921][ T9139] netlink: 200 bytes leftover after parsing attributes in process `syz.2.577'. [ 407.622932][ T9139] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 407.622943][ T9139] netlink: 29 bytes leftover after parsing attributes in process `syz.2.577'. [ 407.645480][ T9139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.577'. [ 407.710474][ T5888] usb 8-1: config 0 descriptor?? [ 407.716129][ T43] audit: type=1800 audit(1789436427.964:1065): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133639 res=0 errno=0 [ 407.727890][ T43] audit: type=1800 audit(1789436427.974:1066): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=133668 res=0 errno=0 [ 407.742901][ T43] audit: type=1800 audit(1789436427.984:1067): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=133646 res=0 errno=0 [ 407.744185][ T43] audit: type=1800 audit(1789436427.984:1068): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=133647 res=0 errno=0 [ 407.745093][ T43] audit: type=1800 audit(1789436427.984:1069): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133769 res=0 errno=0 [ 407.787360][ C2] hpet: Lost 1 RTC interrupts [ 407.878456][ T5888] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 411.084529][ T9157] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 411.084551][ T9157] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 411.084562][ T9157] netlink: 'syz.0.579': attribute type 3 has an invalid length. [ 411.084574][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 411.343716][ T9167] mmap: syz.0.579 (9167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 412.185677][ C0] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 412.222445][ T35] usb 8-1: USB disconnect, device number 9 [ 412.541327][ T9171] 9pnet_virtio: no channels available for device syz [ 412.834192][ T9154] syz.0.579 (9154): drop_caches: 3 [ 412.871784][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 412.871802][ T43] audit: type=1800 audit(1789436433.104:1074): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134286 res=0 errno=0 [ 412.931444][ C2] hpet: Lost 1 RTC interrupts [ 412.942826][ T9180] input: syz0 as /devices/virtual/input/input15 [ 413.029915][ C2] hpet: Lost 1 RTC interrupts [ 413.337240][ T9179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'. [ 413.405626][ T43] audit: type=1800 audit(1789436433.624:1075): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.584" name="b_vendor_code" dev="configfs" ino=26906 res=0 errno=0 [ 413.474532][ T43] audit: type=1800 audit(1789436433.714:1076): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=134301 res=0 errno=0 [ 413.474590][ T43] audit: type=1800 audit(1789436433.714:1077): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=134304 res=0 errno=0 [ 413.477733][ T43] audit: type=1800 audit(1789436433.724:1078): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=134303 res=0 errno=0 [ 413.478857][ T43] audit: type=1800 audit(1789436433.724:1079): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=134302 res=0 errno=0 [ 413.650417][ T43] audit: type=1800 audit(1789436433.894:1080): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=134293 res=0 errno=0 [ 413.660062][ C2] hpet: Lost 1 RTC interrupts [ 413.794335][ T5740] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 413.847082][ T9184] gfs2: error -5 reading superblock [ 413.986092][ T9191] loop9: detected capacity change from 0 to 2640 [ 413.986661][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986700][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986728][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986756][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986783][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986823][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986863][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986890][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986906][ T9191] ldm_validate_partition_table(): Disk read failed. [ 413.986933][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.986960][ T9191] Buffer I/O error on dev loop9, logical block 0, async page read [ 413.987004][ T9191] Dev loop9: unable to read RDB block 0 [ 413.987149][ T9191] loop9: unable to read partition table [ 413.987347][ T9191] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 414.150340][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 414.801256][ T9198] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 414.801280][ T9198] netlink: 200 bytes leftover after parsing attributes in process `syz.1.588'. [ 414.801293][ T9198] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 414.801304][ T9198] netlink: 29 bytes leftover after parsing attributes in process `syz.1.588'. [ 415.035644][ T9204] netlink: 128 bytes leftover after parsing attributes in process `syz.1.588'. [ 415.420062][ T9203] 9pnet_virtio: no channels available for device syz [ 416.303826][ T9220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.437000][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 416.626248][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 416.626974][ T35] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.627973][ T35] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.627994][ T35] usb 7-1: config 0 has no interface number 0 [ 416.628025][ T35] usb 7-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.628045][ T35] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 416.628067][ T35] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 416.628098][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.663695][ T35] usb 7-1: config 0 descriptor?? [ 417.204623][ T35] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 418.036191][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 418.036212][ T43] audit: type=1804 audit(1789436438.274:1100): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.596" name="/newroot/proc/bus/input/devices" dev="proc" ino=4026532007 res=1 errno=0 [ 418.037723][ C2] hpet: Lost 1 RTC interrupts [ 418.050894][ T9220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.078947][ C2] hpet: Lost 1 RTC interrupts [ 418.180932][ C2] hpet: Lost 1 RTC interrupts [ 418.201779][ T43] audit: type=1800 audit(1789436438.434:1101): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.597" name="zoned" dev="configfs" ino=27007 res=0 errno=0 [ 418.225667][ C2] hpet: Lost 1 RTC interrupts [ 418.300474][ C2] hpet: Lost 2 RTC interrupts [ 418.335670][ T43] audit: type=1800 audit(1789436438.564:1102): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.597" name="power" dev="configfs" ino=27008 res=0 errno=0 [ 418.429621][ C2] hpet: Lost 1 RTC interrupts [ 418.514967][ T9220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.711532][ C2] hpet: Lost 1 RTC interrupts [ 419.178121][ T9220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.096385][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.781209][ T5815] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.855985][ T5815] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.856109][ T5815] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.980973][ T5912] usb 7-1: USB disconnect, device number 14 [ 421.938731][ T9270] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 421.938758][ T9270] netlink: 200 bytes leftover after parsing attributes in process `syz.2.602'. [ 421.938774][ T9270] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 421.938788][ T9270] netlink: 29 bytes leftover after parsing attributes in process `syz.2.602'. [ 422.058801][ T9272] gfs2: error -5 reading superblock [ 422.160544][ T9270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.602'. [ 423.149705][ C2] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 423.149728][ C2] hpet: Lost 1 RTC interrupts [ 423.309939][ C2] hpet: Lost 1 RTC interrupts [ 423.361656][ C2] hpet: Lost 1 RTC interrupts [ 423.397369][ T43] audit: type=1800 audit(1789436443.584:1111): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 423.458667][ T43] audit: type=1800 audit(1789436443.684:1112): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.607" name="file0" dev="tmpfs" ino=939 res=0 errno=0 [ 423.464759][ T43] audit: type=1800 audit(1789436443.684:1113): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="idVendor" dev="configfs" ino=28795 res=0 errno=0 [ 423.464805][ T43] audit: type=1800 audit(1789436443.684:1114): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="idProduct" dev="configfs" ino=28796 res=0 errno=0 [ 423.465015][ T43] audit: type=1800 audit(1789436443.684:1115): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="serialnumber" dev="configfs" ino=28798 res=0 errno=0 [ 423.654779][ C2] hpet: Lost 4 RTC interrupts [ 423.663076][ T43] audit: type=1800 audit(1789436443.884:1116): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="UDC" dev="configfs" ino=27821 res=0 errno=0 [ 423.994104][ T6137] usb 5-1: USB disconnect, device number 3 [ 424.552420][ T9309] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.862171][ T5912] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 424.937130][ T9309] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.035551][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 425.036309][ T5912] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.052623][ T5912] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.052651][ T5912] usb 7-1: config 0 has no interface number 0 [ 425.052696][ T5912] usb 7-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.052719][ T5912] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 425.052745][ T5912] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 425.052784][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.081068][ T5912] usb 7-1: config 0 descriptor?? [ 425.124268][ T5912] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 425.137640][ T9309] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.344308][ T9309] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.550655][ T5817] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 425.780453][ T5817] usb 8-1: Using ep0 maxpacket: 32 [ 425.781296][ T5817] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 425.782715][ T5817] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.782738][ T5817] usb 8-1: config 0 has no interface number 0 [ 425.791934][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.791956][ T5817] usb 8-1: Product: syz [ 425.791967][ T5817] usb 8-1: Manufacturer: syz [ 425.791979][ T5817] usb 8-1: SerialNumber: syz [ 425.794490][ T5817] usb 8-1: config 0 descriptor?? [ 425.797291][ T5817] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 425.797365][ T5817] usb 8-1: selecting invalid altsetting 1 [ 425.797379][ T5817] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 425.885034][ T9331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 425.885061][ T9331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.885124][ T9331] vhci_hcd vhci_hcd.0: Device attached [ 425.952612][ T5817] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.955839][ T5817] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 425.955886][ T5817] usb 8-1: media controller created [ 425.990063][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.206069][ T5888] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 426.207499][ T76] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 426.424366][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.425222][ T5888] usb 5-1: config 0 has no interfaces? [ 426.425251][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.429021][ T5888] usb 5-1: config 0 descriptor?? [ 426.534856][ T9335] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 426.534880][ T9335] netlink: 244 bytes leftover after parsing attributes in process `syz.3.612'. [ 426.648007][ T5888] usb 5-1: USB disconnect, device number 4 [ 426.663252][ T9332] vhci_hcd: connection closed [ 426.668818][ T12] vhci_hcd vhci_hcd.0: stop threads [ 426.668846][ T12] vhci_hcd vhci_hcd.0: release socket [ 426.669051][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 426.701462][ T76] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 427.126032][ T5817] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 427.127787][ T5817] zl10353_read_register: readreg error (reg=127, ret==-110) [ 427.735466][ T5817] usb 8-1: USB disconnect, device number 10 [ 427.811785][ T9349] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 427.912147][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.912186][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.912210][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.045591][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.086118][ T1684] usb 7-1: USB disconnect, device number 15 [ 428.211134][ C2] hpet_rtc_timer_reinit: 48 callbacks suppressed [ 428.211155][ C2] hpet: Lost 1 RTC interrupts [ 428.371780][ C2] hpet: Lost 1 RTC interrupts [ 428.493598][ C2] hpet: Lost 1 RTC interrupts [ 428.734824][ T43] audit: type=1800 audit(1789436448.954:1144): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 428.812354][ T43] audit: type=1800 audit(1789436449.034:1145): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.622" name="use" dev="configfs" ino=27260 res=0 errno=0 [ 428.835530][ T9359] FAULT_INJECTION: forcing a failure. [ 428.835530][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 428.835555][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.2.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.835578][ T9359] Tainted: [L]=SOFTLOCKUP [ 428.835584][ T9359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.835593][ T9359] Call Trace: [ 428.835598][ T9359] [ 428.835605][ T9359] dump_stack_lvl+0x100/0x190 [ 428.835634][ T9359] should_fail_ex.cold+0x5/0xa [ 428.835659][ T9359] should_failslab+0xc2/0x120 [ 428.835683][ T9359] __kmalloc_cache_noprof+0x91/0x6d0 [ 428.835709][ T9359] ? resv_map_alloc+0x46/0x400 [ 428.835732][ T9359] resv_map_alloc+0x46/0x400 [ 428.835752][ T9359] hugetlbfs_get_inode+0x385/0x700 [ 428.835780][ T9359] ? do_raw_spin_lock+0x128/0x260 [ 428.835834][ T9359] hugetlb_file_setup+0x15b/0x5b0 [ 428.835855][ T9359] memfd_alloc_file+0xc2/0x610 [ 428.835882][ T9359] ? _raw_spin_unlock+0x28/0x50 [ 428.835907][ T9359] ? __pfx_memfd_alloc_file+0x10/0x10 [ 428.835938][ T9359] __do_sys_memfd_create+0x236/0x3d0 [ 428.835957][ T9359] __do_fast_syscall_32+0x13a/0x8b0 [ 428.835984][ T9359] do_fast_syscall_32+0x32/0x70 [ 428.836011][ T9359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.836030][ T9359] RIP: 0023:0xf706efec [ 428.836051][ T9359] Code: Unable to access opcode bytes at 0xf706efc2. [ 428.836061][ T9359] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164 [ 428.836079][ T9359] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004 [ 428.836091][ T9359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.836100][ T9359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.836109][ T9359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.836120][ T9359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.836151][ T9359] [ 428.909679][ T43] audit: type=1800 audit(1789436449.134:1146): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15793 res=0 errno=0 [ 428.933111][ T43] audit: type=1800 audit(1789436449.134:1147): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.621" name="westwood" dev="tmpfs" ino=916 res=0 errno=0 [ 429.324230][ T9363] Cannot find add_set index 3 as target [ 429.351719][ C2] hpet: Lost 1 RTC interrupts [ 429.473485][ C2] hpet: Lost 1 RTC interrupts [ 429.555047][ C2] hpet: Lost 2 RTC interrupts [ 430.207993][ T5892] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 430.416472][ T9376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.439476][ T5892] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.440507][ T5892] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.440528][ T5892] usb 8-1: config 0 has no interfaces? [ 430.440553][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.443007][ T5892] usb 8-1: config 0 descriptor?? [ 430.538624][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 430.715484][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 430.716749][ T5888] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.717707][ T5888] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.723464][ T5888] usb 5-1: config 0 has no interface number 0 [ 430.723504][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.723525][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.723551][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.723573][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.723607][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 ** replaying previous printk message ** [ 430.723607][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.726897][ T5888] usb 5-1: config 0 descriptor?? [ 430.764145][ T5888] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 430.785594][ T5892] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 430.972786][ C0] ================================================================== [ 430.972806][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 430.972833][ C0] Read of size 1 at addr ffff88801be41a62 by task syz.0.627/9374 [ 430.972853][ C0] [ 430.972867][ C0] CPU: 0 UID: 0 PID: 9374 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.972899][ C0] Tainted: [L]=SOFTLOCKUP [ 430.972908][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.972921][ C0] Call Trace: [ 430.972930][ C0] [ 430.972940][ C0] dump_stack_lvl+0x100/0x190 [ 430.972966][ C0] print_report+0x13d/0x4b0 [ 430.972997][ C0] ? __virt_addr_valid+0x239/0x430 [ 430.973031][ C0] ? find_endpoint+0x2a3/0x2c0 [ 430.973049][ C0] kasan_report+0xdf/0x1c0 [ 430.973079][ C0] ? find_endpoint+0x2a3/0x2c0 [ 430.973100][ C0] find_endpoint+0x2a3/0x2c0 [ 430.973118][ C0] dummy_timer+0x500/0x3700 [ 430.973151][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 430.973181][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 430.973213][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 430.973238][ C0] ? mark_held_locks+0x40/0x70 [ 430.973262][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 430.973291][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 430.973315][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 430.973345][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 430.973371][ C0] handle_softirqs+0x1e6/0x9d0 [ 430.973401][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 430.973462][ C0] ? _raw_spin_unlock+0x28/0x50 [ 430.973489][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 430.973516][ C0] __irq_exit_rcu+0x16a/0x210 [ 430.973551][ C0] irq_exit_rcu+0x9/0x30 [ 430.973581][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 430.973613][ C0] [ 430.973620][ C0] [ 430.973629][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.973654][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 430.973682][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 430.973701][ C0] RSP: 0000:ffffc900055a7750 EFLAGS: 00000246 [ 430.973723][ C0] RAX: 0000000000000006 RBX: ffff888028d34000 RCX: 0000000000000040 [ 430.973738][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 430.973754][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 430.973768][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 430.973783][ C0] R13: ffff888022919478 R14: 0000000000000000 R15: ffff888022919400 [ 430.973805][ C0] dummy_urb_enqueue+0x56c/0x880 [ 430.973832][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 430.973858][ C0] usb_submit_urb+0x827/0x19b0 [ 430.973889][ C0] ld_usb_open+0x5c3/0x930 [ 430.973914][ C0] ? chrdev_open+0x589/0x6a0 [ 430.973939][ C0] ? __pfx_ld_usb_open+0x10/0x10 [ 430.973964][ C0] usb_open+0x189/0x220 [ 430.973983][ C0] ? __pfx_usb_open+0x10/0x10 [ 430.974004][ C0] chrdev_open+0x234/0x6a0 [ 430.974029][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 430.974053][ C0] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 430.974086][ C0] do_dentry_open+0x6ab/0x14d0 [ 430.974109][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 430.974135][ C0] vfs_open+0x82/0x3f0 [ 430.974162][ C0] path_openat+0x19fa/0x2440 [ 430.974191][ C0] ? __pfx_path_openat+0x10/0x10 [ 430.974221][ C0] do_file_open+0x20e/0x430 [ 430.974253][ C0] ? __pfx_do_file_open+0x10/0x10 [ 430.974281][ C0] ? _raw_spin_unlock+0x28/0x50 [ 430.974306][ C0] ? alloc_fd+0x471/0x7a0 [ 430.974334][ C0] do_sys_openat2+0x10f/0x1e0 [ 430.974363][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.974395][ C0] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 430.974419][ C0] __ia32_compat_sys_openat+0x12d/0x210 [ 430.974448][ C0] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 430.974486][ C0] do_int80_emulation+0x166/0x650 [ 430.974522][ C0] asm_int80_emulation+0x1a/0x20 [ 430.974547][ C0] RIP: 0023:0xf71c75ab [ 430.974562][ C0] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 430.974582][ C0] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 430.974603][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100 [ 430.974618][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.974631][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.974643][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 430.974657][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.974678][ C0] [ 430.974686][ C0] [ 430.974691][ C0] Allocated by task 6040: [ 430.974701][ C0] kasan_save_stack+0x30/0x50 [ 430.974722][ C0] kasan_save_track+0x14/0x30 [ 430.974745][ C0] __kasan_kmalloc+0xaa/0xb0 [ 430.974767][ C0] __kmalloc_noprof+0x32f/0x840 [ 430.974789][ C0] usb_copy_descriptors+0xcd/0x320 [ 430.974820][ C0] f_midi2_bind+0x1dad/0x2770 [ 430.974843][ C0] usb_add_function+0x219/0x890 [ 430.974861][ C0] configfs_composite_bind+0xd83/0x1960 [ 430.974881][ C0] gadget_bind_driver+0x28c/0xbf0 [ 430.974922][ C0] really_probe+0x241/0xa60 [ 430.974950][ C0] __driver_probe_device+0x210/0x460 [ 430.974973][ C0] driver_probe_device+0x4a/0x140 [ 430.974997][ C0] __driver_attach+0x21f/0x5b0 [ 430.975023][ C0] bus_for_each_dev+0x13e/0x1d0 [ 430.975042][ C0] bus_add_driver+0x305/0x5b0 [ 430.975063][ C0] driver_register+0x1e2/0x360 [ 430.975091][ C0] usb_gadget_register_driver_owner+0x132/0x210 [ 430.975115][ C0] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 430.975143][ C0] configfs_write_iter+0x302/0x4e0 [ 430.975169][ C0] vfs_write+0x6af/0x1050 [ 430.975188][ C0] ksys_write+0x12a/0x250 [ 430.975207][ C0] __do_fast_syscall_32+0x13a/0x8b0 [ 430.975236][ C0] do_fast_syscall_32+0x32/0x70 [ 430.975265][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.975291][ C0] [ 430.975296][ C0] Freed by task 9298: [ 430.975307][ C0] kasan_save_stack+0x30/0x50 [ 430.975330][ C0] kasan_save_track+0x14/0x30 [ 430.975353][ C0] kasan_save_free_info+0x3b/0x70 [ 430.975380][ C0] __kasan_slab_free+0x5f/0x80 [ 430.975403][ C0] kfree+0x22b/0x6d0 [ 430.975431][ C0] usb_free_all_descriptors+0x81/0x1a0 [ 430.975463][ C0] purge_configs_funcs+0x285/0x510 [ 430.975491][ C0] configfs_composite_unbind+0xae/0x210 [ 430.975515][ C0] gadget_unbind_driver+0x20c/0x4f0 [ 430.975546][ C0] device_remove+0xcb/0x180 [ 430.975571][ C0] device_release_driver_internal+0x44e/0x620 [ 430.975599][ C0] driver_detach+0xd8/0x1b0 [ 430.975626][ C0] bus_remove_driver+0x13b/0x2e0 [ 430.975646][ C0] driver_unregister+0x76/0xb0 [ 430.975674][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 430.975698][ C0] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 430.975728][ C0] configfs_write_iter+0x302/0x4e0 [ 430.975754][ C0] vfs_write+0x6af/0x1050 [ 430.975769][ C0] ksys_write+0x12a/0x250 [ 430.975786][ C0] __do_fast_syscall_32+0x13a/0x8b0 [ 430.975816][ C0] do_fast_syscall_32+0x32/0x70 [ 430.975847][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.975872][ C0] [ 430.975877][ C0] The buggy address belongs to the object at ffff88801be41800 [ 430.975877][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 430.975895][ C0] The buggy address is located 610 bytes inside of [ 430.975895][ C0] freed 1024-byte region [ffff88801be41800, ffff88801be41c00) [ 430.975914][ C0] [ 430.975918][ C0] The buggy address belongs to the physical page: [ 430.975928][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801be42800 pfn:0x1be40 [ 430.975950][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 430.975968][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 430.975990][ C0] page_type: f5(slab) [ 430.976010][ C0] raw: 00fff00000000240 ffff88801c042dc0 ffffea000051b410 ffffea0000517c10 [ 430.976029][ C0] raw: ffff88801be42800 000000000010000e 00000000f5000000 0000000000000000 [ 430.976046][ C0] head: 00fff00000000240 ffff88801c042dc0 ffffea000051b410 ffffea0000517c10 [ 430.976066][ C0] head: ffff88801be42800 000000000010000e 00000000f5000000 0000000000000000 [ 430.976086][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 430.976106][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 430.976118][ C0] page dumped because: kasan: bad access detected [ 430.976129][ C0] page_owner tracks the page as allocated [ 430.976137][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1161, tgid 1161 (kworker/u33:11), ts 54622560737 [ 430.976172][ C0] post_alloc_hook+0xfd/0x120 [ 430.976198][ C0] get_page_from_freelist+0x110d/0x35d0 [ 430.976218][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 430.976239][ C0] new_slab+0xa9/0x6e0 [ 430.976255][ C0] refill_objects+0xe3/0x410 [ 430.976274][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 430.976303][ C0] __kmalloc_noprof+0x67c/0x840 [ 430.976321][ C0] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 430.976348][ C0] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 430.976371][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 430.976395][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 430.976418][ C0] process_one_work+0xac7/0x1b10 [ 430.976442][ C0] worker_thread+0x5ef/0xe50 [ 430.976461][ C0] kthread+0x373/0x450 [ 430.976481][ C0] ret_from_fork+0x730/0xd60 [ 430.976511][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.976530][ C0] page last free pid 113 tgid 113 ts 52758736893 stack trace: [ 430.976550][ C0] free_unref_folios+0xa4a/0x1790 [ 430.976581][ C0] shrink_folio_list+0x2f38/0x5e40 [ 430.976603][ C0] evict_folios+0x348/0x1650 [ 430.976628][ C0] try_to_shrink_lruvec+0x366/0x830 [ 430.976652][ C0] shrink_one+0x307/0x850 [ 430.976675][ C0] shrink_node+0x2b20/0x4320 [ 430.976698][ C0] balance_pgdat+0xb20/0x1f00 [ 430.976719][ C0] kswapd+0x556/0xb50 [ 430.976743][ C0] kthread+0x373/0x450 [ 430.976761][ C0] ret_from_fork+0x730/0xd60 [ 430.976786][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.976803][ C0] [ 430.976807][ C0] Memory state around the buggy address: [ 430.976817][ C0] ffff88801be41900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.976829][ C0] ffff88801be41980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.976840][ C0] >ffff88801be41a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.976850][ C0] ^ [ 430.976861][ C0] ffff88801be41a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.976874][ C0] ffff88801be41b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.976884][ C0] ================================================================== [ 430.976896][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 431.775998][ C0] CPU: 0 UID: 0 PID: 9374 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.783145][ C0] Tainted: [L]=SOFTLOCKUP [ 431.798709][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.804235][ C0] Call Trace: [ 431.806117][ C0] [ 431.807724][ C0] dump_stack_lvl+0x100/0x190 [ 431.810011][ C0] vpanic+0x553/0x970 [ 431.817880][ C0] ? __pfx_vpanic+0x10/0x10 [ 431.820757][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 431.839114][ C0] ? find_endpoint+0x2a3/0x2c0 [ 431.841328][ C0] panic+0xd1/0xe0 [ 431.843426][ C0] ? __pfx_panic+0x10/0x10 [ 431.845884][ C0] ? end_report.part.0+0x23/0x90 [ 431.848562][ C0] ? rcu_is_watching+0x13/0xc0 [ 431.851516][ C0] ? end_report.part.0+0x23/0x90 [ 431.854759][ C0] check_panic_on_warn.cold+0x19/0x34 [ 431.872096][ C0] end_report.part.0+0x3a/0x90 [ 431.875493][ C0] kasan_report.cold+0xe/0x18 [ 431.878256][ C0] ? find_endpoint+0x2a3/0x2c0 [ 431.881031][ C0] find_endpoint+0x2a3/0x2c0 [ 431.883983][ C0] dummy_timer+0x500/0x3700 [ 431.886819][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 431.895164][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 431.898524][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 431.905833][ C0] ? mark_held_locks+0x40/0x70 [ 431.915154][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.919722][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 431.922398][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 431.924916][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 431.934239][ C0] handle_softirqs+0x1e6/0x9d0 [ 431.937169][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 431.949191][ C0] ? _raw_spin_unlock+0x28/0x50 [ 431.954657][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 431.964628][ C0] __irq_exit_rcu+0x16a/0x210 [ 431.966435][ C0] irq_exit_rcu+0x9/0x30 [ 431.968044][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 431.974971][ C0] [ 431.976473][ C0] [ 431.978065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.980703][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 431.983619][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 5a 15 f6 48 89 df e8 7e b1 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a7 04 f6 65 48 83 3d 74 a4 ba 08 00 74 16 5b [ 431.996749][ C0] RSP: 0000:ffffc900055a7750 EFLAGS: 00000246 [ 431.999104][ C0] RAX: 0000000000000006 RBX: ffff888028d34000 RCX: 0000000000000040 [ 432.002127][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 432.007086][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 432.011977][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 432.026405][ C0] R13: ffff888022919478 R14: 0000000000000000 R15: ffff888022919400 [ 432.031110][ C0] dummy_urb_enqueue+0x56c/0x880 [ 432.035543][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 432.040414][ C0] usb_submit_urb+0x827/0x19b0 [ 432.044221][ C0] ld_usb_open+0x5c3/0x930 [ 432.046844][ C0] ? chrdev_open+0x589/0x6a0 [ 432.050164][ C0] ? __pfx_ld_usb_open+0x10/0x10 [ 432.053776][ C0] usb_open+0x189/0x220 [ 432.056337][ C0] ? __pfx_usb_open+0x10/0x10 [ 432.059286][ C0] chrdev_open+0x234/0x6a0 [ 432.063233][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 432.068118][ C0] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 432.072236][ C0] do_dentry_open+0x6ab/0x14d0 [ 432.075032][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 432.078128][ C0] vfs_open+0x82/0x3f0 [ 432.081073][ C0] path_openat+0x19fa/0x2440 [ 432.086231][ C0] ? __pfx_path_openat+0x10/0x10 [ 432.092545][ C0] do_file_open+0x20e/0x430 [ 432.095699][ C0] ? __pfx_do_file_open+0x10/0x10 [ 432.099720][ C0] ? _raw_spin_unlock+0x28/0x50 [ 432.102743][ C0] ? alloc_fd+0x471/0x7a0 [ 432.105963][ C0] do_sys_openat2+0x10f/0x1e0 [ 432.137961][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.144851][ C0] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 432.153378][ C0] __ia32_compat_sys_openat+0x12d/0x210 [ 432.156784][ C0] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 432.164153][ C0] do_int80_emulation+0x166/0x650 [ 432.169339][ C0] asm_int80_emulation+0x1a/0x20 [ 432.175255][ C0] RIP: 0023:0xf71c75ab [ 432.178046][ C0] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 432.199585][ C0] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 432.207425][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100 [ 432.213144][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.217565][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.224308][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 432.231859][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.235778][ C0] [ 432.238670][ C0] Kernel Offset: disabled [ 432.241602][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:40:52 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc900000073c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=0000000000000006 R15=ffffc900000076e0 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033623ffc CR3=00000000519c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cbfcb00 RSI=ffffffff81b65e9e RDI=ffff88801cbfcb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b65e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888096a60000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08414a4e9c CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801cb40000 RSI=ffffffff81e9b27e RDI=ffff88801cb40000 RBP=ffffc9000042fda8 RSP=ffffc9000042fa40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=203a73676e697275 R12=0000000000000000 R13=1ffff92000085f53 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820b6210 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c366b28 CR3=000000006f860000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000309189 RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53dbff4 CR3=000000006f860000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000