last executing test programs: 3m6.107194856s ago: executing program 2 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000", 0x6e, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100", 0x16, 0x0, 0x0, 0x0) 3m5.228447935s ago: executing program 2 (id=22): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4e, 0x1, 0x8, 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='xReques', 0x7) 3m5.133286744s ago: executing program 2 (id=24): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3m5.074145461s ago: executing program 2 (id=26): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x0) fsmount(r1, 0x0, 0x1) 3m4.997105359s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 3m4.887222954s ago: executing program 2 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x6, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x1, 0x7}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m53.851296203s ago: executing program 3 (id=129): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0xffffffffffffffc2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003020700000003"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000002240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 2m51.775983432s ago: executing program 0 (id=133): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) syz_open_procfs(0x0, 0x0) 2m51.651090745s ago: executing program 32 (id=133): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) syz_open_procfs(0x0, 0x0) 2m50.415483387s ago: executing program 3 (id=138): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 2m50.326314316s ago: executing program 3 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x3, 0x0, {0x1, 0xf0, 0x4}, {0x0, 0x0, 0xc4f77b1595f1477e}, 0xff, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m50.127196671s ago: executing program 3 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 2m50.093697881s ago: executing program 3 (id=142): setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)}, 0x8050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2m49.826476367s ago: executing program 33 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x6, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x1, 0x7}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m49.025956758s ago: executing program 3 (id=147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r2, &(0x7f0000000500)=""/106, 0x6a, 0x8000000000005) 2m48.809242246s ago: executing program 34 (id=147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r2, &(0x7f0000000500)=""/106, 0x6a, 0x8000000000005) 2m34.070604934s ago: executing program 1 (id=276): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2m33.894139088s ago: executing program 1 (id=277): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/96, 0x60}], 0x1}, 0x165}], 0x1, 0x10102, 0x0) 2m33.893163854s ago: executing program 1 (id=279): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m33.608945438s ago: executing program 1 (id=283): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.504651268s ago: executing program 1 (id=285): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m33.407155513s ago: executing program 1 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 2m17.470719272s ago: executing program 35 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 1m20.03863987s ago: executing program 5 (id=1063): gettid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x15809}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_TTL={0x5, 0x8, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r3, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) 1m19.78917847s ago: executing program 5 (id=1068): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48d5}, 0x8050) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d400)=[{0x0}], 0x1}, 0x0) r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)=""/89, 0x59}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m19.647875315s ago: executing program 5 (id=1071): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) 1m19.521801862s ago: executing program 5 (id=1075): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b7f495, 0x0) 1m19.363758339s ago: executing program 5 (id=1076): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xb) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m18.80455994s ago: executing program 5 (id=1082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1ed9828e174f004292000000000000005606706cd8f2ff89ffffe600", [0x9, 0x400]}}) r2 = dup(r1) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1m18.655154257s ago: executing program 36 (id=1082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1ed9828e174f004292000000000000005606706cd8f2ff89ffffe600", [0x9, 0x400]}}) r2 = dup(r1) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1m16.470891435s ago: executing program 6 (id=1092): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0x7, 0x687, 0x4, 0x0, 0x0, [{{}, 0x8}, {{}, 0xfffffffffffffff8}, {{}, 0x1ff}, {{r1}, 0x46}]}) 1m16.344513733s ago: executing program 6 (id=1093): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m15.185675021s ago: executing program 6 (id=1103): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1m15.132633879s ago: executing program 6 (id=1104): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x0) fsmount(r1, 0x0, 0x1) 1m15.036468195s ago: executing program 6 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 1m14.995844504s ago: executing program 6 (id=1106): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xa803, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003400)=@getsadinfo={0xbc, 0x25, 0x1, 0x70bd29, 0x25dfdbff, 0x0, [@policy={0xa8, 0x7, {{@in=@local, @in=@remote, 0x4e24, 0x3ff, 0x4e21, 0x75d9, 0xa, 0xa0, 0xa0, 0xd}, {0x8, 0x7fffffffffffffff, 0x400, 0x5b, 0x2, 0xffffffff, 0x65, 0xb}, {0x4a0, 0x8750, 0xe00000, 0x9}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x3, 0x3}}]}, 0xbc}}, 0x40000) io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 59.734692057s ago: executing program 37 (id=1106): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xa803, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003400)=@getsadinfo={0xbc, 0x25, 0x1, 0x70bd29, 0x25dfdbff, 0x0, [@policy={0xa8, 0x7, {{@in=@local, @in=@remote, 0x4e24, 0x3ff, 0x4e21, 0x75d9, 0xa, 0xa0, 0xa0, 0xd}, {0x8, 0x7fffffffffffffff, 0x400, 0x5b, 0x2, 0xffffffff, 0x65, 0xb}, {0x4a0, 0x8750, 0xe00000, 0x9}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x3, 0x3}}]}, 0xbc}}, 0x40000) io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 29.182550257s ago: executing program 4 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) read(r0, &(0x7f0000000180)=""/7, 0x7) 25.255659763s ago: executing program 4 (id=1501): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 24.108170513s ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 24.008562025s ago: executing program 4 (id=1518): r0 = inotify_init() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x4c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000140)={{}, 0x1, 0x1, 0x1}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 23.696494481s ago: executing program 4 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 23.608169503s ago: executing program 4 (id=1516): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) lseek(r2, 0x0, 0x0) 9.386674879s ago: executing program 8 (id=1621): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fcntl$lock(r3, 0x7, &(0x7f0000001580)={0x1, 0x2, 0x0, 0x5, r2}) 8.213800675s ago: executing program 38 (id=1516): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) lseek(r2, 0x0, 0x0) 6.112333069s ago: executing program 8 (id=1627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c840) 5.984723385s ago: executing program 8 (id=1628): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b45501821"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 5.064434555s ago: executing program 7 (id=1629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.884542009s ago: executing program 7 (id=1630): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000300)="9101000000112233") syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, "af"}, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000140)=""/164, 0xa4) 4.62832953s ago: executing program 0 (id=1615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.228657952s ago: executing program 8 (id=1631): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7fff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.168405515s ago: executing program 0 (id=1632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40b}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.866594769s ago: executing program 0 (id=1633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x48, 0x7ffffcb9}]}) socket$nl_generic(0x10, 0x3, 0x10) 3.786348056s ago: executing program 0 (id=1634): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="50e9", @ANYRES8=r1], 0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0xc0d0) 2.86383936s ago: executing program 8 (id=1641): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e63, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 683.503972ms ago: executing program 0 (id=1643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 683.324622ms ago: executing program 7 (id=1644): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0xb, 0x40, 0x2, 0x90, 0x1, 0x4, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x1, 0xa, 0x13, 0x5, 0x6, 0x109}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b7, 0x0, 0x1000, 0x403, 0x4002004c4, 0x1000, 0x40000, 0x97, 0x6, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 683.20818ms ago: executing program 8 (id=1645): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x111, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 503.283041ms ago: executing program 9 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x10000, &(0x7f00000038c0)={&(0x7f0000001500)={0x1c, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 479.850813ms ago: executing program 9 (id=1649): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 443.438157ms ago: executing program 7 (id=1650): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000280)=0x10001) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 392.295635ms ago: executing program 9 (id=1651): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 328.841885ms ago: executing program 9 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c840) 249.455504ms ago: executing program 9 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100000000", 0x26) 240.214339ms ago: executing program 7 (id=1661): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.639712ms ago: executing program 9 (id=1654): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x40, 0x17, 0x4, "371ee6e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x300000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 0s ago: executing program 7 (id=1655): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): agic bitmask 0x1985 not found at 0x0000a008: 0xcc85 instead [ 212.553625][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xa676 instead [ 212.553643][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xbed9 instead [ 212.553661][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xa278 instead [ 212.558922][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4321 instead [ 212.558942][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x0d12 instead [ 212.558957][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xb118 instead [ 212.558971][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x999e instead [ 212.558985][T10372] jffs2: Further such events for this erase block will not be printed [ 212.559365][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xe8c8 instead [ 212.559382][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x2de6 instead [ 212.559397][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x4e78 instead [ 212.559411][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xfb81 instead [ 212.559424][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x4a78 instead [ 212.559438][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xe43c instead [ 212.559452][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xfff3 instead [ 212.559466][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xcd85 instead [ 212.559481][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x5c24 instead [ 212.559495][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5409 instead [ 212.559508][T10372] jffs2: Further such events for this erase block will not be printed [ 212.565256][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x86ac instead [ 212.565281][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x9b13 instead [ 212.565299][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xba15 instead [ 212.565316][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xf9d2 instead [ 212.565332][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x785b instead [ 212.565349][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xb3b5 instead [ 212.565366][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x32cb instead [ 212.565383][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x3eed instead [ 212.565400][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xfeda instead [ 212.565417][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xe2a0 instead [ 212.565434][T10372] jffs2: Further such events for this erase block will not be printed [ 212.565893][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x80bc instead [ 212.565915][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xc984 instead [ 212.565932][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xe07b instead [ 212.565950][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x54ab instead [ 212.565967][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x897e instead [ 212.565985][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xfac6 instead [ 212.566001][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xe472 instead [ 212.566018][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x1d1e instead [ 212.566033][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x0434 instead [ 212.566049][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xc510 instead [ 212.566065][T10372] jffs2: Further such events for this erase block will not be printed [ 212.566457][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x75f8 instead [ 212.566476][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x6212 instead [ 212.566492][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x5f4d instead [ 212.566508][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x16e3 instead [ 212.566524][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x4535 instead [ 212.566541][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x8c82 instead [ 212.566556][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4638 instead [ 212.566572][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xf39d instead [ 212.566588][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x86fa instead [ 212.566604][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xb4dc instead [ 212.566620][T10372] jffs2: Further such events for this erase block will not be printed [ 212.567007][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x91ea instead [ 212.567026][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x174b instead [ 212.567043][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xf770 instead [ 212.567059][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x0be7 instead [ 212.567076][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x5891 instead [ 212.567092][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xbd67 instead [ 212.567108][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x230b instead [ 212.567124][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x9065 instead [ 212.567139][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x7236 instead [ 212.567155][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x0dae instead [ 212.567170][T10372] jffs2: Further such events for this erase block will not be printed [ 212.567591][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x6ff7 instead [ 212.567609][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x1250 instead [ 212.567623][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xb57c instead [ 212.567637][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xccb1 instead [ 212.567651][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x0cc9 instead [ 212.567665][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x8896 instead [ 212.567679][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x050b instead [ 212.567693][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xee61 instead [ 212.567707][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xcb84 instead [ 212.567720][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xedb2 instead [ 212.567734][T10372] jffs2: Further such events for this erase block will not be printed [ 212.568069][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xd2fb instead [ 212.568086][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x9ee9 instead [ 212.568100][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x219e instead [ 212.568113][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x04a3 instead [ 212.568127][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xfa1e instead [ 212.568140][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xcf86 instead [ 212.568154][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x6571 instead [ 212.568167][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xcbd2 instead [ 212.568181][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x4f63 instead [ 212.568195][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x1f18 instead [ 212.568208][T10372] jffs2: Further such events for this erase block will not be printed [ 212.568601][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x8be8 instead [ 212.568618][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xa4fd instead [ 212.568632][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xda8b instead [ 212.568646][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x8f5e instead [ 212.568660][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xd180 instead [ 212.568674][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x106a instead [ 212.568688][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x25e6 instead [ 212.568702][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x7b59 instead [ 212.568715][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xc5f1 instead [ 212.568729][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x3a96 instead [ 212.568740][T10372] jffs2: Further such events for this erase block will not be printed [ 212.569099][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xe4fa instead [ 212.569115][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x9151 instead [ 212.569127][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xe808 instead [ 212.569139][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xc3fe instead [ 212.569152][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x35ca instead [ 212.569167][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x46f2 instead [ 212.569180][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xe012 instead [ 212.569193][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xebdf instead [ 212.569206][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xa1cf instead [ 212.569220][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xb3f3 instead [ 212.569234][T10372] jffs2: Further such events for this erase block will not be printed [ 212.569560][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x2afa instead [ 212.569575][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xb89c instead [ 212.569587][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xb75c instead [ 212.569600][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xfaf6 instead [ 212.569612][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x820b instead [ 212.569626][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xf1b0 instead [ 212.569639][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf750 instead [ 212.569652][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xe9ee instead [ 212.569665][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x3eae instead [ 212.569678][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x0e9e instead [ 212.569691][T10372] jffs2: Further such events for this erase block will not be printed [ 212.570026][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xa48a instead [ 212.570041][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x2881 instead [ 212.570054][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x8c17 instead [ 212.570067][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x1258 instead [ 212.570080][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x719c instead [ 212.570094][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xfc52 instead [ 212.570107][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xefbb instead [ 212.570121][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xb7e1 instead [ 212.570135][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x6c0c instead [ 212.570149][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xf808 instead [ 212.570163][T10372] jffs2: Further such events for this erase block will not be printed [ 212.570486][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x55a9 instead [ 212.570502][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xf47f instead [ 212.570517][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xfeb3 instead [ 212.570530][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x65a0 instead [ 212.570543][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xe3d2 instead [ 212.570557][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x4df9 instead [ 212.570570][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5fbc instead [ 212.570585][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x50b9 instead [ 212.570598][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xf595 instead [ 212.570612][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x0c41 instead [ 212.570626][T10372] jffs2: Further such events for this erase block will not be printed [ 212.570960][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x6446 instead [ 212.570976][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x7fd6 instead [ 212.570990][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x377c instead [ 212.571004][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x4d16 instead [ 212.571018][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xac2f instead [ 212.571032][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x7a60 instead [ 212.571045][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9975 instead [ 212.571058][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x69d9 instead [ 212.571072][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xd19c instead [ 212.571086][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xaf20 instead [ 212.571100][T10372] jffs2: Further such events for this erase block will not be printed [ 212.571431][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x7fe0 instead [ 212.571447][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x5e53 instead [ 212.571461][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x369a instead [ 212.571477][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xa579 instead [ 212.571492][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x66ef instead [ 212.571506][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xa52d instead [ 212.571520][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x6791 instead [ 212.571535][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xe5e5 instead [ 212.571549][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x848e instead [ 212.571563][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x6dad instead [ 212.571577][T10372] jffs2: Further such events for this erase block will not be printed [ 212.571625][T10372] jffs2: Old JFFS2 bitmask found at 0x00018204 [ 212.571633][T10372] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 212.571945][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x15fd instead [ 212.571961][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x6a32 instead [ 212.571975][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xbd6b instead [ 212.571990][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x18e9 instead [ 212.572004][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x14e0 instead [ 212.572018][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xf1aa instead [ 212.572033][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa544 instead [ 212.572046][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x79e1 instead [ 212.572060][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xd4dd instead [ 212.572074][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x4e75 instead [ 212.572088][T10372] jffs2: Further such events for this erase block will not be printed [ 212.572558][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x187d instead [ 212.572576][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xef37 instead [ 212.572589][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xa634 instead [ 212.572603][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x5250 instead [ 212.572617][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x1871 instead [ 212.572631][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x16c9 instead [ 212.572645][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x546b instead [ 212.572659][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x5fbe instead [ 212.572671][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xa692 instead [ 212.572685][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x6f78 instead [ 212.572698][T10372] jffs2: Further such events for this erase block will not be printed [ 212.573071][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x7ee9 instead [ 212.573090][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x96c0 instead [ 212.573104][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x4c16 instead [ 212.573117][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x61a0 instead [ 212.573131][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xe237 instead [ 212.573145][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x7b09 instead [ 212.573159][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9e3e instead [ 212.573173][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x7534 instead [ 212.573187][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x0ef2 instead [ 212.573200][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x0562 instead [ 212.573213][T10372] jffs2: Further such events for this erase block will not be printed [ 212.573550][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x2c27 instead [ 212.573567][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xef4a instead [ 212.573581][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xec2b instead [ 212.573595][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x2b95 instead [ 212.573609][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xf278 instead [ 212.573623][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x0013 instead [ 212.573637][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3cad instead [ 212.573651][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x7e2c instead [ 212.573665][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x2ff9 instead [ 212.573813][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x88c9 instead [ 212.573829][T10372] jffs2: Further such events for this erase block will not be printed [ 212.574797][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x73a2 instead [ 212.574820][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x2694 instead [ 212.574836][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xc937 instead [ 212.574850][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x7ace instead [ 212.574907][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xc171 instead [ 212.574922][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x84cf instead [ 212.574937][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x171a instead [ 212.574952][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xdf2e instead [ 212.574967][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x61bf instead [ 212.574982][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xfbe6 instead [ 212.574996][T10372] jffs2: Further such events for this erase block will not be printed [ 212.575399][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xc419 instead [ 212.575417][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x4748 instead [ 212.575433][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xa7b3 instead [ 212.575448][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xdd33 instead [ 212.575464][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xebd7 instead [ 212.575480][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x5d5f instead [ 212.575497][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x69d8 instead [ 212.575512][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x989a instead [ 212.575529][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x674d instead [ 212.575545][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x621e instead [ 212.575560][T10372] jffs2: Further such events for this erase block will not be printed [ 212.575973][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xbfd0 instead [ 212.575990][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xbffe instead [ 212.576004][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xfc61 instead [ 212.576020][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x7622 instead [ 212.576035][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xfa48 instead [ 212.576050][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xc3f0 instead [ 212.576065][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6f45 instead [ 212.576080][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xe716 instead [ 212.576095][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x206d instead [ 212.576110][T10372] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x1271 instead [ 212.576124][T10372] jffs2: Further such events for this erase block will not be printed [ 212.576540][T10372] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 212.576552][T10372] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 213.011267][T10394] FAULT_INJECTION: forcing a failure. [ 213.011267][T10394] name failslab, interval 1, probability 0, space 0, times 0 [ 213.011290][T10394] CPU: 3 UID: 0 PID: 10394 Comm: syz.4.1444 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.011308][T10394] Tainted: [L]=SOFTLOCKUP [ 213.011312][T10394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.011319][T10394] Call Trace: [ 213.011324][T10394] [ 213.011341][T10394] dump_stack_lvl+0x100/0x190 [ 213.011364][T10394] should_fail_ex.cold+0x5/0xa [ 213.011382][T10394] should_failslab+0xc2/0x120 [ 213.011397][T10394] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 213.011411][T10394] ? __d_alloc+0x35/0xa50 [ 213.011428][T10394] __d_alloc+0x35/0xa50 [ 213.011442][T10394] ? lockdep_init_map_type+0x5c/0x250 [ 213.011457][T10394] d_make_root+0x3e/0x90 [ 213.011474][T10394] shmem_fill_super+0xc16/0x13e0 [ 213.011488][T10394] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 213.011504][T10394] ? __pfx_shmem_fill_super+0x10/0x10 [ 213.011520][T10394] ? cap_capable+0x107/0x430 [ 213.011538][T10394] ? __pfx_shmem_fill_super+0x10/0x10 [ 213.011552][T10394] get_tree_nodev+0xdd/0x190 [ 213.011566][T10394] vfs_get_tree+0x92/0x320 [ 213.011583][T10394] path_mount+0x7d0/0x24c0 [ 213.011603][T10394] ? __pfx_path_mount+0x10/0x10 [ 213.011619][T10394] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.011635][T10394] ? putname+0xb1/0x110 [ 213.011655][T10394] ? kmem_cache_free+0x127/0x6c0 [ 213.011681][T10394] ? __x64_sys_mount+0x293/0x310 [ 213.011704][T10394] __x64_sys_mount+0x293/0x310 [ 213.011729][T10394] ? __pfx___x64_sys_mount+0x10/0x10 [ 213.011763][T10394] do_syscall_64+0x123/0x790 [ 213.011794][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.011814][T10394] RIP: 0033:0x7f87cdd9e159 [ 213.011832][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.011850][T10394] RSP: 002b:00007f87cece2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.011868][T10394] RAX: ffffffffffffffda RBX: 00007f87ce025fa0 RCX: 00007f87cdd9e159 [ 213.011881][T10394] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 213.011893][T10394] RBP: 00007f87cde35024 R08: 0000200000000200 R09: 0000000000000000 [ 213.011904][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.011915][T10394] R13: 00007f87ce026038 R14: 00007f87ce025fa0 R15: 00007ffd9cf38738 [ 213.011941][T10394] [ 213.185179][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.185235][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.185268][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.361847][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 213.401326][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 213.401343][ T44] audit: type=1400 audit(1788757532.516:813): avc: denied { write } for pid=10402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.509954][T10405] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 213.510376][T10405] bond4: (slave sit1): Error -95 calling set_mac_address [ 213.588954][ T44] audit: type=1400 audit(1788757532.706:814): avc: denied { write } for pid=10412 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.247778][ T5743] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 214.447747][ T5743] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 214.448739][ T5743] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.448764][ T5743] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 214.448802][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.471721][ T5743] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 214.491258][ T5743] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 214.877726][T10422] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 214.878109][T10422] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 214.878751][T10422] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 215.014531][T10422] SPCP8x5 ttyUSB0: Set UART format 0x370b failed (error = -32) [ 215.156010][ T5743] usb 9-1: USB disconnect, device number 10 [ 215.165081][ T5743] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 215.168823][ T5743] spcp8x5 9-1:1.0: device disconnected [ 215.728599][T10427] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 218.129916][T10420] geneve2: entered promiscuous mode [ 218.272258][ T44] audit: type=1400 audit(1788757537.386:815): avc: denied { write } for pid=10448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.409879][ T44] audit: type=1400 audit(1788757537.526:816): avc: denied { write } for pid=10466 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.556372][ T44] audit: type=1400 audit(1788757537.676:817): avc: denied { write } for pid=10474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.657541][ T44] audit: type=1400 audit(1788757537.776:818): avc: denied { write } for pid=10479 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.690610][T10480] dlm: no local IP address has been set [ 218.690722][T10480] dlm: cannot start dlm midcomms -107 [ 218.741748][T10487] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 218.746134][T10487] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 218.876522][ T44] audit: type=1400 audit(1788757537.996:819): avc: denied { write } for pid=10496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.984134][ T44] audit: type=1400 audit(1788757538.096:820): avc: denied { write } for pid=10503 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.190448][ T44] audit: type=1400 audit(1788757538.306:821): avc: denied { write } for pid=10509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.264844][T10515] FAULT_INJECTION: forcing a failure. [ 219.264844][T10515] name failslab, interval 1, probability 0, space 0, times 0 [ 219.273991][T10515] CPU: 2 UID: 0 PID: 10515 Comm: syz.8.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.274035][T10515] Tainted: [L]=SOFTLOCKUP [ 219.274046][T10515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.274061][T10515] Call Trace: [ 219.274070][T10515] [ 219.274081][T10515] dump_stack_lvl+0x100/0x190 [ 219.274123][T10515] should_fail_ex.cold+0x5/0xa [ 219.274158][T10515] should_failslab+0xc2/0x120 [ 219.274189][T10515] __kmalloc_cache_noprof+0x91/0x6d0 [ 219.274224][T10515] ? stack_depot_init+0x17/0x80 [ 219.274250][T10515] ? __hw_addr_create+0x57/0x220 [ 219.274288][T10515] __hw_addr_create+0x57/0x220 [ 219.274325][T10515] __hw_addr_add_ex+0x32b/0x650 [ 219.274359][T10515] ? stack_depot_init+0x38/0x80 [ 219.274388][T10515] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 219.274417][T10515] ? __mutex_unlock_slowpath+0x35d/0x930 [ 219.274446][T10515] dev_addr_init+0x161/0x250 [ 219.274475][T10515] ? __pfx_dev_addr_init+0x10/0x10 [ 219.274507][T10515] ? __pfx_sl_setup+0x10/0x10 [ 219.274528][T10515] ? __pfx_sl_setup+0x10/0x10 [ 219.274545][T10515] alloc_netdev_mqs+0x363/0x15c0 [ 219.274572][T10515] slip_open+0x367/0x1120 [ 219.274891][T10515] ? __pfx___might_resched+0x10/0x10 [ 219.274912][T10515] ? tty_ldisc_close+0x114/0x1a0 [ 219.274944][T10515] ? __pfx_slip_open+0x10/0x10 [ 219.274965][T10515] ? down_write+0x146/0x1f0 [ 219.274996][T10515] ? __pfx_slip_open+0x10/0x10 [ 219.275016][T10515] tty_ldisc_open+0xa2/0x120 [ 219.275046][T10515] tty_set_ldisc+0x325/0x740 [ 219.275080][T10515] tty_ioctl+0x5b2/0x1640 [ 219.275101][T10515] ? __pfx_tty_ioctl+0x10/0x10 [ 219.275120][T10515] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 219.275143][T10515] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.275168][T10515] ? __fget_files+0x34/0x3d0 [ 219.275203][T10515] ? selinux_file_ioctl+0x13b/0x290 [ 219.275221][T10515] ? selinux_file_ioctl+0xb6/0x290 [ 219.275242][T10515] ? __pfx_tty_ioctl+0x10/0x10 [ 219.275263][T10515] __x64_sys_ioctl+0x18e/0x210 [ 219.275284][T10515] do_syscall_64+0x123/0x790 [ 219.275311][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.275332][T10515] RIP: 0033:0x7f31c099e159 [ 219.275350][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.275368][T10515] RSP: 002b:00007f31c1784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.275387][T10515] RAX: ffffffffffffffda RBX: 00007f31c0c25fa0 RCX: 00007f31c099e159 [ 219.275400][T10515] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000004 [ 219.275413][T10515] RBP: 00007f31c0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 219.275426][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.275439][T10515] R13: 00007f31c0c26038 R14: 00007f31c0c25fa0 R15: 00007fff53dd2b88 [ 219.275470][T10515] [ 219.308771][ T44] audit: type=1400 audit(1788757538.426:822): avc: denied { write } for pid=10516 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.327002][ T58] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 219.476144][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1475'. [ 219.491691][ T58] usb 14-1: unable to get BOS descriptor or descriptor too short [ 219.491795][ T58] usb 14-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 219.491867][ T58] usb 14-1: no configurations [ 219.491894][ T58] usb 14-1: can't read configurations, error -22 [ 219.752415][T10538] syzkaller0: entered promiscuous mode [ 219.752472][T10538] syzkaller0: entered allmulticast mode [ 219.814138][T10542] FAULT_INJECTION: forcing a failure. [ 219.814138][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 219.814209][T10542] CPU: 1 UID: 0 PID: 10542 Comm: syz.7.1480 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.814238][T10542] Tainted: [L]=SOFTLOCKUP [ 219.814245][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.814258][T10542] Call Trace: [ 219.814266][T10542] [ 219.814275][T10542] dump_stack_lvl+0x100/0x190 [ 219.814822][T10542] should_fail_ex.cold+0x5/0xa [ 219.814851][T10542] should_failslab+0xc2/0x120 [ 219.814877][T10542] __kmalloc_cache_noprof+0x91/0x6d0 [ 219.814910][T10542] ? snd_midi_event_new+0x6f/0x210 [ 219.814938][T10542] snd_midi_event_new+0x6f/0x210 [ 219.814961][T10542] snd_virmidi_output_open+0x106/0x670 [ 219.814988][T10542] open_substream+0x480/0x970 [ 219.815017][T10542] rawmidi_open_priv+0x595/0x6f0 [ 219.815049][T10542] snd_rawmidi_open+0x4b4/0xb90 [ 219.815082][T10542] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 219.815112][T10542] ? __pfx_default_wake_function+0x10/0x10 [ 219.815136][T10542] ? lock_acquire+0x1d1/0x380 [ 219.815156][T10542] ? kobject_get_unless_zero+0x156/0x200 [ 219.815188][T10542] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 219.815216][T10542] snd_open+0x201/0x450 [ 219.815239][T10542] ? __pfx_snd_open+0x10/0x10 [ 219.815260][T10542] chrdev_open+0x234/0x6a0 [ 219.815286][T10542] ? __pfx_chrdev_open+0x10/0x10 [ 219.815310][T10542] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 219.815344][T10542] do_dentry_open+0x6ab/0x14d0 [ 219.815363][T10542] ? __pfx_chrdev_open+0x10/0x10 [ 219.815390][T10542] vfs_open+0x82/0x3f0 [ 219.815419][T10542] path_openat+0x19fa/0x2440 [ 219.815446][T10542] ? __pfx_path_openat+0x10/0x10 [ 219.815477][T10542] do_file_open+0x20e/0x430 [ 219.815502][T10542] ? __pfx_do_file_open+0x10/0x10 [ 219.815544][T10542] ? _raw_spin_unlock+0x28/0x50 [ 219.815563][T10542] ? alloc_fd+0x471/0x7a0 [ 219.815595][T10542] do_sys_openat2+0x10f/0x1e0 [ 219.815621][T10542] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.815646][T10542] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 219.815687][T10542] __x64_sys_openat+0x12d/0x210 [ 219.815716][T10542] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.815755][T10542] do_syscall_64+0x123/0x790 [ 219.815785][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.815806][T10542] RIP: 0033:0x7f463055e98e [ 219.815824][T10542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.815843][T10542] RSP: 002b:00007f4631428b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.815865][T10542] RAX: ffffffffffffffda RBX: 00007f46314296c0 RCX: 00007f463055e98e [ 219.815878][T10542] RDX: 0000000000143102 RSI: 00007f4631428c00 RDI: ffffffffffffff9c [ 219.815891][T10542] RBP: 00007f4631428c00 R08: 0000000000000000 R09: 0000000000000000 [ 219.815903][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 219.815916][T10542] R13: 00007f4630826038 R14: 00007f4630825fa0 R15: 00007ffd4848e308 [ 219.815944][T10542] [ 220.363040][T10564] FAULT_INJECTION: forcing a failure. [ 220.363040][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 220.363124][T10564] CPU: 3 UID: 0 PID: 10564 Comm: syz.9.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.363188][T10564] Tainted: [L]=SOFTLOCKUP [ 220.363199][T10564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.363214][T10564] Call Trace: [ 220.363223][T10564] [ 220.363232][T10564] dump_stack_lvl+0x100/0x190 [ 220.363271][T10564] should_fail_ex.cold+0x5/0xa [ 220.363305][T10564] should_failslab+0xc2/0x120 [ 220.363333][T10564] kmem_cache_alloc_noprof+0x92/0x6a0 [ 220.363360][T10564] ? ceph_msg_new2+0x3e/0x4f0 [ 220.363387][T10564] ceph_msg_new2+0x3e/0x4f0 [ 220.363413][T10564] msgpool_alloc+0xa8/0x200 [ 220.363437][T10564] ? __pfx_msgpool_alloc+0x10/0x10 [ 220.363463][T10564] ? __pfx_msgpool_alloc+0x10/0x10 [ 220.363489][T10564] mempool_init_node+0x2f7/0x6f0 [ 220.363528][T10564] ? __pfx_msgpool_free+0x10/0x10 [ 220.363565][T10564] mempool_create_node_noprof+0xe9/0x1b0 [ 220.363600][T10564] ? __pfx_msgpool_alloc+0x10/0x10 [ 220.363628][T10564] ceph_msgpool_init+0xdc/0x1d0 [ 220.363655][T10564] ceph_osdc_init+0x4f1/0xa00 [ 220.363678][T10564] ceph_create_client+0x281/0x370 [ 220.363712][T10564] ceph_get_tree+0x1a4/0x1fd0 [ 220.363740][T10564] ? bpf_lsm_capable+0x9/0x10 [ 220.363767][T10564] ? security_capable+0x80/0x260 [ 220.363795][T10564] vfs_get_tree+0x92/0x320 [ 220.363827][T10564] vfs_cmd_create+0xd7/0x2a0 [ 220.363846][T10564] __do_sys_fsconfig+0x55a/0xcb0 [ 220.363866][T10564] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 220.363897][T10564] do_syscall_64+0x123/0x790 [ 220.363923][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.363943][T10564] RIP: 0033:0x7f32d859e159 [ 220.363959][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.363976][T10564] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 220.363997][T10564] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 220.364010][T10564] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 220.364021][T10564] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 220.364033][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.364044][T10564] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 220.364068][T10564] [ 220.511896][T10566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.514104][T10566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.531254][T10566] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 220.542307][T10566] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 220.542460][T10566] overlayfs: d_ino too big (gadget, ino=4611686018427391387, xinobits=3) [ 220.542522][T10566] overlayfs: d_ino too big (snd_seq, ino=4611686018427391578, xinobits=3) [ 220.542543][T10566] overlayfs: d_ino too big (netdevsim, ino=4611686018427415147, xinobits=3) [ 220.542563][T10566] overlayfs: d_ino too big (serio, ino=4611686018427391404, xinobits=3) [ 220.542583][T10566] overlayfs: d_ino too big (ulpi, ino=4611686018427391341, xinobits=3) [ 220.590435][T10566] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 220.593660][T10566] overlayfs: d_ino too big (ulpi, ino=4611686018427391341, xinobits=3) [ 220.604867][T10566] overlayfs: d_ino too big (coreboot, ino=4611686018427391490, xinobits=3) [ 223.542497][T10556] tipc: Enabling of bearer rejected, failed to enable media [ 223.613536][T10579] FAULT_INJECTION: forcing a failure. [ 223.613536][T10579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.613692][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.8.1493 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.613742][T10579] Tainted: [L]=SOFTLOCKUP [ 223.613752][T10579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.613765][T10579] Call Trace: [ 223.613779][T10579] [ 223.613788][T10579] dump_stack_lvl+0x100/0x190 [ 223.613827][T10579] should_fail_ex.cold+0x5/0xa [ 223.613856][T10579] get_futex_key+0x1d0/0x14f0 [ 223.613886][T10579] ? __pfx_get_futex_key+0x10/0x10 [ 223.613924][T10579] futex_wait_setup+0x91/0x540 [ 223.613965][T10579] __futex_wait+0x19f/0x300 [ 223.614002][T10579] ? __pfx___futex_wait+0x10/0x10 [ 223.614033][T10579] ? __pfx_try_to_wake_up+0x10/0x10 [ 223.614058][T10579] ? futex_hash+0x311/0x400 [ 223.614084][T10579] ? __pfx_futex_wake_mark+0x10/0x10 [ 223.614117][T10579] ? find_held_lock+0x2b/0x80 [ 223.614175][T10579] ? futex_wake+0x4ea/0x5e0 [ 223.614219][T10579] futex_wait+0xe6/0x370 [ 223.614255][T10579] ? __pfx_futex_wait+0x10/0x10 [ 223.614299][T10579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.614328][T10579] ? do_raw_spin_lock+0x128/0x260 [ 223.614355][T10579] ? find_held_lock+0x2b/0x80 [ 223.614390][T10579] do_futex+0x265/0x440 [ 223.614418][T10579] ? __pfx_do_futex+0x10/0x10 [ 223.614441][T10579] ? ioctx_alloc+0x110/0x21a0 [ 223.614479][T10579] __x64_sys_futex+0x34f/0x4d0 [ 223.614508][T10579] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 223.614540][T10579] ? __pfx___x64_sys_futex+0x10/0x10 [ 223.614580][T10579] do_syscall_64+0x123/0x790 [ 223.614624][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.614649][T10579] RIP: 0033:0x7f31c099e159 [ 223.614669][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.614691][T10579] RSP: 002b:00007f31c17840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.614714][T10579] RAX: ffffffffffffffda RBX: 00007f31c0c25fa8 RCX: 00007f31c099e159 [ 223.614728][T10579] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31c0c25fa8 [ 223.614741][T10579] RBP: 00007f31c0c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.614754][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.614767][T10579] R13: 00007f31c0c26038 R14: 00007fff53dd2aa0 R15: 00007fff53dd2b88 [ 223.614796][T10579] [ 223.679255][T10584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10584 comm=syz.7.1495 [ 223.784789][T10587] FAULT_INJECTION: forcing a failure. [ 223.784789][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 223.784879][T10587] CPU: 1 UID: 0 PID: 10587 Comm: syz.7.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.784924][T10587] Tainted: [L]=SOFTLOCKUP [ 223.784933][T10587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.784945][T10587] Call Trace: [ 223.784953][T10587] [ 223.784962][T10587] dump_stack_lvl+0x100/0x190 [ 223.785019][T10587] should_fail_ex.cold+0x5/0xa [ 223.785050][T10587] should_failslab+0xc2/0x120 [ 223.785076][T10587] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 223.785095][T10587] ? n_tty_open+0x12b/0x170 [ 223.785119][T10587] ? alloc_inode+0x183/0x250 [ 223.785142][T10587] alloc_inode+0x183/0x250 [ 223.785161][T10587] new_inode+0x22/0x1c0 [ 223.785180][T10587] devpts_pty_new+0xca/0x770 [ 223.785207][T10587] ? __pfx_devpts_pty_new+0x10/0x10 [ 223.785230][T10587] ? ptmx_open+0x1ad/0x360 [ 223.785263][T10587] ptmx_open+0x1d9/0x360 [ 223.785291][T10587] ? __pfx_ptmx_open+0x10/0x10 [ 223.785317][T10587] chrdev_open+0x234/0x6a0 [ 223.785340][T10587] ? __pfx_chrdev_open+0x10/0x10 [ 223.785363][T10587] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 223.785416][T10587] do_dentry_open+0x6ab/0x14d0 [ 223.785436][T10587] ? __pfx_chrdev_open+0x10/0x10 [ 223.785467][T10587] vfs_open+0x82/0x3f0 [ 223.785496][T10587] path_openat+0x19fa/0x2440 [ 223.785526][T10587] ? __pfx_path_openat+0x10/0x10 [ 223.785558][T10587] do_file_open+0x20e/0x430 [ 223.785589][T10587] ? __pfx_do_file_open+0x10/0x10 [ 223.785633][T10587] ? _raw_spin_unlock+0x28/0x50 [ 223.785656][T10587] ? alloc_fd+0x471/0x7a0 [ 223.785689][T10587] do_sys_openat2+0x10f/0x1e0 [ 223.785711][T10587] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.785735][T10587] ? __fget_files+0x21f/0x3d0 [ 223.785760][T10587] __x64_sys_openat+0x12d/0x210 [ 223.785784][T10587] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.785817][T10587] do_syscall_64+0x123/0x790 [ 223.785842][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.785860][T10587] RIP: 0033:0x7f463059e159 [ 223.785876][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.785893][T10587] RSP: 002b:00007f4631429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.785911][T10587] RAX: ffffffffffffffda RBX: 00007f4630825fa0 RCX: 00007f463059e159 [ 223.785924][T10587] RDX: 0000000001123102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 223.785936][T10587] RBP: 00007f4630635024 R08: 0000000000000000 R09: 0000000000000000 [ 223.785947][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.785957][T10587] R13: 00007f4630826038 R14: 00007f4630825fa0 R15: 00007ffd4848e308 [ 223.785982][T10587] [ 224.423886][T10605] FAULT_INJECTION: forcing a failure. [ 224.423886][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 224.435980][T10605] CPU: 2 UID: 0 PID: 10605 Comm: syz.9.1503 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.436036][T10605] Tainted: [L]=SOFTLOCKUP [ 224.436046][T10605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.436059][T10605] Call Trace: [ 224.436079][T10605] [ 224.436089][T10605] dump_stack_lvl+0x100/0x190 [ 224.436139][T10605] should_fail_ex.cold+0x5/0xa [ 224.436170][T10605] ? __pfx_mqueue_fill_super+0x10/0x10 [ 224.436204][T10605] should_failslab+0xc2/0x120 [ 224.436234][T10605] ? __pfx_mqueue_fill_super+0x10/0x10 [ 224.436262][T10605] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 224.436286][T10605] ? do_raw_spin_unlock+0x145/0x1e0 [ 224.436315][T10605] ? __d_alloc+0x35/0xa50 [ 224.436348][T10605] ? __pfx_mqueue_fill_super+0x10/0x10 [ 224.436407][T10605] __d_alloc+0x35/0xa50 [ 224.436442][T10605] ? __pfx_mqueue_fill_super+0x10/0x10 [ 224.436471][T10605] d_make_root+0x3e/0x90 [ 224.436504][T10605] mqueue_fill_super+0x16d/0x250 [ 224.436535][T10605] get_tree_nodev+0xdd/0x190 [ 224.436561][T10605] mqueue_get_tree+0xf1/0x130 [ 224.436590][T10605] vfs_get_tree+0x92/0x320 [ 224.436622][T10605] fc_mount_longterm+0x1a/0x270 [ 224.436648][T10605] mq_init_ns+0x482/0x820 [ 224.436693][T10605] copy_ipcs+0x3dd/0x7e0 [ 224.436730][T10605] create_new_namespaces+0x20a/0xac0 [ 224.436758][T10605] ? security_capable+0x80/0x260 [ 224.436789][T10605] unshare_nsproxy_namespaces+0xf2/0x220 [ 224.436897][T10605] ksys_unshare+0x4a2/0xa70 [ 224.436928][T10605] ? __pfx_ksys_unshare+0x10/0x10 [ 224.437018][T10605] __x64_sys_unshare+0x31/0x40 [ 224.437048][T10605] do_syscall_64+0x123/0x790 [ 224.437142][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.437170][T10605] RIP: 0033:0x7f32d859e159 [ 224.437191][T10605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.437237][T10605] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 224.437266][T10605] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 224.437282][T10605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 224.437335][T10605] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 224.437349][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.437363][T10605] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 224.437394][T10605] [ 224.483474][T10607] bridge0: port 3(syz_tun) entered blocking state [ 224.483572][T10607] bridge0: port 3(syz_tun) entered disabled state [ 224.483782][T10607] syz_tun: entered allmulticast mode [ 224.485838][T10607] syz_tun: entered promiscuous mode [ 224.486476][T10607] bridge0: port 3(syz_tun) entered blocking state [ 224.486580][T10607] bridge0: port 3(syz_tun) entered listening state [ 224.514138][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 224.514193][ C1] bridge0: topology change detected, propagating [ 224.553372][ T6859] bridge0: port 3(syz_tun) entered disabled state [ 224.596207][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1506'. [ 224.596359][T10609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.607363][T10609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.637601][T10611] FAULT_INJECTION: forcing a failure. [ 224.637601][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 224.637698][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.9.1507 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.637743][T10611] Tainted: [L]=SOFTLOCKUP [ 224.637753][T10611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.637767][T10611] Call Trace: [ 224.637777][T10611] [ 224.637786][T10611] dump_stack_lvl+0x100/0x190 [ 224.637821][T10611] should_fail_ex.cold+0x5/0xa [ 224.637853][T10611] should_failslab+0xc2/0x120 [ 224.637878][T10611] __kmalloc_cache_node_noprof+0x94/0x720 [ 224.637901][T10611] ? __alloc_workqueue+0xdba/0x1950 [ 224.637926][T10611] ? init_rescuer+0x19f/0x550 [ 224.637973][T10611] init_rescuer+0x19f/0x550 [ 224.638000][T10611] ? __pfx_init_rescuer+0x10/0x10 [ 224.638026][T10611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.638064][T10611] __alloc_workqueue+0xe82/0x1950 [ 224.638097][T10611] alloc_workqueue_noprof+0xc7/0x130 [ 224.638122][T10611] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 224.638152][T10611] ? __pfx___debug_object_init+0x10/0x10 [ 224.638183][T10611] nci_register_device+0x21e/0xb80 [ 224.638205][T10611] ? __pfx_nci_register_device+0x10/0x10 [ 224.638229][T10611] ? lockdep_init_map_type+0x5c/0x250 [ 224.638257][T10611] virtual_ncidev_open+0x141/0x220 [ 224.638283][T10611] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 224.638308][T10611] misc_open+0x26d/0x450 [ 224.638339][T10611] ? __pfx_misc_open+0x10/0x10 [ 224.638367][T10611] chrdev_open+0x234/0x6a0 [ 224.638391][T10611] ? __pfx_chrdev_open+0x10/0x10 [ 224.638416][T10611] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 224.638450][T10611] do_dentry_open+0x6ab/0x14d0 [ 224.638470][T10611] ? __pfx_chrdev_open+0x10/0x10 [ 224.638498][T10611] vfs_open+0x82/0x3f0 [ 224.638527][T10611] path_openat+0x19fa/0x2440 [ 224.638556][T10611] ? __pfx_path_openat+0x10/0x10 [ 224.638588][T10611] do_file_open+0x20e/0x430 [ 224.638614][T10611] ? __pfx_do_file_open+0x10/0x10 [ 224.638659][T10611] ? _raw_spin_unlock+0x28/0x50 [ 224.638686][T10611] ? alloc_fd+0x471/0x7a0 [ 224.638720][T10611] do_sys_openat2+0x10f/0x1e0 [ 224.638749][T10611] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.638785][T10611] __x64_sys_openat+0x12d/0x210 [ 224.638813][T10611] ? __pfx___x64_sys_openat+0x10/0x10 [ 224.638843][T10611] do_syscall_64+0x123/0x790 [ 224.638870][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.638890][T10611] RIP: 0033:0x7f32d859e159 [ 224.638906][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.638921][T10611] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.638939][T10611] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 224.638952][T10611] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 224.638963][T10611] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 224.638975][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.638986][T10611] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 224.639012][T10611] [ 224.639263][T10611] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 224.902289][T10619] input: syz0 as /devices/virtual/input/input18 [ 224.934144][T10621] FAULT_INJECTION: forcing a failure. [ 224.934144][T10621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.934235][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.7.1511 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.934276][T10621] Tainted: [L]=SOFTLOCKUP [ 224.934283][T10621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.934295][T10621] Call Trace: [ 224.934302][T10621] [ 224.934310][T10621] dump_stack_lvl+0x100/0x190 [ 224.934344][T10621] should_fail_ex.cold+0x5/0xa [ 224.934368][T10621] get_futex_key+0x1d0/0x14f0 [ 224.934393][T10621] ? __pfx_get_futex_key+0x10/0x10 [ 224.934414][T10621] ? ___sys_sendmsg+0x127/0x1e0 [ 224.934455][T10621] futex_wake+0xf4/0x5e0 [ 224.934480][T10621] ? futex_wait+0x11e/0x370 [ 224.934508][T10621] ? __pfx_futex_wake+0x10/0x10 [ 224.934538][T10621] ? find_held_lock+0x2b/0x80 [ 224.934568][T10621] do_futex+0x2b2/0x440 [ 224.934593][T10621] ? __pfx_do_futex+0x10/0x10 [ 224.934619][T10621] ? fput+0x7c/0x100 [ 224.934643][T10621] __x64_sys_futex+0x34f/0x4d0 [ 224.934670][T10621] ? __pfx___x64_sys_futex+0x10/0x10 [ 224.934712][T10621] do_syscall_64+0x123/0x790 [ 224.934739][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.934759][T10621] RIP: 0033:0x7f463059e159 [ 224.934777][T10621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.934794][T10621] RSP: 002b:00007f46314290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.934815][T10621] RAX: ffffffffffffffda RBX: 00007f4630825fa8 RCX: 00007f463059e159 [ 224.934827][T10621] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4630825fac [ 224.934839][T10621] RBP: 00007f4630825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 224.934850][T10621] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 224.934861][T10621] R13: 00007f4630826038 R14: 00007ffd4848e220 R15: 00007ffd4848e308 [ 224.934886][T10621] [ 225.477129][T10640] FAULT_INJECTION: forcing a failure. [ 225.477129][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 225.477298][T10640] CPU: 3 UID: 0 PID: 10640 Comm: syz.8.1519 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.477328][T10640] Tainted: [L]=SOFTLOCKUP [ 225.477335][T10640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.477348][T10640] Call Trace: [ 225.477355][T10640] [ 225.477364][T10640] dump_stack_lvl+0x100/0x190 [ 225.477396][T10640] should_fail_ex.cold+0x5/0xa [ 225.477438][T10640] should_failslab+0xc2/0x120 [ 225.477465][T10640] kmem_cache_alloc_noprof+0x92/0x6a0 [ 225.477482][T10640] ? __pfx_map_id_range_down+0x10/0x10 [ 225.477502][T10640] ? security_inode_alloc+0x3b/0x2c0 [ 225.477536][T10640] security_inode_alloc+0x3b/0x2c0 [ 225.477560][T10640] inode_init_always_gfp+0xc6f/0xfb0 [ 225.477589][T10640] alloc_inode+0x8e/0x250 [ 225.477615][T10640] new_inode+0x22/0x1c0 [ 225.477635][T10640] debugfs_create_dir+0x9d/0x420 [ 225.477664][T10640] kvm_dev_ioctl+0x1286/0x1b50 [ 225.477697][T10640] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 225.477723][T10640] ? selinux_file_ioctl+0x13b/0x290 [ 225.477742][T10640] ? selinux_file_ioctl+0xb6/0x290 [ 225.477762][T10640] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 225.477786][T10640] __x64_sys_ioctl+0x18e/0x210 [ 225.477809][T10640] do_syscall_64+0x123/0x790 [ 225.477835][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.477856][T10640] RIP: 0033:0x7f31c099e159 [ 225.477875][T10640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.477893][T10640] RSP: 002b:00007f31c1784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.477912][T10640] RAX: ffffffffffffffda RBX: 00007f31c0c25fa0 RCX: 00007f31c099e159 [ 225.477925][T10640] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 225.477936][T10640] RBP: 00007f31c0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 225.477948][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.477959][T10640] R13: 00007f31c0c26038 R14: 00007f31c0c25fa0 R15: 00007fff53dd2b88 [ 225.477986][T10640] [ 225.478113][T10640] debugfs: out of free dentries, can not create directory '10640-5' [ 225.666889][T10645] netlink: 'syz.7.1520': attribute type 4 has an invalid length. [ 225.669378][T10645] netlink: 'syz.7.1520': attribute type 4 has an invalid length. [ 225.997376][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1523'. [ 226.069119][T10656] xt_hashlimit: size too large, truncated to 1048576 [ 226.298277][T10669] nvme_tcp: queue 0: bad type returned 0 [ 226.360495][T10674] FAULT_INJECTION: forcing a failure. [ 226.360495][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 226.360599][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.8.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.360649][T10674] Tainted: [L]=SOFTLOCKUP [ 226.360658][T10674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.360669][T10674] Call Trace: [ 226.360678][T10674] [ 226.360688][T10674] dump_stack_lvl+0x100/0x190 [ 226.360720][T10674] should_fail_ex.cold+0x5/0xa [ 226.360750][T10674] should_failslab+0xc2/0x120 [ 226.360775][T10674] kmem_cache_alloc_noprof+0x92/0x6a0 [ 226.360798][T10674] ? mas_preallocate+0xc22/0xee0 [ 226.360829][T10674] mas_preallocate+0xc22/0xee0 [ 226.360858][T10674] ? __pfx_mas_preallocate+0x10/0x10 [ 226.360881][T10674] ? mt_find+0x136/0x9b0 [ 226.360911][T10674] ? lock_acquire+0x1d1/0x380 [ 226.360931][T10674] ? avc_has_perm_noaudit+0x56/0x3b0 [ 226.360960][T10674] vma_link+0x14a/0x8c0 [ 226.361016][T10674] ? __pfx_vma_link+0x10/0x10 [ 226.361053][T10674] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 226.361078][T10674] ? rcu_is_watching+0x13/0xc0 [ 226.361104][T10674] ? percpu_counter_add_batch+0xb9/0x230 [ 226.361135][T10674] insert_vm_struct+0x1f7/0x890 [ 226.361160][T10674] create_init_stack_vma+0x830/0xcf0 [ 226.361186][T10674] ? __pfx_create_init_stack_vma+0x10/0x10 [ 226.361211][T10674] ? lock_acquire+0x1d1/0x380 [ 226.361234][T10674] ? do_raw_spin_lock+0x128/0x260 [ 226.361259][T10674] ? alloc_bprm+0x54e/0x9e0 [ 226.361280][T10674] ? alloc_bprm+0x54e/0x9e0 [ 226.361304][T10674] alloc_bprm+0x57b/0x9e0 [ 226.361328][T10674] do_execveat_common.isra.0+0x19c/0x580 [ 226.361350][T10674] ? do_getname+0x191/0x390 [ 226.361381][T10674] __x64_sys_execve+0x93/0xd0 [ 226.361402][T10674] do_syscall_64+0x123/0x790 [ 226.361428][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.361450][T10674] RIP: 0033:0x7f31c099e159 [ 226.361468][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.361488][T10674] RSP: 002b:00007f31c1784028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 226.361510][T10674] RAX: ffffffffffffffda RBX: 00007f31c0c25fa0 RCX: 00007f31c099e159 [ 226.361524][T10674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 226.361536][T10674] RBP: 00007f31c0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 226.361549][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.361561][T10674] R13: 00007f31c0c26038 R14: 00007f31c0c25fa0 R15: 00007fff53dd2b88 [ 226.361691][T10674] [ 226.437146][T10676] netlink: 'syz.8.1528': attribute type 1 has an invalid length. [ 226.502285][T10676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.632265][T10680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.632640][T10680] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 226.633600][T10680] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 226.694673][T10676] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 226.718317][T10676] bond1: (slave wlan1): Enslaving as an active interface with a down link [ 226.932035][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1533'. [ 227.109881][T10700] FAULT_INJECTION: forcing a failure. [ 227.109881][T10700] name failslab, interval 1, probability 0, space 0, times 0 [ 227.121376][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.7.1536 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.121433][T10700] Tainted: [L]=SOFTLOCKUP [ 227.121442][T10700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.121457][T10700] Call Trace: [ 227.121468][T10700] [ 227.121479][T10700] dump_stack_lvl+0x100/0x190 [ 227.121517][T10700] should_fail_ex.cold+0x5/0xa [ 227.121551][T10700] should_failslab+0xc2/0x120 [ 227.121580][T10700] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.121614][T10700] ? x509_cert_parse+0x162/0x910 [ 227.121647][T10700] x509_cert_parse+0x162/0x910 [ 227.121678][T10700] x509_key_preparse+0x65/0x9c0 [ 227.121715][T10700] asymmetric_key_preparse+0xce/0x1d0 [ 227.121741][T10700] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 227.121768][T10700] __key_create_or_update+0x463/0xe30 [ 227.121789][T10700] ? __pfx___key_create_or_update+0x10/0x10 [ 227.121810][T10700] ? lookup_user_key+0x3f3/0x1300 [ 227.121853][T10700] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 227.121893][T10700] key_create_or_update+0x42/0x60 [ 227.121918][T10700] __do_sys_add_key+0x2e8/0x460 [ 227.121949][T10700] ? __pfx___do_sys_add_key+0x10/0x10 [ 227.121986][T10700] do_syscall_64+0x123/0x790 [ 227.122013][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.122039][T10700] RIP: 0033:0x7f463059e159 [ 227.122060][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.122081][T10700] RSP: 002b:00007f4631429028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 227.122104][T10700] RAX: ffffffffffffffda RBX: 00007f4630825fa0 RCX: 00007f463059e159 [ 227.122120][T10700] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 227.122143][T10700] RBP: 00007f4630635024 R08: ffffffffffffffff R09: 0000000000000000 [ 227.122159][T10700] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 227.122175][T10700] R13: 00007f4630826038 R14: 00007f4630825fa0 R15: 00007ffd4848e308 [ 227.122206][T10700] [ 227.294295][T10702] misc userio: Can't change port proto on an already running userio instance [ 227.551173][ T43] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 227.693903][ T43] usb 12-1: Using ep0 maxpacket: 8 [ 227.697251][ T43] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.698600][ T43] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 227.698643][ T43] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.698669][ T43] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.698691][ T43] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.698713][ T43] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.698749][ T43] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.922278][ T43] usb 12-1: usb_control_msg returned -32 [ 227.922365][ T43] usbtmc 12-1:16.0: can't read capabilities [ 228.052910][T10723] batman_adv: batadv0: Adding interface: veth0 [ 228.053007][T10723] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.053316][T10723] batman_adv: batadv0: Interface activated: veth0 [ 228.057162][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1547'. [ 228.057182][T10723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.057198][T10723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.069051][T10723] batman_adv: batadv0: Interface deactivated: veth0 [ 228.069070][T10723] batman_adv: batadv0: Removing interface: veth0 [ 228.284412][T10733] usbtmc 12-1:16.0: INDICATOR_PULSE returned 37 [ 228.483875][ T58] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 228.489638][ T5880] usb 12-1: USB disconnect, device number 10 [ 228.633871][ T58] usb 14-1: Using ep0 maxpacket: 8 [ 228.634737][ T58] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.635765][ T58] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.635786][ T58] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.635805][ T58] usb 14-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 228.635825][ T58] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 228.635847][ T58] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 228.635866][ T58] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.635899][ T58] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.852319][ T58] usb 14-1: GET_CAPABILITIES returned 0 [ 228.852400][ T58] usbtmc 14-1:16.0: can't read capabilities [ 229.063235][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.063275][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.063294][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.063311][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.063327][ C3] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077508][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077555][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077590][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077624][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077842][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077877][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077911][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.077945][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.078137][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.078168][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.078190][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.090570][ T9] usb 14-1: USB disconnect, device number 5 [ 229.127816][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.129327][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.221438][T10747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.221502][T10747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.226703][T10747] veth1_vlan: left promiscuous mode [ 229.227561][T10747] veth0_vlan: left promiscuous mode [ 229.228892][T10747] veth0_vlan: entered promiscuous mode [ 229.230681][T10747] veth1_vlan: entered promiscuous mode [ 229.238711][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.239501][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.240254][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.241038][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.253509][ T5743] syz2: Port: 1 Link ACTIVE [ 229.256174][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.256262][ T97] bridge0: port 1(bridge_slave_0) entered listening state [ 229.258224][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.258303][ T97] bridge0: port 2(bridge_slave_1) entered listening state [ 229.323877][ T5790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.323960][ T5790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.324016][ T5790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.324044][ T5790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.928200][T10759] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 230.829595][T10770] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1564'. [ 231.039615][T10779] sl0: header compression turned on [ 231.210234][ T44] audit: type=1400 audit(1788757550.326:823): avc: denied { write } for pid=10783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.302061][ T44] audit: type=1400 audit(1788757550.416:824): avc: denied { write } for pid=10791 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.452502][ T44] audit: type=1400 audit(1788757550.566:825): avc: denied { write } for pid=10794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.463820][ T57] usb 13-1: new full-speed USB device number 9 using dummy_hcd [ 231.529071][ T44] audit: type=1400 audit(1788757550.646:826): avc: denied { write } for pid=10797 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.614682][ T57] usb 13-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 231.619321][ T57] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.624535][ T57] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.630302][ T57] usb 13-1: config 0 descriptor?? [ 231.638008][ T44] audit: type=1400 audit(1788757550.756:827): avc: denied { write } for pid=10799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.702680][ T44] audit: type=1400 audit(1788757550.816:828): avc: denied { write } for pid=10802 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.851884][ T44] audit: type=1400 audit(1788757550.966:829): avc: denied { write } for pid=10804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.936009][ T44] audit: type=1400 audit(1788757551.056:830): avc: denied { write } for pid=10807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.063312][ T57] input: HID 0458:5005 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5005.000C/input/input20 [ 232.155737][ T57] input: HID 0458:5005 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5005.000C/input/input21 [ 232.233126][ T57] kye 0003:0458:5005.000C: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.8-1/input0 [ 232.252590][ T57] usb 13-1: USB disconnect, device number 9 [ 232.302705][T10809] fido_id[10809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/13-1/report_descriptor': No such file or directory [ 232.808854][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1571'. [ 233.033045][T10817] overlayfs: invalid redirect ((null)) [ 233.886848][T10826] kvm: pic: level sensitive irq not supported [ 233.887326][T10826] kvm: pic: non byte read [ 233.889252][T10826] kvm: pic: single mode not supported [ 233.889659][T10826] kvm: pic: non byte read [ 233.925763][T10826] kvm: pic: non byte read [ 233.928259][T10826] kvm: pic: non byte read [ 233.930431][T10826] kvm: pic: non byte read [ 233.932295][T10826] kvm: pic: single mode not supported [ 233.932304][T10826] kvm: pic: level sensitive irq not supported [ 233.932696][T10826] kvm: pic: non byte read [ 233.934916][T10826] kvm: pic: level sensitive irq not supported [ 233.935294][T10826] kvm: pic: non byte read [ 233.945932][T10826] kvm: pic: single mode not supported [ 233.946413][T10826] kvm: pic: non byte read [ 233.949613][T10826] kvm: pic: non byte read [ 234.127172][T10833] FAULT_INJECTION: forcing a failure. [ 234.127172][T10833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.143833][T10833] CPU: 3 UID: 0 PID: 10833 Comm: syz.8.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.143883][T10833] Tainted: [L]=SOFTLOCKUP [ 234.143906][T10833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.143917][T10833] Call Trace: [ 234.143925][T10833] [ 234.143933][T10833] dump_stack_lvl+0x100/0x190 [ 234.143965][T10833] should_fail_ex.cold+0x5/0xa [ 234.143986][T10833] ? prepare_alloc_pages+0x16d/0x5b0 [ 234.144012][T10833] should_fail_alloc_page+0xeb/0x140 [ 234.144036][T10833] prepare_alloc_pages+0x1f0/0x5b0 [ 234.144066][T10833] ? __lock_acquire+0x5c0/0x1f40 [ 234.144088][T10833] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 234.144119][T10833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.144142][T10833] ? lock_acquire+0x1d1/0x380 [ 234.144160][T10833] ? validate_mm+0x1f1/0x4e0 [ 234.144188][T10833] ? mas_next_slot+0xc05/0x13a0 [ 234.144210][T10833] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.144245][T10833] ? mas_find+0x2cb/0x790 [ 234.144269][T10833] ? validate_mm+0x392/0x4e0 [ 234.144296][T10833] ? __pfx_validate_mm+0x10/0x10 [ 234.144325][T10833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.144345][T10833] ? policy_nodemask+0xed/0x4f0 [ 234.144368][T10833] alloc_pages_mpol+0x201/0x550 [ 234.144392][T10833] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.144415][T10833] ? __pfx_vma_link+0x10/0x10 [ 234.144442][T10833] alloc_pages_noprof+0x1a/0x160 [ 234.144465][T10833] pte_alloc_one+0x1c/0x3d0 [ 234.144514][T10833] __pte_alloc+0x6d/0x380 [ 234.144533][T10833] ? __pfx___pte_alloc+0x10/0x10 [ 234.144551][T10833] ? __pfx___might_resched+0x10/0x10 [ 234.144568][T10833] ? move_page_tables+0x3eb/0x4930 [ 234.144595][T10833] ? alloc_new_pud+0x217/0x320 [ 234.144620][T10833] move_page_tables+0x2fac/0x4930 [ 234.144648][T10833] ? __pfx_copy_vma+0x10/0x10 [ 234.144677][T10833] ? __lock_acquire+0x5c0/0x1f40 [ 234.144695][T10833] ? __pfx_move_page_tables+0x10/0x10 [ 234.144733][T10833] ? lock_acquire+0x1d1/0x380 [ 234.144750][T10833] ? avc_has_perm_noaudit+0x56/0x3b0 [ 234.144777][T10833] copy_vma_and_data+0x2bf/0x780 [ 234.144806][T10833] ? __pfx_copy_vma_and_data+0x10/0x10 [ 234.144836][T10833] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 234.144859][T10833] ? rcu_is_watching+0x13/0xc0 [ 234.144880][T10833] ? percpu_counter_add_batch+0xb9/0x230 [ 234.144901][T10833] ? __vm_enough_memory+0x184/0x390 [ 234.144927][T10833] move_vma+0x4ef/0x1280 [ 234.144990][T10833] ? __pfx_move_vma+0x10/0x10 [ 234.145020][T10833] ? selinux_mmap_addr+0x2b/0x110 [ 234.145056][T10833] ? security_mmap_addr+0x71/0x1e0 [ 234.145079][T10833] ? __get_unmapped_area+0x255/0x3e0 [ 234.145106][T10833] ? vrm_set_new_addr+0x1f5/0x2a0 [ 234.145138][T10833] mremap_to+0x234/0x4c0 [ 234.145169][T10833] ? __pfx_mremap_to+0x10/0x10 [ 234.145206][T10833] __do_sys_mremap+0xc70/0x1780 [ 234.145237][T10833] ? futex_wait+0x11e/0x370 [ 234.145269][T10833] ? __pfx_futex_wait+0x10/0x10 [ 234.145299][T10833] ? __pfx___do_sys_mremap+0x10/0x10 [ 234.145326][T10833] ? __pfx_avc_has_perm+0x10/0x10 [ 234.145352][T10833] ? do_futex+0x190/0x440 [ 234.145374][T10833] ? __pfx_do_futex+0x10/0x10 [ 234.145405][T10833] ? __sys_socket+0xac/0x260 [ 234.145430][T10833] ? xfd_validate_state+0x129/0x190 [ 234.145458][T10833] do_syscall_64+0x123/0x790 [ 234.145482][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.145501][T10833] RIP: 0033:0x7f31c099e159 [ 234.145518][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.145535][T10833] RSP: 002b:00007f31c1784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 234.145554][T10833] RAX: ffffffffffffffda RBX: 00007f31c0c25fa0 RCX: 00007f31c099e159 [ 234.145566][T10833] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 234.145577][T10833] RBP: 00007f31c0a35024 R08: 0000200000ffd000 R09: 0000000000000000 [ 234.145588][T10833] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 234.145599][T10833] R13: 00007f31c0c26038 R14: 00007f31c0c25fa0 R15: 00007fff53dd2b88 [ 234.145625][T10833] [ 234.322480][T10835] FAULT_INJECTION: forcing a failure. [ 234.322480][T10835] name failslab, interval 1, probability 0, space 0, times 0 [ 234.322513][T10835] CPU: 2 UID: 0 PID: 10835 Comm: syz.8.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.322539][T10835] Tainted: [L]=SOFTLOCKUP [ 234.322546][T10835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.322557][T10835] Call Trace: [ 234.322564][T10835] [ 234.322571][T10835] dump_stack_lvl+0x100/0x190 [ 234.322603][T10835] should_fail_ex.cold+0x5/0xa [ 234.322629][T10835] should_failslab+0xc2/0x120 [ 234.322653][T10835] __kvmalloc_node_noprof+0x113/0x9b0 [ 234.322674][T10835] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 234.322702][T10835] ? bpf_uprobe_multi_link_attach+0xf8f/0x1510 [ 234.322736][T10835] bpf_uprobe_multi_link_attach+0xf8f/0x1510 [ 234.322766][T10835] ? find_held_lock+0x2b/0x80 [ 234.322800][T10835] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 234.322827][T10835] ? __fget_files+0x21f/0x3d0 [ 234.322854][T10835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.322879][T10835] __sys_bpf+0x427a/0x4a30 [ 234.322921][T10835] ? __pfx___sys_bpf+0x10/0x10 [ 234.322938][T10835] ? find_held_lock+0x2b/0x80 [ 234.322964][T10835] ? futex_wake+0x4ea/0x5e0 [ 234.323016][T10835] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.323043][T10835] ? find_held_lock+0x2b/0x80 [ 234.323068][T10835] ? ksys_write+0x190/0x250 [ 234.323085][T10835] ? ksys_write+0x190/0x250 [ 234.323120][T10835] ? __x64_sys_futex+0x34f/0x4d0 [ 234.323146][T10835] ? __x64_sys_futex+0x358/0x4d0 [ 234.323172][T10835] ? fput+0x7c/0x100 [ 234.323195][T10835] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.323219][T10835] ? ksys_write+0x1ac/0x250 [ 234.323240][T10835] ? __x64_sys_bpf+0xce/0x140 [ 234.323256][T10835] __x64_sys_bpf+0xce/0x140 [ 234.323276][T10835] ? do_syscall_64+0xae/0x790 [ 234.323300][T10835] do_syscall_64+0x123/0x790 [ 234.323325][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.323345][T10835] RIP: 0033:0x7f31c099e159 [ 234.323362][T10835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.323379][T10835] RSP: 002b:00007f31c1784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.323397][T10835] RAX: ffffffffffffffda RBX: 00007f31c0c25fa0 RCX: 00007f31c099e159 [ 234.323410][T10835] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 234.323422][T10835] RBP: 00007f31c0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 234.323433][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.323444][T10835] R13: 00007f31c0c26038 R14: 00007f31c0c25fa0 R15: 00007fff53dd2b88 [ 234.323469][T10835] [ 234.577840][ T44] audit: type=1400 audit(1788757553.696:831): avc: denied { write } for pid=10838 comm="syz.9.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.624006][T10841] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 234.632664][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.633210][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.647918][T10841] bridge0: entered allmulticast mode [ 234.860037][T10852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.860128][T10852] overlayfs: failed to set xattr on upper [ 234.863610][T10852] overlayfs: ...falling back to redirect_dir=nofollow. [ 234.863622][T10852] overlayfs: ...falling back to index=off. [ 234.863629][T10852] overlayfs: ...falling back to uuid=null. [ 234.863648][T10852] overlayfs: maximum fs stacking depth exceeded [ 234.953503][ T44] audit: type=1400 audit(1788757554.066:832): avc: denied { connect } for pid=10854 comm="syz.8.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.983848][ T5837] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 235.134864][ T5837] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.142879][ T5837] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.151951][ T5837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.156832][ T5837] usb 12-1: Product: syz [ 235.159237][ T5837] usb 12-1: Manufacturer: syz [ 235.159272][ T5837] usb 12-1: SerialNumber: syz [ 235.172583][ T5837] hub 12-1:1.0: bad descriptor, ignoring hub [ 235.183500][ T5837] hub 12-1:1.0: probe with driver hub failed with error -5 [ 235.524914][ T9] usb 12-1: USB disconnect, device number 11 [ 235.813978][ T6082] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 235.974795][ T6082] usb 14-1: Using ep0 maxpacket: 8 [ 235.980453][ T6082] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.987404][ T6082] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.987470][ T6082] usb 14-1: config 179 has no interface number 0 [ 235.987502][ T6082] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 235.987523][ T6082] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 235.987544][ T6082] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.987564][ T6082] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 235.987585][ T6082] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.987619][ T6082] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.994229][T10882] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 236.084140][ T57] usb 13-1: new full-speed USB device number 11 using dummy_hcd [ 236.162598][ T5739] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 236.244973][ T57] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 236.267700][ T57] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 236.267805][ T57] usb 13-1: Product: syz [ 236.267819][ T57] usb 13-1: Manufacturer: syz [ 236.267831][ T57] usb 13-1: SerialNumber: syz [ 236.271066][ T57] usb 13-1: config 0 descriptor?? [ 236.401136][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 236.401220][ T44] audit: type=1400 audit(1788757555.516:835): avc: denied { ioctl } for pid=10881 comm="syz.9.1587" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 236.406670][ T57] usb 14-1: USB disconnect, device number 6 [ 236.415106][ C1] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.488251][T10060] usb 13-1: USB disconnect, device number 11 [ 236.983305][T10893] syzkaller1: entered promiscuous mode [ 236.986780][T10893] syzkaller1: entered allmulticast mode [ 237.300336][T10906] syzkaller1: entered promiscuous mode [ 237.300405][T10906] syzkaller1: entered allmulticast mode [ 237.810384][T10925] syzkaller1: entered promiscuous mode [ 237.813328][T10925] syzkaller1: entered allmulticast mode [ 237.974157][T10060] usb 12-1: new full-speed USB device number 12 using dummy_hcd [ 238.157969][T10060] usb 12-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 238.162044][T10060] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 238.169495][T10060] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.169534][T10060] usb 12-1: Product: syz [ 238.169563][T10060] usb 12-1: Manufacturer: syz [ 238.169635][T10060] usb 12-1: SerialNumber: syz [ 238.234441][ T57] usb 13-1: new low-speed USB device number 12 using dummy_hcd [ 238.394810][ T57] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 238.400507][ T57] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 238.400546][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.400572][ T57] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.400657][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.400678][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.402243][ T57] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 238.402282][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.402304][ T57] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.402325][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.402346][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.404762][ T57] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 238.404877][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.404903][ T57] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.405020][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.405046][ T57] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.413524][ T57] usb 13-1: string descriptor 0 read error: -22 [ 238.417240][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.455380][ T57] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 238.616512][T10060] usb 12-1: Can't get UAC3 power state for id 10 [ 238.619081][T10060] usb 12-1: 2:0: failed to get current value for ch 0 (-71) [ 238.624640][T10060] usb 12-1: 2:0: cannot get min/max values for control 2 (id 2) [ 238.624791][T10060] usb 12-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 238.624807][T10060] usb 12-1: [2] FU [Headphone Playback Volume] ch = 2, val = 0/1/1 [ 238.691807][T10060] usb 12-1: 2:0: cannot get min/max values for control 2 (id 2) [ 238.729452][ T5743] usb 13-1: USB disconnect, device number 12 [ 238.759892][T10060] usb 12-1: USB disconnect, device number 12 [ 238.855075][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 238.861359][T10937] kvm [10936]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 238.862248][T10937] kvm [10936]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 239.190595][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1609'. [ 239.204671][T10942] FAULT_INJECTION: forcing a failure. [ 239.204671][T10942] name failslab, interval 1, probability 0, space 0, times 0 [ 239.204809][T10942] CPU: 3 UID: 0 PID: 10942 Comm: syz.7.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.204851][T10942] Tainted: [L]=SOFTLOCKUP [ 239.204860][T10942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.204873][T10942] Call Trace: [ 239.204881][T10942] [ 239.204890][T10942] dump_stack_lvl+0x100/0x190 [ 239.204950][T10942] should_fail_ex.cold+0x5/0xa [ 239.204981][T10942] should_failslab+0xc2/0x120 [ 239.205009][T10942] __kmalloc_noprof+0xfc/0x840 [ 239.205030][T10942] ? trace_kmem_cache_alloc+0xdd/0x100 [ 239.205061][T10942] ? tnode_new+0x2f7/0x350 [ 239.205094][T10942] tnode_new+0x2f7/0x350 [ 239.205123][T10942] fib_insert_alias+0x6e7/0xe30 [ 239.205141][T10942] ? lockdep_rtnl_is_held+0x26/0x40 [ 239.205173][T10942] fib_trie_unmerge+0x289/0xbd0 [ 239.205199][T10942] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 239.205223][T10942] ? lock_acquire+0x1d1/0x380 [ 239.205248][T10942] fib_unmerge+0xee/0x510 [ 239.205269][T10942] ? fib_nl2rule_locked+0x3ef/0x740 [ 239.205298][T10942] fib4_rule_configure+0xaba/0x1160 [ 239.205326][T10942] ? fib_nl2rule_locked+0x3fe/0x740 [ 239.205354][T10942] fib_newrule+0x3c3/0x1e50 [ 239.205383][T10942] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 239.205413][T10942] ? __pfx_fib_newrule+0x10/0x10 [ 239.205439][T10942] ? avc_has_perm_noaudit+0xb0/0x3b0 [ 239.205482][T10942] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 239.205503][T10942] ? find_held_lock+0x2b/0x80 [ 239.205527][T10942] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 239.205548][T10942] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 239.205572][T10942] ? __pfx_fib_nl_newrule+0x10/0x10 [ 239.205599][T10942] rtnetlink_rcv_msg+0x95e/0xe90 [ 239.205624][T10942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.205655][T10942] ? ref_tracker_free+0x37e/0x6c0 [ 239.205682][T10942] netlink_rcv_skb+0x159/0x420 [ 239.205702][T10942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.205726][T10942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.205754][T10942] ? netlink_deliver_tap+0x1ae/0xcc0 [ 239.205785][T10942] netlink_unicast+0x585/0x850 [ 239.205807][T10942] ? __pfx_netlink_unicast+0x10/0x10 [ 239.205833][T10942] netlink_sendmsg+0x8b0/0xda0 [ 239.205856][T10942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.205877][T10942] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.205909][T10942] ____sys_sendmsg+0xa4d/0xbe0 [ 239.205933][T10942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.205955][T10942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.205990][T10942] ___sys_sendmsg+0x190/0x1e0 [ 239.206015][T10942] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.206041][T10942] ? futex_wait+0x11e/0x370 [ 239.206092][T10942] ? find_held_lock+0x2b/0x80 [ 239.206138][T10942] __sys_sendmsg+0x160/0x210 [ 239.206161][T10942] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.206199][T10942] do_syscall_64+0x123/0x790 [ 239.206226][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.206246][T10942] RIP: 0033:0x7f463059e159 [ 239.206264][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.206282][T10942] RSP: 002b:00007f4631429028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.206302][T10942] RAX: ffffffffffffffda RBX: 00007f4630825fa0 RCX: 00007f463059e159 [ 239.206315][T10942] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000004 [ 239.206327][T10942] RBP: 00007f4630635024 R08: 0000000000000000 R09: 0000000000000000 [ 239.206336][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.206346][T10942] R13: 00007f4630826038 R14: 00007f4630825fa0 R15: 00007ffd4848e308 [ 239.206371][T10942] [ 239.348967][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1612'. [ 239.348989][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1612'. [ 239.643844][ T6404] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 239.723863][ T57] usb 12-1: new full-speed USB device number 13 using dummy_hcd [ 239.805096][ T6404] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.810607][ T6404] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 239.818512][ T6404] usb 14-1: config 0 interface 0 has no altsetting 0 [ 239.827440][ T6404] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.832622][ T6404] usb 14-1: Product: syz [ 239.835820][ T6404] usb 14-1: Manufacturer: syz [ 239.838069][ T6404] usb 14-1: SerialNumber: syz [ 239.854519][ T6404] usb 14-1: config 0 descriptor?? [ 239.866193][ T6404] usb 14-1: selecting invalid altsetting 0 [ 239.889308][ T57] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.892376][ T57] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.892405][ T57] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.892423][ T57] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.892521][ T57] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.897572][ T57] usb 12-1: config 0 descriptor?? [ 240.065131][ T5880] usb 14-1: USB disconnect, device number 7 [ 240.326395][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326534][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326596][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326683][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326721][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326759][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326846][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326883][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.326921][ T57] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 240.337563][ T57] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 240.582439][ T5880] usb 12-1: USB disconnect, device number 13 [ 240.782218][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.791574][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.792564][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.793347][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.794237][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.035671][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1618'. [ 241.153574][ T5111] usb 5-1: USB disconnect, device number 5 [ 241.567802][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.570831][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.575547][T10959] bridge_slave_0: entered allmulticast mode [ 241.579650][T10959] bridge_slave_0: entered promiscuous mode [ 241.587311][T10959] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.587390][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.587510][T10959] bridge_slave_1: entered allmulticast mode [ 241.588854][T10959] bridge_slave_1: entered promiscuous mode [ 241.646745][T10959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.649966][T10959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.689408][T10959] team0: Port device team_slave_0 added [ 241.691642][T10959] team0: Port device team_slave_1 added [ 241.730231][T10959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.730277][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.730323][T10959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.732106][T10959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.732120][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.732142][T10959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.772432][T10959] hsr_slave_0: entered promiscuous mode [ 241.776871][T10959] hsr_slave_1: entered promiscuous mode [ 241.780552][T10959] debugfs: 'hsr0' already exists in 'hsr' [ 241.780779][T10959] Cannot create hsr debugfs directory [ 242.009011][ T44] audit: type=1400 audit(1788757561.126:836): avc: denied { write } for pid=10990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.077278][ T44] audit: type=1400 audit(1788757561.196:837): avc: denied { write } for pid=10993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.199997][ T44] audit: type=1400 audit(1788757561.316:838): avc: denied { write } for pid=10996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.303008][ T44] audit: type=1400 audit(1788757561.416:839): avc: denied { write } for pid=10999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.434486][T10986] syz.7.1623 (10986): drop_caches: 2 [ 242.495375][ T44] audit: type=1400 audit(1788757561.616:840): avc: denied { write } for pid=11001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.591505][ T44] audit: type=1400 audit(1788757561.706:841): avc: denied { write } for pid=11009 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.750281][ T44] audit: type=1400 audit(1788757561.866:842): avc: denied { write } for pid=11012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.774953][T10060] usb 12-1: new full-speed USB device number 14 using dummy_hcd [ 242.814188][ T6389] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 242.861423][ T44] audit: type=1400 audit(1788757561.976:843): avc: denied { write } for pid=11017 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.863899][ T67] Bluetooth: hci0: command tx timeout [ 242.907933][T10959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.923097][T10959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.924672][T10060] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.925767][T10959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.925886][T10060] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 242.925905][T10060] usb 12-1: config 0 interface 0 has no altsetting 0 [ 242.927774][T10060] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.927795][T10060] usb 12-1: Product: syz [ 242.927809][T10060] usb 12-1: Manufacturer: syz [ 242.927821][T10060] usb 12-1: SerialNumber: syz [ 242.932226][T10060] usb 12-1: config 0 descriptor?? [ 242.935700][T10959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.938914][T10060] usb 12-1: selecting invalid altsetting 0 [ 242.940830][T10959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.974638][ T6389] usb 14-1: Using ep0 maxpacket: 32 [ 242.975418][ T6389] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.976545][ T6389] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 242.976566][ T6389] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 242.976582][ T6389] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.976616][ T6389] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.976634][ T6389] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.976654][ T6389] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.976686][ T6389] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.978904][ T6389] usb 14-1: config 0 descriptor?? [ 242.980191][T10959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.980781][T10959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.998925][T10959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.071247][ T44] audit: type=1400 audit(1788757562.186:844): avc: denied { write } for pid=11023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.144734][ T43] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 243.163537][ T44] audit: type=1400 audit(1788757562.286:845): avc: denied { write } for pid=11030 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.179691][T10959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.214712][T10060] usb 12-1: USB disconnect, device number 14 [ 243.252550][T10959] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.280576][ T6389] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 243.286576][ T6389] usb 14-1: USB disconnect, device number 8 [ 243.293649][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.293891][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.314656][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.314802][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.349636][ T43] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.354841][ T43] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.354873][ T43] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.354893][ T43] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.354928][ T43] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.358424][ T43] usb 13-1: config 0 descriptor?? [ 243.383955][ T6389] usblp0: removed [ 243.776204][ T43] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 243.779290][T10959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.787917][ T43] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 243.830100][T10959] veth0_vlan: entered promiscuous mode [ 243.833872][ T6389] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 243.841338][T10959] veth1_vlan: entered promiscuous mode [ 243.866955][T10959] veth0_macvtap: entered promiscuous mode [ 243.872103][T10959] veth1_macvtap: entered promiscuous mode [ 243.882879][T10959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.884762][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1629'. [ 243.908530][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1629'. [ 243.911515][T10959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.966523][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.966671][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.966730][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.966776][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.994767][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.996446][ T6389] usb 14-1: Using ep0 maxpacket: 32 [ 243.996688][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.997228][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.997291][ T6389] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.997530][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.998630][ T6389] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.998667][ T6389] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.998721][ T6389] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.998788][ T6389] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.998823][ T6389] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.998860][ T6389] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.998911][ T6389] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.001658][ T6389] usb 14-1: config 0 descriptor?? [ 244.062555][T10060] usb 13-1: USB disconnect, device number 13 [ 244.100346][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.100553][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.152378][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.152524][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.212324][ T6389] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.243883][ T43] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 244.395885][ T43] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.398868][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 244.399535][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 244.405102][ T43] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.405125][ T43] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.405138][ T43] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.405169][ T43] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.407108][ T43] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.407127][ T43] usb 12-1: Product: syz [ 244.407137][ T43] usb 12-1: Manufacturer: syz [ 244.433314][ T43] cdc_wdm 12-1:1.0: skipping garbage [ 244.433331][ T43] cdc_wdm 12-1:1.0: skipping garbage [ 244.435038][ T43] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 244.435055][ T43] cdc_wdm 12-1:1.0: Unknown control protocol [ 244.564677][T11072] usblp0:failed reading printer status (-32) [ 244.567657][ T43] usb 14-1: USB disconnect, device number 9 [ 244.569803][ T43] usblp0: removed [ 244.639838][ T6389] usb 12-1: USB disconnect, device number 15 [ 244.885862][ T6404] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 244.946265][ T67] Bluetooth: hci0: command tx timeout [ 245.043867][ T6404] usb 13-1: Using ep0 maxpacket: 32 [ 245.051639][ T6404] usb 13-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 245.061940][ T6404] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 245.062008][ T6404] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.062063][ T6404] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.062111][ T6404] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.065200][ T6404] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.065244][ T6404] usb 13-1: Product: syz [ 245.065283][ T6404] usb 13-1: Manufacturer: syz [ 245.065315][ T6404] usb 13-1: SerialNumber: syz [ 245.072451][ T6404] usb 13-1: config 0 descriptor?? [ 245.075675][T11077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 245.081814][ T6404] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input22 [ 245.087859][ T6389] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 245.155989][ C3] xpad 13-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 245.215957][ T5790] nci: nci_rsp_packet: unknown rsp opcode 0x29 [ 245.238997][ T6389] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.254347][ T6389] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.254417][ T6389] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.254456][ T6389] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.254490][ T6389] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.256422][ T6389] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.256445][ T6389] usb 12-1: Product: syz [ 245.256459][ T6389] usb 12-1: Manufacturer: syz [ 245.261292][ T6389] cdc_wdm 12-1:1.0: skipping garbage [ 245.261306][ T6389] cdc_wdm 12-1:1.0: skipping garbage [ 245.265879][ T6389] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 245.265896][ T6389] cdc_wdm 12-1:1.0: Unknown control protocol [ 245.317663][ T1482] usb 13-1: USB disconnect, device number 14 [ 245.317690][ C3] xpad 13-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 245.797195][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1639'. [ 245.797293][T11117] FAULT_INJECTION: forcing a failure. [ 245.797293][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 245.797321][T11117] CPU: 2 UID: 0 PID: 11117 Comm: syz.9.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.797347][T11117] Tainted: [L]=SOFTLOCKUP [ 245.797355][T11117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.797367][T11117] Call Trace: [ 245.797381][T11117] [ 245.797389][T11117] dump_stack_lvl+0x100/0x190 [ 245.797434][T11117] should_fail_ex.cold+0x5/0xa [ 245.797463][T11117] should_failslab+0xc2/0x120 [ 245.797493][T11117] __kmalloc_noprof+0xfc/0x840 [ 245.797538][T11117] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 245.797560][T11117] ? nla_strdup+0x91/0x150 [ 245.797587][T11117] ? nft_trans_alloc+0x1d/0x2d0 [ 245.797629][T11117] nft_trans_alloc+0x1d/0x2d0 [ 245.797660][T11117] nf_tables_addchain.constprop.0+0xafa/0x1ca0 [ 245.797698][T11117] ? nft_chain_lookup+0x59c/0xa60 [ 245.797724][T11117] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 245.797756][T11117] ? __pfx_nft_chain_lookup+0x10/0x10 [ 245.797778][T11117] ? __lock_acquire+0x5c0/0x1f40 [ 245.797822][T11117] ? nla_strcmp+0xff/0x130 [ 245.797850][T11117] ? nft_table_lookup.part.0+0x1e3/0x230 [ 245.797873][T11117] nf_tables_newchain+0x17c3/0x2d30 [ 245.797906][T11117] ? __pfx____ratelimit+0x10/0x10 [ 245.797936][T11117] ? rcu_is_watching+0x13/0xc0 [ 245.797963][T11117] ? __nla_validate_parse+0x1e7/0x28b0 [ 245.797994][T11117] ? __pfx_nf_tables_newchain+0x10/0x10 [ 245.798025][T11117] ? __pfx___nla_validate_parse+0x10/0x10 [ 245.798053][T11117] ? lock_acquire+0x1d1/0x380 [ 245.798073][T11117] ? net_generic+0x25/0x2a0 [ 245.798102][T11117] ? __nla_parse+0x40/0x60 [ 245.798131][T11117] nfnetlink_rcv_batch+0x1410/0x2880 [ 245.798170][T11117] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 245.798199][T11117] ? lock_acquire+0x1d1/0x380 [ 245.798218][T11117] ? avc_has_perm_noaudit+0x56/0x3b0 [ 245.798254][T11117] ? avc_has_perm_noaudit+0x145/0x3b0 [ 245.798303][T11117] ? __nla_parse+0x40/0x60 [ 245.798332][T11117] nfnetlink_rcv+0x3bd/0x440 [ 245.798355][T11117] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.798386][T11117] netlink_unicast+0x585/0x850 [ 245.798408][T11117] ? __pfx_netlink_unicast+0x10/0x10 [ 245.798434][T11117] netlink_sendmsg+0x8b0/0xda0 [ 245.798457][T11117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.798478][T11117] ? selinux_socket_sendmsg+0x198/0x2f0 [ 245.798512][T11117] ____sys_sendmsg+0xa4d/0xbe0 [ 245.798541][T11117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.798562][T11117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.798599][T11117] ___sys_sendmsg+0x190/0x1e0 [ 245.798627][T11117] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.798653][T11117] ? futex_wait+0x11e/0x370 [ 245.798690][T11117] ? find_held_lock+0x2b/0x80 [ 245.798734][T11117] __sys_sendmsg+0x160/0x210 [ 245.798756][T11117] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.798791][T11117] do_syscall_64+0x123/0x790 [ 245.798817][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.798837][T11117] RIP: 0033:0x7f32d859e159 [ 245.798854][T11117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.798872][T11117] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.798899][T11117] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 245.798913][T11117] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 245.798924][T11117] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 245.798936][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.798947][T11117] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 245.798975][T11117] [ 246.575432][ T6923] usb 12-1: USB disconnect, device number 16 [ 247.024464][ T67] Bluetooth: hci0: command tx timeout [ 248.067475][T11096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.201659][T11130] FAULT_INJECTION: forcing a failure. [ 248.201659][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 248.201705][T11130] CPU: 2 UID: 0 PID: 11130 Comm: syz.9.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.201734][T11130] Tainted: [L]=SOFTLOCKUP [ 248.201740][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.201747][T11130] Call Trace: [ 248.201752][T11130] [ 248.201757][T11130] dump_stack_lvl+0x100/0x190 [ 248.201777][T11130] should_fail_ex.cold+0x5/0xa [ 248.201800][T11130] should_failslab+0xc2/0x120 [ 248.201820][T11130] __kmalloc_noprof+0xfc/0x840 [ 248.201837][T11130] ? rcu_is_watching+0x13/0xc0 [ 248.201859][T11130] ? tomoyo_encode2+0xfb/0x3c0 [ 248.201883][T11130] tomoyo_encode2+0xfb/0x3c0 [ 248.201904][T11130] tomoyo_encode+0x29/0x50 [ 248.201921][T11130] tomoyo_realpath_from_path+0x18c/0x690 [ 248.201945][T11130] tomoyo_path_number_perm+0x23c/0x580 [ 248.201970][T11130] ? tomoyo_path_number_perm+0x22e/0x580 [ 248.201996][T11130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.202023][T11130] ? __pfx_futex_wait+0x10/0x10 [ 248.202055][T11130] ? __lock_acquire+0x5c0/0x1f40 [ 248.202083][T11130] ? __fget_files+0x34/0x3d0 [ 248.202103][T11130] ? find_held_lock+0x2b/0x80 [ 248.202125][T11130] ? hook_file_ioctl_common+0x140/0x440 [ 248.202151][T11130] ? __fget_files+0x21f/0x3d0 [ 248.202175][T11130] security_file_ioctl+0xd3/0x230 [ 248.202193][T11130] __x64_sys_ioctl+0xb7/0x210 [ 248.202212][T11130] do_syscall_64+0x123/0x790 [ 248.202235][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.202253][T11130] RIP: 0033:0x7f32d859e159 [ 248.202268][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.202285][T11130] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.202303][T11130] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 248.202315][T11130] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000003 [ 248.202325][T11130] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 248.202336][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.202346][T11130] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 248.202369][T11130] [ 248.202410][T11130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.406932][T11141] FAULT_INJECTION: forcing a failure. [ 248.406932][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 248.425185][T11141] CPU: 3 UID: 0 PID: 11141 Comm: syz.9.1649 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.425234][T11141] Tainted: [L]=SOFTLOCKUP [ 248.425243][T11141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.425255][T11141] Call Trace: [ 248.425262][T11141] [ 248.425270][T11141] dump_stack_lvl+0x100/0x190 [ 248.425305][T11141] should_fail_ex.cold+0x5/0xa [ 248.425334][T11141] should_failslab+0xc2/0x120 [ 248.425359][T11141] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 248.425383][T11141] ? __d_alloc+0x35/0xa50 [ 248.425413][T11141] __d_alloc+0x35/0xa50 [ 248.425437][T11141] ? set_nlink+0xb4/0x190 [ 248.425464][T11141] d_make_root+0x3e/0x90 [ 248.425492][T11141] proc_fill_super+0x57f/0x870 [ 248.425532][T11141] ? __pfx_proc_fill_super+0x10/0x10 [ 248.425560][T11141] get_tree_nodev+0xdd/0x190 [ 248.425583][T11141] vfs_get_tree+0x92/0x320 [ 248.425611][T11141] vfs_cmd_create+0xd7/0x2a0 [ 248.425631][T11141] __do_sys_fsconfig+0x55a/0xcb0 [ 248.425652][T11141] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 248.425685][T11141] do_syscall_64+0x123/0x790 [ 248.425713][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.425734][T11141] RIP: 0033:0x7f32d859e159 [ 248.425752][T11141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.425770][T11141] RSP: 002b:00007f32d93c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 248.425789][T11141] RAX: ffffffffffffffda RBX: 00007f32d8825fa0 RCX: 00007f32d859e159 [ 248.425802][T11141] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 248.425815][T11141] RBP: 00007f32d8635024 R08: 0000000000000000 R09: 0000000000000000 [ 248.425828][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.425840][T11141] R13: 00007f32d8826038 R14: 00007f32d8825fa0 R15: 00007ffe89a04b38 [ 248.425867][T11141] [ 248.426007][T11141] proc_fill_super: allocate dentry failed [ 248.447774][ T6404] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 248.516073][ T6082] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 248.609592][ T6404] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.615013][ T6404] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 248.615040][ T6404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.617989][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.618012][ T6404] usb 5-1: Product: syz [ 248.618023][ T6404] usb 5-1: Manufacturer: syz [ 248.618035][ T6404] usb 5-1: SerialNumber: syz [ 248.621629][ T6404] usb 5-1: config 0 descriptor?? [ 248.630172][ T6404] usb 5-1: selecting invalid altsetting 0 [ 248.640556][T11149] tipc: Started in network mode [ 248.640582][T11149] tipc: Node identity e2b6dce34f77, cluster identity 4711 [ 248.640691][T11149] tipc: Enabled bearer , priority 1 [ 248.664022][T11148] tipc: Resetting bearer [ 248.667300][ T6082] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 248.671930][ T6082] usb 13-1: config 0 has no interfaces? [ 248.676573][ T6082] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.679741][ T6082] usb 13-1: Product: syz [ 248.679760][ T6082] usb 13-1: Manufacturer: syz [ 248.679773][ T6082] usb 13-1: SerialNumber: syz [ 248.692668][ T6082] usb 13-1: config 0 descriptor?? [ 248.692795][T11148] tipc: Disabling bearer [ 248.838794][ C3] ================================================================== [ 248.838824][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.838859][ C3] Read of size 1 at addr ffff8880354d38e8 by task syz.0.1643/11134 [ 248.838876][ C3] [ 248.838889][ C3] CPU: 3 UID: 0 PID: 11134 Comm: syz.0.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.838918][ C3] Tainted: [L]=SOFTLOCKUP [ 248.838926][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.838939][ C3] Call Trace: [ 248.838946][ C3] [ 248.838956][ C3] dump_stack_lvl+0x100/0x190 [ 248.838986][ C3] print_report+0x13d/0x4b0 [ 248.839022][ C3] ? __virt_addr_valid+0x239/0x430 [ 248.839045][ C3] ? find_endpoint+0x2a3/0x2c0 [ 248.839069][ C3] kasan_report+0xdf/0x1c0 [ 248.839095][ C3] ? find_endpoint+0x2a3/0x2c0 [ 248.839125][ C3] find_endpoint+0x2a3/0x2c0 [ 248.839152][ C3] dummy_timer+0x500/0x3700 [ 248.839189][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 248.839211][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 248.839238][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 248.839267][ C3] ? rcu_is_watching+0x13/0xc0 [ 248.839292][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.839316][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 248.839345][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 248.839374][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 248.839400][ C3] handle_softirqs+0x1e6/0x9d0 [ 248.839422][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 248.839440][ C3] ? _raw_spin_unlock+0x28/0x50 [ 248.839456][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 248.839482][ C3] __irq_exit_rcu+0x16a/0x210 [ 248.839502][ C3] irq_exit_rcu+0x9/0x30 [ 248.839520][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 248.839542][ C3] [ 248.839549][ C3] [ 248.839555][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.839574][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 248.839591][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 1e 14 f6 48 89 df e8 02 75 14 f6 e8 1d 39 41 f6 fb bf 01 00 00 00 92 6a 03 f6 65 48 83 3d 81 05 b9 08 00 74 06 5b c3 cc cc cc cc [ 248.839606][ C3] RSP: 0018:ffffc900036bf8e8 EFLAGS: 00000206 [ 248.839621][ C3] RAX: 00000000000006e1 RBX: ffff8880561600f8 RCX: 0000000000000000 [ 248.839632][ C3] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: 0000000000000001 [ 248.839643][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 248.839655][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d3ba580 [ 248.839669][ C3] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88805673e000 [ 248.839691][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.839711][ C3] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 248.839738][ C3] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 248.839767][ C3] ? __pfx_default_write_copy+0x10/0x10 [ 248.839793][ C3] ? __pfx_interleaved_copy+0x10/0x10 [ 248.839814][ C3] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 248.839840][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.839867][ C3] ? mark_held_locks+0x40/0x70 [ 248.839890][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.839912][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 248.839937][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 248.839961][ C3] snd_pcm_oss_write3+0x8f/0x180 [ 248.839989][ C3] io_playback_transfer+0x26e/0x2f0 [ 248.840025][ C3] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 248.840074][ C3] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 248.840105][ C3] ? snd_pcm_format_physical_width+0x76/0xa0 [ 248.840133][ C3] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 248.840165][ C3] snd_pcm_oss_write2+0x24a/0x400 [ 248.840191][ C3] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 248.840216][ C3] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 248.840247][ C3] ? snd_pcm_oss_prepare+0x11e/0x240 [ 248.840273][ C3] snd_pcm_oss_write+0x729/0xa30 [ 248.840301][ C3] ? security_file_permission+0x76/0x210 [ 248.840327][ C3] vfs_write+0x2aa/0x1050 [ 248.840349][ C3] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 248.840374][ C3] ? lock_acquire+0x1d1/0x380 [ 248.840394][ C3] ? __fget_files+0x34/0x3d0 [ 248.840418][ C3] ? __pfx_vfs_write+0x10/0x10 [ 248.840437][ C3] ? find_held_lock+0x2b/0x80 [ 248.840462][ C3] ? __fget_files+0x215/0x3d0 [ 248.840485][ C3] ? __fget_files+0x215/0x3d0 [ 248.840509][ C3] ? __fget_files+0x21f/0x3d0 [ 248.840535][ C3] ksys_write+0x12a/0x250 [ 248.840555][ C3] ? __pfx_ksys_write+0x10/0x10 [ 248.840578][ C3] do_syscall_64+0x123/0x790 [ 248.840604][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.840625][ C3] RIP: 0033:0x7fb7ddb9e159 [ 248.840642][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.840662][ C3] RSP: 002b:00007fb7deb0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.840682][ C3] RAX: ffffffffffffffda RBX: 00007fb7dde25fa0 RCX: 00007fb7ddb9e159 [ 248.840696][ C3] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000007 [ 248.840709][ C3] RBP: 00007fb7ddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 248.840722][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.840735][ C3] R13: 00007fb7dde26038 R14: 00007fb7dde25fa0 R15: 00007ffcf1758778 [ 248.840756][ C3] [ 248.840764][ C3] [ 248.840770][ C3] Allocated by task 6404: [ 248.840780][ C3] kasan_save_stack+0x30/0x50 [ 248.840801][ C3] kasan_save_track+0x14/0x30 [ 248.840821][ C3] __kasan_kmalloc+0xaa/0xb0 [ 248.840839][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 248.840866][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 248.840909][ C3] snd_mixer_oss_build_test_all+0x54c/0x6e0 [ 248.840929][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 248.840948][ C3] snd_mixer_oss_notify_handler+0x48d/0x990 [ 248.840971][ C3] snd_card_register+0x2af/0x760 [ 248.840999][ C3] try_to_register_card+0x1d6/0x390 [ 248.841020][ C3] usb_audio_probe+0x9f4/0x3b10 [ 248.841039][ C3] usb_probe_interface+0x386/0x9b0 [ 248.841065][ C3] really_probe+0x241/0xa60 [ 248.841083][ C3] __driver_probe_device+0x210/0x460 [ 248.841102][ C3] driver_probe_device+0x4a/0x140 [ 248.841120][ C3] __device_attach_driver+0x1df/0x320 [ 248.841137][ C3] bus_for_each_drv+0x159/0x1e0 [ 248.841161][ C3] __device_attach+0x1e4/0x4d0 [ 248.841179][ C3] device_initial_probe+0xaf/0xd0 [ 248.841198][ C3] bus_probe_device+0x64/0x160 [ 248.841224][ C3] device_add+0x121d/0x1970 [ 248.841244][ C3] usb_set_configuration+0xd97/0x1c60 [ 248.841266][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 248.841284][ C3] usb_probe_device+0xef/0x400 [ 248.841307][ C3] really_probe+0x241/0xa60 [ 248.841325][ C3] __driver_probe_device+0x210/0x460 [ 248.841343][ C3] driver_probe_device+0x4a/0x140 [ 248.841362][ C3] __device_attach_driver+0x1df/0x320 [ 248.841381][ C3] bus_for_each_drv+0x159/0x1e0 [ 248.841406][ C3] __device_attach+0x1e4/0x4d0 [ 248.841423][ C3] device_initial_probe+0xaf/0xd0 [ 248.841443][ C3] bus_probe_device+0x64/0x160 [ 248.841470][ C3] device_add+0x121d/0x1970 [ 248.841491][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 248.841517][ C3] hub_event.cold+0x1e3/0xe90 [ 248.841542][ C3] process_one_work+0xac7/0x1b10 [ 248.841569][ C3] worker_thread+0x5ef/0xe50 [ 248.841595][ C3] kthread+0x373/0x450 [ 248.841619][ C3] ret_from_fork+0x730/0xd60 [ 248.841638][ C3] ret_from_fork_asm+0x1a/0x30 [ 248.841659][ C3] [ 248.841664][ C3] Freed by task 6404: [ 248.841673][ C3] kasan_save_stack+0x30/0x50 [ 248.841693][ C3] kasan_save_track+0x14/0x30 [ 248.841713][ C3] kasan_save_free_info+0x3b/0x70 [ 248.841739][ C3] __kasan_slab_free+0x5f/0x80 [ 248.841760][ C3] kfree+0x22b/0x6d0 [ 248.841783][ C3] snd_mixer_oss_build_test+0x118/0x380 [ 248.841804][ C3] snd_mixer_oss_build_test_all+0x54c/0x6e0 [ 248.841823][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 248.841843][ C3] snd_mixer_oss_notify_handler+0x48d/0x990 [ 248.841865][ C3] snd_card_register+0x2af/0x760 [ 248.841888][ C3] try_to_register_card+0x1d6/0x390 [ 248.841908][ C3] usb_audio_probe+0x9f4/0x3b10 [ 248.841928][ C3] usb_probe_interface+0x386/0x9b0 [ 248.841953][ C3] really_probe+0x241/0xa60 [ 248.841970][ C3] __driver_probe_device+0x210/0x460 [ 248.841990][ C3] driver_probe_device+0x4a/0x140 [ 248.842014][ C3] __device_attach_driver+0x1df/0x320 [ 248.842034][ C3] bus_for_each_drv+0x159/0x1e0 [ 248.842059][ C3] __device_attach+0x1e4/0x4d0 [ 248.842078][ C3] device_initial_probe+0xaf/0xd0 [ 248.842098][ C3] bus_probe_device+0x64/0x160 [ 248.842125][ C3] device_add+0x121d/0x1970 [ 248.842147][ C3] usb_set_configuration+0xd97/0x1c60 [ 248.842170][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 248.842188][ C3] usb_probe_device+0xef/0x400 [ 248.842210][ C3] really_probe+0x241/0xa60 [ 248.842228][ C3] __driver_probe_device+0x210/0x460 [ 248.842247][ C3] driver_probe_device+0x4a/0x140 [ 248.842266][ C3] __device_attach_driver+0x1df/0x320 [ 248.842285][ C3] bus_for_each_drv+0x159/0x1e0 [ 248.842309][ C3] __device_attach+0x1e4/0x4d0 [ 248.842327][ C3] device_initial_probe+0xaf/0xd0 [ 248.842348][ C3] bus_probe_device+0x64/0x160 [ 248.842374][ C3] device_add+0x121d/0x1970 [ 248.842396][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 248.842422][ C3] hub_event.cold+0x1e3/0xe90 [ 248.842448][ C3] process_one_work+0xac7/0x1b10 [ 248.842475][ C3] worker_thread+0x5ef/0xe50 [ 248.842502][ C3] kthread+0x373/0x450 [ 248.842527][ C3] ret_from_fork+0x730/0xd60 [ 248.842547][ C3] ret_from_fork_asm+0x1a/0x30 [ 248.842566][ C3] [ 248.842571][ C3] The buggy address belongs to the object at ffff8880354d3800 [ 248.842571][ C3] which belongs to the cache kmalloc-512 of size 512 [ 248.842587][ C3] The buggy address is located 232 bytes inside of [ 248.842587][ C3] freed 512-byte region [ffff8880354d3800, ffff8880354d3a00) [ 248.842607][ C3] [ 248.842613][ C3] The buggy address belongs to the physical page: [ 248.842622][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x354d0 [ 248.842641][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.842657][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.842676][ C3] page_type: f5(slab) [ 248.842694][ C3] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 248.842714][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 248.842732][ C3] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 248.842751][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 248.842769][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 248.842787][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 248.842798][ C3] page dumped because: kasan: bad access detected [ 248.842808][ C3] page_owner tracks the page as allocated [ 248.842816][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16971558641 [ 248.842849][ C3] post_alloc_hook+0xfd/0x120 [ 248.842876][ C3] get_page_from_freelist+0x110d/0x35d0 [ 248.842903][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 248.842932][ C3] new_slab+0xa9/0x6e0 [ 248.842958][ C3] refill_objects+0xe3/0x410 [ 248.842985][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 248.843017][ C3] __kmalloc_flags_noprof+0x6a9/0x8e0 [ 248.843044][ C3] __pcs_replace_empty_main+0x3fa/0x650 [ 248.843071][ C3] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 248.843091][ C3] jbd2_journal_init_revoke_table+0x27/0x220 [ 248.843117][ C3] jbd2_journal_init_revoke+0x7a/0x200 [ 248.843141][ C3] journal_init_common+0xf3d/0x1760 [ 248.843169][ C3] jbd2_journal_init_inode+0x1aa/0x390 [ 248.843198][ C3] ext4_load_and_init_journal+0x225/0x29f0 [ 248.843225][ C3] ext4_fill_super+0x9e76/0xb270 [ 248.843252][ C3] get_tree_bdev_flags+0x38c/0x620 [ 248.843271][ C3] page last free pid 1030 tgid 1030 ts 15445462335 stack trace: [ 248.843284][ C3] free_pages_prepare+0x586/0xe00 [ 248.843310][ C3] __free_contig_range_common+0x14f/0x250 [ 248.843335][ C3] free_pages_bulk+0x12a/0x200 [ 248.843351][ C3] vm_area_free_pages+0xb2/0x2a0 [ 248.843370][ C3] vfree+0xf7/0x6d0 [ 248.843391][ C3] delayed_vfree_work+0x56/0x80 [ 248.843414][ C3] process_one_work+0xac7/0x1b10 [ 248.843441][ C3] worker_thread+0x5ef/0xe50 [ 248.843467][ C3] kthread+0x373/0x450 [ 248.843491][ C3] ret_from_fork+0x730/0xd60 [ 248.843511][ C3] ret_from_fork_asm+0x1a/0x30 [ 248.843530][ C3] [ 248.843536][ C3] Memory state around the buggy address: [ 248.843546][ C3] ffff8880354d3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.843560][ C3] ffff8880354d3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.843574][ C3] >ffff8880354d3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.843585][ C3] ^ [ 248.843597][ C3] ffff8880354d3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.843610][ C3] ffff8880354d3980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.843622][ C3] ================================================================== [ 248.843633][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.496966][ C3] CPU: 3 UID: 0 PID: 11134 Comm: syz.0.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.502866][ C3] Tainted: [L]=SOFTLOCKUP [ 249.505233][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.511059][ C3] Call Trace: [ 249.512396][ C3] [ 249.513631][ C3] dump_stack_lvl+0x100/0x190 [ 249.515737][ C3] vpanic+0x553/0x970 [ 249.518098][ C3] ? __pfx_vpanic+0x10/0x10 [ 249.520600][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 249.522977][ C3] ? find_endpoint+0x2a3/0x2c0 [ 249.525027][ C3] panic+0xd1/0xe0 [ 249.526593][ C3] ? __pfx_panic+0x10/0x10 [ 249.528440][ C3] ? end_report.part.0+0x23/0x90 [ 249.530301][ C3] ? rcu_is_watching+0x13/0xc0 [ 249.533063][ C3] ? end_report.part.0+0x23/0x90 [ 249.536472][ C3] check_panic_on_warn.cold+0x19/0x34 [ 249.539363][ C3] end_report.part.0+0x3a/0x90 [ 249.542080][ C3] kasan_report.cold+0xe/0x18 [ 249.544451][ C3] ? find_endpoint+0x2a3/0x2c0 [ 249.547328][ C3] find_endpoint+0x2a3/0x2c0 [ 249.549818][ C3] dummy_timer+0x500/0x3700 [ 249.552133][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.554640][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 249.557189][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 249.559334][ C3] ? rcu_is_watching+0x13/0xc0 [ 249.561738][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.564167][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 249.566730][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 249.569717][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 249.573098][ C3] handle_softirqs+0x1e6/0x9d0 [ 249.575759][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 249.578636][ C3] ? _raw_spin_unlock+0x28/0x50 [ 249.581236][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 249.584289][ C3] __irq_exit_rcu+0x16a/0x210 [ 249.586861][ C3] irq_exit_rcu+0x9/0x30 [ 249.589293][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 249.593839][ C3] [ 249.595840][ C3] [ 249.597774][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.601520][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 249.605160][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 1e 14 f6 48 89 df e8 02 75 14 f6 e8 1d 39 41 f6 fb bf 01 00 00 00 92 6a 03 f6 65 48 83 3d 81 05 b9 08 00 74 06 5b c3 cc cc cc cc [ 249.616908][ C3] RSP: 0018:ffffc900036bf8e8 EFLAGS: 00000206 [ 249.619334][ C3] RAX: 00000000000006e1 RBX: ffff8880561600f8 RCX: 0000000000000000 [ 249.622958][ C3] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: 0000000000000001 [ 249.627994][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 249.632134][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d3ba580 [ 249.636412][ C3] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88805673e000 [ 249.639967][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.642233][ C3] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 249.644770][ C3] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 249.647660][ C3] ? __pfx_default_write_copy+0x10/0x10 [ 249.650530][ C3] ? __pfx_interleaved_copy+0x10/0x10 [ 249.652864][ C3] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 249.655293][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.657849][ C3] ? mark_held_locks+0x40/0x70 [ 249.660303][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.662851][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.665063][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.667694][ C3] snd_pcm_oss_write3+0x8f/0x180 [ 249.669890][ C3] io_playback_transfer+0x26e/0x2f0 [ 249.673055][ C3] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 249.676157][ C3] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 249.679467][ C3] ? snd_pcm_format_physical_width+0x76/0xa0 [ 249.682526][ C3] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 249.685426][ C3] snd_pcm_oss_write2+0x24a/0x400 [ 249.687626][ C3] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 249.690074][ C3] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 249.692404][ C3] ? snd_pcm_oss_prepare+0x11e/0x240 [ 249.695305][ C3] snd_pcm_oss_write+0x729/0xa30 [ 249.697797][ C3] ? security_file_permission+0x76/0x210 [ 249.700454][ C3] vfs_write+0x2aa/0x1050 [ 249.702225][ C3] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 249.704282][ C3] ? lock_acquire+0x1d1/0x380 [ 249.706095][ C3] ? __fget_files+0x34/0x3d0 [ 249.707911][ C3] ? __pfx_vfs_write+0x10/0x10 [ 249.710541][ C3] ? find_held_lock+0x2b/0x80 [ 249.713345][ C3] ? __fget_files+0x215/0x3d0 [ 249.716462][ C3] ? __fget_files+0x215/0x3d0 [ 249.719339][ C3] ? __fget_files+0x21f/0x3d0 [ 249.722063][ C3] ksys_write+0x12a/0x250 [ 249.723876][ C3] ? __pfx_ksys_write+0x10/0x10 [ 249.726137][ C3] do_syscall_64+0x123/0x790 [ 249.729031][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.732421][ C3] RIP: 0033:0x7fb7ddb9e159 [ 249.734458][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.744004][ C3] RSP: 002b:00007fb7deb0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.747888][ C3] RAX: ffffffffffffffda RBX: 00007fb7dde25fa0 RCX: 00007fb7ddb9e159 [ 249.752520][ C3] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000007 [ 249.756931][ C3] RBP: 00007fb7ddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 249.761182][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.765466][ C3] R13: 00007fb7dde26038 R14: 00007fb7dde25fa0 R15: 00007ffcf1758778 [ 249.769787][ C3] [ 249.772048][ C3] Kernel Offset: disabled [ 249.773702][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:06:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000002f8 RCX=ffffffff8bcb4814 RDX=0000000000000002 RSI=00000000000002f8 RDI=ffff888055d8cb00 RBP=000000000000003f RSP=ffffc90005ac7668 R8 =0000000000000006 R9 =00000000000002f8 R10=000000000000003f R11=0000000000000000 R12=ffff88803ddccb02 R13=dffffc0000000000 R14=00000000000002f8 R15=0000000000000000 RIP=ffffffff8bcb4c21 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555567994500 ffffffff 00c00000 GS =0000 ffff8880d5b5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f46313556c8 CR3=00000000500cd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4848e7f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4848e7f6 00007ffd4848e7fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4630635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4630635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46306357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4630635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff948fd394 RBP=ffff88802a006cc0 RSP=ffffc900006b0f40 R8 =0000000000000001 R9 =fffff520000d61d6 R10=0000000000000003 R11=0000000000000000 R12=0000000000204000 R13=0000000000000016 R14=ffff88802a006d00 R15=dffffc0000000000 RIP=ffffffff81b7a7d1 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f151bf93300 ffffffff 00c00000 GS =0000 ffff8880d5c5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff8e163562d CR3=00000000354b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=8823da5476ef16c7 7975085c383af006 8823da5476ef16c7 7975085c383af006 8823da5476ef16c7 7975085c383af006 8823da5476ef16c7 7975085c383af006 ZMM18=9d86bff026e780c6 3ad14f8c1acfd336 9d86bff026e780c6 3ad14f8c1acfd336 9d86bff026e780c6 3ad14f8c1acfd336 9d86bff026e780c6 3ad14f8c1acfd336 ZMM19=c713000000000000 0000000000000005 c713000000000000 0000000000000004 c713000000000000 0000000000000003 c713000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001018080808e 0800021000038004 06014fe600040003 8c03409204000388 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301000004080603 8003018004010000 0208060210000100 00040806080104e0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000188031480 8080880800018003 001000020404dc02 8004018004040103 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be04080002a8031f fffffffe080002a0 03028e0800029803 0408000290030c08 ZMM25=3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c 3ad14f8c3ad14f8c ZMM26=26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 26e780c626e780c6 ZMM27=9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 9d86bff09d86bff0 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c6130000c6130000 c6130000c6130000 c6130000c6130000 c6130000c6130000 c6130000c6130000 c6130000c6130000 c6130000c6130000 c6130000c6130000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff8295d847 RCX=ffffc900051e7564 RDX=1ffff92000a3cecb RSI=ffffffff8e3c5c3d RDI=ffffffff8295d847 RBP=ffffc900051e7658 RSP=ffffc900051e75d0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000195c9 R12=ffffffff81f5e040 R13=ffffc900051e76d0 R14=0000000000000000 R15=ffff8880246ca580 RIP=ffffffff81d26c9c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1b5e769880 ffffffff 00c00000 GS =0000 ffff8880d5d5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1b5ddb9d0c CR3=00000000529fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000020101 Opmask02=00000000ffffffff Opmask03=0000000000004104 Opmask04=00000000fefffe00 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86f10fb0 000055bc86f0ae58 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030302d7a79735f 7a79735f7a79732d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86efdbc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86f10fb0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1b5e1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 646431d8e28b8434 646431d8e2948cc4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 646431d8e2948ccc 646431d8e2948ccc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e6463685f796d 6d75642f6d726f66 74616c702f736563 697665642f737973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000312d 3500356273752f30 2e6463685f796d6d 75642f6d726f6674 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86cbeaf0 000055bc86ef2080 000055bc86f07ec0 000055bc86ef2020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86ef7c50 000055bc86efce30 000055bc86ef27b0 000055bc86f06a10 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86cbeaf0 000055bc86ef2080 000055bc86f07ec0 000055bc86ef2020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86ef9150 000055bc86efe5e0 000055bc86efdc40 000055bc86efe660 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bc86f073b0 000055bc86f07330 000055bc86ef6710 000055bc86f00d00 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000551b5e1f1f50 0000000000000500 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000551b5e041230 0000000000000400 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b04265 RDI=ffffffff9bc67ca0 RBP=ffffffff9bc67c60 RSP=ffffc900007083c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=0000000000000038 R14=000000000000000a R15=ffffc900007086e0 RIP=ffffffff85b0428f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb7deb0a6c0 ffffffff 00c00000 GS =0000 ffff8880d5e5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002200 CR3=0000000058c61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1758c66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf1758c66 00007ffcf1758c6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7ddc35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7ddc35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7ddc357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7ddc35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000336f69 6475612f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000104c4a 4756420c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7dddf25f8 00007fb7dddf25c8 00007fb7dddf2600 00007fb7dddf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000