last executing test programs: 6.46952498s ago: executing program 3 (id=1869): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000001cc0)="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", 0x192}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000005c0)="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", 0x17d}, {&(0x7f00000008c0)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088", 0xb2}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6.370833457s ago: executing program 3 (id=1870): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x40001, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, 0x0, 0x290206, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 5.440900562s ago: executing program 3 (id=1872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x604a82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001240)={@void, @val={0x0, 0x0, 0x9, 0x6, 0xee9f, 0x200c}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x18, 0xfc0, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}, "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"/4012}}, 0xfca) fcntl$lock(0xffffffffffffffff, 0x40f, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4c, &(0x7f0000000480)="0c1f59", &(0x7f0000000500)=""/76, 0x10, 0x30, 0x0, 0x1}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x2a, '\x00', @data=0x4}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xafd862d2c267134, 0x39, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x0, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000600)=0xff) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x5) r7 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x6516, 0x6d93, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc645}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="64cbce3a43a7004000", @ANYRES16=r12, @ANYBLOB="010025bd7001fcdbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) 4.960952397s ago: executing program 3 (id=1873): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000002180)="deb91ef2d43702d8a671eb31eaae7f6f402b2d215afaba2b04b6561c18c8a69ec252293b3fec7289597d58ff58cdaa83148b11aa0a1cd1bf61121dd511e2381a55cd13d490148311f7e90dfe2cafa07a8a9b83040bcd7d37c08a1ab3b6df47bda939a588f22e32a8bc7a7f35bbbe3866ab67923d2e581c384a21c0a4d409ed728705a7fb6edc1daf2893b0cf885040f678bcb9544694b737076bfa813d963bcdb83e632684c7306574c4af80c62d3dad70e68c51911019d1aec64eadfa59043b1d98afb05866f0d6a21c8e606c3963243ab54443faf51ac28c5c6188267bb3c705c4942acc026d529a14fb9bb2d01149835bc4cc44988b7425f4b7365c9cd4fe5ed74a0c16a8c1126269196915d3b15227a883173070e7dacf4796ea2e41e3783f5dc0a7170a25cba51d1e09bbe17fa739adc057295aa3a97811e76c24bf5ad69c48c9f98db944529d081b3dd86601ac6728679f42764a84ed9ee620d300e0ad4a55207824a76255cbb75d383fe26e5579e5288835f10f9e8add2feed79cb5d42a822b02d8a69efa8cd60b40b45d21f1c196c785664fb56433f62c2706ebbcbc365cc2d32bd483481b311f8a3689dfc18099f81157e9ca1620812f219bad29c6de6acd6adace9df1fd255e4eccc893a03f9b4c83e01403b7dfcbf1b8eb7b541327643604043cf0c636063b894971366cf79d877b3a242554572bc10f9fc6bb0f6246c164b6facc2e10ee21e37ff18bf15c87c96bc9a7f7097cdd3e7bd91e19167d273e6b55acd078302a6d34634b4929bbbe5247e1541fce91e5489096cf2caa236c31285a470c6d3fbe5c5f091e3f82141ef4cbe7d06dbf74b4a86016c43edf66851b3cd7444ef0f5d8d0d1ce537021d877767b72dfd2660b21d37500e68031a8a2216775a87b691ce2dd87bb811fc9603c2c361faa66ff0ca9ab1c22ed7877bfd56b589aea60ad4e40f559d7a6664757b961cda1a80c43d235e5d66a7e4788fb2622eb3f8a928790a0b7eae0d414d42d70a8fbc2f607e713bdc93357ba3b1ba6e697bb60fdc42b4b8f9a79092b72cdd0e0b87d99bb73f73230887920843feeaa5bc40b426b899a1807ac883cdd742cf6ef985375d0cc7bf55f9b1c3d842ca9890c3821d1b97d99260a3eabb53c4253ccc16b3860706e5dd491b394af16134eed4fe81e4a4fa6b9e38d80fb61a819b006e83975c1e6bc3162f7f5b9fcde1d9e595e2b0a74a9e3d0288d1dbe34c8166688e99d4cadbe1f1d388cc3fe13b1ccb07e991f8d8598ab77832a2b8f57808ebadf68f94ac21851f47a044f01461558bb122a35b9ef64fc040728e78483239adfa02775adcee46e4d4b3560c95ab753b09c7732867404fed7fb306e24b8d8d3c06e24ae57dc4f291d65bf8f8e8795a93e57597381a160f093bd1efd7e9179acfcb16d6cfd0b1562f72278b7a065c6e7a82992b4e4511d048e2952bbbf02ff46bf88a36d1bf50d81aa1b4728473666a35297c359732112c1c9a054ad68e4d0246c45d5901835d5715c6518c32a27095069b803c66f755137a463101bfc05e5830bec75cb234270a3fee5a59d20c11db77bf6c84cef6f8e14cc1f83da74aa88cf7a2522c9f4b16bb25fae6709f6dc4ddf948ec654f2f87e375048a6c0274a5cdb876ed1e100e2a4673d5cccbac15f832bb12710915491ce8691b3d764592085986cda06f61d8a5d2371b8b089fd49c2030064bb644cf21cd564261c062f1ccbd82c2812f3a565466a09f8cfa56f0b390a7b638f8b23ff57b8450043464a10a75f097a838f922b0860fd3d693b206b09f06cd21dc506e86cc3b03718d18e47cb0d3f628a60568d5d61d7c40e28253d498841e5ab8eaca58795114bd332091c4a3ad1c340bf1b6928f9d4876a88052220ebcb52dc91f016fa00bcec0092cd5599d6214a7180602be94969d5ec893c8045d42e67b0800d8fcc0abb05912dd9fd3649ad6b8f1bc1bf3b0a092cbb9f17f9d73159865e439bae2f05d96aec12be331fa1ab56f9ffb56367db0be2fb3a703e5eabc8d757f02b4f895e4acaddc71c697833329a6185523a4d00e888a89060383d23f1ca05116ac66d2d4cffd56ebdc660298ce90108110a123a0df0ea1a1ae1e87b57c647a0793d11beee33235ffdf099f4eae45dda4e3b504b33494f458c6068637134b03d7ef7280c682624eebe4405e8909347cb93eb56ba0ee698e12c469b7ca9b79410d45a8b345c073333e1fe110af66693026bfccea4fbd1da61b99ec588922a36c1617c5abbb7f285e8197ece1c9d38beda9c0679f12234a3a0f7933d42ffb3ff55d17e307872bb91ab8b3bc7045dd2d4cc751b107726032ed96440a189e071c4023cd38105ab5ed92384e81d43772f167779701f8c6bf12d1639c8848859ae1d6974079a0c3f1bfdf74056c169983da27b339bf28744ef67fe893920f42afae650f5e14f1a206c621d3be808b7491394fac3d679cddbb308cc4b0ba5f4b7533ef4008f416282b3b1116576bc70ea29a847831ea54e1bbaeee4be811c4b1b", 0x700}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYRES16=r7], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) getpeername(r2, 0x0, &(0x7f0000000380)) 4.861326751s ago: executing program 2 (id=1875): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/266], 0xa4}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x2, 0x3, 0x9, 0xff1, 0x3, 0x0, 0x4, [0x3, 0x7f]}}) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='oxu210hp-hcd', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='QEMU0002:00\x00', 0xb) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)={@loopback}, &(0x7f0000000180)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x0, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeac}, 0x121) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0xfff, 0xfff, 0x9]}, &(0x7f00000000c0)=0x44) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) 4.799213806s ago: executing program 3 (id=1876): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20010020, 0x0) 4.400817242s ago: executing program 3 (id=1877): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) getpgrp(r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000030}, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x10}, @exp_fastopen={0xfe, 0x10, 0xf989, "4cd7aa429a88aea5638bf557"}, @md5sig={0x13, 0x12, "8d04ff892fba80178764e8e67254fe1d"}, @sack={0x5, 0xe, [0x2, 0x1, 0xeb14]}, @eol, @generic={0x1, 0xd, "75447c776f2659d823cd63"}]}}}}}}}, 0x0) 4.336615373s ago: executing program 32 (id=1877): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) getpgrp(r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000030}, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x10}, @exp_fastopen={0xfe, 0x10, 0xf989, "4cd7aa429a88aea5638bf557"}, @md5sig={0x13, 0x12, "8d04ff892fba80178764e8e67254fe1d"}, @sack={0x5, 0xe, [0x2, 0x1, 0xeb14]}, @eol, @generic={0x1, 0xd, "75447c776f2659d823cd63"}]}}}}}}}, 0x0) 3.963031826s ago: executing program 2 (id=1881): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000"], 0x70}}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) r4 = syz_usb_connect$uac3(0x5, 0xce, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c, 0x8}, [@feature_unit={0x1d, 0x24, 0x7, 0x6, 0x2, [0xd, 0x0, 0x2, 0x1, 0xa, 0x7]}, @mixer_unit={0xa, 0x24, 0x5, 0x1, 0x60, "63a0a2f316"}, @multiply_unit={0xb, 0x24, 0xd, 0x1, 0x3, 0x800000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x7b, &(0x7f0000000300)={0x5, 0xf, 0x7b, 0x5, [@generic={0x53, 0x10, 0xa, "5ebefce788db2ac8142cbbaef9f9abdd213c5be0753cc2b69b4bb34e59d0dd1026b9740d3d9a719a8746eb8ee4a1b69a2a9658c924a60fa096e5f6d8893cfd4f2618aeb1cbbe0f5a79cd38ed5978b21a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x401, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x9ee1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x4, 0x6}]}, 0x6, [{0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c331b"}}, {0xdb, &(0x7f0000000440)=@string={0xdb, 0x3, "d9c77b42585b6af1a12de73d480f5e8094d52d4145b1f8a533fc6a605b8e08f3e6ce7787aea53915ba33d32a8c74af1441c84fd4f07e3a9df36a54bf14548b3e3a936c9312264b9c2ca16d8eb47cb95587c288c5e91bd272aa5bc444880608365425ddb8c6e748fcb72a7912a4f8850a6ad512925acc69febed7b7cbbbaecfe627bfb1fbc32161b1a960982de9669d0bbdf848b1930c24559be4837cfbeb36d7e9123d097edfab94de34f396664b81f68dc06aa421b12238e1a0c390b3987e728c06ea98448052b9daef64fee8e6caae04da201b3afeb48221"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xe, &(0x7f00000005c0)=@string={0xe, 0x3, "5a1c41342fec26688802c7b1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_disconnect(r4) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 2.881260459s ago: executing program 1 (id=1887): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100)) 2.13127217s ago: executing program 2 (id=1888): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400000000208000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae61c8bfe99ecc618f1352ebe6bab2c950a393170e69458b95d7c6608fbe454560100ebb69e6e878ab634d303420ea93fad8f26ccc4514dfdbbc46ba9845b7d23353e780863aa941bc1d0f35a69bdc8ebaa30e6468fdd3adc192900"/266], 0xa4}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x2, 0x3, 0x9, 0xff1, 0x3, 0x0, 0x4, [0x3, 0x7f]}}) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='oxu210hp-hcd', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='QEMU0002:00\x00', 0xb) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)={@loopback}, &(0x7f0000000180)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x0, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeac}, 0x121) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0xfff, 0xfff, 0x9]}, &(0x7f00000000c0)=0x44) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) 1.739765226s ago: executing program 0 (id=1891): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70, 0x500}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.520613832s ago: executing program 0 (id=1892): mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40140921, &(0x7f0000001400)='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00') (fail_nth: 1) 1.520224748s ago: executing program 1 (id=1893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='raid1\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) close(r1) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='2', 0x1) close(r3) 1.390993224s ago: executing program 1 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.330920192s ago: executing program 0 (id=1895): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x460001) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0xa27, 0x1, 0x0, 0xd}) r1 = socket$inet(0x2, 0x3, 0x8) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f00000000c0)) r2 = accept4$tipc(r1, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xdaf, 0x7, 0x1, 0x0, 0x9, 0x56f, 0xd32, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0xa, 0x9}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000300)={r4, 0x8}, &(0x7f0000000340)=0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x7, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x67, 0x0, 0x4, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x19, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast1, 0x92}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7f}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xffff}, {@rand_addr=0x64010102, 0x7}, {@multicast1}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)=0xe, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000840)=0x1, &(0x7f0000000880)=0x4) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f00000008c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r7}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r12, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5984911e28f36af4}, 0x20044874) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x109000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0xff}}, 0x10, 0x1e, 0x3, 0x5}, &(0x7f0000000b00)=0x98) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r13, 0x40485404, &(0x7f0000000b40)={{0x2, 0x1, 0x8, 0x1, 0x80000001}, 0x5, 0x5}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r13) openat(r13, &(0x7f0000000c00)='./file0\x00', 0x8000, 0x68) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000c80)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r13, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x1ac, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000080) 1.330611446s ago: executing program 1 (id=1896): syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x10}, @exp_fastopen={0xfe, 0x10, 0xf989, "4cd7aa429a88aea5638bf557"}, @md5sig={0x13, 0x12, "8d04ff892fba80178764e8e67254fe1d"}, @sack={0x5, 0xe, [0x2, 0x1, 0xeb14]}, @eol, @generic={0x1, 0xb, "75447c776f2659d823"}]}}}}}}}, 0x0) 1.267992936s ago: executing program 1 (id=1897): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00), 0x0, 0x20010020, 0x0) 1.266729215s ago: executing program 2 (id=1898): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101180, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0x10c1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x8842, 0x3, 0x92, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x20, 0x1, 0x80003ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x1c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x723642762b6db36e, 0x1, 0x100026d}}], 0x1, 0x0, 0x0) 1.234480778s ago: executing program 0 (id=1899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101180, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x21) read$usbfs(r2, &(0x7f0000000100)=""/151, 0x97) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0x10c1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x8842, 0x3, 0x92, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x20, 0x1, 0x80003ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x1c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x723642762b6db36e, 0x1, 0x100026d}}], 0x1, 0x0, 0x0) 850.841183ms ago: executing program 2 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000003000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 849.91422ms ago: executing program 2 (id=1901): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000c40)={0xaf, 0x7}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0x80000000, 0xfffffffd, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x80000001, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r4, &(0x7f00000002c0)='snd_aloop.0', 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x121c1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r4, 0x20, &(0x7f00000009c0)={&(0x7f00000008c0)=""/40, 0x28, 0x0, &(0x7f0000000900)=""/189, 0xbd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1c, 0x10, &(0x7f0000000700)=@raw=[@exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000780)='GPL\x00', 0x800, 0x47, &(0x7f00000007c0)=""/71, 0x41000, 0x20, '\x00', r10, @fallback=0x22, r2, 0x8, &(0x7f0000000880)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r13, r4, 0x1, &(0x7f0000000a40)=[r0], &(0x7f0000000a80)=[{0x1, 0x3, 0x9, 0x5}], 0x10, 0x7fffffff}, 0x94) 586.47046ms ago: executing program 0 (id=1902): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r0, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) 541.976519ms ago: executing program 4 (id=1878): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mnt\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='a\x00\x00\x00\x00\x00\x00\x00\b0.0.1,port=2049,mounttort=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00,\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys_mnt/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000001400)='inactive', 0x8) 439.511493ms ago: executing program 4 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/cluster/c1/heartbeat/r1/start_block\x00', 0x1, 0x0) write(r0, &(0x7f0000001700)='1', 0x1) 438.606844ms ago: executing program 4 (id=1904): syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x2, 0x0, 0xe7, {[@window={0x3, 0x3, 0x10}, @exp_fastopen={0xfe, 0x10, 0xf989, "4cd7aa429a88aea5638bf557"}, @md5sig={0x13, 0x12, "8d04ff892fba80178764e8e67254fe1d"}, @sack={0x5, 0xe, [0x2, 0x1, 0xeb14]}, @eol, @generic={0x1, 0xb, "75447c776f2659d823"}]}}}}}}}, 0x0) 351.176794ms ago: executing program 4 (id=1905): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xa, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120c0000000018e938170000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010003704feffffffffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="c30407001bca34262c0012800b000100697036746e6c00001c00028014000200fc0100000000000000000000000000042f92fefdd9cbc6dfea8a51f77eb0ae8a9b0fb85f1489014754f0c63e659be7baa271fb66e2c0397abfd4600f773193c1"], 0x4c}, 0x1, 0x0, 0x0, 0xa3786d35a20e39b}, 0x1000c014) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000400)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000480)={0x6, 0x2, r7}) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000100), &(0x7f00000002c0)=0x4) 350.340494ms ago: executing program 1 (id=1906): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/266], 0xa4}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x2, 0x3, 0x9, 0xff1, 0x3, 0x0, 0x4, [0x3, 0x7f]}}) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='oxu210hp-hcd', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='QEMU0002:00\x00', 0xb) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000140), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)={@loopback}, &(0x7f0000000180)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x0, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeac}, 0x121) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0xfff, 0xfff, 0x9]}, &(0x7f00000000c0)=0x44) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) 349.831436ms ago: executing program 4 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb, [{0x5, 0x40, 0x8690, 0x0, 0x8, 0x8}]}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x1a3, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x6f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x7fff, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x6, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x108, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffff3, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 0s ago: executing program 0 (id=1908): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000003000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): Magic bitmask 0x1985 not found at 0x0000e01c: 0x0008 instead [ 176.885795][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x3243 instead [ 176.892543][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xae14 instead [ 176.895988][ T9305] jffs2: Further such events for this erase block will not be printed [ 176.902843][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x704f instead [ 176.906088][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x109a instead [ 176.909569][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x63fa instead [ 176.912765][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x15cf instead [ 176.916065][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xa1e3 instead [ 176.919430][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x3e8a instead [ 176.922688][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5806 instead [ 176.926124][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xa082 instead [ 176.930791][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x7884 instead [ 176.934759][ T9305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x73c6 instead [ 176.938812][ T9305] jffs2: Further such events for this erase block will not be printed [ 176.942210][ T9305] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 176.945780][ T9305] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32 [ 176.948093][ T6319] ov519 5-1:1.0: Can't determine sensor slave IDs [ 176.953836][ T6319] ov519 5-1:1.0: OV519 Config failed [ 176.957709][ T6319] ov519 5-1:1.0: probe with driver ov519 failed with error -22 [ 176.972665][ T6319] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 177.052798][ T6319] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.084135][ T42] audit: type=1400 audit(176.975:632): avc: denied { write } for pid=9327 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.084353][ T6319] usb 5-1: USB disconnect, device number 19 [ 177.109118][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.529144][ T42] audit: type=1800 audit(177.425:633): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1340" name="idVendor" dev="configfs" ino=26133 res=0 errno=0 [ 177.545124][ T42] audit: type=1800 audit(177.435:634): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1340" name="idProduct" dev="configfs" ino=26134 res=0 errno=0 [ 177.560297][ T42] audit: type=1800 audit(177.455:635): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1340" name="product" dev="configfs" ino=26135 res=0 errno=0 [ 177.673730][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 178.183380][ T9350] loop0: detected capacity change from 0 to 4096 [ 178.268062][ C2] net_ratelimit: 10 callbacks suppressed [ 178.268125][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.284518][ T9350] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 178.288053][ T9350] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.302002][ T9350] loop0: [ 178.350988][ T1040] ov519 7-1:1.0: Can't determine sensor slave IDs [ 178.358320][ T1040] ov519 7-1:1.0: OV519 Config failed [ 178.365515][ T1040] ov519 7-1:1.0: probe with driver ov519 failed with error -22 [ 178.383098][ T1040] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 178.489915][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 178.534462][ T1040] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.550978][ T1040] usb 7-1: USB disconnect, device number 24 [ 178.570275][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.668034][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.758748][ T9366] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1353'. [ 178.907981][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.924303][ T9375] tc action pedit offset 34448 out of bounds [ 178.928050][ T9375] tc action pedit offset 34448 out of bounds [ 178.930722][ T9375] tc action pedit offset 34448 out of bounds [ 178.933229][ T9375] tc action pedit offset 34448 out of bounds [ 178.935804][ T9375] tc action pedit offset 34448 out of bounds [ 178.938459][ T9375] tc action pedit offset 34448 out of bounds [ 178.941015][ T9375] tc action pedit offset 34448 out of bounds [ 178.942961][ T9375] tc action pedit offset 34448 out of bounds [ 178.944845][ T9375] tc action pedit offset 34448 out of bounds [ 178.946721][ T9375] tc action pedit offset 34448 out of bounds [ 178.949134][ T9375] 0: reclassify loop, rule prio 0, protocol 800 [ 178.988108][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.169289][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 179.224682][ T9387] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1363'. [ 179.304514][ T9396] binder: 9395:9396 ioctl c0306201 2000000004c0 returned -14 [ 179.308006][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.321783][ T9399] block nbd3: NBD_DISCONNECT [ 179.708036][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.855526][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 179.958028][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.027999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.348076][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.538036][ T40] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 180.678165][ T847] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 180.688105][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 180.690751][ T40] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 180.694731][ T40] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 180.698866][ T40] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 180.703373][ T40] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.707831][ T40] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 180.714996][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.718111][ T40] usb 5-1: Product: syz [ 180.719458][ T40] usb 5-1: Manufacturer: syz [ 180.720979][ T40] usb 5-1: SerialNumber: syz [ 180.731765][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 180.738052][ T29] ov519 6-1:1.0: Can't determine sensor slave IDs [ 180.745959][ T29] ov519 6-1:1.0: OV519 Config failed [ 180.748038][ T29] ov519 6-1:1.0: probe with driver ov519 failed with error -22 [ 180.754893][ T40] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input15 [ 180.756203][ T29] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 180.783998][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 180.794434][ T29] usb 6-1: USB disconnect, device number 19 [ 180.828896][ T847] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 180.832916][ T847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.835995][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.839222][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.865299][ T7145] udevd[7145]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.948209][ T40] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 180.957451][ T40] (id 0x00) [ 180.962037][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 180.962055][ T42] audit: type=1400 audit(180.855:640): avc: denied { accept } for pid=9420 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.976300][ T42] audit: type=1400 audit(180.865:641): avc: denied { getopt } for pid=9420 comm="syz.2.1377" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.007979][ T40] rc_core: IR keymap rc-imon-pad not found [ 181.009894][ T40] Registered IR keymap rc-empty [ 181.011514][ T40] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 181.015067][ T40] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 181.056733][ T24] usb 8-1: USB disconnect, device number 14 [ 181.098864][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 181.152655][ T40] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 181.162096][ T40] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input16 [ 181.175603][ T40] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:20> initialized [ 181.228217][ T29] usb 6-1: device descriptor read/64, error -71 [ 181.269198][ T847] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 181.390806][ T9417] imon:send_packet: packet tx failed (-71) [ 181.390931][ T1040] usb 5-1: USB disconnect, device number 20 [ 181.408251][ T9417] imon:vfd_write: send packet #0 failed [ 181.418610][ T847] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 181.422957][ T847] usb 7-1: config 0 has no interfaces? [ 181.425293][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.443749][ T847] usb 7-1: config 0 descriptor?? [ 181.479326][ T29] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 181.621905][ T29] usb 6-1: device descriptor read/64, error -71 [ 181.651390][ T1040] usb 7-1: USB disconnect, device number 25 [ 181.729547][ T29] usb usb6-port1: attempt power cycle [ 182.068136][ T29] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 182.088720][ T29] usb 6-1: device descriptor read/8, error -71 [ 182.237985][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.287815][ T9437] block nbd2: NBD_DISCONNECT [ 182.291781][ T42] audit: type=1326 audit(182.185:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1383" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9899e0d9 code=0x0 [ 182.338063][ T29] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 182.358636][ T29] usb 6-1: device descriptor read/8, error -71 [ 182.368032][ T9] usb 5-1: device descriptor read/64, error -71 [ 182.468327][ T29] usb usb6-port1: unable to enumerate USB device [ 182.615767][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.769103][ T9] usb 5-1: device descriptor read/64, error -71 [ 182.879467][ T9] usb usb5-port1: attempt power cycle [ 183.208024][ T847] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 183.238101][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 183.258762][ T9] usb 5-1: device descriptor read/8, error -71 [ 183.317492][ T9458] syzkaller0: entered promiscuous mode [ 183.319976][ T9458] syzkaller0: entered allmulticast mode [ 183.348075][ T847] usb 8-1: device descriptor read/64, error -71 [ 183.468143][ C2] net_ratelimit: 12 callbacks suppressed [ 183.468166][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.527981][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 183.559493][ T9] usb 5-1: device descriptor read/8, error -71 [ 183.559835][ T9464] Invalid source name [ 183.588033][ T847] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 183.668158][ T9] usb usb5-port1: unable to enumerate USB device [ 183.718079][ T847] usb 8-1: device descriptor read/64, error -71 [ 183.833548][ T847] usb usb8-port1: attempt power cycle [ 183.878107][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.117984][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.168154][ T847] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 184.188085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.188737][ T847] usb 8-1: device descriptor read/8, error -71 [ 184.438094][ T847] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 184.468781][ T847] usb 8-1: device descriptor read/8, error -71 [ 184.512003][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.582792][ T847] usb usb8-port1: unable to enumerate USB device [ 184.730897][ T9463] tipc: Enabling of bearer rejected, already enabled [ 184.918095][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.098105][ T1040] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 185.148098][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.163708][ T42] audit: type=1400 audit(185.055:643): avc: denied { create } for pid=9482 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.228142][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.238120][ T42] audit: type=1400 audit(185.125:644): avc: denied { mount } for pid=9482 comm="syz.0.1402" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 185.247615][ T42] audit: type=1807 audit(185.135:645): UNKNOWN=m™`easuÈìeø^ÏzhVܔöre res=0 [ 185.251792][ T42] audit: type=1802 audit(185.135:646): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.1402" res=0 errno=0 [ 185.260136][ T1040] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 185.264016][ T42] audit: type=1400 audit(185.135:647): avc: denied { create } for pid=9482 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.273731][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.278366][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 185.279697][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.288168][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.291591][ T1040] usb 7-1: Product: syz [ 185.293341][ T1040] usb 7-1: Manufacturer: syz [ 185.295244][ T1040] usb 7-1: SerialNumber: syz [ 185.305808][ T1040] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 185.316134][ T1040] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 185.323614][ T1040] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 185.363875][ T9482] ima: policy update failed [ 185.366783][ T42] audit: type=1802 audit(185.255:648): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.1402" res=0 errno=0 [ 185.386320][ T42] audit: type=1400 audit(185.275:649): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 185.449163][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.454754][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.460464][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.464931][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.470835][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.471595][ T9490] syzkaller0: entered promiscuous mode [ 185.476641][ T9490] syzkaller0: entered allmulticast mode [ 185.477182][ T24] usb 6-1: config 0 descriptor?? [ 185.548040][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.594726][ T9492] tipc: Enabling of bearer rejected, already enabled [ 185.599303][ T9492] Invalid source name [ 185.791193][ T9495] tipc: Enabled bearer , priority 0 [ 185.795130][ T9495] syzkaller0: entered promiscuous mode [ 185.797457][ T9495] syzkaller0: entered allmulticast mode [ 185.915276][ T24] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.948067][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.984330][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 185.984350][ T42] audit: type=1400 audit(185.875:651): avc: denied { mount } for pid=9498 comm="syz.3.1407" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.998796][ T42] audit: type=1400 audit(185.885:652): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 186.196501][ T9493] tipc: Resetting bearer [ 186.217382][ T9493] tipc: Disabling bearer [ 186.352352][ T42] audit: type=1400 audit(186.245:653): avc: denied { write } for pid=9504 comm="syz.0.1409" name="/" dev="ocfs2_dlmfs" ino=25155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.353083][ T9505] o2cb: This node has not been configured. [ 186.362234][ T42] audit: type=1400 audit(186.245:654): avc: denied { create } for pid=9504 comm="syz.0.1409" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 186.365573][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 186.365975][ T9505] o2cb: Cluster check failed. Fix errors before retrying. [ 186.366006][ T9505] (syz.0.1409,9505,3):user_dlm_register:674 ERROR: status = -22 [ 186.366033][ T9505] (syz.0.1409,9505,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 186.374437][ T42] audit: type=1400 audit(186.245:655): avc: denied { associate } for pid=9504 comm="syz.0.1409" name="domain1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.424511][ T9507] block nbd0: NBD_DISCONNECT [ 186.429846][ T42] audit: type=1326 audit(186.325:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5e59e0d9 code=0x0 [ 186.508127][ T24] usb 8-1: device descriptor read/64, error -71 [ 186.748864][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 186.878178][ T24] usb 8-1: device descriptor read/64, error -71 [ 186.989054][ T24] usb usb8-port1: attempt power cycle [ 187.338064][ T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 187.349367][ T42] audit: type=1400 audit(187.245:657): avc: denied { read write } for pid=9511 comm="syz.0.1411" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.351589][ T5738] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 187.356436][ T42] audit: type=1400 audit(187.245:658): avc: denied { open } for pid=9511 comm="syz.0.1411" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.368662][ T24] usb 8-1: device descriptor read/8, error -71 [ 187.618085][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 187.648693][ T24] usb 8-1: device descriptor read/8, error -71 [ 187.758524][ T24] usb usb8-port1: unable to enumerate USB device [ 187.793652][ T9517] syzkaller0: entered promiscuous mode [ 187.796047][ T9517] syzkaller0: entered allmulticast mode [ 187.830788][ T1040] usb 7-1: USB disconnect, device number 26 [ 187.841759][ T1040] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 187.847361][ T1040] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 187.851514][ T1040] ti_usb_3410_5052 7-1:2.0: device disconnected [ 187.875682][ T9519] tipc: Enabling of bearer rejected, already enabled [ 187.890487][ T9519] Invalid source name [ 188.023430][ T9] usb 6-1: USB disconnect, device number 24 [ 188.027574][ T9530] UDC core: g1: couldn't find an available UDC or it's busy [ 188.087119][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 188.169210][ T1355] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.211638][ T9544] syzkaller0: entered promiscuous mode [ 188.216317][ T9544] syzkaller0: entered allmulticast mode [ 188.260223][ T42] audit: type=1400 audit(188.155:659): avc: denied { read } for pid=9548 comm="syz.2.1428" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 188.270042][ T42] audit: type=1400 audit(188.155:660): avc: denied { open } for pid=9548 comm="syz.2.1428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 188.298204][ T1355] usb 5-1: device descriptor read/64, error -71 [ 188.414081][ T9553] tipc: Enabling of bearer rejected, already enabled [ 188.422272][ T9553] No source specified [ 188.538417][ T1355] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 188.621809][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 188.668197][ T1355] usb 5-1: device descriptor read/64, error -71 [ 188.678038][ C2] net_ratelimit: 10 callbacks suppressed [ 188.678059][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.778842][ T1355] usb usb5-port1: attempt power cycle [ 189.080015][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.104951][ T9570] syzkaller0: entered promiscuous mode [ 189.107489][ T9570] syzkaller0: entered allmulticast mode [ 189.112483][ T9572] tipc: Enabling of bearer rejected, already enabled [ 189.118165][ T1355] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 189.119253][ T9572] No source specified [ 189.144965][ T1355] usb 5-1: device descriptor read/8, error -71 [ 189.308003][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.312577][ T9574] block nbd1: NBD_DISCONNECT [ 189.378648][ T1355] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 189.398081][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.399663][ T1355] usb 5-1: device descriptor read/8, error -71 [ 189.508778][ T1355] usb usb5-port1: unable to enumerate USB device [ 189.708085][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.823577][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 190.108148][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.306180][ T9591] syzkaller0: entered promiscuous mode [ 190.309448][ T9591] syzkaller0: entered allmulticast mode [ 190.348077][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.349679][ T40] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 190.428029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.441590][ T9597] syzkaller0: entered promiscuous mode [ 190.444026][ T9597] syzkaller0: entered allmulticast mode [ 190.498099][ T40] usb 7-1: device descriptor read/64, error -71 [ 190.673618][ T9607] block nbd1: NBD_DISCONNECT [ 190.738057][ T40] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 190.758035][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.858148][ T847] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 190.868041][ T40] usb 7-1: device descriptor read/64, error -71 [ 190.978462][ T40] usb usb7-port1: attempt power cycle [ 191.009260][ T847] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.014427][ T847] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 191.019619][ T847] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 191.023611][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.148094][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.318124][ T40] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 191.339400][ T40] usb 7-1: device descriptor read/8, error -71 [ 191.341543][ T29] usb 8-1: USB disconnect, device number 23 [ 191.578055][ T40] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 191.598718][ T40] usb 7-1: device descriptor read/8, error -71 [ 191.681234][ T9626] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 191.687355][ T9626] CPU: 3 UID: 0 PID: 9626 Comm: syz.1.1460 Not tainted syzkaller #0 PREEMPT(full) [ 191.687385][ T9626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.687398][ T9626] Call Trace: [ 191.687406][ T9626] [ 191.687415][ T9626] dump_stack_lvl+0x100/0x190 [ 191.687450][ T9626] sysfs_warn_dup.cold+0x1c/0x28 [ 191.687481][ T9626] sysfs_create_dir_ns+0x24b/0x2b0 [ 191.687509][ T9626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.687532][ T9626] ? find_held_lock+0x2b/0x80 [ 191.687550][ T9626] ? kobject_add_internal+0x25f/0x930 [ 191.687583][ T9626] ? kobject_add_internal+0x25f/0x930 [ 191.687614][ T9626] ? class_dir_child_ns_type+0xd/0x60 [ 191.687647][ T9626] kobject_add_internal+0x2c8/0x930 [ 191.687680][ T9626] kobject_add+0x16a/0x1e0 [ 191.687708][ T9626] ? __pfx_kobject_add+0x10/0x10 [ 191.687737][ T9626] ? get_device_parent+0x1b3/0x4c0 [ 191.687762][ T9626] ? kobject_put+0xb9/0x640 [ 191.687795][ T9626] device_add+0x294/0x1970 [ 191.687824][ T9626] ? lockdep_init_map_type+0x5c/0x250 [ 191.687848][ T9626] ? __pfx_device_add+0x10/0x10 [ 191.687897][ T9626] ? lockdep_init_map_type+0x5c/0x250 [ 191.687927][ T9626] ? __init_waitqueue_head+0xca/0x150 [ 191.687962][ T9626] tty_register_device_attr+0x388/0x7f0 [ 191.687986][ T9626] ? lockdep_init_map_type+0x5c/0x250 [ 191.688010][ T9626] ? __pfx_tty_register_device_attr+0x10/0x10 [ 191.688041][ T9626] ? tty_port_init+0x156/0x1c0 [ 191.688069][ T9626] gsm_activate_mux+0x155/0x2a0 [ 191.688096][ T9626] gsmld_ioctl+0xbbc/0x15c0 [ 191.688128][ T9626] ? kasan_quarantine_put+0x104/0x240 [ 191.688152][ T9626] ? __pfx_gsmld_ioctl+0x10/0x10 [ 191.688182][ T9626] ? __ldsem_down_read_nested+0xf3/0x890 [ 191.688214][ T9626] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 191.688248][ T9626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.688273][ T9626] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 191.688294][ T9626] ? __pfx_gsmld_ioctl+0x10/0x10 [ 191.688321][ T9626] tty_ioctl+0x11b4/0x1640 [ 191.688346][ T9626] ? __pfx_tty_ioctl+0x10/0x10 [ 191.688369][ T9626] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.688404][ T9626] ? __fget_files+0x215/0x3d0 [ 191.688425][ T9626] ? hook_file_ioctl_common+0x140/0x440 [ 191.688450][ T9626] ? selinux_file_ioctl+0x13b/0x290 [ 191.688477][ T9626] ? selinux_file_ioctl+0xb6/0x290 [ 191.688505][ T9626] ? __pfx_tty_ioctl+0x10/0x10 [ 191.688530][ T9626] __x64_sys_ioctl+0x18e/0x210 [ 191.688554][ T9626] do_syscall_64+0x115/0x870 [ 191.688577][ T9626] ? clear_bhb_loop+0x70/0xc0 [ 191.688601][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.688621][ T9626] RIP: 0033:0x7fb9eaf9e0d9 [ 191.688638][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.688657][ T9626] RSP: 002b:00007fb9ebea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.688678][ T9626] RAX: ffffffffffffffda RBX: 00007fb9eb226090 RCX: 00007fb9eaf9e0d9 [ 191.688691][ T9626] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 191.688703][ T9626] RBP: 00007fb9eb035024 R08: 0000000000000000 R09: 0000000000000000 [ 191.688715][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.688727][ T9626] R13: 00007fb9eb226128 R14: 00007fb9eb226090 R15: 00007ffc03ffee58 [ 191.688752][ T9626] [ 191.825386][ T40] usb usb7-port1: unable to enumerate USB device [ 191.829100][ T1355] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 191.834281][ T9626] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.991852][ T1355] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 191.996153][ T1355] usb 8-1: config 0 has no interfaces? [ 192.001759][ T1355] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.011987][ T1355] usb 8-1: config 0 descriptor?? [ 192.027433][ T9628] syzkaller0: entered promiscuous mode [ 192.030202][ T9628] syzkaller0: entered allmulticast mode [ 192.103038][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 192.223483][ T4315] usb 8-1: USB disconnect, device number 24 [ 192.275564][ T9642] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 193.028152][ T4315] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 193.178269][ T4315] usb 8-1: Using ep0 maxpacket: 8 [ 193.186196][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 193.189250][ T4315] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.202995][ T4315] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 193.206578][ T4315] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 193.216385][ T4315] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.222755][ T4315] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 193.227044][ T4315] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 193.232292][ T4315] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.239612][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.246252][ T9658] syzkaller0: entered promiscuous mode [ 193.248764][ T9658] syzkaller0: entered allmulticast mode [ 193.633522][ T4315] usb 8-1: GET_CAPABILITIES returned 0 [ 193.878007][ C2] net_ratelimit: 10 callbacks suppressed [ 193.878030][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.018073][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 194.068062][ T1355] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 194.091839][ T4315] usbtmc 8-1:16.0: can't read capabilities [ 194.101423][ T4315] usb 8-1: USB disconnect, device number 25 [ 194.180129][ T29] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 194.184723][ T29] usb 5-1: config 0 has no interfaces? [ 194.187243][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.195200][ T29] usb 5-1: config 0 descriptor?? [ 194.201366][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204107][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.208117][ T1355] usb 7-1: device descriptor read/64, error -71 [ 194.268122][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.281767][ T9677] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 194.409619][ T6319] usb 5-1: USB disconnect, device number 29 [ 194.448153][ T1355] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 194.507974][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.578417][ T1355] usb 7-1: device descriptor read/64, error -71 [ 194.588069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.688649][ T1355] usb usb7-port1: attempt power cycle [ 194.908036][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.005989][ T9689] syzkaller0: entered promiscuous mode [ 195.008672][ T9689] syzkaller0: entered allmulticast mode [ 195.048036][ T1355] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 195.078960][ T1355] usb 7-1: device descriptor read/8, error -71 [ 195.308007][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.338030][ T1355] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 195.369435][ T1355] usb 7-1: device descriptor read/8, error -71 [ 195.491354][ T1355] usb usb7-port1: unable to enumerate USB device [ 195.558112][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.638070][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.818212][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 195.948050][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.041973][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 196.071714][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.083609][ T29] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 196.088291][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 196.097134][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.101634][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 196.106323][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 196.111494][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.116985][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.328732][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 196.331178][ T29] usbtmc 5-1:16.0: can't read capabilities [ 196.348079][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.361911][ T9712] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1492'. [ 196.366735][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 196.366747][ T42] audit: type=1400 audit(196.255:663): avc: denied { read write } for pid=9710 comm="syz.1.1492" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.375994][ T42] audit: type=1400 audit(196.255:664): avc: denied { open } for pid=9710 comm="syz.1.1492" path="/375/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.383567][ T42] audit: type=1400 audit(196.255:665): avc: denied { ioctl } for pid=9710 comm="syz.1.1492" path="/375/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.468091][ T60] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 196.540644][ T29] usb 5-1: USB disconnect, device number 30 [ 196.638972][ T60] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 196.644614][ T60] usb 8-1: config 0 has no interfaces? [ 196.647030][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.652875][ T60] usb 8-1: config 0 descriptor?? [ 196.736558][ T9719] syzkaller0: entered promiscuous mode [ 196.740106][ T9719] syzkaller0: entered allmulticast mode [ 196.858164][ T29] usb 8-1: USB disconnect, device number 26 [ 196.874231][ T9721] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 197.599948][ T42] audit: type=1800 audit(197.495:666): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1508" name="idVendor" dev="configfs" ino=28097 res=0 errno=0 [ 197.612348][ T42] audit: type=1800 audit(197.495:667): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1508" name="idProduct" dev="configfs" ino=28098 res=0 errno=0 [ 197.628039][ T42] audit: type=1800 audit(197.505:668): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1508" name="product" dev="configfs" ino=28099 res=0 errno=0 [ 197.636413][ T42] audit: type=1800 audit(197.505:669): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1508" name="configuration" dev="configfs" ino=28100 res=0 errno=0 [ 197.678949][ T9755] syzkaller0: entered promiscuous mode [ 197.681154][ T9755] syzkaller0: entered allmulticast mode [ 197.688644][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 197.828102][ T9] usb 6-1: device descriptor read/64, error -71 [ 198.088074][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 198.103723][ T5809] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 198.238096][ T9] usb 6-1: device descriptor read/64, error -71 [ 198.280446][ T5809] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 198.285077][ T5809] usb 7-1: config 0 has no interfaces? [ 198.287416][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.293532][ T5809] usb 7-1: config 0 descriptor?? [ 198.358881][ T9] usb usb6-port1: attempt power cycle [ 198.503123][ T1355] usb 7-1: USB disconnect, device number 35 [ 198.698031][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 198.718565][ T9] usb 6-1: device descriptor read/8, error -71 [ 198.823983][ T9773] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1515'. [ 198.836125][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1515'. [ 198.907667][ T42] audit: type=1800 audit(198.795:670): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1517" name="idVendor" dev="configfs" ino=27417 res=0 errno=0 [ 198.914276][ T42] audit: type=1800 audit(198.795:671): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1517" name="idProduct" dev="configfs" ino=27418 res=0 errno=0 [ 198.920837][ T42] audit: type=1800 audit(198.795:672): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1517" name="product" dev="configfs" ino=27419 res=0 errno=0 [ 198.965696][ T9781] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 198.968215][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 198.988716][ T9] usb 6-1: device descriptor read/8, error -71 [ 199.066190][ T9788] syzkaller0: entered promiscuous mode [ 199.068127][ T9788] syzkaller0: entered allmulticast mode [ 199.083029][ C2] net_ratelimit: 10 callbacks suppressed [ 199.083067][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.099363][ T9] usb usb6-port1: unable to enumerate USB device [ 199.210974][ T5809] kernel read not supported for file /778/syscall (pid: 5809 comm: kworker/3:3) [ 199.379212][ T9798] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 199.428046][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 199.468040][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.578021][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 199.593260][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 199.600160][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.603696][ T9] usb 7-1: Product: У [ 199.605389][ T9] usb 7-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 199.617941][ T9] usb 7-1: SerialNumber: H [ 199.708051][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.788024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.841644][ T9] gspca_main: ov519-2.14.0 probing 041e:4064 [ 199.844957][ T9] ov519 7-1:1.0: reg_w 5a failed -71 [ 199.850783][ T9800] loop0: detected capacity change from 0 to 3904 [ 199.890146][ T9800] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 199.893915][ T9800] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 199.896128][ T9800] loop0: [ 199.969722][ T9802] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 200.060907][ T5136] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 200.064632][ T5136] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 200.066875][ T5136] loop0: [ 200.108041][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.147795][ T9808] syzkaller0: entered promiscuous mode [ 200.151483][ T9808] syzkaller0: entered allmulticast mode [ 200.448000][ T1355] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 200.508050][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.608921][ T1355] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 200.619153][ T1355] usb 5-1: config 0 has no interfaces? [ 200.623866][ T1355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.635701][ T1355] usb 5-1: config 0 descriptor?? [ 200.637083][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 200.748002][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.839299][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.843951][ T1355] usb 5-1: USB disconnect, device number 31 [ 200.887210][ T9830] syzkaller0: entered promiscuous mode [ 200.889451][ T9830] syzkaller0: entered allmulticast mode [ 201.148122][ T6319] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 201.158067][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.298048][ T6319] usb 8-1: device descriptor read/64, error -71 [ 201.457510][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 201.549405][ T6319] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 201.678109][ T6319] usb 8-1: device descriptor read/64, error -71 [ 201.778076][ T60] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 201.788476][ T6319] usb usb8-port1: attempt power cycle [ 201.938541][ T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.943836][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.947615][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.951599][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.955544][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.959676][ T60] usb 6-1: config 0 descriptor?? [ 202.128093][ T6319] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 202.148777][ T6319] usb 8-1: device descriptor read/8, error -71 [ 202.334472][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 202.334486][ T42] audit: type=1800 audit(202.225:685): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1546" name="idVendor" dev="configfs" ino=27470 res=0 errno=0 [ 202.345934][ T42] audit: type=1800 audit(202.235:686): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1546" name="idProduct" dev="configfs" ino=27471 res=0 errno=0 [ 202.359523][ T42] audit: type=1800 audit(202.235:687): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1546" name="product" dev="configfs" ino=27472 res=0 errno=0 [ 202.368051][ T42] audit: type=1800 audit(202.245:688): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1546" name="configuration" dev="configfs" ino=27473 res=0 errno=0 [ 202.382695][ T60] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 202.407988][ T6319] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 202.430974][ T6319] usb 8-1: device descriptor read/8, error -71 [ 202.548589][ T6319] usb usb8-port1: unable to enumerate USB device [ 202.694247][ T6319] usb 6-1: USB disconnect, device number 29 [ 203.024780][ T9858] syzkaller0: entered promiscuous mode [ 203.027256][ T9858] syzkaller0: entered allmulticast mode [ 203.290479][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 203.518169][ T6319] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 203.547511][ T9877] syzkaller0: entered promiscuous mode [ 203.550888][ T9877] syzkaller0: entered allmulticast mode [ 203.668696][ T6319] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 203.672334][ T6319] usb 5-1: config 0 has no interfaces? [ 203.674153][ T6319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.680149][ T6319] usb 5-1: config 0 descriptor?? [ 203.708068][ T9879] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 203.891341][ T5810] usb 5-1: USB disconnect, device number 32 [ 204.055531][ T9889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.168865][ T9895] tmpfs: Unknown parameter 'grpquota_inode' [ 204.235279][ T9901] syzkaller0: entered promiscuous mode [ 204.237108][ T9901] syzkaller0: entered allmulticast mode [ 204.240168][ T9899] syzkaller0: entered promiscuous mode [ 204.242034][ T9899] syzkaller0: entered allmulticast mode [ 204.268131][ C2] net_ratelimit: 11 callbacks suppressed [ 204.268154][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.531054][ T9912] tipc: Enabling of bearer rejected, already enabled [ 204.536992][ T9912] No source specified [ 204.594419][ T9916] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 204.668091][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.852439][ T9932] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 204.908003][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.971901][ T5810] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 204.997962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.119589][ T5810] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 205.124144][ T5810] usb 6-1: config 0 has no interfaces? [ 205.126488][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.140599][ T5810] usb 6-1: config 0 descriptor?? [ 205.308109][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.355425][ T6319] usb 6-1: USB disconnect, device number 30 [ 205.447315][ T9947] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 205.496610][ T9949] tipc: Enabling of bearer rejected, already enabled [ 205.502615][ T9949] No source specified [ 205.718159][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.948040][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.037982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.348084][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.757994][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.878876][ T9979] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 207.068054][ T6319] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 207.194534][ T9997] tipc: Enabling of bearer rejected, already enabled [ 207.198814][ T9997] No source specified [ 207.219421][ T6319] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 207.223764][ T6319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.226830][ T6319] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 207.229802][ T6319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.448844][ T4315] usb 6-1: USB disconnect, device number 31 [ 207.968490][ T9] ov519 7-1:1.0: Can't determine sensor slave IDs [ 207.971379][ T9] ov519 7-1:1.0: OV519 Config failed [ 207.974085][ T9] ov519 7-1:1.0: probe with driver ov519 failed with error -22 [ 207.984033][ T9] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 208.168938][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.242177][ T9] usb 7-1: USB disconnect, device number 36 [ 208.277521][T10017] syzkaller0: entered promiscuous mode [ 208.280362][T10017] syzkaller0: entered allmulticast mode [ 208.297293][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.588860][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 208.628029][T10026] tipc: Enabling of bearer rejected, already enabled [ 208.633875][T10026] No source specified [ 208.701680][T10028] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 208.724876][ T9] usb 7-1: device descriptor read/64, error -71 [ 208.968002][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 209.008020][ T5809] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 209.098004][ T9] usb 7-1: device descriptor read/64, error -71 [ 209.159345][ T5809] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 209.164164][ T5809] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.168418][ T5809] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 209.172140][ T40] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 209.175353][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.209378][ T9] usb usb7-port1: attempt power cycle [ 209.338712][ T40] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 209.343780][ T40] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.347751][ T40] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 209.351796][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.360374][ T40] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 209.365083][ T40] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 209.392027][ T40] usb 8-1: USB disconnect, device number 31 [ 209.468088][ C2] net_ratelimit: 10 callbacks suppressed [ 209.468110][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.558185][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 209.580316][ T9] usb 7-1: device descriptor read/8, error -71 [ 209.611159][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 209.786472][T10037] md/raid:md0: not clean -- starting background reconstruction [ 209.808313][T10037] md/raid:md0: not enough operational devices (4/4 failed) [ 209.827984][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 209.861713][ T9] usb 7-1: device descriptor read/8, error -71 [ 209.877975][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.892703][T10047] block nbd2: NBD_DISCONNECT [ 209.896303][ T42] audit: type=1326 audit(209.785:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.2.1618" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9899e0d9 code=0x0 [ 209.944090][T10051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.968990][ T9] usb usb7-port1: unable to enumerate USB device [ 209.999380][T10037] md/raid:md0: failed to run raid set. [ 210.002613][T10037] md: pers->run() failed ... [ 210.022219][ T6319] usb 6-1: USB disconnect, device number 32 [ 210.032369][ T6319] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 210.037503][ T6319] spcp8x5 6-1:1.0: device disconnected [ 210.118057][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.188012][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.517988][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.907981][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.044017][T10074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.158131][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.178071][ T4315] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 211.228013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.318009][ T4315] usb 6-1: device descriptor read/64, error -71 [ 211.438070][ T6319] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 211.548110][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.568035][ T4315] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 211.598941][ T6319] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 211.603667][ T6319] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.608088][ T6319] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.612447][ T6319] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.617537][ T6319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.627013][ T6319] spcp8x5 7-1:1.0: required endpoints missing [ 211.698071][ T4315] usb 6-1: device descriptor read/64, error -71 [ 211.808660][ T4315] usb usb6-port1: attempt power cycle [ 211.864605][T10082] md/raid:md0: not clean -- starting background reconstruction [ 211.884113][T10082] md/raid:md0: not enough operational devices (4/4 failed) [ 211.948008][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.032967][T10082] md/raid:md0: failed to run raid set. [ 212.035426][T10082] md: pers->run() failed ... [ 212.043297][ T9] usb 7-1: USB disconnect, device number 41 [ 212.139811][T10096] block nbd0: NBD_DISCONNECT [ 212.143199][ T42] audit: type=1326 audit(212.035:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10095 comm="syz.0.1636" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5e59e0d9 code=0x0 [ 212.152097][ T4315] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 212.168763][ T4315] usb 6-1: device descriptor read/8, error -71 [ 212.418026][ T4315] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 212.438696][ T4315] usb 6-1: device descriptor read/8, error -71 [ 212.593811][T10104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.661297][ T4315] usb usb6-port1: unable to enumerate USB device [ 213.788349][ T40] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 213.952634][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 213.959381][ T40] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 213.968760][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.974072][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.979990][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.985287][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.992245][ T40] spcp8x5 5-1:1.0: required endpoints missing [ 214.229729][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 214.256813][T10124] md/raid:md0: not clean -- starting background reconstruction [ 214.299667][T10124] md/raid:md0: not enough operational devices (4/4 failed) [ 214.390255][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 214.395345][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.399684][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 214.403729][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.421937][ T9] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 214.437794][ T9] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 214.485315][T10124] md/raid:md0: failed to run raid set. [ 214.487763][T10124] md: pers->run() failed ... [ 214.500354][ T9] usb 5-1: USB disconnect, device number 33 [ 214.662243][T10132] md/raid:md0: not clean -- starting background reconstruction [ 214.669213][ C2] net_ratelimit: 11 callbacks suppressed [ 214.669231][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.688668][T10132] md/raid:md0: not enough operational devices (4/4 failed) [ 214.803316][T10132] md/raid:md0: failed to run raid set. [ 214.805862][T10132] md: pers->run() failed ... [ 214.808134][ T4315] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 214.825418][ T9] usb 7-1: USB disconnect, device number 42 [ 214.832089][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 214.835955][ T9] spcp8x5 7-1:1.0: device disconnected [ 214.938100][ T4315] usb 6-1: device descriptor read/64, error -71 [ 215.068050][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.188108][ T4315] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 215.308062][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.318325][ T4315] usb 6-1: device descriptor read/64, error -71 [ 215.388006][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.438288][ T4315] usb usb6-port1: attempt power cycle [ 215.708103][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.778003][ T4315] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 215.809226][ T4315] usb 6-1: device descriptor read/8, error -71 [ 216.058093][ T4315] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 216.078764][ T4315] usb 6-1: device descriptor read/8, error -71 [ 216.107983][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.193335][ T4315] usb usb6-port1: unable to enumerate USB device [ 216.202980][T10190] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 216.358020][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.427991][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.747977][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.001539][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 217.158015][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.300054][T10208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.530700][ T40] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 217.678561][ T40] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.683073][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.687001][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.691741][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.698696][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.704210][ T40] usb 7-1: config 0 descriptor?? [ 218.135183][ T40] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 218.231792][T10234] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 218.585007][T10246] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 218.588857][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.3.1686 Not tainted syzkaller #0 PREEMPT(full) [ 218.588893][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.588904][T10246] Call Trace: [ 218.588911][T10246] [ 218.588919][T10246] dump_stack_lvl+0x100/0x190 [ 218.588955][T10246] sysfs_warn_dup.cold+0x1c/0x28 [ 218.589001][T10246] sysfs_create_dir_ns+0x24b/0x2b0 [ 218.589028][T10246] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 218.589051][T10246] ? find_held_lock+0x2b/0x80 [ 218.589069][T10246] ? kobject_add_internal+0x25f/0x930 [ 218.589099][T10246] ? kobject_add_internal+0x25f/0x930 [ 218.589130][T10246] ? class_dir_child_ns_type+0xd/0x60 [ 218.589164][T10246] kobject_add_internal+0x2c8/0x930 [ 218.589196][T10246] kobject_add+0x16a/0x1e0 [ 218.589225][T10246] ? __pfx_kobject_add+0x10/0x10 [ 218.589254][T10246] ? get_device_parent+0x1b3/0x4c0 [ 218.589282][T10246] ? kobject_put+0xb9/0x640 [ 218.589315][T10246] device_add+0x294/0x1970 [ 218.589343][T10246] ? lockdep_init_map_type+0x5c/0x250 [ 218.589366][T10246] ? __pfx_device_add+0x10/0x10 [ 218.589392][T10246] ? lockdep_init_map_type+0x5c/0x250 [ 218.589418][T10246] ? __init_waitqueue_head+0xca/0x150 [ 218.589452][T10246] tty_register_device_attr+0x388/0x7f0 [ 218.589476][T10246] ? lockdep_init_map_type+0x5c/0x250 [ 218.589499][T10246] ? __pfx_tty_register_device_attr+0x10/0x10 [ 218.589528][T10246] ? tty_port_init+0x156/0x1c0 [ 218.589556][T10246] gsm_activate_mux+0x155/0x2a0 [ 218.589583][T10246] gsmld_ioctl+0xbbc/0x15c0 [ 218.589614][T10246] ? kasan_quarantine_put+0x104/0x240 [ 218.589638][T10246] ? __pfx_gsmld_ioctl+0x10/0x10 [ 218.589665][T10246] ? __ldsem_down_read_nested+0xf3/0x890 [ 218.589697][T10246] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 218.589727][T10246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.589752][T10246] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 218.589775][T10246] ? __pfx_gsmld_ioctl+0x10/0x10 [ 218.589800][T10246] tty_ioctl+0x11b4/0x1640 [ 218.589826][T10246] ? __pfx_tty_ioctl+0x10/0x10 [ 218.589857][T10246] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 218.589900][T10246] ? __fget_files+0x215/0x3d0 [ 218.589920][T10246] ? hook_file_ioctl_common+0x140/0x440 [ 218.589948][T10246] ? selinux_file_ioctl+0x13b/0x290 [ 218.589974][T10246] ? selinux_file_ioctl+0xb6/0x290 [ 218.590003][T10246] ? __pfx_tty_ioctl+0x10/0x10 [ 218.590026][T10246] __x64_sys_ioctl+0x18e/0x210 [ 218.590045][T10246] do_syscall_64+0x115/0x870 [ 218.590068][T10246] ? clear_bhb_loop+0x70/0xc0 [ 218.590095][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.590115][T10246] RIP: 0033:0x7fc9c199e0d9 [ 218.590133][T10246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.590151][T10246] RSP: 002b:00007fc9c27f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.590171][T10246] RAX: ffffffffffffffda RBX: 00007fc9c1c26090 RCX: 00007fc9c199e0d9 [ 218.590183][T10246] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 218.590194][T10246] RBP: 00007fc9c1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 218.590204][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.590214][T10246] R13: 00007fc9c1c26128 R14: 00007fc9c1c26090 R15: 00007ffed7668cb8 [ 218.590237][T10246] [ 218.590447][T10246] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 219.208038][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 219.338268][ T9] usb 6-1: device descriptor read/64, error -71 [ 219.398136][ T1355] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 219.425552][ T847] usb 7-1: USB disconnect, device number 43 [ 219.548939][ T1355] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 219.553704][ T1355] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 219.556889][ T1355] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 219.560192][ T1355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.567689][ T1355] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 219.574523][ T1355] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 219.578509][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 219.708070][ T9] usb 6-1: device descriptor read/64, error -71 [ 219.795099][T10262] md/raid:md0: not clean -- starting background reconstruction [ 219.816554][T10262] md/raid:md0: not enough operational devices (4/4 failed) [ 219.819119][ T9] usb usb6-port1: attempt power cycle [ 219.877969][ C2] net_ratelimit: 10 callbacks suppressed [ 219.877986][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.006012][T10262] md/raid:md0: failed to run raid set. [ 220.009111][T10262] md: pers->run() failed ... [ 220.027248][ T60] usb 5-1: USB disconnect, device number 34 [ 220.042253][ T60] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 220.053426][ T60] spcp8x5 5-1:1.0: device disconnected [ 220.158079][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 220.178805][ T9] usb 6-1: device descriptor read/8, error -71 [ 220.278071][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.428051][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 220.458463][ T9] usb 6-1: device descriptor read/8, error -71 [ 220.517987][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.578587][ T9] usb usb6-port1: unable to enumerate USB device [ 220.597995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.908009][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.998137][ T5737] Bluetooth: hci3: command 0x0406 tx timeout [ 221.078204][ T847] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 221.176580][T10282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.229158][ T847] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.233246][T10284] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 221.235100][ T847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.241136][ T847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.245255][ T847] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.250982][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.256669][ T847] usb 7-1: config 0 descriptor?? [ 221.308030][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.548035][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.628119][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.675288][ T847] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 221.958022][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.006756][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 222.096823][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 222.348078][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.848028][ T60] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 223.158752][ T60] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.163693][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.168377][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.172298][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.177538][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.183336][ T60] usb 8-1: config 0 descriptor?? [ 223.595366][ T60] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 223.838024][ T4315] usb 7-1: reset high-speed USB device number 44 using dummy_hcd [ 223.852701][ T5809] usb 8-1: USB disconnect, device number 32 [ 223.892965][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 223.943246][T10332] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 223.978068][ T4315] usb 7-1: device descriptor read/64, error -71 [ 224.238013][ T4315] usb 7-1: reset high-speed USB device number 44 using dummy_hcd [ 224.278643][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 224.390801][ T4315] usb 7-1: device descriptor read/64, error -71 [ 224.478706][ T42] audit: type=1800 audit(224.375:691): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1713" name="idVendor" dev="configfs" ino=29940 res=0 errno=0 [ 224.486744][ T42] audit: type=1800 audit(224.375:692): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1713" name="idProduct" dev="configfs" ino=29941 res=0 errno=0 [ 224.495304][ T42] audit: type=1800 audit(224.375:693): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1713" name="product" dev="configfs" ino=30964 res=0 errno=0 [ 224.503652][ T42] audit: type=1800 audit(224.375:694): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1713" name="configuration" dev="configfs" ino=30965 res=0 errno=0 [ 224.648021][ T4315] usb 7-1: reset high-speed USB device number 44 using dummy_hcd [ 224.669007][ T4315] usb 7-1: device descriptor read/8, error -71 [ 224.929505][ T4315] usb 7-1: reset high-speed USB device number 44 using dummy_hcd [ 224.972288][ T4315] usb 7-1: device descriptor read/8, error -71 [ 225.068151][ C2] net_ratelimit: 10 callbacks suppressed [ 225.068174][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.089023][ T847] usb 7-1: USB disconnect, device number 44 [ 225.228093][ T847] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 225.368048][ T847] usb 7-1: device descriptor read/64, error -71 [ 225.480683][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.618067][ T847] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 225.707976][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.748173][ T847] usb 7-1: device descriptor read/64, error -71 [ 225.797974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.858338][ T847] usb usb7-port1: attempt power cycle [ 225.938101][ T40] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 226.088920][ T40] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 226.095018][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.099837][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.103924][ T40] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.109838][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.115121][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.117991][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.133743][ T40] spcp8x5 5-1:1.0: required endpoints missing [ 226.198056][ T847] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 226.206758][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 226.219741][ T847] usb 7-1: device descriptor read/8, error -71 [ 226.362007][T10354] md/raid:md0: not clean -- starting background reconstruction [ 226.370530][T10365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.381786][T10354] md/raid:md0: not enough operational devices (4/4 failed) [ 226.461891][ T847] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 226.479670][ T847] usb 7-1: device descriptor read/8, error -71 [ 226.508113][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.511329][ T5810] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 226.522550][T10354] md/raid:md0: failed to run raid set. [ 226.524931][T10354] md: pers->run() failed ... [ 226.533722][ T1355] usb 5-1: USB disconnect, device number 35 [ 226.588254][ T847] usb usb7-port1: unable to enumerate USB device [ 226.678937][ T5810] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.684248][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.689049][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.693249][ T5810] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.698841][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.704588][ T5810] usb 8-1: config 0 descriptor?? [ 226.748028][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.828099][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.126167][ T5810] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 227.147976][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.201502][T10391] loop0: detected capacity change from 0 to 4095 [ 227.250150][T10391] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 227.253367][T10391] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 227.255639][T10391] loop0: [ 227.548153][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.148834][ T42] audit: type=1800 audit(228.045:695): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1734" name="idVendor" dev="configfs" ino=31000 res=0 errno=0 [ 228.157520][ T42] audit: type=1800 audit(228.045:696): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1734" name="idProduct" dev="configfs" ino=31001 res=0 errno=0 [ 228.164827][ T42] audit: type=1800 audit(228.045:697): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1734" name="product" dev="configfs" ino=31002 res=0 errno=0 [ 228.173062][ T42] audit: type=1800 audit(228.045:698): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1734" name="configuration" dev="configfs" ino=31003 res=0 errno=0 [ 228.238064][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 228.388009][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 228.390464][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.394465][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.397843][ T9] usb 5-1: config 0 has no interfaces? [ 228.401585][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.404485][ T9] usb 5-1: Product: syz [ 228.405982][ T9] usb 5-1: Manufacturer: syz [ 228.407568][ T9] usb 5-1: SerialNumber: syz [ 228.412941][ T9] usb 5-1: config 0 descriptor?? [ 228.591013][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 228.673352][ T5810] usb 5-1: USB disconnect, device number 36 [ 229.108106][ T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 229.222206][ T29] usb 8-1: USB disconnect, device number 33 [ 229.269075][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.278190][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.283973][ T9] usb 5-1: config 0 has no interfaces? [ 229.288722][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.292332][ T9] usb 5-1: Product: syz [ 229.294260][ T9] usb 5-1: Manufacturer: syz [ 229.296300][ T9] usb 5-1: SerialNumber: syz [ 229.300938][ T9] usb 5-1: config 0 descriptor?? [ 229.510156][ T9] usb 5-1: USB disconnect, device number 37 [ 230.054366][T10454] /dev/sg0: Can't lookup blockdev [ 230.094866][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 230.116997][ T42] audit: type=1400 audit(230.005:699): avc: denied { getopt } for pid=10451 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.127397][ T42] audit: type=1400 audit(230.005:700): avc: denied { setopt } for pid=10451 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.158235][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 230.268038][ C2] net_ratelimit: 10 callbacks suppressed [ 230.268062][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.318077][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 230.321461][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 230.326822][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.331050][ T9] usb 7-1: Product: У [ 230.332426][ T9] usb 7-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 230.342498][ T9] usb 7-1: SerialNumber: H [ 230.409777][ T42] audit: type=1400 audit(230.305:701): avc: denied { setattr } for pid=10474 comm="syz.3.1754" path="socket:[32237]" dev="sockfs" ino=32237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 230.451554][T10477] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 230.551274][ T9] gspca_main: ov519-2.14.0 probing 041e:4064 [ 230.553709][ T9] ov519 7-1:1.0: reg_w 5a failed -71 [ 230.668082][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.758062][ T4315] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 230.874028][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 230.918005][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.921172][ T4315] usb 8-1: Using ep0 maxpacket: 32 [ 230.923356][ T4315] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.927516][ T4315] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.931399][ T4315] usb 8-1: config 0 has no interfaces? [ 230.935008][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 230.937716][ T4315] usb 8-1: Product: syz [ 230.939310][ T4315] usb 8-1: Manufacturer: syz [ 230.940858][ T4315] usb 8-1: SerialNumber: syz [ 230.944098][ T4315] usb 8-1: config 0 descriptor?? [ 230.976607][T10488] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 230.987994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.994325][T10488] macvlan0: entered promiscuous mode [ 230.996107][T10488] macvlan0: entered allmulticast mode [ 230.998943][T10488] bond1: entered promiscuous mode [ 231.004357][T10488] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 231.011703][T10488] bond1: left promiscuous mode [ 231.152501][ T847] usb 8-1: USB disconnect, device number 34 [ 231.324530][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.332631][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 231.363499][T10506] FAULT_INJECTION: forcing a failure. [ 231.363499][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 231.368915][T10506] CPU: 2 UID: 0 PID: 10506 Comm: syz.2.1768 Not tainted syzkaller #0 PREEMPT(full) [ 231.368939][T10506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.368950][T10506] Call Trace: [ 231.368956][T10506] [ 231.368964][T10506] dump_stack_lvl+0x100/0x190 [ 231.368996][T10506] should_fail_ex.cold+0x5/0xa [ 231.369021][T10506] _copy_from_user+0x2e/0xd0 [ 231.369073][T10506] copy_msghdr_from_user+0x9f/0x4c0 [ 231.369108][T10506] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 231.369145][T10506] ___sys_sendmsg+0x106/0x1e0 [ 231.369167][T10506] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.369185][T10506] ? __lock_acquire+0x49f/0x1a40 [ 231.369210][T10506] ? get_pid_task+0x106/0x250 [ 231.369254][T10506] __sys_sendmsg+0x160/0x210 [ 231.369279][T10506] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.369314][T10506] do_syscall_64+0x115/0x870 [ 231.369338][T10506] ? clear_bhb_loop+0x70/0xc0 [ 231.369360][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.369378][T10506] RIP: 0033:0x7f0d9899e0d9 [ 231.369395][T10506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.369412][T10506] RSP: 002b:00007f0d9986f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.369433][T10506] RAX: ffffffffffffffda RBX: 00007f0d98c25fa0 RCX: 00007f0d9899e0d9 [ 231.369443][T10506] RDX: 000000002000c198 RSI: 0000200000000200 RDI: 0000000000000003 [ 231.369453][T10506] RBP: 00007f0d9986f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.369466][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.369476][T10506] R13: 00007f0d98c26038 R14: 00007f0d98c25fa0 R15: 00007fff0f602e08 [ 231.369499][T10506] [ 231.390464][T10508] syzkaller0: entered promiscuous mode [ 231.445528][T10508] syzkaller0: entered allmulticast mode [ 231.566855][ T42] audit: type=1400 audit(231.455:702): avc: denied { mount } for pid=10517 comm="syz.2.1773" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 231.576759][ T42] audit: type=1400 audit(231.465:703): avc: denied { search } for pid=10517 comm="syz.2.1773" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 231.588015][ T42] audit: type=1400 audit(231.465:704): avc: denied { write } for pid=10517 comm="syz.2.1773" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 231.596891][ T42] audit: type=1400 audit(231.465:705): avc: denied { open } for pid=10517 comm="syz.2.1773" path="/433/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 231.606958][ T42] audit: type=1400 audit(231.475:706): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 231.614433][ T4315] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 231.718722][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.769393][ T4315] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.773152][ T4315] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.776377][ T4315] usb 8-1: config 0 has no interfaces? [ 231.780128][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.782780][ T4315] usb 8-1: Product: syz [ 231.784202][ T4315] usb 8-1: Manufacturer: syz [ 231.785722][ T4315] usb 8-1: SerialNumber: syz [ 231.789965][ T4315] usb 8-1: config 0 descriptor?? [ 231.877463][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 231.948020][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.999402][ T4315] usb 8-1: USB disconnect, device number 35 [ 232.028109][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.052401][T10536] FAULT_INJECTION: forcing a failure. [ 232.052401][T10536] name failslab, interval 1, probability 0, space 0, times 1 [ 232.060387][T10536] CPU: 2 UID: 0 PID: 10536 Comm: syz.2.1780 Not tainted syzkaller #0 PREEMPT(full) [ 232.060431][T10536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.060443][T10536] Call Trace: [ 232.060450][T10536] [ 232.060460][T10536] dump_stack_lvl+0x100/0x190 [ 232.060491][T10536] should_fail_ex.cold+0x5/0xa [ 232.060514][T10536] ? __pfx_write_maxblksize+0x10/0x10 [ 232.060560][T10536] should_failslab+0xc2/0x120 [ 232.060585][T10536] ? __pfx_write_maxblksize+0x10/0x10 [ 232.060606][T10536] __kmalloc_cache_noprof+0x91/0x6c0 [ 232.060628][T10536] ? simple_transaction_get+0x82/0x1a0 [ 232.060656][T10536] ? __pfx_write_maxblksize+0x10/0x10 [ 232.060677][T10536] simple_transaction_get+0x82/0x1a0 [ 232.060701][T10536] nfsctl_transaction_write+0xcd/0x1a0 [ 232.060723][T10536] vfs_write+0x2aa/0x1050 [ 232.060743][T10536] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 232.060765][T10536] ? __pfx_vfs_write+0x10/0x10 [ 232.060782][T10536] ? __fget_files+0x215/0x3d0 [ 232.060810][T10536] ? __fget_files+0x21f/0x3d0 [ 232.060838][T10536] ksys_write+0x12a/0x250 [ 232.060856][T10536] ? __pfx_ksys_write+0x10/0x10 [ 232.060880][T10536] do_syscall_64+0x115/0x870 [ 232.060904][T10536] ? clear_bhb_loop+0x70/0xc0 [ 232.060927][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.060945][T10536] RIP: 0033:0x7f0d9899e0d9 [ 232.060961][T10536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.060979][T10536] RSP: 002b:00007f0d9986f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.060998][T10536] RAX: ffffffffffffffda RBX: 00007f0d98c25fa0 RCX: 00007f0d9899e0d9 [ 232.061010][T10536] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 232.061021][T10536] RBP: 00007f0d9986f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.061031][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.061042][T10536] R13: 00007f0d98c26038 R14: 00007f0d98c25fa0 R15: 00007fff0f602e08 [ 232.061067][T10536] [ 232.184102][T10538] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 232.208553][T10542] syzkaller0: entered promiscuous mode [ 232.210363][T10542] syzkaller0: entered allmulticast mode [ 232.348043][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.465413][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 232.629976][T10561] FAULT_INJECTION: forcing a failure. [ 232.629976][T10561] name failslab, interval 1, probability 0, space 0, times 0 [ 232.636960][T10561] CPU: 0 UID: 0 PID: 10561 Comm: syz.0.1791 Not tainted syzkaller #0 PREEMPT(full) [ 232.636986][T10561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.636996][T10561] Call Trace: [ 232.637003][T10561] [ 232.637010][T10561] dump_stack_lvl+0x100/0x190 [ 232.637040][T10561] should_fail_ex.cold+0x5/0xa [ 232.637065][T10561] should_failslab+0xc2/0x120 [ 232.637091][T10561] __kmalloc_noprof+0xfc/0x820 [ 232.637112][T10561] ? rcu_is_watching+0x12/0xc0 [ 232.637141][T10561] ? tomoyo_realpath_from_path+0xb6/0x690 [ 232.637167][T10561] tomoyo_realpath_from_path+0xb6/0x690 [ 232.637192][T10561] tomoyo_path_number_perm+0x23c/0x580 [ 232.637222][T10561] ? tomoyo_path_number_perm+0x22e/0x580 [ 232.637248][T10561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.637296][T10561] ? find_held_lock+0x2b/0x80 [ 232.637312][T10561] ? __fget_files+0x215/0x3d0 [ 232.637332][T10561] ? hook_file_ioctl_common+0x140/0x440 [ 232.637352][T10561] ? __fget_files+0x215/0x3d0 [ 232.637376][T10561] ? __fget_files+0x21f/0x3d0 [ 232.637400][T10561] security_file_ioctl+0xd3/0x230 [ 232.637431][T10561] __x64_sys_ioctl+0xb7/0x210 [ 232.637450][T10561] do_syscall_64+0x115/0x870 [ 232.637473][T10561] ? clear_bhb_loop+0x70/0xc0 [ 232.637495][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.637513][T10561] RIP: 0033:0x7f8c5e59e0d9 [ 232.637529][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.637547][T10561] RSP: 002b:00007f8c5c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.637565][T10561] RAX: ffffffffffffffda RBX: 00007f8c5e825fa0 RCX: 00007f8c5e59e0d9 [ 232.637577][T10561] RDX: 0000200000000040 RSI: 00000000c040aed5 RDI: 0000000000000006 [ 232.637588][T10561] RBP: 00007f8c5c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.637598][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.637608][T10561] R13: 00007f8c5e826038 R14: 00007f8c5e825fa0 R15: 00007ffc1afdc7a8 [ 232.637633][T10561] [ 232.637641][T10561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.888090][ T847] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 233.037983][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 233.045297][ T847] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.049582][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 233.053144][ T847] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 233.060768][ T847] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.063675][ T847] usb 6-1: Product: syz [ 233.065284][ T847] usb 6-1: Manufacturer: syz [ 233.066859][ T847] usb 6-1: SerialNumber: syz [ 233.070216][ T847] usb 6-1: config 0 descriptor?? [ 233.073442][ T847] hub 6-1:0.0: bad descriptor, ignoring hub [ 233.075494][ T847] hub 6-1:0.0: probe with driver hub failed with error -5 [ 233.230846][T10591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.390430][ T847] usb 6-1: USB disconnect, device number 45 [ 233.465619][T10599] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 233.694345][T10606] FAULT_INJECTION: forcing a failure. [ 233.694345][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.699604][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.0.1809 Not tainted syzkaller #0 PREEMPT(full) [ 233.699628][T10606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.699640][T10606] Call Trace: [ 233.699647][T10606] [ 233.699655][T10606] dump_stack_lvl+0x100/0x190 [ 233.699685][T10606] should_fail_ex.cold+0x5/0xa [ 233.699705][T10606] _copy_from_user+0x2e/0xd0 [ 233.699731][T10606] copy_msghdr_from_user+0x9f/0x4c0 [ 233.699755][T10606] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.699783][T10606] ___sys_sendmsg+0x106/0x1e0 [ 233.699802][T10606] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.699819][T10606] ? __lock_acquire+0x49f/0x1a40 [ 233.699843][T10606] ? get_pid_task+0x106/0x250 [ 233.699884][T10606] __sys_sendmsg+0x160/0x210 [ 233.699907][T10606] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.699939][T10606] do_syscall_64+0x115/0x870 [ 233.699963][T10606] ? clear_bhb_loop+0x70/0xc0 [ 233.699985][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.700003][T10606] RIP: 0033:0x7f8c5e59e0d9 [ 233.700016][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.700033][T10606] RSP: 002b:00007f8c5c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.700052][T10606] RAX: ffffffffffffffda RBX: 00007f8c5e825fa0 RCX: 00007f8c5e59e0d9 [ 233.700063][T10606] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 233.700072][T10606] RBP: 00007f8c5c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.700081][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.700090][T10606] R13: 00007f8c5e826038 R14: 00007f8c5e825fa0 R15: 00007ffc1afdc7a8 [ 233.700116][T10606] [ 233.779694][ T5871] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 233.938494][ T5871] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.942517][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 233.947353][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.950106][ T5871] usb 6-1: Product: syz [ 233.951549][ T5871] usb 6-1: Manufacturer: syz [ 233.953111][ T5871] usb 6-1: SerialNumber: syz [ 233.959274][ T5871] usb 6-1: config 0 descriptor?? [ 233.962747][ T5871] hub 6-1:0.0: bad descriptor, ignoring hub [ 233.964748][ T5871] hub 6-1:0.0: probe with driver hub failed with error -5 [ 234.268201][ T5871] usb 6-1: USB disconnect, device number 46 [ 234.948101][ T847] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 235.098008][ T847] usb 5-1: Using ep0 maxpacket: 16 [ 235.102044][ T847] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 235.109469][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.113321][ T847] usb 5-1: Product: У [ 235.115172][ T847] usb 5-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 235.171899][ T847] usb 5-1: SerialNumber: H [ 235.388834][ T847] gspca_main: ov519-2.14.0 probing 041e:4064 [ 235.392154][ T847] ov519 5-1:1.0: reg_w 5a failed -71 [ 235.468043][ C2] net_ratelimit: 12 callbacks suppressed [ 235.468058][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.868168][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.928154][ T5871] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 236.035196][T10637] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 236.098832][ T5871] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.105714][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.108018][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.110534][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.117779][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.123182][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.131304][ T5871] usb 6-1: config 0 descriptor?? [ 236.187972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.368066][ T40] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 236.507972][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.518638][ T40] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.522767][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.526367][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.529694][ T40] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.533920][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.538309][ T40] usb 8-1: config 0 descriptor?? [ 236.541748][ T5871] usbhid 6-1:0.0: can't add hid device: -71 [ 236.544339][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 236.551581][ T5871] usb 6-1: USB disconnect, device number 47 [ 236.908093][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.948758][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 236.952007][ T40] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 236.957499][ T40] usb 8-1: USB disconnect, device number 36 [ 237.148051][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.227999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.548007][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.578361][T10672] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 237.587274][ T42] audit: type=1800 audit(237.475:707): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1833" name="idVendor" dev="configfs" ino=32670 res=0 errno=0 [ 237.602920][ T42] audit: type=1800 audit(237.485:708): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1833" name="product" dev="configfs" ino=32671 res=0 errno=0 [ 237.611959][ T42] audit: type=1800 audit(237.495:709): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1833" name="configuration" dev="configfs" ino=32672 res=0 errno=0 [ 237.691615][T10681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.068097][ T40] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 238.219271][ T40] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.224260][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.229074][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.233242][ T40] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.238687][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.244263][ T40] usb 8-1: config 0 descriptor?? [ 238.288177][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 238.439208][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 238.444457][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.450365][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.458654][ T24] spcp8x5 6-1:1.0: required endpoints missing [ 238.658120][ T40] usbhid 8-1:0.0: can't add hid device: -71 [ 238.660779][ T40] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 238.666455][ T40] usb 8-1: USB disconnect, device number 37 [ 238.692079][T10689] md/raid:md0: not clean -- starting background reconstruction [ 238.714008][T10689] md/raid:md0: not enough operational devices (4/4 failed) [ 238.788000][ T9] ov519 7-1:1.0: Can't determine sensor slave IDs [ 238.790048][ T9] ov519 7-1:1.0: OV519 Config failed [ 238.791759][ T9] ov519 7-1:1.0: probe with driver ov519 failed with error -22 [ 238.794596][ T9] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 238.813667][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.820888][ T9] usb 7-1: USB disconnect, device number 49 [ 238.839596][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.864653][T10689] md/raid:md0: failed to run raid set. [ 238.866770][T10689] md: pers->run() failed ... [ 238.873261][ T24] usb 6-1: USB disconnect, device number 48 [ 239.118095][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 239.268511][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.272270][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.275681][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.278829][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.282748][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.287009][ T9] usb 7-1: config 0 descriptor?? [ 239.321066][ T42] audit: type=1800 audit(239.215:710): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1842" name="idVendor" dev="configfs" ino=32693 res=0 errno=0 [ 239.329294][ T42] audit: type=1800 audit(239.215:711): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1842" name="product" dev="configfs" ino=32694 res=0 errno=0 [ 239.337448][ T42] audit: type=1800 audit(239.215:712): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1842" name="configuration" dev="configfs" ino=32695 res=0 errno=0 [ 239.369517][ T5737] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 239.413542][T10703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.470006][T10709] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 239.696400][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 239.698432][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 239.707770][ T9] usb 7-1: USB disconnect, device number 50 [ 239.761868][T10720] syzkaller0: entered promiscuous mode [ 239.764305][T10720] syzkaller0: entered allmulticast mode [ 240.187466][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 240.356783][ T5737] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 240.668063][ C2] net_ratelimit: 11 callbacks suppressed [ 240.668080][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.071693][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.282619][T10741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.308609][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.398014][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.596731][T10749] FAULT_INJECTION: forcing a failure. [ 241.596731][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.603377][T10749] CPU: 0 UID: 0 PID: 10749 Comm: syz.3.1859 Not tainted syzkaller #0 PREEMPT(full) [ 241.603404][T10749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.603415][T10749] Call Trace: [ 241.603422][T10749] [ 241.603429][T10749] dump_stack_lvl+0x100/0x190 [ 241.603458][T10749] should_fail_ex.cold+0x5/0xa [ 241.603481][T10749] _copy_from_user+0x2e/0xd0 [ 241.603508][T10749] mptcp_setsockopt+0x11ed/0x3300 [ 241.603540][T10749] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 241.603575][T10749] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 241.603602][T10749] ? __fget_files+0x215/0x3d0 [ 241.603627][T10749] ? selinux_socket_setsockopt+0x6a/0x80 [ 241.603651][T10749] ? sock_common_setsockopt+0x2e/0xf0 [ 241.603679][T10749] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 241.603709][T10749] do_sock_setsockopt+0xf3/0x1d0 [ 241.603739][T10749] __sys_setsockopt+0x195/0x220 [ 241.603767][T10749] __x64_sys_setsockopt+0xbd/0x160 [ 241.603789][T10749] ? do_syscall_64+0x90/0x870 [ 241.603811][T10749] ? lockdep_hardirqs_on+0x78/0x100 [ 241.603833][T10749] do_syscall_64+0x115/0x870 [ 241.603852][T10749] ? clear_bhb_loop+0x70/0xc0 [ 241.603874][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.603891][T10749] RIP: 0033:0x7fc9c199e0d9 [ 241.603908][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.603925][T10749] RSP: 002b:00007fc9c2818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.603943][T10749] RAX: ffffffffffffffda RBX: 00007fc9c1c25fa0 RCX: 00007fc9c199e0d9 [ 241.603954][T10749] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000003 [ 241.603964][T10749] RBP: 00007fc9c2818090 R08: 0000000000000004 R09: 0000000000000000 [ 241.603974][T10749] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 241.603984][T10749] R13: 00007fc9c1c26038 R14: 00007fc9c1c25fa0 R15: 00007ffed7668cb8 [ 241.604007][T10749] [ 241.718075][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.738899][T10753] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 241.769209][ T5737] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 241.999354][T10765] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.051565][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 242.108128][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.136743][T10769] syzkaller0: entered promiscuous mode [ 242.139336][T10769] syzkaller0: entered allmulticast mode [ 242.361807][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.428019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.705518][T10776] block nbd1: NBD_DISCONNECT [ 242.717448][ T42] audit: type=1326 audit(242.605:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10775 comm="syz.1.1868" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9eaf9e0d9 code=0x0 [ 242.758002][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.150456][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.397764][ T5737] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.406046][ T5737] Bluetooth: hci0: Injecting HCI hardware error event [ 243.411744][ T5738] Bluetooth: hci0: hardware error 0x00 [ 243.488022][ T847] ov519 5-1:1.0: Can't determine sensor slave IDs [ 243.490657][ T847] ov519 5-1:1.0: OV519 Config failed [ 243.494036][ T847] ov519 5-1:1.0: probe with driver ov519 failed with error -22 [ 243.504728][ T847] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 243.542829][ T847] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.551650][ T847] usb 5-1: USB disconnect, device number 38 [ 243.608472][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.737311][T10785] BIDI support in bsg has been removed. [ 243.739378][ T42] audit: type=1400 audit(243.625:714): avc: denied { ioctl } for pid=10783 comm="syz.3.1872" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=727 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.741623][T10785] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 243.848054][ T847] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 243.928124][ T29] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 244.002307][ T847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.007406][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.012242][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.016124][ T847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.021199][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.027853][ T847] usb 5-1: config 0 descriptor?? [ 244.088076][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 244.091149][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.096160][ T29] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 244.099808][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 244.104217][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 244.108566][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 244.113422][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.117561][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.123158][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.149184][T10789] xt_hashlimit: size too large, truncated to 1048576 [ 244.196559][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 244.213190][ T42] audit: type=1400 audit(244.105:715): avc: denied { write } for pid=10788 comm="syz.3.1873" name="/" dev="9p" ino=77361209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.221105][ T42] audit: type=1400 audit(244.115:716): avc: denied { write } for pid=10788 comm="syz.3.1873" name="/" dev="9p" ino=77361209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.233040][ T42] audit: type=1400 audit(244.115:717): avc: denied { create } for pid=10788 comm="syz.3.1873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 244.256896][T10789] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=10789 comm=syz.3.1873 [ 244.262948][ T42] audit: type=1400 audit(244.155:718): avc: denied { connect } for pid=10788 comm="syz.3.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.275494][T10796] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 244.339789][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 244.344388][ T29] usbtmc 6-1:16.0: can't read capabilities [ 244.444951][ T847] usbhid 5-1:0.0: can't add hid device: -71 [ 244.447510][ T847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 244.453352][ T847] usb 5-1: USB disconnect, device number 39 [ 244.581959][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 244.585720][T10781] usbtmc 6-1:16.0: Unable to send data, error -71 [ 244.590309][ T29] usb 6-1: USB disconnect, device number 49 [ 244.694927][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.803667][ T42] audit: type=1400 audit(244.685:719): avc: denied { execute } for pid=10804 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 244.812761][ T42] audit: type=1400 audit(244.685:720): avc: denied { execute_no_trans } for pid=10804 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 244.816819][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.881091][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.884781][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.888184][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.892610][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.898426][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.922012][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.022394][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.245939][T10805] wg2 speed is unknown, defaulting to 1000 [ 245.324527][ T12] bridge_slave_1: left allmulticast mode [ 245.333831][ T12] bridge_slave_1: left promiscuous mode [ 245.346940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.400914][ T12] bridge_slave_0: left allmulticast mode [ 245.405391][ T12] bridge_slave_0: left promiscuous mode [ 245.411416][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.462110][ T42] audit: type=1400 audit(245.355:721): avc: denied { read } for pid=10824 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.472572][ T5738] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.483825][ T42] audit: type=1400 audit(245.355:722): avc: denied { read open } for pid=10824 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.552476][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 245.789024][ T5738] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 245.792770][ T5738] Bluetooth: hci3: Injecting HCI hardware error event [ 245.798432][ T5737] Bluetooth: hci3: hardware error 0x00 [ 245.814879][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.821433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.827519][ T12] bond0 (unregistering): Released all slaves [ 245.838457][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 245.903157][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 245.932584][ T12] tipc: Disabling bearer [ 245.937376][ T12] tipc: Left network mode [ 245.981121][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.988674][ T9] usb 7-1: Product: У [ 245.990040][ T9] usb 7-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 246.023887][ T9] usb 7-1: SerialNumber: H [ 246.095959][T10837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.133611][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 246.246318][ T9] gspca_main: ov519-2.14.0 probing 041e:4064 [ 246.249893][ T9] ov519 7-1:1.0: reg_w 5a failed -71 [ 246.274131][ C2] net_ratelimit: 10 callbacks suppressed [ 246.274155][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.367581][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.373342][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.376264][T10805] bridge_slave_0: entered allmulticast mode [ 246.380882][T10805] bridge_slave_0: entered promiscuous mode [ 246.385255][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.388488][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.391619][T10805] bridge_slave_1: entered allmulticast mode [ 246.395404][T10805] bridge_slave_1: entered promiscuous mode [ 246.433384][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.440303][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.458777][ T4315] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 246.484354][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 246.495923][T10805] team0: Port device team_slave_0 added [ 246.505346][T10805] team0: Port device team_slave_1 added [ 246.508095][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.521484][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.524362][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.533843][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.539315][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.542086][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.552504][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.588003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.610647][ T4315] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.616700][ T4315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.618785][T10805] hsr_slave_0: entered promiscuous mode [ 246.621231][ T4315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.623248][T10805] hsr_slave_1: entered promiscuous mode [ 246.626104][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.629679][T10805] debugfs: 'hsr0' already exists in 'hsr' [ 246.634339][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.635458][T10805] Cannot create hsr debugfs directory [ 246.651583][ T4315] usb 6-1: config 0 descriptor?? [ 246.786525][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 246.828306][ T12] hsr_slave_0: left promiscuous mode [ 246.830975][ T12] hsr_slave_1: left promiscuous mode [ 246.833271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.835960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.841116][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.843596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.859051][ T12] veth1_macvtap: left promiscuous mode [ 246.862252][ T12] veth0_macvtap: left promiscuous mode [ 246.990618][ T5738] Bluetooth: hci2: command tx timeout [ 246.998344][T10866] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 247.064900][ T4315] usbhid 6-1:0.0: can't add hid device: -71 [ 247.070091][ T4315] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 247.088065][ T4315] usb 6-1: USB disconnect, device number 50 [ 247.090701][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.161890][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.308025][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.540781][T10805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.546986][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.548132][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.550249][T10805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.557457][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.560448][T10805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.565311][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.569810][T10805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.574089][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.602485][T10892] FAULT_INJECTION: forcing a failure. [ 247.602485][T10892] name failslab, interval 1, probability 0, space 0, times 0 [ 247.618441][T10892] CPU: 2 UID: 0 PID: 10892 Comm: syz.0.1892 Not tainted syzkaller #0 PREEMPT(full) [ 247.618470][T10892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.618482][T10892] Call Trace: [ 247.618488][T10892] [ 247.618495][T10892] dump_stack_lvl+0x100/0x190 [ 247.618525][T10892] should_fail_ex.cold+0x5/0xa [ 247.618549][T10892] should_failslab+0xc2/0x120 [ 247.618572][T10892] __kmalloc_noprof+0xfc/0x820 [ 247.618595][T10892] ? rcu_is_watching+0x12/0xc0 [ 247.618621][T10892] ? tomoyo_realpath_from_path+0xb6/0x690 [ 247.618648][T10892] tomoyo_realpath_from_path+0xb6/0x690 [ 247.618670][T10892] tomoyo_path_number_perm+0x23c/0x580 [ 247.618695][T10892] ? tomoyo_path_number_perm+0x22e/0x580 [ 247.618720][T10892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.618768][T10892] ? find_held_lock+0x2b/0x80 [ 247.618787][T10892] ? __fget_files+0x215/0x3d0 [ 247.618807][T10892] ? hook_file_ioctl_common+0x140/0x440 [ 247.618851][T10892] ? __fget_files+0x215/0x3d0 [ 247.618878][T10892] ? __fget_files+0x21f/0x3d0 [ 247.618901][T10892] security_file_ioctl+0xd3/0x230 [ 247.618931][T10892] __x64_sys_ioctl+0xb7/0x210 [ 247.618951][T10892] do_syscall_64+0x115/0x870 [ 247.618974][T10892] ? clear_bhb_loop+0x70/0xc0 [ 247.619002][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.619022][T10892] RIP: 0033:0x7f8c5e59e0d9 [ 247.619038][T10892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.619055][T10892] RSP: 002b:00007f8c5c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.619074][T10892] RAX: ffffffffffffffda RBX: 00007f8c5e825fa0 RCX: 00007f8c5e59e0d9 [ 247.619085][T10892] RDX: 0000200000001400 RSI: 0000000040140921 RDI: 0000000000000003 [ 247.619097][T10892] RBP: 00007f8c5c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.619107][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.619117][T10892] R13: 00007f8c5e826038 R14: 00007f8c5e825fa0 R15: 00007ffc1afdc7a8 [ 247.619141][T10892] [ 247.619149][T10892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.624822][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.627984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.637313][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.654655][T10895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 247.659775][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 247.726955][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.729724][T10892] md: loop0 has zero or unknown size, marking faulty! [ 247.731602][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.741361][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.744368][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.744679][T10892] md: error, md_import_device() returned -22 [ 247.792568][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 247.792586][ T42] audit: type=1400 audit(247.685:738): avc: denied { accept } for pid=10900 comm="syz.0.1895" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.823535][ T12] IPVS: stop unused estimator thread 0... [ 247.849944][ T42] audit: type=1400 audit(247.745:739): avc: denied { ioctl } for pid=10900 comm="syz.0.1895" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 247.872287][ T5737] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 248.155458][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.255053][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 248.348146][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.386652][T10805] veth0_vlan: entered promiscuous mode [ 248.393972][T10805] veth1_vlan: entered promiscuous mode [ 248.415414][T10805] veth0_macvtap: entered promiscuous mode [ 248.419395][T10805] veth1_macvtap: entered promiscuous mode [ 248.431895][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.440652][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.478464][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.482623][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.516092][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.519231][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.519674][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.531155][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.550556][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.554751][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.572873][ T42] audit: type=1400 audit(248.465:740): avc: denied { mounton } for pid=10805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 248.588060][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.623032][T10938] nfs: Unknown parameter 'a' [ 248.677996][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.766602][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 248.803837][T10947] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 249.068085][ T5737] Bluetooth: hci2: command tx timeout [ 249.178764][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 249.188355][T10929] ================================================================== [ 249.190973][T10929] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 249.193368][T10929] Read of size 1 at addr ffff888034f8c909 by task syz.2.1901/10929 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.197581][T10929] [ 249.199284][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) [ 249.199305][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.199316][T10929] Call Trace: [ 249.199323][T10929] [ 249.199330][T10929] dump_stack_lvl+0x100/0x190 [ 249.199351][T10929] print_report+0x13d/0x4b0 [ 249.199367][T10929] ? __virt_addr_valid+0x239/0x430 [ 249.199383][T10929] ? release_card_device+0x17d/0x1a0 [ 249.199395][T10929] kasan_report+0xdf/0x1c0 [ 249.199410][T10929] ? release_card_device+0x17d/0x1a0 [ 249.199422][T10929] release_card_device+0x17d/0x1a0 [ 249.199433][T10929] ? __pfx_release_card_device+0x10/0x10 [ 249.199443][T10929] device_release+0xd2/0x270 [ 249.199456][T10929] kobject_put+0x1f7/0x640 [ 249.199473][T10929] put_device+0x1f/0x30 [ 249.199483][T10929] snd_card_file_remove+0x38f/0x560 [ 249.199496][T10929] snd_pcm_release+0x1ac/0x230 [ 249.199511][T10929] ? __pfx_snd_disconnect_release+0x10/0x10 [ 249.199524][T10929] __fput+0x3ff/0xb50 [ 249.199538][T10929] task_work_run+0x150/0x240 [ 249.199551][T10929] ? __pfx_task_work_run+0x10/0x10 [ 249.199564][T10929] exit_to_user_mode_loop+0x1d8/0x700 [ 249.199579][T10929] ? rcu_is_watching+0x12/0xc0 [ 249.199596][T10929] do_syscall_64+0x666/0x870 [ 249.199608][T10929] ? clear_bhb_loop+0x70/0xc0 [ 249.199620][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.199631][T10929] RIP: 0033:0x7f0d9899e0d9 [ 249.199641][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.199652][T10929] RSP: 002b:00007fff0f602f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 249.199664][T10929] RAX: 0000000000000000 RBX: 00007f0d98c27da0 RCX: 00007f0d9899e0d9 [ 249.199671][T10929] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 249.199677][T10929] RBP: 00007f0d98c27da0 R08: 0000000000000006 R09: 0000000000000000 [ 249.199683][T10929] R10: 00007f0d98c27cb0 R11: 0000000000000246 R12: 000000000003ccb3 [ 249.199690][T10929] R13: 00007f0d98c2609c R14: 000000000003c9ef R15: 00007f0d98c26090 [ 249.199699][T10929] [ 249.199702][T10929] [ 249.281928][T10929] The buggy address belongs to the physical page: [ 249.284537][T10929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34f8c [ 249.288095][T10929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 249.291028][T10929] raw: 00fff00000000000 ffffea0000bb8208 ffffea0000afe408 0000000000000000 [ 249.294464][T10929] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 249.297910][T10929] page dumped because: kasan: bad access detected [ 249.300524][T10929] page_owner tracks the page as freed [ 249.302700][T10929] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 16111299629, free_ts 249188202848 [ 249.309461][T10929] post_alloc_hook+0xfd/0x120 [ 249.311398][T10929] get_page_from_freelist+0xf48/0x3530 [ 249.313659][T10929] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 249.316116][T10929] alloc_pages_mpol+0x1fb/0x540 [ 249.318166][T10929] ___kmalloc_large_node+0xe5/0x120 [ 249.320360][T10929] __kmalloc_large_node_noprof+0x1c/0x70 [ 249.322686][T10929] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 249.325324][T10929] __devres_alloc_node+0x6e/0x1e0 [ 249.327400][T10929] snd_devm_card_new+0x9d/0x190 [ 249.329423][T10929] loopback_probe+0x140/0x11a0 [ 249.331413][T10929] platform_probe+0x106/0x1d0 [ 249.333368][T10929] really_probe+0x241/0xa60 [ 249.335301][T10929] __driver_probe_device+0x20e/0x450 [ 249.337513][T10929] driver_probe_device+0x4a/0x140 [ 249.339643][T10929] __device_attach_driver+0x1df/0x320 [ 249.341879][T10929] bus_for_each_drv+0x159/0x1e0 [ 249.343892][T10929] page last free pid 10930 tgid 10929 stack trace: [ 249.346503][T10929] __free_frozen_pages+0x79f/0x1090 [ 249.348473][T10929] release_nodes+0xc3/0x120 [ 249.350178][T10929] devres_release_all+0x112/0x180 [ 249.351978][T10929] device_unbind_cleanup+0x81/0x270 [ 249.353742][T10929] device_release_driver_internal+0x4c4/0x620 [ 249.356209][T10929] unbind_store+0xf8/0x110 [ 249.357711][T10929] drv_attr_store+0x74/0xb0 [ 249.359161][T10929] sysfs_kf_write+0xf2/0x150 [ 249.360598][T10929] kernfs_fop_write_iter+0x3e0/0x5f0 [ 249.362240][T10929] vfs_write+0x6ac/0x1050 [ 249.363684][T10929] ksys_write+0x12a/0x250 [ 249.365377][T10929] do_syscall_64+0x115/0x870 [ 249.366867][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.368711][T10929] [ 249.369479][T10929] Memory state around the buggy address: [ 249.371218][T10929] ffff888034f8c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 249.373811][T10929] ffff888034f8c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 249.376817][T10929] >ffff888034f8c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 249.379304][T10929] ^ [ 249.380657][T10929] ffff888034f8c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 249.383135][T10929] ffff888034f8ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 249.385642][T10929] ================================================================== [ 249.388194][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.408140][T10929] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.410584][T10929] CPU: 1 UID: 0 PID: 10929 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) [ 249.413599][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.416797][T10929] Call Trace: [ 249.417878][T10929] [ 249.418830][T10929] dump_stack_lvl+0x100/0x190 [ 249.420489][T10929] vpanic+0x552/0x970 [ 249.421842][T10929] ? __pfx_vpanic+0x10/0x10 [ 249.423406][T10929] ? rcu_is_watching+0x12/0xc0 [ 249.425008][T10929] ? release_card_device+0x17d/0x1a0 [ 249.426694][T10929] panic+0xd1/0xe0 [ 249.427930][T10929] ? __pfx_panic+0x10/0x10 [ 249.429394][T10929] ? release_card_device+0x17d/0x1a0 [ 249.431124][T10929] ? preempt_schedule_common+0x42/0xc0 [ 249.433204][T10929] ? check_panic_on_warn+0x1f/0x90 [ 249.435330][T10929] check_panic_on_warn.cold+0x19/0x34 [ 249.437570][T10929] end_report.part.0+0x3a/0x90 [ 249.439602][T10929] kasan_report.cold+0xe/0x18 [ 249.441574][T10929] ? release_card_device+0x17d/0x1a0 [ 249.443815][T10929] release_card_device+0x17d/0x1a0 [ 249.445975][T10929] ? __pfx_release_card_device+0x10/0x10 [ 249.448349][T10929] device_release+0xd2/0x270 [ 249.450302][T10929] kobject_put+0x1f7/0x640 [ 249.451973][T10929] put_device+0x1f/0x30 [ 249.453414][T10929] snd_card_file_remove+0x38f/0x560 [ 249.455060][T10929] snd_pcm_release+0x1ac/0x230 [ 249.456570][T10929] ? __pfx_snd_disconnect_release+0x10/0x10 [ 249.458477][T10929] __fput+0x3ff/0xb50 [ 249.459822][T10929] task_work_run+0x150/0x240 [ 249.461482][T10929] ? __pfx_task_work_run+0x10/0x10 [ 249.463370][T10929] exit_to_user_mode_loop+0x1d8/0x700 [ 249.465433][T10929] ? rcu_is_watching+0x12/0xc0 [ 249.467313][T10929] do_syscall_64+0x666/0x870 [ 249.469140][T10929] ? clear_bhb_loop+0x70/0xc0 [ 249.471003][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.473379][T10929] RIP: 0033:0x7f0d9899e0d9 [ 249.475118][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.482833][T10929] RSP: 002b:00007fff0f602f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 249.486138][T10929] RAX: 0000000000000000 RBX: 00007f0d98c27da0 RCX: 00007f0d9899e0d9 [ 249.489269][T10929] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 249.492569][T10929] RBP: 00007f0d98c27da0 R08: 0000000000000006 R09: 0000000000000000 [ 249.495668][T10929] R10: 00007f0d98c27cb0 R11: 0000000000000246 R12: 000000000003ccb3 [ 249.498981][T10929] R13: 00007f0d98c2609c R14: 000000000003c9ef R15: 00007f0d98c26090 [ 249.502260][T10929] [ 249.504266][T10929] Kernel Offset: disabled [ 249.506094][T10929] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:51:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a41e55 RDI=ffffffff9bc08340 RBP=ffffffff9bc08300 RSP=ffffc900032e76b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b8fa222 R15=ffffffff85a41df0 RIP=ffffffff85a41e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c798500 ffffffff 00c00000 GS =0000 ffff8880d5bdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8c5c7d3fa8 CR3=0000000055e44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1afdcc96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1afdcc96 00007ffc1afdcc9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c5e635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c5e635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c5e6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c5e635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c5e7f25f8 00007f8c5e7f25c8 00007f8c5e7f2600 00007f8c5e7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88806a533c68 RCX=ffffffff91f3f801 RDX=0000000000000000 RSI=ffffffff8c601b00 RDI=ffffffff8e66d928 RBP=0000000000000001 RSP=ffffc90003186fb0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000001858b R12=ffffc900031870d0 R13=ffffc90003187080 R14=ffffc900031872c8 R15=ffffc900031870b4 RIP=ffffffff81ee7850 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9a7cf57e20 CR3=000000002ed29000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2e4d2fd0 00007fff2e4d2fd0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a7c3f2823 00007f9a7c3f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a7c3f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a7c3f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558149bad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000240808118003 1180041680031680 040da0030008000d 90030fffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040d8003200800 0610002010000602 74d4010800098004 040077a200313132 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040d8003200800 0610002010000602 74d4010800098004 040077a200313132 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000240808118003 1180041680031680 040da0030008000d 90030fffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000003a00 0000000300000000 012408118c030100 0000040611880300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100008800401 0000040806060160 ce00080008e00300 100008d003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000369ec9 RBX=ffff88801f2f4b00 RCX=ffffffff8bbd5345 RDX=0000000000000000 RSI=ffffffff8e3a6afe RDI=ffffffff8c601b80 RBP=ffffed1003e5e960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbd38ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8c5e827dac CR3=0000000059eaf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9ebd5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9eb1f2600 00007fb9eb1f25e0 00007fb9eb1f25e8 00007fb9eb1f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9eb1f25f8 00007fb9eb1f25c8 00007fb9eb1f2600 00007fb9eb1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000000fe RBX=ffff8880270cd798 RCX=0000000000000000 RDX=000000008a26a755 RSI=00000000b1d1d633 RDI=00000000cabd98c0 RBP=ffff8880270ccb00 RSP=ffffc900006f8878 R8 =0000000048878b8b R9 =0000000000000007 R10=0000000000000005 R11=0000000000000000 R12=3c2d719b713ae4c8 R13=0000000000000006 R14=0000000000000000 R15=0000000000000006 RIP=ffffffff81e5f945 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29ed35 CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000607c0000 Opmask01=0000000000000000 Opmask02=0000000007fffeff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cce77a1d0 0000560cce77a1d0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cce7573b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cce75e5d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcde21f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 041201171a1b7343 1e161e035c18101c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000706f6f 6c615f646e733a6d 726f6674616c703d 5341494c41444f4d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000004d5252 515c5f59534e0750 4f525b495c514d00 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cce50e970 0000560cce746590 0000000000000041 0000000000333270 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcde21f1bd0 0000560cce75e1d0 00000000000000c1 0000003100797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000