last executing test programs: 2m19.428681242s ago: executing program 1 (id=205): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, 0xffffffffffffffff, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000000480)={&(0x7f00000003c0)=[{0x2, 0x0, 0x207fff, 0x4, 0x8001, 0x10001, 0xce3a, 0x6}, {0x1, 0x0, 0xfffffffffffffff9, 0xe, 0x207, 0xa, 0xffffffffffffffff, 0x80000000}, {0x0, 0x0, 0x7, 0xfff, 0x80, 0x4, 0xa, 0xe0}], 0x3, 0x38, 0x1, 0x6}) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)="ff02046cb882fa34c449d5758ef01ad41de9d90000", 0x15) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 2m17.735321708s ago: executing program 1 (id=211): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9286649abd8d4f18, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) 2m16.645162669s ago: executing program 1 (id=213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000004000000010000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00674a853c9474fa910800000100"/28], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 2m15.493497647s ago: executing program 1 (id=218): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './sys/bus/pci/devices/0000:00:1d.0/remove\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r2, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r2, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x733, 0x70bd28, 0x259fdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) 2m14.874603883s ago: executing program 1 (id=220): socket$inet(0x2, 0x800, 0x7) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140)="d8ba863eca3cec988b0ec48186bf87eab76bb32890a576b5a7430a1ab1800a8ef3de638bbec47bb6e2da0276d527529521b7833b1059faebb1f47ca00bc651b39cdebb9ef78d8ba3c84df74fa5a27e57b5fef9196f842d1768d58d44655cb61003d11e72e98f2c9c1be68c17bb9367", &(0x7f0000000680)="c11ee22936d87e38711f0896317bab22de626f07245fe9080df62441656e63c4288419bffe2476f67336d578fe1bdfc77c66600c1e62ac36edcbb666e01e4e7a8c07759de33b914829f63ac3e6259ca42030e43a5f3aa7bd13550f867ee57179c96512b21fb684b41b547e41b7f37aff9f60e997568eed87ce172b69a95ece3dbe025058c809ddf18bfbf00e0b454d116b98f146840cc37da8bb284e38159e2b7a202e5582d896f679f93cc81fbfdf765ebbf9c0e41fd6da08e2139b7c7ec44b3c1e11f732552df82828318d3af2525042917a83b35c624b7217b0f54470bc139b895e1735f5ee24b1baf4cb10c803ae12bc10c03d9c7adadfc3830be6bd"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x36, 0x7ff, 0x8, 0x8, 0x40}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, 0x0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x808d1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m14.264878284s ago: executing program 1 (id=223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 2m14.236833806s ago: executing program 32 (id=223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 11.46844129s ago: executing program 4 (id=533): socket$inet(0x2, 0x800, 0x7) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140)="d8ba863eca3cec988b0ec48186bf87eab76bb32890a576b5a7430a1ab1800a8ef3de638bbec47bb6e2da0276d527529521b7833b1059faebb1f47ca00bc651b39cdebb9ef78d8ba3c84df74fa5a27e57b5fef9196f842d1768d58d44655cb61003d11e72e98f2c9c1be68c17bb9367", &(0x7f0000000680)="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"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x36, 0x7ff, 0x8, 0x8, 0x40}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, 0x0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000280), 0x0, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x808d1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11.27056177s ago: executing program 0 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000009c0)=0x4, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYBLOB="030000"], 0x8) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x40201, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) write(r3, &(0x7f00000001f8), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syz_io_uring_setup(0x6847, &(0x7f0000000240)={0x0, 0xf034, 0x8, 0x1, 0x301}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000480)=""/35, 0x23) 10.374545127s ago: executing program 0 (id=528): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@arm64={0x6, 0x3, 0x0, '\x00', 0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r1, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), 0x0, 0x1, r2}, 0x38) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x508f, &(0x7f0000000380)={0x0, 0xf59b, 0x2, 0x10003, 0x37b}, &(0x7f0000000140), &(0x7f00000000c0), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x5d7c, 0x8000, 0x2, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040), 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) 10.032469775s ago: executing program 3 (id=529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8000a00) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000440)={0x2, 0xfa}, 0x2) msgget(0x1, 0x220) msgrcv(0x0, &(0x7f0000002240)={0x0, ""/204}, 0xd4, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) dup3(r4, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 9.989237582s ago: executing program 2 (id=530): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) 9.682731264s ago: executing program 4 (id=531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, r4, 0x0) r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 8.363014699s ago: executing program 0 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x26e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESDEC=r2], 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x24050050) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x800c4151, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)="02f7fdce8391e730ad94494c9a04d8a3196e7f59e7a3a3a99be7e9176bd8fcab613343913b813a653520fab4b006e5b530629457f8c883347c62396a5b483208a6c72b17b197841e27f734b2e92ceae92a8fd1f95d03376a2ad9c515e1cd860384e5c94b9052ff9bc9483a18c2eec2fabaed97708c537a1c5e0c7898e8703a5399014c48a5c151efab55f78eccba156e1a4273ff4dedfe6938af90a925fad4126e7279009cc1c89d1c74758f3bd26426687c5dbf93203c7946f03f6372f044eb79d55d66597fc2c0192c55d1", 0xcc}) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x34, 0x2c, 0x0, @remote, @local, {[@hopopts={0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0xd259}, @ra={0x5, 0x2, 0x2}]}, @srh={0x33, 0x0, 0x4, 0x0, 0x5, 0x60, 0xfffd}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.311954869s ago: executing program 4 (id=534): r0 = syz_open_dev$cec(0x0, 0x0, 0x103000) r1 = epoll_create1(0x80000) syz_clone3(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x200f}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x101000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000240)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x1a000200, &(0x7f0000000180), 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x7, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x70, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) 8.287001898s ago: executing program 3 (id=535): madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20402, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 7.732152976s ago: executing program 2 (id=536): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r4, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 7.544733017s ago: executing program 2 (id=537): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee00) 6.981818219s ago: executing program 0 (id=538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 6.475127026s ago: executing program 2 (id=539): openat$audio(0xffffff9c, &(0x7f00000002c0), 0xc8102, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth0_virt_wifi\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x1065800, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 5.698346705s ago: executing program 3 (id=540): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 5.640320306s ago: executing program 4 (id=541): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$packet(0x11, 0x2, 0x300) 5.45054988s ago: executing program 0 (id=542): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000090601020000000000000000020000000900020073797a31000000000500010007000000300007801800018014000240fe8000"/67], 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 5.435956643s ago: executing program 3 (id=543): socket$inet(0x2, 0x800, 0x7) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140)="d8ba863eca3cec988b0ec48186bf87eab76bb32890a576b5a7430a1ab1800a8ef3de638bbec47bb6e2da0276d527529521b7833b1059faebb1f47ca00bc651b39cdebb9ef78d8ba3c84df74fa5a27e57b5fef9196f842d1768d58d44655cb61003d11e72e98f2c9c1be68c17bb9367", &(0x7f0000000680)="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"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x36, 0x7ff, 0x8, 0x8, 0x40}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, 0x0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x808d1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.230420465s ago: executing program 3 (id=544): socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.227296475s ago: executing program 2 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200}]) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x4800, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f0000000040)=0x8, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1d, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4, 0x401}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x5}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400440}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x180, r9, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x33e7bbf9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x532580ab}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1f0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ID={0x10, 0x3, "c9d369717f3be6011d574945"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4048090}, 0x400c005) 2.159295705s ago: executing program 4 (id=545): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r4, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 436.472546ms ago: executing program 0 (id=546): mkdirat(0xffffffffffffff9c, 0x0, 0xc5) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xffffffffffffffff, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3ff, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x2000c110}, 0xa45fed0062aa2040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000025, 0x0) chdir(0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100) 436.124348ms ago: executing program 2 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000140)={0x1000, 0xdfb, {}, {}, 0x200, 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d7866143596da4f800000000000000000900020073797a300000000005"], 0x30}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000440)={0xfffffffc, 0x400005, 0x4, {0x1, @raw_data="e5ca06de20588dda19f22adc384e41a7160ff2fb94e39db5eff62627ee6c53971f6e8b51368aee92194193828cbe187cf186026d0a47f13748bc27104b50e20d1fc144bc626e1950f0e7a0a02a5f27b79b593c4ece08816ce7c179d98ed0b3f32d8591771b1982eda6ca938d25dfef06f37d582f2940d7382a7ab4a45b2ebf1c59f6f324085fd53699be555d1a900581ade690c775d84fcdf1ee28d73208d48a3ecfe65acbe808e6f329ae315df0f9a5d2171328e6926db6ea4b46873a509b9f1e9c59a4b76aa28b"}, 0x959}) userfaultfd(0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x240000}, 0x14}, 0x1, 0x2b1e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x980) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1ff}, &(0x7f0000000280)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d002000000000000002001000fd0400010000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=virtio,vers000.u,cache=mmap,\x00\x00\x00\x00\x00\x00\x00']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) 11.146494ms ago: executing program 3 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=557): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r4 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r4}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x64}}, 0x2000400c) kernel console output (not intermixed with test programs): umber 4 using dummy_hcd [ 74.660719][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 74.662096][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 74.663242][ T10] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.663270][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.663296][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.677496][ T10] usb 5-1: config 0 descriptor?? [ 74.769287][ T855] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.908983][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 74.909078][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 74.911793][ T10] usb 5-1: USB disconnect, device number 4 [ 74.944234][ T855] usb 7-1: Using ep0 maxpacket: 32 [ 74.947297][ T855] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 74.952566][ T855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.956955][ T855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.962017][ T855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.964820][ T855] usb 7-1: Product: syz [ 74.966382][ T855] usb 7-1: Manufacturer: syz [ 74.968091][ T855] usb 7-1: SerialNumber: syz [ 74.987709][ T43] audit: type=1400 audit(1788716741.775:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6164 comm="syz.1.68" [ 74.995518][ T5025] kernel read not supported for file /video9 (pid: 5025 comm: kworker/1:3) [ 75.177850][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 75.279316][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 75.429583][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 75.430667][ T9] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 75.431802][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.431818][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.433700][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.433719][ T9] usb 8-1: Product: syz [ 75.433728][ T9] usb 8-1: Manufacturer: syz [ 75.433737][ T9] usb 8-1: SerialNumber: syz [ 75.540842][ T855] usb 7-1: USB disconnect, device number 7 [ 75.681228][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 76.628893][ T9] usb 8-1: USB disconnect, device number 4 [ 76.747875][ T6188] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 76.753037][ T6188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.764426][ T6188] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 76.773499][ T6188] netlink: 14 bytes leftover after parsing attributes in process `syz.0.74'. [ 76.795784][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.827089][ T6190] syz.0.74: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 76.828700][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 76.828717][ T6190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.828725][ T6190] Call Trace: [ 76.828732][ T6190] [ 76.828737][ T6190] dump_stack_lvl+0x100/0x190 [ 76.828758][ T6190] warn_alloc.cold+0x9e/0xb2 [ 76.828773][ T6190] ? __pfx_warn_alloc+0x10/0x10 [ 76.828796][ T6190] ? kernel_text_address+0x8d/0x100 [ 76.828817][ T6190] ? arch_stack_walk+0xa6/0xf0 [ 76.828844][ T6190] __vmalloc_node_range_noprof+0x123b/0x1420 [ 76.828867][ T6190] ? check_noncircular+0x97/0x160 [ 76.828889][ T6190] ? do_replace+0x1c6/0x490 [ 76.828912][ T6190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 76.828938][ T6190] ? __lock_acquire+0xe15/0x1ec0 [ 76.828960][ T6190] ? do_replace+0x1c6/0x490 [ 76.828971][ T6190] __vmalloc_node_noprof+0xad/0xf0 [ 76.828986][ T6190] ? do_replace+0x1c6/0x490 [ 76.828999][ T6190] __vmalloc_noprof+0xa3/0x120 [ 76.829013][ T6190] ? __pfx___vmalloc_noprof+0x10/0x10 [ 76.829038][ T6190] do_replace+0x1c6/0x490 [ 76.829051][ T6190] ? __pfx_do_replace+0x10/0x10 [ 76.829074][ T6190] compat_do_replace+0x589/0x7a0 [ 76.829091][ T6190] ? __pfx_compat_do_replace+0x10/0x10 [ 76.829128][ T6190] ? bpf_lsm_capable+0x9/0x10 [ 76.829147][ T6190] ? security_capable+0x80/0x260 [ 76.829165][ T6190] do_ebt_set_ctl+0x3f4/0x4a0 [ 76.829180][ T6190] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 76.829195][ T6190] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 76.829215][ T6190] ? futex_wake+0x4ea/0x5e0 [ 76.829230][ T6190] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.829247][ T6190] nf_setsockopt+0x8d/0xf0 [ 76.829264][ T6190] ip_setsockopt+0xcb/0xf0 [ 76.829283][ T6190] tcp_setsockopt+0xa7/0x100 [ 76.829297][ T6190] smc_setsockopt+0x1b6/0xa40 [ 76.829310][ T6190] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.829329][ T6190] ? __pfx_smc_setsockopt+0x10/0x10 [ 76.829343][ T6190] ? aa_sock_opt_perm+0x114/0x1e0 [ 76.829358][ T6190] ? __pfx_smc_setsockopt+0x10/0x10 [ 76.829374][ T6190] do_sock_setsockopt+0xf3/0x1d0 [ 76.829394][ T6190] __sys_setsockopt+0x119/0x190 [ 76.829410][ T6190] __ia32_sys_setsockopt+0xbc/0x160 [ 76.829423][ T6190] ? __do_fast_syscall_32+0xb3/0x8b0 [ 76.829439][ T6190] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.829455][ T6190] __do_fast_syscall_32+0x13a/0x8b0 [ 76.829473][ T6190] do_fast_syscall_32+0x32/0x70 [ 76.829489][ T6190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.829503][ T6190] RIP: 0023:0xf7f84fec [ 76.829520][ T6190] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 76.829527][ T6190] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 76.829545][ T6190] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 76.829553][ T6190] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 76.829561][ T6190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.829568][ T6190] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.829576][ T6190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.829593][ T6190] [ 76.830688][ T6190] Mem-Info: [ 76.830699][ T6190] active_anon:7040 inactive_anon:388 isolated_anon:0 [ 76.830699][ T6190] active_file:33 inactive_file:52811 isolated_file:0 [ 76.830699][ T6190] unevictable:1000 dirty:660 writeback:0 [ 76.830699][ T6190] slab_reclaimable:9672 slab_unreclaimable:50143 [ 76.830699][ T6190] mapped:26143 shmem:2979 pagetables:1040 [ 76.830699][ T6190] sec_pagetables:294 bounce:0 [ 76.830699][ T6190] kernel_misc_reclaimable:0 [ 76.830699][ T6190] free:42329 free_pcp:14019 free_cma:0 [ 76.834373][ T6190] Node 0 active_anon:104kB inactive_anon:212kB active_file:132kB inactive_file:16kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9504kB pagetables:1536kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.835379][ T6190] Node 1 active_anon:28556kB inactive_anon:1340kB active_file:0kB inactive_file:211228kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105040kB dirty:2628kB writeback:0kB shmem:10516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4032kB pagetables:2624kB sec_pagetables:40kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.835418][ T6190] Node 0 DMA free:2120kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 76.835456][ T6190] lowmem_reserve[]: 0 277 277 277 277 [ 76.835479][ T6190] Node 0 DMA32 free:17692kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:104kB inactive_anon:212kB active_file:132kB inactive_file:16kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:7728kB local_pcp:672kB free_cma:0kB [ 76.835518][ T6190] lowmem_reserve[]: 0 0 0 0 0 [ 76.835540][ T6190] Node 1 DMA32 free:149256kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28656kB inactive_anon:1340kB active_file:0kB inactive_file:211228kB unevictable:2000kB writepending:2628kB zspages:2140kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:47908kB local_pcp:6828kB free_cma:0kB [ 76.835571][ T6190] lowmem_reserve[]: 0 0 0 0 0 [ 76.835590][ T6190] Node 0 DMA: 12*4kB (UM) 1*8kB (M) 3*16kB (UM) 5*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2120kB [ 76.835706][ T6190] Node 0 DMA32: 3*4kB (UME) 16*8kB (UE) 9*16kB (UE) 76*32kB (UE) 44*64kB (UME) 17*128kB (UME) 11*256kB (UM) 6*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 17692kB [ 76.835813][ T6190] Node 1 DMA32: 231*4kB (UME) 197*8kB (UME) 277*16kB (UME) 53*32kB (UME) 113*64kB (UME) 67*128kB (UME) 23*256kB (UM) 12*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 24*4096kB (UM) = 149108kB [ 76.835920][ T6190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.835929][ T6190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.835937][ T6190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.835946][ T6190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.835954][ T6190] 56457 total pagecache pages [ 76.835958][ T6190] 463 pages in swap cache [ 76.835962][ T6190] Free swap = 118396kB [ 76.835966][ T6190] Total swap = 124996kB [ 76.835970][ T6190] 524155 pages RAM [ 76.835974][ T6190] 0 pages HighMem/MovableOnly [ 76.835978][ T6190] 212108 pages reserved [ 76.835981][ T6190] 0 pages cma reserved [ 76.839551][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.918962][ T6188] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 77.011056][ T6188] bond0 (unregistering): Released all slaves [ 77.047117][ T6190] mmap: syz.0.74 (6190) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.149715][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.299292][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 77.299849][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 77.303594][ T9] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.303617][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 77.303637][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.305242][ T9] usb 8-1: config 0 descriptor?? [ 77.531114][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 77.531239][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 77.532422][ T9] usb 8-1: USB disconnect, device number 5 [ 77.550669][ T6207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.655705][ T6213] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.799487][ T5025] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.969373][ T5025] usb 6-1: Using ep0 maxpacket: 32 [ 77.970190][ T5025] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 77.971439][ T5025] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.971463][ T5025] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.974126][ T5025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.974150][ T5025] usb 6-1: Product: syz [ 77.974164][ T5025] usb 6-1: Manufacturer: syz [ 77.974178][ T5025] usb 6-1: SerialNumber: syz [ 78.180054][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 78.552395][ T5025] usb 6-1: USB disconnect, device number 5 [ 78.909241][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.069211][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 79.071780][ T5853] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 79.076861][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.081927][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.087556][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.090862][ T5853] usb 5-1: Product: syz [ 79.092565][ T5853] usb 5-1: Manufacturer: syz [ 79.094397][ T5853] usb 5-1: SerialNumber: syz [ 79.307558][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 79.965192][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 80.424935][ T5853] usb 5-1: USB disconnect, device number 5 [ 81.339362][ T5025] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 81.489310][ T5025] usb 8-1: Using ep0 maxpacket: 16 [ 81.491695][ T5025] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 81.495939][ T5025] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.502484][ T5025] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.502534][ T5025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.511774][ T5025] usb 8-1: config 0 descriptor?? [ 81.736580][ T5025] usbhid 8-1:0.0: can't add hid device: -71 [ 81.736724][ T5025] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 81.749644][ T5025] usb 8-1: USB disconnect, device number 6 [ 81.837147][ T6268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.289768][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.469329][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 82.471560][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 82.472484][ T5853] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.472501][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.472516][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.474803][ T5853] usb 5-1: config 0 descriptor?? [ 82.500163][ T6285] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 82.500205][ T6285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.502144][ T6285] vhci_hcd vhci_hcd.0: Device attached [ 82.530765][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.533247][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.697993][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 82.699343][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.706320][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.712665][ T5853] usb 5-1: USB disconnect, device number 6 [ 82.799451][ T5025] usb 42-1: SetAddress Request (2) to port 0 [ 82.799638][ T5025] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.862058][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 82.863285][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 82.864504][ T9] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.864536][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.864563][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.867566][ T9] usb 8-1: config 0 descriptor?? [ 83.079777][ T6286] vhci_hcd: connection reset by peer [ 83.080627][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 83.080651][ T5796] vhci_hcd vhci_hcd.2: release socket [ 83.080997][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 83.098623][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 83.099003][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.106497][ T9] usb 8-1: USB disconnect, device number 7 [ 83.745821][ T6299] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 83.961308][ T6304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.103'. [ 84.120935][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 84.379342][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 84.385797][ T9] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 84.392231][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.392278][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.406861][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.411368][ T9] usb 7-1: Product: syz [ 84.413492][ T9] usb 7-1: Manufacturer: syz [ 84.416505][ T9] usb 7-1: SerialNumber: syz [ 84.630795][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 84.953713][ T9] usb 7-1: USB disconnect, device number 8 [ 85.309421][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 85.400201][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 85.459266][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 85.463506][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 85.469631][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.469681][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.469750][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.484219][ T10] usb 8-1: config 0 descriptor?? [ 85.559376][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 85.560505][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 85.563831][ T5853] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.563862][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.563888][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.569030][ T5853] usb 5-1: config 0 descriptor?? [ 85.802329][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 85.802437][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 85.804576][ T5853] usb 5-1: USB disconnect, device number 7 [ 85.893563][ T6315] Set syz1 is full, maxelem 6117 reached [ 85.924490][ T152] usb 8-1: USB disconnect, device number 8 [ 86.071069][ T6331] netlink: 64 bytes leftover after parsing attributes in process `syz.1.108'. [ 87.462544][ T152] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 87.519364][ T5853] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.620515][ T152] usb 8-1: Using ep0 maxpacket: 16 [ 87.621949][ T152] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 87.623959][ T152] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.623988][ T152] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.624013][ T152] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.626306][ T152] usb 8-1: config 0 descriptor?? [ 87.709808][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.709856][ T5853] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 87.720797][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.720827][ T5853] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.720956][ T5853] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.726270][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.726293][ T5853] usb 5-1: Product: syz [ 87.726397][ T5853] usb 5-1: Manufacturer: syz [ 87.726409][ T5853] usb 5-1: SerialNumber: syz [ 87.859330][ T152] usbhid 8-1:0.0: can't add hid device: -71 [ 87.859529][ T152] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 87.872442][ T152] usb 8-1: USB disconnect, device number 9 [ 87.879274][ T5025] usb 42-1: device descriptor read/8, error -110 [ 88.099373][ T855] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 88.250405][ T855] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 88.251306][ T855] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.251323][ T855] usb 6-1: config 0 has no interface number 0 [ 88.251349][ T855] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.251361][ T855] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 88.251375][ T855] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.251387][ T855] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 88.251400][ T855] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 88.251413][ T855] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.251434][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.253935][ T855] usb 6-1: config 0 descriptor?? [ 88.254593][ T6363] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.254742][ T6363] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.270098][ T5736] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.270720][ T5025] usb usb42-port1: attempt power cycle [ 88.275033][ T855] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 88.294110][ T5853] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.300508][ T5853] usb 5-1: USB disconnect, device number 8 [ 88.327884][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.421303][ T5736] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.421425][ T5736] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 88.430016][ T5736] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.433719][ T5736] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.437192][ T5736] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.445855][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.448965][ T5736] usb 7-1: Product: syz [ 88.449080][ T5736] usb 7-1: Manufacturer: syz [ 88.449213][ T5736] usb 7-1: SerialNumber: syz [ 88.879290][ T5025] usb usb42-port1: unable to enumerate USB device [ 89.752872][ T5736] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.760019][ T5736] usb 7-1: USB disconnect, device number 9 [ 89.774671][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.899346][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 90.049500][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 90.052846][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 90.058061][ T10] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.064525][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.064578][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.077356][ T10] usb 8-1: config 0 descriptor?? [ 90.420576][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 90.420713][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 90.433095][ T10] usb 8-1: USB disconnect, device number 10 [ 90.635668][ T6398] bridge1: entered promiscuous mode [ 90.639309][ T6398] bridge1: entered allmulticast mode [ 90.867425][ T855] usb 6-1: USB disconnect, device number 6 [ 91.082847][ T855] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 91.421325][ T6412] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.609462][ T855] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 91.759250][ T855] usb 6-1: Using ep0 maxpacket: 16 [ 91.767149][ T855] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 91.775403][ T855] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.775454][ T855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 91.775534][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.780815][ T855] usb 6-1: config 0 descriptor?? [ 92.051580][ T855] usbhid 6-1:0.0: can't add hid device: -71 [ 92.051775][ T855] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 92.061195][ T855] usb 6-1: USB disconnect, device number 7 [ 92.521773][ T6422] ip6t_rt: too many addresses specified [ 92.552819][ T6423] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 92.569462][ T6423] team0 (unregistering): Port device team_slave_0 removed [ 92.584208][ T6423] team0 (unregistering): Port device team_slave_1 removed [ 93.384420][ T6433] netlink: 64 bytes leftover after parsing attributes in process `syz.3.130'. [ 94.361510][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 94.366550][ T6443] vlan0: entered promiscuous mode [ 95.673657][ T6459] netlink: 'syz.2.136': attribute type 9 has an invalid length. [ 95.706360][ T6459] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.169327][ T6473] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.498511][ T6476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 96.498545][ T6476] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.508607][ T6476] vhci_hcd vhci_hcd.0: Device attached [ 96.641702][ T6484] netlink: 64 bytes leftover after parsing attributes in process `syz.0.142'. [ 96.851068][ T30] usb 40-1: SetAddress Request (2) to port 0 [ 96.851161][ T30] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 97.493158][ T6477] vhci_hcd: connection reset by peer [ 97.495145][ T13] vhci_hcd vhci_hcd.1: stop threads [ 97.495570][ T13] vhci_hcd vhci_hcd.1: release socket [ 97.497484][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 97.888933][ T6496] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 97.889018][ T6496] netlink: 84 bytes leftover after parsing attributes in process `syz.0.143'. [ 97.895575][ T6496] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 97.895597][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 97.956069][ T6499] null_blk: my_zoned_dev: using native zone append [ 97.992474][ T6499] null_blk: disk my_zoned_dev created [ 99.108707][ T6521] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.234594][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 100.041028][ T5853] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.189304][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 100.190286][ T5853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.191837][ T5853] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 100.191868][ T5853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.191882][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.191897][ T5853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.191911][ T5853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.191934][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.399778][ T5853] usb 6-1: usb_control_msg returned -32 [ 100.399871][ T5853] usbtmc 6-1:16.0: can't read capabilities [ 100.439797][ T855] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.589313][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 100.592270][ T855] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 100.598378][ T855] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.603561][ T855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.605920][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.612949][ T855] usb 5-1: config 0 descriptor?? [ 100.613532][ T5853] usb 6-1: USB disconnect, device number 8 [ 100.841978][ T855] usbhid 5-1:0.0: can't add hid device: -71 [ 100.845220][ T855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 100.851928][ T855] usb 5-1: USB disconnect, device number 9 [ 101.881996][ T30] usb 40-1: device descriptor read/8, error -110 [ 102.357200][ T30] usb usb40-port1: attempt power cycle [ 102.489244][ T5736] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 102.500798][ T6562] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 102.504798][ T6562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.508218][ T6562] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 102.517792][ T6562] netlink: 14 bytes leftover after parsing attributes in process `syz.1.159'. [ 102.550839][ T6562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.559809][ T6562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.565116][ T6562] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 102.573204][ T6565] syz.1.159: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.573389][ T6565] CPU: 3 UID: 0 PID: 6565 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 102.573406][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.573414][ T6565] Call Trace: [ 102.573419][ T6565] [ 102.573425][ T6565] dump_stack_lvl+0x100/0x190 [ 102.573460][ T6565] warn_alloc.cold+0x9e/0xb2 [ 102.573475][ T6565] ? __pfx_warn_alloc+0x10/0x10 [ 102.573518][ T6565] ? __lock_acquire+0x4c5/0x1ec0 [ 102.573541][ T6565] __vmalloc_node_range_noprof+0x123b/0x1420 [ 102.573558][ T6565] ? __lock_acquire+0x4c5/0x1ec0 [ 102.573575][ T6565] ? __lock_acquire+0x4c5/0x1ec0 [ 102.573596][ T6565] ? do_replace+0x1c6/0x490 [ 102.573622][ T6565] ? do_raw_spin_lock+0x128/0x260 [ 102.573644][ T6565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.573663][ T6565] ? __lock_acquire+0x4c5/0x1ec0 [ 102.573682][ T6565] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.573705][ T6565] ? do_replace+0x1c6/0x490 [ 102.573719][ T6565] __vmalloc_node_noprof+0xad/0xf0 [ 102.573737][ T6565] ? do_replace+0x1c6/0x490 [ 102.573753][ T6565] __vmalloc_noprof+0xa3/0x120 [ 102.573771][ T6565] ? __pfx___vmalloc_noprof+0x10/0x10 [ 102.573794][ T6565] do_replace+0x1c6/0x490 [ 102.573810][ T6565] ? __pfx_do_replace+0x10/0x10 [ 102.573830][ T6565] ? register_lock_class+0x3f/0x7b0 [ 102.573850][ T6565] compat_do_replace+0x589/0x7a0 [ 102.573865][ T6565] ? __pfx_compat_do_replace+0x10/0x10 [ 102.573888][ T6565] ? bpf_lsm_capable+0x9/0x10 [ 102.573906][ T6565] ? security_capable+0x80/0x260 [ 102.573922][ T6565] do_ebt_set_ctl+0x3f4/0x4a0 [ 102.573937][ T6565] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 102.573953][ T6565] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 102.573971][ T6565] ? futex_wake+0x4ea/0x5e0 [ 102.573987][ T6565] ? nf_sockopt_find.isra.0+0x222/0x290 [ 102.574004][ T6565] nf_setsockopt+0x8d/0xf0 [ 102.574021][ T6565] ip_setsockopt+0xcb/0xf0 [ 102.574043][ T6565] tcp_setsockopt+0xa7/0x100 [ 102.574058][ T6565] smc_setsockopt+0x1b6/0xa40 [ 102.574077][ T6565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.574100][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 102.574116][ T6565] ? aa_sock_opt_perm+0x114/0x1e0 [ 102.574141][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 102.574162][ T6565] do_sock_setsockopt+0xf3/0x1d0 [ 102.574183][ T6565] __sys_setsockopt+0x119/0x190 [ 102.574203][ T6565] __ia32_sys_setsockopt+0xbc/0x160 [ 102.574218][ T6565] ? __do_fast_syscall_32+0xb3/0x8b0 [ 102.574239][ T6565] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.574258][ T6565] __do_fast_syscall_32+0x13a/0x8b0 [ 102.574277][ T6565] do_fast_syscall_32+0x32/0x70 [ 102.574294][ T6565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.574311][ T6565] RIP: 0023:0xf7fa7fec [ 102.574326][ T6565] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 102.574332][ T6565] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 102.574345][ T6565] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 102.574353][ T6565] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 102.574361][ T6565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.574368][ T6565] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.574381][ T6565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.574398][ T6565] [ 102.574435][ T6565] Mem-Info: [ 102.574445][ T6565] active_anon:5119 inactive_anon:483 isolated_anon:0 [ 102.574445][ T6565] active_file:31 inactive_file:59422 isolated_file:0 [ 102.574445][ T6565] unevictable:1000 dirty:763 writeback:0 [ 102.574445][ T6565] slab_reclaimable:9828 slab_unreclaimable:50804 [ 102.574445][ T6565] mapped:23912 shmem:1505 pagetables:1057 [ 102.574445][ T6565] sec_pagetables:296 bounce:0 [ 102.574445][ T6565] kernel_misc_reclaimable:0 [ 102.574445][ T6565] free:36548 free_pcp:13793 free_cma:0 [ 102.574481][ T6565] Node 0 active_anon:0kB inactive_anon:168kB active_file:124kB inactive_file:20kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9504kB pagetables:1536kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.574517][ T6565] Node 1 active_anon:20476kB inactive_anon:1764kB active_file:0kB inactive_file:237668kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:95620kB dirty:3044kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4032kB pagetables:2692kB sec_pagetables:40kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.574551][ T6565] Node 0 DMA free:2048kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:100kB free_cma:0kB [ 102.574589][ T6565] lowmem_reserve[]: 0 277 277 277 277 [ 102.574614][ T6565] Node 0 DMA32 free:15472kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:168kB active_file:124kB inactive_file:20kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:11260kB local_pcp:2132kB free_cma:0kB [ 102.574653][ T6565] lowmem_reserve[]: 0 0 0 0 0 [ 102.574673][ T6565] Node 1 DMA32 free:128672kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20476kB inactive_anon:1764kB active_file:0kB inactive_file:237668kB unevictable:2000kB writepending:3044kB zspages:2068kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:43760kB local_pcp:2012kB free_cma:0kB [ 102.574708][ T6565] lowmem_reserve[]: 0 0 0 0 0 [ 102.574728][ T6565] Node 0 DMA: 14*4kB (U) 1*8kB (M) 2*16kB (U) 5*32kB (U) 4*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2048kB [ 102.574852][ T6565] Node 0 DMA32: 36*4kB (UE) 24*8kB (ME) 8*16kB (UE) 67*32kB (UME) 17*64kB (UME) 8*128kB (UME) 10*256kB (UM) 8*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 15472kB [ 102.574960][ T6565] Node 1 DMA32: 501*4kB (UM) 326*8kB (UM) 281*16kB (UME) 90*32kB (ME) 100*64kB (UME) 105*128kB (UM) 66*256kB (UM) 26*512kB (UME) 9*1024kB (UME) 6*2048kB (UME) 11*4096kB (UM) = 128596kB [ 102.575064][ T6565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.575074][ T6565] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.575091][ T6565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.575100][ T6565] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.575109][ T6565] 61543 total pagecache pages [ 102.575113][ T6565] 589 pages in swap cache [ 102.575118][ T6565] Free swap = 118436kB [ 102.575122][ T6565] Total swap = 124996kB [ 102.575127][ T6565] 524155 pages RAM [ 102.575131][ T6565] 0 pages HighMem/MovableOnly [ 102.575135][ T6565] 212108 pages reserved [ 102.575139][ T6565] 0 pages cma reserved [ 102.578565][ T6562] bond0 (unregistering): Released all slaves [ 102.757498][ T5736] usb 7-1: Using ep0 maxpacket: 32 [ 102.771487][ T5736] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 102.807538][ T5736] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.807556][ T5736] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.852546][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.852568][ T5736] usb 7-1: Product: syz [ 102.852579][ T5736] usb 7-1: Manufacturer: syz [ 102.852589][ T5736] usb 7-1: SerialNumber: syz [ 102.921115][ T30] usb usb40-port1: unable to enumerate USB device [ 103.079040][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 103.191169][ T6570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.660334][ T1039] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 103.725047][ T5736] usb 7-1: USB disconnect, device number 10 [ 103.819376][ T1039] usb 6-1: Using ep0 maxpacket: 16 [ 103.820151][ T1039] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 103.821592][ T1039] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.821626][ T1039] usb 6-1: config 0 interface 0 has no altsetting 0 [ 103.821662][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.825056][ T1039] usb 6-1: config 0 descriptor?? [ 104.038881][ T1039] usbhid 6-1:0.0: can't add hid device: -71 [ 104.038980][ T1039] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 104.045097][ T1039] usb 6-1: USB disconnect, device number 9 [ 104.409302][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 104.560413][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 104.561207][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 104.562990][ T10] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.563027][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.563050][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.576580][ T10] usb 8-1: config 0 descriptor?? [ 104.794528][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 104.794676][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 104.796339][ T10] usb 8-1: USB disconnect, device number 11 [ 104.939526][ T1039] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.093027][ T1039] usb 6-1: unable to get BOS descriptor or descriptor too short [ 105.093134][ T1039] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 105.094496][ T1039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.094519][ T1039] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.094559][ T1039] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.096453][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.096474][ T1039] usb 6-1: Product: syz [ 105.096487][ T1039] usb 6-1: Manufacturer: syz [ 105.096500][ T1039] usb 6-1: SerialNumber: syz [ 106.309848][ T855] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.344527][ T1039] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.353786][ T1039] usb 6-1: USB disconnect, device number 10 [ 106.380517][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.479309][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 106.481909][ T855] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 106.488944][ T855] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.489034][ T855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.489075][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.502292][ T855] usb 5-1: config 0 descriptor?? [ 106.722462][ T855] usbhid 5-1:0.0: can't add hid device: -71 [ 106.724974][ T855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.732083][ T855] usb 5-1: USB disconnect, device number 10 [ 106.767288][ T6622] ip6t_rt: too many addresses specified [ 108.905479][ T6652] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 108.905513][ T6652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.906417][ T6652] vhci_hcd vhci_hcd.0: Device attached [ 109.229687][ T5025] usb 38-1: SetAddress Request (2) to port 0 [ 109.230106][ T5025] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 109.478010][ T6645] orangefs_mount: mount request failed with -4 [ 109.545631][ T6661] 9pnet_virtio: no channels available for device c::: [ 109.684387][ T6653] vhci_hcd: connection reset by peer [ 109.687621][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 109.687683][ T5796] vhci_hcd vhci_hcd.0: release socket [ 109.687790][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 110.042977][ T6665] bridge1: entered promiscuous mode [ 110.043097][ T6665] bridge1: entered allmulticast mode [ 110.565643][ T6668] jffs2: notice: (6668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.636306][ T6668] tipc: Started in network mode [ 110.636410][ T6668] tipc: Node identity ac14140f, cluster identity 4711 [ 110.648763][ T6668] tipc: New replicast peer: 255.255.255.255 [ 110.650247][ T6668] tipc: Enabled bearer , priority 10 [ 110.829282][ T5736] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.982076][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.982180][ T5736] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 110.983921][ T5736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.983947][ T5736] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.983996][ T5736] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.986028][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.986051][ T5736] usb 5-1: Product: syz [ 110.986063][ T5736] usb 5-1: Manufacturer: syz [ 110.986075][ T5736] usb 5-1: SerialNumber: syz [ 111.469482][ T6680] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.653116][ T10] tipc: Node number set to 2886997007 [ 111.797032][ T5736] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.806250][ T5736] usb 5-1: USB disconnect, device number 11 [ 111.830376][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.772745][ T855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.979221][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 112.980280][ T855] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 112.981598][ T855] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.981631][ T855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.981782][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.984038][ T855] usb 5-1: config 0 descriptor?? [ 113.042770][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 113.199241][ T855] usbhid 5-1:0.0: can't add hid device: -71 [ 113.199352][ T855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.201810][ T855] usb 5-1: USB disconnect, device number 12 [ 113.301866][ T6722] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 113.301917][ T6722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.306634][ T6722] vhci_hcd vhci_hcd.0: Device attached [ 113.544901][ T43] audit: type=1326 audit(1788716778.346:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.3.193" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 113.629355][ T42] usb 42-1: SetAddress Request (6) to port 0 [ 113.629503][ T42] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 113.841248][ T6723] vhci_hcd: connection reset by peer [ 113.897889][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 113.901271][ T5796] vhci_hcd vhci_hcd.2: release socket [ 113.901647][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 114.119626][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 114.269252][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 114.270033][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 114.271176][ T10] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.271202][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.271228][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.273952][ T10] usb 6-1: config 0 descriptor?? [ 114.281558][ T5025] usb 38-1: device descriptor read/8, error -110 [ 114.389678][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.653877][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 114.653997][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.665390][ T10] usb 6-1: USB disconnect, device number 11 [ 114.681740][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 114.685914][ T5025] usb usb38-port1: attempt power cycle [ 114.691730][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 114.692752][ T30] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.692778][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.692804][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.700599][ T30] usb 5-1: config 0 descriptor?? [ 114.869358][ T5736] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 114.935209][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 114.935404][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 114.958919][ T30] usb 5-1: USB disconnect, device number 13 [ 115.031793][ T5736] usb 8-1: unable to get BOS descriptor or descriptor too short [ 115.032009][ T5736] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 115.033130][ T5736] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.033155][ T5736] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.033187][ T5736] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.035290][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.035305][ T5736] usb 8-1: Product: syz [ 115.035312][ T5736] usb 8-1: Manufacturer: syz [ 115.035320][ T5736] usb 8-1: SerialNumber: syz [ 115.252745][ T5025] usb usb38-port1: unable to enumerate USB device [ 115.677878][ T5736] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.688364][ T5736] usb 8-1: USB disconnect, device number 12 [ 115.716727][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.120659][ T6765] vlan0: left promiscuous mode [ 116.272307][ T6768] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 116.292918][ T6768] team0 (unregistering): Port device team_slave_0 removed [ 116.305600][ T6768] team0 (unregistering): Port device team_slave_1 removed [ 116.544983][ T6772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.204'. [ 118.704800][ T42] usb 42-1: device descriptor read/8, error -110 [ 119.119720][ T42] usb usb42-port1: attempt power cycle [ 119.619384][ T5887] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 119.679989][ T42] usb usb42-port1: unable to enumerate USB device [ 119.771299][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 119.771354][ T5887] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 119.772175][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.772188][ T5887] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.772211][ T5887] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.773810][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.773823][ T5887] usb 7-1: Product: syz [ 119.773830][ T5887] usb 7-1: Manufacturer: syz [ 119.773837][ T5887] usb 7-1: SerialNumber: syz [ 120.289693][ T5887] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.293005][ T5887] usb 7-1: USB disconnect, device number 11 [ 120.314967][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.573731][ T43] audit: type=1800 audit(1788716786.376:4): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.218" name="file0" dev="overlay" ino=307 res=0 errno=0 [ 121.686284][ T6829] loop0: detected capacity change from 0 to 63 [ 122.326206][ T6836] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 122.326279][ T6836] netlink: 84 bytes leftover after parsing attributes in process `syz.2.221'. [ 122.326508][ T6836] netlink: 'syz.2.221': attribute type 2 has an invalid length. [ 122.326613][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 122.733883][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.735636][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.740755][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.746091][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.746826][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.779304][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 122.886788][ T5796] bridge_slave_1: left allmulticast mode [ 122.886873][ T5796] bridge_slave_1: left promiscuous mode [ 122.890115][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.895761][ T5796] bridge_slave_0: left allmulticast mode [ 122.895815][ T5796] bridge_slave_0: left promiscuous mode [ 122.896232][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.939441][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 122.943508][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 122.944890][ T9] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.944917][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 122.944942][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.947315][ T9] usb 8-1: config 0 descriptor?? [ 123.190217][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 123.190348][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 123.221763][ T9] usb 8-1: USB disconnect, device number 13 [ 123.340975][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 123.472532][ T5796] hsr_slave_0: left promiscuous mode [ 123.477051][ T5796] hsr_slave_1: left promiscuous mode [ 123.477912][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.481673][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.597653][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 123.612288][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 123.683525][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 123.773613][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.775811][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.775956][ T6846] bridge_slave_0: entered allmulticast mode [ 123.777327][ T6846] bridge_slave_0: entered promiscuous mode [ 123.783250][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.783327][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.783439][ T6846] bridge_slave_1: entered allmulticast mode [ 123.784344][ T6846] bridge_slave_1: entered promiscuous mode [ 123.805242][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.823983][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.859536][ T6846] team0: Port device team_slave_0 added [ 123.864748][ T6846] team0: Port device team_slave_1 added [ 123.885220][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.887921][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.889809][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.891640][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.891654][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.891671][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.931996][ T6846] hsr_slave_0: entered promiscuous mode [ 123.932533][ T6846] hsr_slave_1: entered promiscuous mode [ 123.932866][ T6846] debugfs: 'hsr0' already exists in 'hsr' [ 123.932880][ T6846] Cannot create hsr debugfs directory [ 123.996841][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 124.069854][ T6846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.075164][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.075811][ T6846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.079469][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.080655][ T6846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.090237][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.091244][ T6846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.096534][ T6846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.153098][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.167578][ T6846] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.173828][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.173924][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.181889][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.181984][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.214612][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 124.497464][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.706391][ T6846] veth0_vlan: entered promiscuous mode [ 124.718504][ T6846] veth1_vlan: entered promiscuous mode [ 124.744949][ T6846] veth0_macvtap: entered promiscuous mode [ 124.750103][ T6846] veth1_macvtap: entered promiscuous mode [ 124.765101][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.774567][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.789872][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.789976][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.790048][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.790091][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.837988][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.838126][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.841431][ T5755] Bluetooth: hci2: command tx timeout [ 124.861716][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.861797][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.392741][ T152] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 125.549262][ T152] usb 9-1: Using ep0 maxpacket: 16 [ 125.550054][ T10] libceph: connect (1)[c::]:6789 error -22 [ 125.550263][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 125.555785][ T152] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 125.558872][ T6929] ceph: No mds server is up or the cluster is laggy [ 125.569054][ T152] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.569168][ T152] usb 9-1: config 0 interface 0 has no altsetting 0 [ 125.569199][ T152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.573696][ T152] usb 9-1: config 0 descriptor?? [ 125.609780][ T6938] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 125.609821][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.610479][ T6938] vhci_hcd vhci_hcd.0: Device attached [ 125.791453][ T152] usbhid 9-1:0.0: can't add hid device: -71 [ 125.793468][ T152] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 125.801507][ T152] usb 9-1: USB disconnect, device number 2 [ 125.927733][ T6938] wg2 speed is unknown, defaulting to 1000 [ 125.936072][ T6938] wg2 speed is unknown, defaulting to 1000 [ 125.943954][ T6938] wg2 speed is unknown, defaulting to 1000 [ 125.959489][ T5887] usb 42-1: SetAddress Request (10) to port 0 [ 125.959601][ T5887] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 126.098884][ T5025] wg2 speed is unknown, defaulting to 1000 [ 126.102278][ T6938] infiniband syz2: set down [ 126.102430][ T6938] infiniband syz2: added wg2 [ 126.122420][ T6938] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 126.122494][ T6938] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 126.122543][ T6938] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 126.202152][ T6938] RDS/IB: syz2: added [ 126.202538][ T6938] smc: adding ib device syz2 with port count 1 [ 126.202713][ T6938] smc: ib device syz2 port 1 has no pnetid [ 126.204619][ T5025] wg2 speed is unknown, defaulting to 1000 [ 126.232894][ T6938] wg2 speed is unknown, defaulting to 1000 [ 126.307969][ T6939] vhci_hcd: connection reset by peer [ 126.310007][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 126.310026][ T5796] vhci_hcd vhci_hcd.2: release socket [ 126.310088][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 126.396069][ T6947] IPVS: length: 186 != 24 [ 126.437556][ T6955] bridge1: left promiscuous mode [ 126.437611][ T6955] bridge1: left allmulticast mode [ 126.464793][ T6938] wg2 speed is unknown, defaulting to 1000 [ 126.619210][ T855] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 126.635120][ T6938] wg2 speed is unknown, defaulting to 1000 [ 126.639559][ T6958] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 126.649836][ T6958] team0 (unregistering): Port device team_slave_0 removed [ 126.658680][ T6958] team0 (unregistering): Port device team_slave_1 removed [ 126.746751][ T6938] wg2 speed is unknown, defaulting to 1000 [ 126.920518][ T5755] Bluetooth: hci2: command tx timeout [ 127.078577][ T855] usb 9-1: unable to get BOS descriptor or descriptor too short [ 127.078712][ T855] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.299282][ T5025] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 127.461728][ T5025] usb 7-1: Using ep0 maxpacket: 16 [ 127.468151][ T5025] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 127.475659][ T5025] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.475997][ T5025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 127.476251][ T5025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.524877][ T5025] usb 7-1: config 0 descriptor?? [ 127.581845][ T855] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.581933][ T855] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.582041][ T855] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.596884][ T855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.596941][ T855] usb 9-1: Product: syz [ 127.596977][ T855] usb 9-1: Manufacturer: syz [ 127.596999][ T855] usb 9-1: SerialNumber: syz [ 127.989741][ T5025] usbhid 7-1:0.0: can't add hid device: -71 [ 127.990494][ T5025] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 128.067920][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 128.076713][ T5025] usb 7-1: USB disconnect, device number 12 [ 128.316246][ T855] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 128.320465][ T855] usb 9-1: USB disconnect, device number 3 [ 128.344191][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.679212][ T42] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 128.909709][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 128.912118][ T42] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 128.916483][ T42] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.924004][ T42] usb 8-1: config 0 interface 0 has no altsetting 0 [ 128.924050][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.934593][ T42] usb 8-1: config 0 descriptor?? [ 128.999402][ T5755] Bluetooth: hci2: command tx timeout [ 129.200860][ T42] usbhid 8-1:0.0: can't add hid device: -71 [ 129.212245][ T42] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 129.223016][ T42] usb 8-1: USB disconnect, device number 14 [ 130.071404][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 130.219263][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 130.220397][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 130.221286][ T9] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.221304][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.221318][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.225136][ T9] usb 7-1: config 0 descriptor?? [ 130.329287][ T152] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 130.441129][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 130.441279][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 130.445071][ T9] usb 7-1: USB disconnect, device number 13 [ 130.479527][ T152] usb 9-1: Using ep0 maxpacket: 16 [ 130.480483][ T152] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 130.482022][ T152] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.482053][ T152] usb 9-1: config 0 interface 0 has no altsetting 0 [ 130.482081][ T152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.484714][ T152] usb 9-1: config 0 descriptor?? [ 130.699687][ T152] usbhid 9-1:0.0: can't add hid device: -71 [ 130.699783][ T152] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 130.701563][ T152] usb 9-1: USB disconnect, device number 4 [ 130.999952][ T5887] usb 42-1: device descriptor read/8, error -110 [ 131.080484][ T5755] Bluetooth: hci2: command tx timeout [ 131.417316][ T5887] usb usb42-port1: attempt power cycle [ 131.592520][ T152] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 131.791345][ T152] usb 7-1: Using ep0 maxpacket: 16 [ 131.798353][ T152] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 131.816916][ T152] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.817013][ T152] usb 7-1: config 0 interface 0 has no altsetting 0 [ 131.817418][ T152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.894511][ T152] usb 7-1: config 0 descriptor?? [ 132.007675][ T5887] usb usb42-port1: unable to enumerate USB device [ 132.573810][ T152] usbhid 7-1:0.0: can't add hid device: -71 [ 132.574246][ T152] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 132.660295][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660408][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.681939][ T152] usb 7-1: USB disconnect, device number 14 [ 134.483281][ T7058] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 134.605816][ T7058] team0 (unregistering): Port device team_slave_0 removed [ 134.635482][ T7058] team0 (unregistering): Port device team_slave_1 removed [ 134.989345][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 135.159681][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 135.161232][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 135.162418][ T9] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.162445][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.162470][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.165197][ T9] usb 8-1: config 0 descriptor?? [ 135.390485][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 135.390630][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 135.395006][ T9] usb 8-1: USB disconnect, device number 15 [ 136.489228][ T7096] bridge1: left promiscuous mode [ 136.489281][ T7096] bridge1: left allmulticast mode [ 137.016504][ T7102] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 137.016537][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 137.016646][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 137.341838][ T30] usb 46-1: SetAddress Request (2) to port 0 [ 137.343961][ T30] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 138.438902][ T7103] vhci_hcd: connection reset by peer [ 138.439379][ T12] vhci_hcd vhci_hcd.4: stop threads [ 138.439400][ T12] vhci_hcd vhci_hcd.4: release socket [ 138.451866][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 138.525679][ T43] audit: type=1800 audit(1788716803.296:5): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.261" name="file0" dev="overlay" ino=423 res=0 errno=0 [ 139.233795][ T7116] ALSA: mixer_oss: invalid OSS volume '' [ 139.579411][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 139.735295][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.748368][ T9] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 139.753780][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 139.759636][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.799923][ T9] usb 7-1: config 0 descriptor?? [ 139.839236][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 140.172008][ T7131] input: syz0 as /devices/virtual/input/input8 [ 140.245125][ T7129] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 142.304624][ T35] usb 7-1: USB disconnect, device number 15 [ 142.519345][ T30] usb 46-1: device descriptor read/8, error -110 [ 143.650381][ T30] usb usb46-port1: attempt power cycle [ 143.939081][ T1165] IPVS: starting estimator thread 0... [ 144.039389][ T7161] IPVS: using max 41 ests per chain, 98400 per kthread [ 145.042775][ T30] usb usb46-port1: unable to enumerate USB device [ 145.679975][ T43] audit: type=1804 audit(1788716810.476:6): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.275" name="/newroot/10/bus/bus" dev="overlay" ino=80 res=1 errno=0 [ 145.709254][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 145.761104][ T7176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.275'. [ 145.764330][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 145.860265][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.861373][ T9] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 145.861402][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.862696][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.862723][ T9] usb 5-1: SerialNumber: syz [ 146.039244][ T35] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 146.082611][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.083300][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.105441][ T9] usb 5-1: 0:2 : does not exist [ 146.133687][ T9] usb 5-1: USB disconnect, device number 14 [ 146.159532][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.189295][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 146.190271][ T35] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 146.191951][ T35] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.191987][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.192022][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.197606][ T35] usb 7-1: config 0 descriptor?? [ 146.430024][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 146.430167][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 146.435533][ T35] usb 7-1: USB disconnect, device number 16 [ 146.630853][ T7185] netlink: 'syz.3.278': attribute type 10 has an invalid length. [ 147.097124][ T7193] Invalid ELF header magic: != ELF [ 147.725799][ T7196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 147.725829][ T7196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.734987][ T7196] vhci_hcd vhci_hcd.0: Device attached [ 147.903422][ T7208] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 147.904507][ T7208] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 147.980410][ T7210] xt_addrtype: ipv6 does not support BROADCAST matching [ 148.039424][ T30] usb 38-1: SetAddress Request (6) to port 0 [ 148.042692][ T30] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 148.100213][ T7200] vhci_hcd: connection reset by peer [ 148.102774][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 148.102829][ T5796] vhci_hcd vhci_hcd.0: release socket [ 148.102881][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 149.463016][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.463456][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.658361][ T7231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.709670][ T5823] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 149.869547][ T5823] usb 8-1: Using ep0 maxpacket: 16 [ 149.876445][ T5823] usb 8-1: unable to get BOS descriptor or descriptor too short [ 149.876618][ T5823] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 149.878712][ T5823] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.878739][ T5823] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.883355][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.883517][ T5823] usb 8-1: Product: syz [ 149.883530][ T5823] usb 8-1: Manufacturer: syz [ 149.883542][ T5823] usb 8-1: SerialNumber: syz [ 150.230247][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.231029][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.254216][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.265089][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.389826][ T5796] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.389916][ T5796] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.389967][ T5796] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.390001][ T5796] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.437550][ T5823] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 150.437744][ T5823] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 150.645951][ T5823] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 150.647685][ T5823] usb 8-1: USB disconnect, device number 16 [ 150.681332][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.330723][ T7254] bridge1: entered promiscuous mode [ 151.330858][ T7254] bridge1: entered allmulticast mode [ 153.137944][ T30] usb 38-1: device descriptor read/8, error -110 [ 153.550264][ T30] usb usb38-port1: attempt power cycle [ 154.192950][ T30] usb usb38-port1: unable to enumerate USB device [ 155.129832][ T152] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 155.279257][ T152] usb 9-1: Using ep0 maxpacket: 16 [ 155.280048][ T152] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 155.281157][ T152] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.281190][ T152] usb 9-1: config 0 interface 0 has no altsetting 0 [ 155.281216][ T152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.284076][ T152] usb 9-1: config 0 descriptor?? [ 155.497687][ T152] usbhid 9-1:0.0: can't add hid device: -71 [ 155.497838][ T152] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 155.501551][ T152] usb 9-1: USB disconnect, device number 5 [ 156.239216][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 156.329857][ T7320] Bluetooth: MGMT ver 1.23 [ 156.399235][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 156.400108][ T35] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 156.401561][ T35] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.401595][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 156.401626][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.404633][ T35] usb 7-1: config 0 descriptor?? [ 156.630049][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 156.630166][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 156.633030][ T35] usb 7-1: USB disconnect, device number 17 [ 158.349381][ T152] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 158.519390][ T152] usb 9-1: Using ep0 maxpacket: 16 [ 158.521854][ T152] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 158.526601][ T152] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.531331][ T152] usb 9-1: config 0 interface 0 has no altsetting 0 [ 158.533956][ T152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.544026][ T152] usb 9-1: config 0 descriptor?? [ 158.673717][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.755406][ T152] usbhid 9-1:0.0: can't add hid device: -71 [ 158.755486][ T152] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 158.765237][ T152] usb 9-1: USB disconnect, device number 6 [ 158.849335][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 158.853664][ T35] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 158.859862][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.863857][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.873170][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.877149][ T35] usb 5-1: Product: syz [ 158.879739][ T35] usb 5-1: Manufacturer: syz [ 158.879818][ T35] usb 5-1: SerialNumber: syz [ 159.141420][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 159.757871][ T35] usb 5-1: USB disconnect, device number 15 [ 159.815904][ T7365] ip6t_rt: too many addresses specified [ 161.877036][ T7394] bridge1: left promiscuous mode [ 161.877117][ T7394] bridge1: left allmulticast mode [ 162.119395][ T5887] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 162.269476][ T5887] usb 9-1: Using ep0 maxpacket: 32 [ 162.271916][ T5887] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 162.275255][ T5887] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.275398][ T5887] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.285510][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.285797][ T5887] usb 9-1: Product: syz [ 162.285807][ T5887] usb 9-1: Manufacturer: syz [ 162.285814][ T5887] usb 9-1: SerialNumber: syz [ 162.722766][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 163.849665][ T5887] usb 9-1: USB disconnect, device number 7 [ 163.884187][ T7412] input: syz1 as /devices/virtual/input/input10 [ 165.309369][ T5887] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 165.334701][ T5451] veth1_vlan: left promiscuous mode [ 165.449399][ T30] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 165.469265][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 165.469818][ T5887] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 165.472783][ T5887] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.472808][ T5887] usb 9-1: config 0 interface 0 has no altsetting 0 [ 165.472829][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.478119][ T5887] usb 9-1: config 0 descriptor?? [ 165.599187][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 165.599967][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 165.600996][ T30] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.601066][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.601086][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.606886][ T30] usb 7-1: config 0 descriptor?? [ 165.701253][ T5887] usbhid 9-1:0.0: can't add hid device: -71 [ 165.701417][ T5887] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 165.706075][ T5887] usb 9-1: USB disconnect, device number 8 [ 165.818584][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 165.818697][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 165.822102][ T30] usb 7-1: USB disconnect, device number 18 [ 168.369228][ T35] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 168.594237][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 168.626827][ T35] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 168.712165][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.712211][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.879806][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.879850][ T35] usb 7-1: Product: syz [ 168.879858][ T35] usb 7-1: Manufacturer: syz [ 168.879866][ T35] usb 7-1: SerialNumber: syz [ 168.986517][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.349'. [ 169.584534][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 170.001489][ T35] usb 7-1: USB disconnect, device number 19 [ 170.182850][ T7514] bridge1: entered promiscuous mode [ 170.199243][ T5853] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.210050][ T7514] bridge1: entered allmulticast mode [ 170.349185][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 170.350169][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 170.351776][ T5853] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.351810][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.351839][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.353859][ T5853] usb 5-1: config 0 descriptor?? [ 170.569990][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 170.570100][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.572490][ T5853] usb 5-1: USB disconnect, device number 16 [ 170.967912][ T7530] bridge1: left promiscuous mode [ 170.967993][ T7530] bridge1: left allmulticast mode [ 171.159265][ T5823] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 171.319382][ T5823] usb 7-1: Using ep0 maxpacket: 16 [ 171.320734][ T5823] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 171.323283][ T5823] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.323315][ T5823] usb 7-1: config 0 interface 0 has no altsetting 0 [ 171.323341][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.328770][ T5823] usb 7-1: config 0 descriptor?? [ 171.546491][ T5823] usbhid 7-1:0.0: can't add hid device: -71 [ 171.546602][ T5823] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 171.553366][ T5823] usb 7-1: USB disconnect, device number 20 [ 173.806663][ T7545] loop9: detected capacity change from 0 to 524287998 [ 175.454650][ T7558] bridge2: entered promiscuous mode [ 175.457680][ T7558] bridge2: entered allmulticast mode [ 175.462948][ T7567] netfs: Cache "CacheFiles" added (type cachefiles) [ 175.463016][ T7567] CacheFiles: File cache on CacheFiles registered [ 175.487319][ T7567] CacheFiles: File cache on CacheFiles unregistering [ 175.487371][ T7567] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 175.639614][ T5753] Bluetooth: hci0: command 0x0406 tx timeout [ 175.639742][ T5755] Bluetooth: hci1: command 0x0406 tx timeout [ 175.839309][ T35] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 175.854981][ T7577] bridge2: left promiscuous mode [ 175.855082][ T7577] bridge2: left allmulticast mode [ 175.989166][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 175.989749][ T35] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.990746][ T35] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.990759][ T35] usb 9-1: config 0 has no interface number 0 [ 175.990778][ T35] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.990790][ T35] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.992148][ T35] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.992161][ T35] usb 9-1: Product: syz [ 175.992168][ T35] usb 9-1: SerialNumber: syz [ 175.993572][ T35] usb 9-1: config 0 descriptor?? [ 176.000660][ T35] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 176.001834][ T35] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input11 [ 176.208634][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.210977][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.211254][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.211454][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.211531][ T35] usb 9-1: USB disconnect, device number 9 [ 176.211662][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.211673][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.262584][ T35] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.529255][ T5853] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.699552][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 176.701849][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 176.712812][ T5853] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.718956][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.722225][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.735930][ T5853] usb 5-1: config 0 descriptor?? [ 177.023448][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 177.028402][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 177.052356][ T5853] usb 5-1: USB disconnect, device number 17 [ 178.971202][ T5823] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.140662][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 179.147174][ T5823] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 179.171361][ T5823] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.171739][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.171952][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.238831][ T5823] usb 5-1: config 0 descriptor?? [ 179.719358][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 179.719699][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 179.740088][ T5823] usb 5-1: USB disconnect, device number 18 [ 180.339528][ T5853] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 180.490112][ T5853] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.496617][ T5853] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 180.496841][ T5853] usb 9-1: config 0 interface 0 has no altsetting 0 [ 180.499288][ T5853] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 180.499313][ T5853] usb 9-1: Product: syz [ 180.499325][ T5853] usb 9-1: Manufacturer: syz [ 180.499337][ T5853] usb 9-1: SerialNumber: syz [ 180.501215][ T5853] usb 9-1: config 0 descriptor?? [ 180.509311][ T5853] usb 9-1: selecting invalid altsetting 0 [ 180.590140][ T30] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.781264][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 180.782042][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 180.783440][ T30] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.783486][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.783512][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.784956][ T30] usb 5-1: config 0 descriptor?? [ 180.838515][ T7627] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 181.019232][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 181.019375][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.046624][ T30] usb 5-1: USB disconnect, device number 19 [ 181.170636][ T7629] bridge3: entered promiscuous mode [ 181.174867][ T7629] bridge3: entered allmulticast mode [ 182.313367][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 182.823309][ T7647] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 183.910197][ T35] usb 9-1: USB disconnect, device number 10 [ 184.773482][ T7674] xt_MASQUERADE: bad rangesize 29 [ 184.795697][ T7674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.479264][ T30] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 185.489246][ T7687] netlink: 'syz.3.388': attribute type 5 has an invalid length. [ 185.497895][ T7687] ip6erspan0: entered promiscuous mode [ 185.569082][ T43] audit: type=1326 audit(1788716850.306:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.578927][ T43] audit: type=1326 audit(1788716850.306:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579030][ T43] audit: type=1326 audit(1788716850.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579263][ T43] audit: type=1326 audit(1788716850.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579385][ T43] audit: type=1326 audit(1788716850.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579510][ T43] audit: type=1326 audit(1788716850.326:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579639][ T43] audit: type=1326 audit(1788716850.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579797][ T43] audit: type=1326 audit(1788716850.326:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579832][ T43] audit: type=1326 audit(1788716850.326:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.579912][ T43] audit: type=1326 audit(1788716850.326:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 185.759292][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 185.765476][ T30] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 185.771032][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.774480][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.783484][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.786485][ T30] usb 7-1: Product: syz [ 185.788117][ T30] usb 7-1: Manufacturer: syz [ 185.790171][ T30] usb 7-1: SerialNumber: syz [ 186.109744][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 186.295488][ T7698] block nbd3: NBD_DISCONNECT [ 186.405256][ T7694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.324151][ T30] usb 7-1: USB disconnect, device number 21 [ 187.769247][ T35] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 187.939383][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 187.949335][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 187.958223][ T35] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.958292][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.958363][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.974555][ T35] usb 5-1: config 0 descriptor?? [ 188.224061][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 188.227182][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.343497][ T35] usb 5-1: USB disconnect, device number 20 [ 188.359278][ T5736] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 188.417688][ T7727] gadgetfs: bound to dummy_udc driver [ 188.509393][ T5736] usb 7-1: Using ep0 maxpacket: 16 [ 188.510168][ T5736] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 188.511163][ T5736] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.511193][ T5736] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.511222][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.515511][ T5736] usb 7-1: config 0 descriptor?? [ 188.728074][ T5736] usbhid 7-1:0.0: can't add hid device: -71 [ 188.728600][ T5736] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 188.731692][ T5736] usb 7-1: USB disconnect, device number 22 [ 188.876014][ T7740] Invalid ELF header magic: != ELF [ 188.956452][ T7742] netlink: 224 bytes leftover after parsing attributes in process `syz.3.399'. [ 188.960977][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 189.764474][ T7750] bridge3: left promiscuous mode [ 189.764585][ T7750] bridge3: left allmulticast mode [ 190.160273][ T5736] e1000 0000:00:06.0 eth0: Reset adapter [ 190.318338][ T7752] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 190.490565][ T5736] e1000 0000:00:06.0 eth0: Reset adapter [ 190.631506][ T5736] e1000 0000:00:06.0 eth0: Reset adapter [ 190.759257][ T5823] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 190.812230][ T30] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 190.910039][ T5823] usb 9-1: Using ep0 maxpacket: 32 [ 190.911165][ T5823] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 190.912112][ T5823] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.912125][ T5823] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.913739][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.913753][ T5823] usb 9-1: Product: syz [ 190.913760][ T5823] usb 9-1: Manufacturer: syz [ 190.913768][ T5823] usb 9-1: SerialNumber: syz [ 191.009309][ T5745] Bluetooth: hci3: command 0x0406 tx timeout [ 191.159180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.176466][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 191.741017][ T5823] usb 9-1: USB disconnect, device number 11 [ 192.549380][ T5823] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 192.699279][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 192.700068][ T5823] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 192.701004][ T5823] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.701030][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.701053][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.702979][ T5823] usb 5-1: config 0 descriptor?? [ 192.842143][ T5736] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 192.920643][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 192.920733][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.929682][ T5823] usb 5-1: USB disconnect, device number 21 [ 194.041047][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.604576][ T7854] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.089250][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 208.299466][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 208.304386][ T9] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 208.311853][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.316941][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.364525][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.364584][ T9] usb 9-1: Product: syz [ 208.364637][ T9] usb 9-1: Manufacturer: syz [ 208.364669][ T9] usb 9-1: SerialNumber: syz [ 208.607486][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 209.659648][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 209.677476][ T9] usb 9-1: USB disconnect, device number 12 [ 209.819456][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 209.820936][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 209.821833][ T42] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.821856][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.821877][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.823483][ T42] usb 5-1: config 0 descriptor?? [ 210.049536][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 210.049643][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 210.053479][ T42] usb 5-1: USB disconnect, device number 22 [ 212.837326][ T7920] ip6erspan0: left promiscuous mode [ 213.048419][ T7915] xt_MASQUERADE: bad rangesize 29 [ 213.101327][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.699240][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 213.699337][ T43] audit: type=1326 audit(1788716878.446:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699404][ T43] audit: type=1326 audit(1788716878.446:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699456][ T43] audit: type=1326 audit(1788716878.446:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699507][ T43] audit: type=1326 audit(1788716878.446:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699558][ T43] audit: type=1326 audit(1788716878.446:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699608][ T43] audit: type=1326 audit(1788716878.456:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699659][ T43] audit: type=1326 audit(1788716878.456:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699709][ T43] audit: type=1326 audit(1788716878.456:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699759][ T43] audit: type=1326 audit(1788716878.456:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf700efec code=0x7ffc0000 [ 213.699810][ T43] audit: type=1326 audit(1788716878.456:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.4.431" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 214.039335][ T35] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 214.157546][ T7942] Invalid ELF header magic: != ELF [ 214.199282][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 214.556533][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 214.557362][ T35] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.557381][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.557397][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.558750][ T35] usb 5-1: config 0 descriptor?? [ 214.775592][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 214.775686][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.777150][ T35] usb 5-1: USB disconnect, device number 23 [ 215.809242][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 215.959795][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 215.962927][ T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 215.969341][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.969379][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.013948][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.013993][ T9] usb 5-1: Product: syz [ 216.014024][ T9] usb 5-1: Manufacturer: syz [ 216.014047][ T9] usb 5-1: SerialNumber: syz [ 216.160100][ T7965] warning: `syz.4.439' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.161281][ T7965] trusted_key: encrypted_key: insufficient parameters specified [ 216.227089][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 216.293578][ T7967] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.580186][ T9] usb 5-1: USB disconnect, device number 24 [ 218.340834][ T8006] Invalid ELF header magic: != ELF [ 219.069345][ T5853] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 219.229426][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 219.230177][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 219.231046][ T5853] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.231068][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.231087][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.235401][ T5853] usb 5-1: config 0 descriptor?? [ 219.446839][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 219.446949][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 219.449515][ T5853] usb 5-1: USB disconnect, device number 25 [ 220.124795][ T8030] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.459238][ T5853] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 220.609218][ T5853] usb 7-1: Using ep0 maxpacket: 32 [ 220.609733][ T5853] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 220.610694][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.610708][ T5853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.612360][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.612375][ T5853] usb 7-1: Product: syz [ 220.612382][ T5853] usb 7-1: Manufacturer: syz [ 220.612390][ T5853] usb 7-1: SerialNumber: syz [ 220.835312][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 221.329330][ T855] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 221.479507][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 221.481636][ T855] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 221.489248][ T855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.492515][ T855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.498753][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.498805][ T855] usb 5-1: Product: syz [ 221.498832][ T855] usb 5-1: Manufacturer: syz [ 221.498859][ T855] usb 5-1: SerialNumber: syz [ 221.528938][ T5853] usb 7-1: USB disconnect, device number 23 [ 221.714904][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 222.090167][ T855] usb 5-1: USB disconnect, device number 26 [ 222.459377][ T5853] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 222.619202][ T5853] usb 7-1: Using ep0 maxpacket: 16 [ 222.619674][ T5853] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 222.620621][ T5853] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.620639][ T5853] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.620654][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.624536][ T5853] usb 7-1: config 0 descriptor?? [ 222.746882][ T65] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 222.794808][ T8075] loop9: detected capacity change from 0 to 2640 [ 222.795996][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.796046][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.796074][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.796098][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.809796][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.810108][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.810501][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.810559][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.810580][ T8075] ldm_validate_partition_table(): Disk read failed. [ 222.810616][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.811218][ T8075] Buffer I/O error on dev loop9, logical block 0, async page read [ 222.811274][ T8075] Dev loop9: unable to read RDB block 0 [ 222.811887][ T8075] loop9: unable to read partition table [ 222.825027][ T8075] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 222.861482][ T5853] usbhid 7-1:0.0: can't add hid device: -71 [ 222.861592][ T5853] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 222.885389][ T8077] input: syz1 as /devices/virtual/input/input12 [ 222.893355][ T5853] usb 7-1: USB disconnect, device number 24 [ 223.083681][ T8081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 223.083711][ T8081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.089376][ T8081] vhci_hcd vhci_hcd.0: Device attached [ 223.372419][ T8081] rdma_rxe: rxe_newlink: failed to add wg2 [ 223.439418][ T30] usb 46-1: SetAddress Request (6) to port 0 [ 223.439598][ T30] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 224.300106][ T8082] vhci_hcd: connection reset by peer [ 224.304261][ T5796] vhci_hcd vhci_hcd.4: stop threads [ 224.313714][ T5796] vhci_hcd vhci_hcd.4: release socket [ 224.317154][ T5796] vhci_hcd vhci_hcd.4: disconnect device [ 224.735082][ T42] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 224.880013][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.881071][ T42] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 224.881106][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 224.881138][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.883947][ T42] usb 5-1: config 0 descriptor?? [ 224.887652][ T42] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 225.419353][ T5025] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 225.569317][ T5025] usb 9-1: Using ep0 maxpacket: 32 [ 225.570410][ T5025] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 225.571737][ T5025] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.571764][ T5025] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.574769][ T5025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.574792][ T5025] usb 9-1: Product: syz [ 225.574806][ T5025] usb 9-1: Manufacturer: syz [ 225.574817][ T5025] usb 9-1: SerialNumber: syz [ 225.783037][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 226.221449][ T5887] libceph: connect (1)[c::]:6789 error -22 [ 226.223400][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 226.255175][ T8117] ceph: No mds server is up or the cluster is laggy [ 226.360888][ T5025] usb 9-1: USB disconnect, device number 13 [ 227.210508][ T5823] usb 5-1: USB disconnect, device number 27 [ 227.239402][ T855] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 227.497469][ T855] usb 7-1: Using ep0 maxpacket: 16 [ 227.991026][ T855] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 228.124449][ T855] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.124498][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.124558][ T855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.444642][ T855] usb 7-1: config 0 descriptor?? [ 228.625396][ T30] usb 46-1: device descriptor read/8, error -110 [ 229.179231][ T855] usbhid 7-1:0.0: can't add hid device: -71 [ 229.179399][ T855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 229.245827][ T30] usb usb46-port1: attempt power cycle [ 229.489797][ T855] usb 7-1: USB disconnect, device number 25 [ 229.544585][ T8155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 229.544633][ T8155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.554467][ T8155] vhci_hcd vhci_hcd.0: Device attached [ 229.802414][ T30] usb usb46-port1: unable to enumerate USB device [ 229.836695][ T8155] rdma_rxe: rxe_newlink: failed to add wg2 [ 229.849901][ T5025] usb 38-1: SetAddress Request (10) to port 0 [ 229.850228][ T5025] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 230.228907][ T8157] vhci_hcd: connection reset by peer [ 230.238022][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 230.238113][ T5796] vhci_hcd vhci_hcd.0: release socket [ 230.238223][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 230.916197][ T8173] netlink: 'syz.2.484': attribute type 2 has an invalid length. [ 231.240588][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 231.410045][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 231.413904][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 231.425744][ T9] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.425791][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.425841][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.449709][ T9] usb 9-1: config 0 descriptor?? [ 232.005652][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 232.009514][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 232.062647][ T9] usb 9-1: USB disconnect, device number 14 [ 233.990498][ T8204] ip6t_hbh: unknown flags 58 [ 234.079277][ T8205] ipvlan2: entered allmulticast mode [ 234.083823][ T8205] batadv_slave_1: entered allmulticast mode [ 234.093578][ T8205] batman_adv: batadv0: Adding interface: ipvlan2 [ 234.093736][ T8205] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.093875][ T8205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.112067][ T8205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.120293][ T8205] batman_adv: batadv0: Interface activated: ipvlan2 [ 234.923212][ T5025] usb 38-1: device descriptor read/8, error -110 [ 235.310016][ T5025] usb usb38-port1: attempt power cycle [ 235.539181][ T8224] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.249597][ T5025] usb usb38-port1: unable to enumerate USB device [ 238.007328][ T8251] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.530535][ T1163] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 238.535755][ T4227] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 238.536623][ T1163] (NULL device *): queue 0 connect admin queue failed (-6). [ 238.536642][ T1163] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 238.536652][ T1163] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 238.537263][ T8257] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:4f4ac666-56c2-46e7-8580-7d82abda9e73 [ 238.743786][ T8269] xt_MASQUERADE: bad rangesize 29 [ 238.764266][ T8269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.837123][ T8268] input: syz1 as /devices/virtual/input/input13 [ 238.876499][ T8266] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 239.800469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 240.042443][ T8292] netlink: 88 bytes leftover after parsing attributes in process `syz.4.511'. [ 240.270213][ T4227] IPVS: starting estimator thread 0... [ 240.359449][ T8296] IPVS: using max 24 ests per chain, 57600 per kthread [ 240.599970][ T4183] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 240.600114][ T1163] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 240.601887][ T4183] (NULL device *): queue 0 connect admin queue failed (-6). [ 240.601912][ T4183] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 240.601922][ T4183] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 242.683026][ T138] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 242.689518][ T4183] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 242.692021][ T138] (NULL device *): queue 0 connect admin queue failed (-6). [ 242.692074][ T138] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 242.692107][ T138] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 242.806637][ T8312] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 243.654629][ T8358] input: syz1 as /devices/virtual/input/input14 [ 244.769317][ T1167] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 244.771774][ T138] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 244.818578][ T1167] (NULL device *): queue 0 connect admin queue failed (-6). [ 244.820203][ T1167] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 244.820220][ T1167] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 245.849921][ T5853] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 246.000719][ T5853] usb 9-1: Using ep0 maxpacket: 16 [ 246.003003][ T5853] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 246.007312][ T5853] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.008064][ T8382] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 246.015318][ T5853] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.018642][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.026166][ T5853] usb 9-1: config 0 descriptor?? [ 246.028636][ T8382] ipvlan2: left allmulticast mode [ 246.028685][ T8382] batadv_slave_1: left allmulticast mode [ 246.406607][ T5853] usbhid 9-1:0.0: can't add hid device: -71 [ 246.407034][ T5853] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 246.456875][ T5853] usb 9-1: USB disconnect, device number 15 [ 246.856072][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 246.863018][ T4040] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 246.866251][ T74] (NULL device *): queue 0 connect admin queue failed (-6). [ 246.866292][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 246.866323][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 248.919407][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 248.920824][ T37] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 248.921013][ T44] (NULL device *): queue 0 connect admin queue failed (-6). [ 248.921050][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 248.921079][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 250.435283][ T8484] lo speed is unknown, defaulting to 1000 [ 250.466578][ T8484] lo speed is unknown, defaulting to 1000 [ 250.467353][ T8484] lo speed is unknown, defaulting to 1000 [ 250.481012][ T8481] gadgetfs: bound to dummy_udc driver [ 250.535813][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 250.535865][ T43] audit: type=1800 audit(1788716915.336:61): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.538" name="ep1in-bulk" dev="gadgetfs" ino=21324 res=0 errno=0 [ 250.589884][ T4227] IPVS: starting estimator thread 0... [ 250.686146][ T8487] IPVS: using max 32 ests per chain, 76800 per kthread [ 250.719235][ T5025] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 250.719498][ C1] gadgetfs: connected [ 250.719883][ T5025] gadgetfs: disconnected [ 250.745833][ T8484] infiniband syz1: set down [ 250.745887][ T5853] lo speed is unknown, defaulting to 1000 [ 250.747546][ T8484] infiniband syz1: added lo [ 250.763344][ T8484] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 250.763407][ T8484] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 250.763453][ T8484] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 250.811543][ T8484] RDS/IB: syz1: added [ 250.811634][ T8484] smc: adding ib device syz1 with port count 1 [ 250.811673][ T8484] smc: ib device syz1 port 1 has no pnetid [ 250.812132][ T8484] lo speed is unknown, defaulting to 1000 [ 250.819751][ T5823] lo speed is unknown, defaulting to 1000 [ 250.870618][ C1] gadgetfs: connected [ 250.871634][ T5025] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 250.872610][ T5025] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 250.872646][ T5025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.883572][ C1] gadgetfs: configuration #1 [ 251.010870][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 251.011072][ T44] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 251.011548][ T37] (NULL device *): queue 0 connect admin queue failed (-6). [ 251.011605][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 251.012242][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 251.144722][ T8469] gadgetfs: suspended from state 3 [ 251.145323][ T5025] usb 5-1: USB disconnect, device number 28 [ 251.151586][ T8469] gadgetfs: disconnected [ 251.552798][ T8484] lo speed is unknown, defaulting to 1000 [ 252.058206][ T8484] lo speed is unknown, defaulting to 1000 [ 252.729004][ T8514] Console: switching to colour dummy device 80x25 [ 253.089459][ T37] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 253.100129][ T44] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 253.100408][ T37] (NULL device *): queue 0 connect admin queue failed (-6). [ 253.100430][ T37] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 253.100499][ T37] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 253.336528][ T8484] lo speed is unknown, defaulting to 1000 [ 253.957447][ T8484] syz.2.539 (8484) used greatest stack depth: 18088 bytes left [ 254.066064][ T8518] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 254.091085][ T8518] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 254.091282][ T8518] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 254.091531][ T8518] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 254.096620][ T8518] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 254.227182][ T8518] pci 0000:00:01.0: Adding to iommu group 1 [ 254.255688][ T8518] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 254.255717][ T8518] pci 0000:00:01.0: vgaarb: bridge control possible [ 254.255729][ T8518] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 254.329234][ T8518] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 254.332256][ T8518] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 254.353455][ T8518] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 254.589182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.861809][ T8518] [drm] Found bochs VGA, ID 0xb0c5. [ 254.871644][ T8518] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 255.163035][ T4227] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 255.163164][ T37] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 255.175701][ T4227] (NULL device *): queue 0 connect admin queue failed (-6). [ 255.175803][ T4227] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 255.175848][ T4227] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 255.404910][ T8518] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 255.483759][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845034][ T8518] bochs-drm 0000:00:01.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-12) [ 256.052700][ T8536] xt_MASQUERADE: bad rangesize 29 [ 256.064218][ T8536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.478992][ T8538] ------------[ cut here ]------------ [ 257.479062][ T8538] !set->fb [ 257.479868][ T8538] WARNING: drivers/gpu/drm/drm_atomic.c:2031 at __drm_atomic_helper_set_config+0xa45/0xee0, CPU#2: syz.2.547/8538 [ 257.490895][ T8538] Modules linked in: [ 257.494119][ T8538] CPU: 2 UID: 0 PID: 8538 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.499817][ T8538] Tainted: [L]=SOFTLOCKUP [ 257.501524][ T8538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.506106][ T8538] RIP: 0010:__drm_atomic_helper_set_config+0xa45/0xee0 [ 257.511688][ T8538] Code: 84 c0 74 09 3c 03 7f 05 e8 88 5a b4 fc 45 89 75 38 e9 0e fb ff ff e8 0a 31 42 fc 90 0f 0b 90 e9 9f f7 ff ff e8 fc 30 42 fc 90 <0f> 0b 90 e9 47 f7 ff ff 8b 6c 24 28 e8 ea 30 42 fc 49 8d 7c 24 08 [ 257.520277][ T8538] RSP: 0000:ffffc90002f27950 EFLAGS: 00010293 [ 257.522686][ T8538] RAX: 0000000000000000 RBX: ffff888026699580 RCX: 0000000000000000 [ 257.525782][ T8538] RDX: ffff888028672580 RSI: ffffffff85c91b34 RDI: ffff888028672580 [ 257.529883][ T8538] RBP: ffff888024bdff00 R08: 0000000000000007 R09: fffffffffffff000 [ 257.534805][ T8538] R10: ffff888072e56800 R11: 0000000000000000 R12: ffff88804ee90a00 [ 257.541294][ T8538] R13: ffff888072e56800 R14: ffff888072e56400 R15: ffff88804c2e9368 [ 257.544552][ T8538] FS: 0000000000000000(0000) GS:ffff888096b63000(0063) knlGS:0000000056760480 [ 257.548246][ T8538] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 257.551922][ T8538] CR2: 0000000033cf3ff8 CR3: 000000005cd69000 CR4: 0000000000352ef0 [ 257.555277][ T8538] Call Trace: [ 257.556718][ T8538] [ 257.558309][ T8538] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 257.563315][ T8538] ? drm_client_rotation+0x451/0x6a0 [ 257.568464][ T8538] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 257.572270][ T8538] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 257.575266][ T8538] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 257.578050][ T8538] ? drm_master_internal_acquire+0x21/0x80 [ 257.581331][ T8538] drm_client_modeset_commit_locked+0x14d/0x580 [ 257.585222][ T8538] drm_client_modeset_commit+0x4f/0x80 [ 257.588291][ T8538] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 257.592617][ T8538] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 257.595396][ T8538] drm_fbdev_client_restore+0x1b/0x30 [ 257.597800][ T8538] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 257.601430][ T8538] drm_client_dev_restore+0x205/0x2a0 [ 257.604211][ T8538] drm_release+0x2c6/0x360 [ 257.606348][ T8538] ? __pfx_drm_release+0x10/0x10 [ 257.608860][ T8538] __fput+0x3ff/0xb50 [ 257.611384][ T8538] task_work_run+0x150/0x240 [ 257.613309][ T8538] ? __pfx_task_work_run+0x10/0x10 [ 257.615398][ T8538] exit_to_user_mode_loop+0x1d8/0x700 [ 257.618419][ T8538] ? rcu_is_watching+0x13/0xc0 [ 257.621979][ T8538] __do_fast_syscall_32+0x59f/0x8b0 [ 257.624350][ T8538] do_fast_syscall_32+0x32/0x70 [ 257.626434][ T8538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.629179][ T8538] RIP: 0023:0xf702efec [ 257.631265][ T8538] Code: Unable to access opcode bytes at 0xf702efc2. [ 257.636430][ T8538] RSP: 002b:00000000ffcb13cc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 257.641641][ T8538] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 257.644858][ T8538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.648041][ T8538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.652008][ T8538] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 257.655260][ T8538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.660280][ T8538] [ 257.662437][ T8538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.665450][ T8538] CPU: 2 UID: 0 PID: 8538 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.670049][ T8538] Tainted: [L]=SOFTLOCKUP [ 257.671865][ T8538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.676785][ T8538] Call Trace: [ 257.678463][ T8538] [ 257.679975][ T8538] dump_stack_lvl+0x100/0x190 [ 257.682514][ T8538] vpanic+0x553/0x970 [ 257.686278][ T8538] ? __pfx_vpanic+0x10/0x10 [ 257.688557][ T8538] panic+0xd1/0xe0 [ 257.690379][ T8538] ? __pfx_panic+0x10/0x10 [ 257.692356][ T8538] check_panic_on_warn.cold+0x19/0x34 [ 257.694659][ T8538] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 257.698668][ T8538] __warn.cold+0x191/0x318 [ 257.700720][ T8538] __report_bug+0x30f/0x440 [ 257.703356][ T8538] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 257.708769][ T8538] ? __pfx___report_bug+0x10/0x10 [ 257.711393][ T8538] ? __drm_dev_dbg+0x149/0x1a0 [ 257.713770][ T8538] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 257.717056][ T8538] report_bug+0xb3/0x220 [ 257.718943][ T8538] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 257.722187][ T8538] handle_bug+0x16a/0x2a0 [ 257.725289][ T8538] exc_invalid_op+0x17/0x50 [ 257.728725][ T8538] asm_exc_invalid_op+0x1a/0x20 [ 257.731085][ T8538] RIP: 0010:__drm_atomic_helper_set_config+0xa45/0xee0 [ 257.734992][ T8538] Code: 84 c0 74 09 3c 03 7f 05 e8 88 5a b4 fc 45 89 75 38 e9 0e fb ff ff e8 0a 31 42 fc 90 0f 0b 90 e9 9f f7 ff ff e8 fc 30 42 fc 90 <0f> 0b 90 e9 47 f7 ff ff 8b 6c 24 28 e8 ea 30 42 fc 49 8d 7c 24 08 [ 257.745982][ T8538] RSP: 0000:ffffc90002f27950 EFLAGS: 00010293 [ 257.749275][ T8538] RAX: 0000000000000000 RBX: ffff888026699580 RCX: 0000000000000000 [ 257.752742][ T8538] RDX: ffff888028672580 RSI: ffffffff85c91b34 RDI: ffff888028672580 [ 257.756306][ T8538] RBP: ffff888024bdff00 R08: 0000000000000007 R09: fffffffffffff000 [ 257.759906][ T8538] R10: ffff888072e56800 R11: 0000000000000000 R12: ffff88804ee90a00 [ 257.763249][ T8538] R13: ffff888072e56800 R14: ffff888072e56400 R15: ffff88804c2e9368 [ 257.766653][ T8538] ? __drm_atomic_helper_set_config+0xa44/0xee0 [ 257.769858][ T8538] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 257.773822][ T8538] ? drm_client_rotation+0x451/0x6a0 [ 257.776503][ T8538] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 257.779696][ T8538] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 257.782306][ T8538] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 257.785103][ T8538] ? drm_master_internal_acquire+0x21/0x80 [ 257.787737][ T8538] drm_client_modeset_commit_locked+0x14d/0x580 [ 257.790616][ T8538] drm_client_modeset_commit+0x4f/0x80 [ 257.793584][ T8538] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 257.797915][ T8538] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 257.800963][ T8538] drm_fbdev_client_restore+0x1b/0x30 [ 257.803300][ T8538] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 257.805905][ T8538] drm_client_dev_restore+0x205/0x2a0 [ 257.808383][ T8538] drm_release+0x2c6/0x360 [ 257.810587][ T8538] ? __pfx_drm_release+0x10/0x10 [ 257.812699][ T8538] __fput+0x3ff/0xb50 [ 257.814948][ T8538] task_work_run+0x150/0x240 [ 257.817799][ T8538] ? __pfx_task_work_run+0x10/0x10 [ 257.820808][ T8538] exit_to_user_mode_loop+0x1d8/0x700 [ 257.823199][ T8538] ? rcu_is_watching+0x13/0xc0 [ 257.825226][ T8538] __do_fast_syscall_32+0x59f/0x8b0 [ 257.827506][ T8538] do_fast_syscall_32+0x32/0x70 [ 257.829638][ T8538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.832805][ T8538] RIP: 0023:0xf702efec [ 257.834795][ T8538] Code: Unable to access opcode bytes at 0xf702efc2. [ 257.838069][ T8538] RSP: 002b:00000000ffcb13cc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 257.841864][ T8538] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 257.845503][ T8538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.849289][ T8538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.853058][ T8538] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 257.857264][ T8538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.861282][ T8538] [ 257.863293][ T8538] Kernel Offset: disabled [ 257.864704][ T8538] Rebooting in 86400 seconds..