last executing test programs: 8.600069819s ago: executing program 2 (id=1221): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 7.319895003s ago: executing program 2 (id=1224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x4, 0x1, {0x3, 0x1, 0x7, 0x3, 0x80000001}, 0x4}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046f41, &(0x7f0000000440)=0x20000) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0xfffffffc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000580)={r14, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8}, 0x88) 5.957529721s ago: executing program 2 (id=1227): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5.858445394s ago: executing program 3 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x80, 0x8, 0x4, 0x10007e, 0x20000006, 0x54, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x12, 0x0, 0x800080ee, 0xa, 0x1b, 0x1, 0x9, 0x200, 0x3e, 0x3, 0x6, 0xca9, 0x0, 0x6, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f3, 0x8, 0x6, 0xa, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x2, 0x0, 0x2, 0xfffffffd, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x9, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1, 0x29503faf, 0x2, 0xa2, 0x7, 0xa9, 0x85, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0x9, 0x6, 0x93a, 0x9, 0x0, 0x100, 0xb9, 0x1eb, 0x1ff, 0x2, 0x57, 0x4, 0x6a, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0xa362, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0x5, 0x7, 0x1, 0x269d, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x0, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x8001, 0x6}, 0x10) 5.131050284s ago: executing program 1 (id=1230): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) 4.951943255s ago: executing program 0 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff0100000000000000000000000000015922e384c70e3ed7a5109313a135d8564db18f844a7c18bfaac1b4d82ca154e56ed64b53113cbf0bed00086f1b681cec015fbfed6c3f8011c1b3f272c4fa633829196466f33ebfdf6a7612416985046292a8af599fb8ad89ed4724ce06ac52229b0d16bf8615c678540121882cdadd4945b27967fc9f2ffbd5511a9e9ffcd3605fd66021b7d105847076438306b1bc", @ANYRES32=0x0], 0x28}, 0xc000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 4.558197066s ago: executing program 2 (id=1232): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 4.384844489s ago: executing program 3 (id=1233): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) statx(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x4000, 0x7ff, &(0x7f0000000540)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000006c0)=""/94, 0x5e, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x1ec, 0x30, 0x1, 0x400000, 0x0, {}, [{0x1d8, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x15c, 0x15, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x7ff, 0x4, 0x9, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10001, 0x6, 0x1, 0x6, 0x3278f763}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xd9, 0x6, "67040d3c9793b59aec0053d7f6e36b420e85211637cf895968e52fbd60f472b6b85caba967d2e146e782592c53b42c288942c14e284adb6b48cca442f6d4ce0c5b407c2eb9ca320c126dd36c959743749db1823736ede5afacb9e17ba55943ac4240632e9550e19c5d4aa2d44a9387e88dcc5710ca860303c8e5e3c24e5de08e4417b4d757b62dcb374157ec0a97978646984d197586accdc322e000f65bf619dcd5a0c7047c9e610219c103a0ca7ac432d8a8a4a26a4a20a9cd024f8f8aeca4ec60ace8fc5d242380307c95081165952d03b537c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1ec}}, 0x0) accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) epoll_create(0x4) socket(0x28, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 3.823903606s ago: executing program 1 (id=1234): r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r5, 0x530a, &(0x7f00000000c0)={0x10, 0xa2, 0x1, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400000041000701feff0bff00000000017c0000040042801800019c10000400cab1893a20b8d2a93521800a04001c8004000280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r6, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) r7 = socket$inet6(0xa, 0x4, 0xf1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0) 3.723044824s ago: executing program 0 (id=1235): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.480850174s ago: executing program 3 (id=1236): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x4, 0x1, {0x3, 0x1, 0x7, 0x3, 0x80000001}, 0x4}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046f41, &(0x7f0000000440)=0x20000) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0xfffffffc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000580)={r14, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8}, 0x88) 3.079732604s ago: executing program 2 (id=1237): r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x1536, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000d00)={0x0, 0x14, 0x2, 0x8, 0x7, "ff0000000001ffff00"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000d40)={0x7ffffffa, 0xdb3, 0x1, 0x7fff, 0xea, "f8b9697fccbe285905af0f0000009f00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000800000007000000000000001400000000000000290000000b00000000007fff00000000300000000000000029000000"], 0x60}, 0x4000010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000540)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x8014) write(r3, &(0x7f0000000140)='100\n', 0x4) write(r2, &(0x7f0000001b40)="d5", 0xfffffedf) close(0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 3.079420981s ago: executing program 3 (id=1238): r0 = openat$sr(0xffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffc, 0x11, 0xa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000600)="1790f1f7239886a4ea15fba0bcdab75441", 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r2, r2]}}, @cred={{0x18, 0x1, 0x2, {r1}}}, @cred={{0x18, 0x1, 0x2, {r1, 0xee00}}}], 0x44, 0x4000010}, 0x4840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000042000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400), 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') 2.538454927s ago: executing program 1 (id=1239): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x4, 0x1, {0x3, 0x1, 0x7, 0x3, 0x80000001}, 0x4}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046f41, &(0x7f0000000440)=0x20000) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0xfffffffc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000580)={r14, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8}, 0x88) 2.534811943s ago: executing program 0 (id=1240): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x4, 0x1, {0x3, 0x1, 0x7, 0x3, 0x80000001}, 0x4}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046f41, &(0x7f0000000440)=0x20000) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0xfffffffc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000580)={r14, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8}, 0x88) 2.155274447s ago: executing program 2 (id=1241): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) r5 = syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r5, r2, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x1, 0x42}, 0x0, &(0x7f0000011000), &(0x7f0000000000)) 2.152918276s ago: executing program 0 (id=1242): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockname$packet(r0, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x7fff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.152604045s ago: executing program 1 (id=1243): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 2.151811859s ago: executing program 3 (id=1244): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000080)={0x4, 0x1, {0x3, 0x1, 0x7, 0x3, 0x80000001}, 0x4}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r12 = dup(r4) syz_ublk_setup_queues(r12, r11, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40046f41, &(0x7f0000000440)=0x20000) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0xfffffffc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000580)={r14, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0x8}, 0x88) 1.140251515s ago: executing program 0 (id=1245): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.068769116s ago: executing program 1 (id=1246): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r7 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.030737852s ago: executing program 3 (id=1247): capset(&(0x7f0000000940)={0x20071026}, &(0x7f0000000980)={0x200000, 0x200000}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMGET(r1, 0x5415, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000d00)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r2, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40), 0x0, 0x13, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./nfsd\x00', &(0x7f00000005c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='0', 0xff7) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x1b6e, 0x3800}) mkdirat(r4, &(0x7f00000004c0)='./nfsd\x00', 0x1) syz_usb_connect$cdc_ncm(0x5, 0x8d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x9, 0x50, 0x84, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4c51f2e8"}, {0x5, 0x24, 0x0, 0xe0}, {0xd, 0x24, 0xf, 0x1, 0x80, 0xfff7, 0x3, 0xfb}, {0x6, 0x24, 0x1a, 0x9, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x9, 0x9}, @dmm={0x7, 0x24, 0x14, 0xfff, 0x5}, @acm={0x4, 0x24, 0x2, 0x13}, @country_functional={0x8, 0x24, 0x7, 0x9b, 0x1059, [0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x0, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x8, 0xe}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x4, 0xbb, 0x8, 0x8, 0x48}, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "0e9583a253dfd2eeda70dca5d2c9216e"}]}, 0x2, [{0xb1, &(0x7f0000000400)=@string={0xb1, 0x3, "3c418c2f325de27c52ba13f85453b3d892bd9ffadd9c268e6c2b52368d28e8228ee635d75dda49f68422c05bd6d57263e4c6bb91afcdfb88020b11423514c1ac0414d995cfaeb983fffde8aeef671794cc177e3872aa1bbf32fc1b4b257071f1daf8b16f64950e149374b30602d3f306d7a561e852c2608358f9a68166b61a2d0f8e07eb2a5e2b935cfadf9186f91b0ea838f0e6653064ddc026a373e83fe70f714259e838c34cd4500eb11ade9296"}}, {0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="600327c1e7f806a74be8bff849226a8a3fa27c80cc60ca37a368f1bbb23483fa3f79fea0d97b61463a555d92b6afdf79c817f69ef6ebea01025f1ae55c5454806309d260b590bcc4770b034ded8202299743cac6b81b82cd4340e3bbcb8cd93c8d484194b7c0867aef6763857088d0f15f6ad0affa883a048e1f7d9433135219c9be8053018000000000000013f38d28ef37a638db5166cc7d89ed1f2e85a03b0d42aff0af2cb0aee60942648b89520d80018484faa3e74154d3b83bf38bdefe748a082178e9af5d42b8420646dfb4680ccac894bc331c"]}]}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000900)=""/2, 0x2}}, 0x11c) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000000240), 0x50}, &(0x7f0000000280)={&(0x7f00000002c0), 0x1000, 0x1}}, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x30f3, &(0x7f0000000500)=0x1) getpgid(0xffffffffffffffff) capset(0x0, &(0x7f0000000fc0)={0x6, 0x80000000, 0xaf, 0x0, 0x90, 0x7ff}) 179.412612ms ago: executing program 0 (id=1248): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockname$packet(r0, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x7fff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 0s ago: executing program 1 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x80, 0x8, 0x4, 0x10007e, 0x20000006, 0x54, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x12, 0x0, 0x800080ee, 0xa, 0x1b, 0x1, 0x9, 0x200, 0x3e, 0x3, 0x6, 0xca9, 0x0, 0x6, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f3, 0x8, 0x6, 0xa, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x2, 0x0, 0x2, 0xfffffffd, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x9, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1, 0x29503faf, 0x2, 0xa2, 0x7, 0xa9, 0x85, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0x9, 0x6, 0x93a, 0x9, 0x0, 0x100, 0xb9, 0x1eb, 0x1ff, 0x2, 0x57, 0x4, 0x6a, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0xa362, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0x5, 0x7, 0x1, 0x269d, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x0, 0xffff2441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x8001, 0x6}, 0x10) kernel console output (not intermixed with test programs): : device descriptor read/64, error -71 [ 234.836262][ T63] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 234.966369][ T63] usb 7-1: device descriptor read/64, error -71 [ 235.029597][ T8202] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 235.029616][ T8202] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 235.086686][ T63] usb usb7-port1: attempt power cycle [ 235.140067][ T8205] jffs2: notice: (8205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.437195][ T63] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 235.461258][ T63] usb 7-1: device descriptor read/8, error -71 [ 235.706278][ T63] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 235.732491][ T63] usb 7-1: device descriptor read/8, error -71 [ 235.844355][ T63] usb usb7-port1: unable to enumerate USB device [ 235.914700][ T8209] overlayfs: failed to resolve './bus': -2 [ 235.915327][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 236.174829][ T8215] overlayfs: missing 'lowerdir' [ 236.199578][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 236.328640][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 236.329096][ T43] audit: type=1326 audit(1792134607.266:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.331344][ T43] audit: type=1326 audit(1792134607.266:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.331818][ T43] audit: type=1326 audit(1792134607.266:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.332080][ T43] audit: type=1326 audit(1792134607.266:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.332365][ T43] audit: type=1326 audit(1792134607.266:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.333218][ T43] audit: type=1326 audit(1792134607.266:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.333591][ T43] audit: type=1326 audit(1792134607.266:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.335758][ T43] audit: type=1326 audit(1792134607.266:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.336826][ T43] audit: type=1326 audit(1792134607.276:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.337322][ T43] audit: type=1326 audit(1792134607.276:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 236.896331][ T63] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 237.048575][ T63] usb 8-1: unable to get BOS descriptor or descriptor too short [ 237.048618][ T63] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 237.049699][ T63] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 237.049722][ T63] usb 8-1: config 254 has no interface number 0 [ 237.049745][ T63] usb 8-1: config 254 interface 213 has no altsetting 0 [ 237.051635][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.051653][ T63] usb 8-1: Product: syz [ 237.051666][ T63] usb 8-1: Manufacturer: syz [ 237.051678][ T63] usb 8-1: SerialNumber: syz [ 237.546104][ T8240] block nbd1: shutting down sockets [ 237.806850][ T6085] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 237.953389][ T63] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 238.000048][ T6085] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.001656][ T6085] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.002181][ T6085] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.002398][ T6085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.056993][ T8235] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 238.070587][ T8245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.082975][ T6085] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.272478][ T63] usb 8-1: USB disconnect, device number 24 [ 238.436340][ T5898] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 238.513599][ T50] usb 6-1: USB disconnect, device number 29 [ 238.586309][ T5898] usb 7-1: device descriptor read/64, error -71 [ 238.836303][ T5898] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 238.986263][ T5898] usb 7-1: device descriptor read/64, error -71 [ 239.096582][ T5898] usb usb7-port1: attempt power cycle [ 239.187157][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 239.296321][ T5848] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 239.426319][ T5848] usb 8-1: device descriptor read/64, error -71 [ 239.446266][ T5898] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 239.466942][ T5898] usb 7-1: device descriptor read/8, error -71 [ 239.666322][ T5848] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 239.706309][ T5898] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 239.726687][ T5898] usb 7-1: device descriptor read/8, error -71 [ 239.796297][ T5848] usb 8-1: device descriptor read/64, error -71 [ 239.836560][ T5898] usb usb7-port1: unable to enumerate USB device [ 239.906890][ T5848] usb usb8-port1: attempt power cycle [ 240.140234][ T8264] overlayfs: missing 'lowerdir' [ 240.142254][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 240.246351][ T5848] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 240.267009][ T5848] usb 8-1: device descriptor read/8, error -71 [ 240.516539][ T5848] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 240.551851][ T5848] usb 8-1: device descriptor read/8, error -71 [ 240.700805][ T5848] usb usb8-port1: unable to enumerate USB device [ 242.441315][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 242.441327][ T43] audit: type=1800 audit(1792134613.376:230): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.508" name="file0" dev="overlay" ino=828 res=0 errno=0 [ 242.835583][ T8293] block nbd3: shutting down sockets [ 243.093511][ T63] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 243.249621][ T63] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.252187][ T63] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.252866][ T63] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.252982][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.277134][ T8292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.319662][ T63] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.348726][ T8298] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 243.348726][ T8298] Ä5¾' [ 243.443122][ T8297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 243.906489][ T8307] overlayfs: missing 'lowerdir' [ 243.907325][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 244.789161][ T35] usb 8-1: USB disconnect, device number 29 [ 245.507440][ T8318] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 245.507458][ T8318] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 246.567749][ T5752] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 246.988988][ T43] audit: type=1326 audit(1792134617.786:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989021][ T43] audit: type=1326 audit(1792134617.786:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989046][ T43] audit: type=1326 audit(1792134617.786:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989067][ T43] audit: type=1326 audit(1792134617.786:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989087][ T43] audit: type=1326 audit(1792134617.786:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989106][ T43] audit: type=1326 audit(1792134617.786:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989159][ T43] audit: type=1326 audit(1792134617.786:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989577][ T43] audit: type=1326 audit(1792134617.786:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 246.989625][ T43] audit: type=1326 audit(1792134617.786:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.521" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 247.601987][ T8343] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 247.634479][ T8345] overlayfs: failed lookup in lower (newroot/132, name='file0', err=-40): overlapping layers [ 247.764833][ T8354] overlayfs: missing 'lowerdir' [ 247.765724][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 248.048148][ T8360] block nbd3: shutting down sockets [ 248.326915][ T5848] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 248.482013][ T5848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.484035][ T5848] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.484137][ T5848] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.484216][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.508299][ T8358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.551302][ T5848] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.759406][ T5848] usb 8-1: USB disconnect, device number 30 [ 249.891586][ T8367] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 249.891644][ T8367] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 251.568625][ T8411] overlayfs: missing 'lowerdir' [ 251.621386][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 252.418646][ T8418] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.230866][ T8449] overlayfs: failed lookup in lower (newroot/132, name='file0', err=-40): overlapping layers [ 253.248993][ T8451] overlayfs: missing 'lowerdir' [ 253.249915][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 253.897473][ T8468] pci_bus 0000:01: busn_res: [bus 01] is released [ 254.026345][ T853] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 254.156378][ T853] usb 6-1: device descriptor read/64, error -71 [ 254.176516][ T8467] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 254.180938][ T8467] pci 0000:00:04.0: PCI bridge to [bus 01] [ 254.181080][ T8467] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 254.181174][ T8467] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 254.182564][ T8467] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 254.182983][ T8467] pci 0000:00:04.0: enabling Extended Tags [ 254.198732][ T8467] pci 0000:00:04.0: Adding to iommu group 4 [ 254.218290][ T8467] pci 0000:00:04.0: PCI bridge to [bus 01] [ 254.222711][ T8467] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 254.222761][ T8467] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 254.222896][ T8467] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 254.222926][ T8467] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 254.222954][ T8467] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 254.223974][ T8467] pci 0000:00:04.0: PCI bridge to [bus 01] [ 254.224059][ T8467] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 254.239302][ T8467] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 254.240980][ T8467] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 254.320442][ T8467] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 254.329234][ T8467] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 254.436280][ T853] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 254.566309][ T853] usb 6-1: device descriptor read/64, error -71 [ 254.686907][ T853] usb usb6-port1: attempt power cycle [ 255.036864][ T853] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 255.056914][ T853] usb 6-1: device descriptor read/8, error -71 [ 255.197344][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.197374][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.296825][ T853] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 255.302952][ T8501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.317957][ T853] usb 6-1: device descriptor read/8, error -71 [ 255.322179][ T8501] random: crng reseeded on system resumption [ 255.427936][ T853] usb usb6-port1: unable to enumerate USB device [ 255.455167][ T8502] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 256.362129][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 256.362179][ T43] audit: type=1800 audit(1792134627.286:257): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="file0" dev="overlay" ino=906 res=0 errno=0 [ 257.052214][ T43] audit: type=1800 audit(1792134627.986:258): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.560" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 258.611475][ T43] audit: type=1800 audit(1792134629.546:259): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="file0" dev="overlay" ino=897 res=0 errno=0 [ 259.118736][ T63] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 259.280212][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.281280][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.281307][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.281325][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.281356][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.283309][ T63] usb 5-1: config 0 descriptor?? [ 259.693837][ T8544] veth0: entered promiscuous mode [ 259.700248][ T8554] tipc: Cannot configure node identity twice [ 259.701200][ T8554] Invalid ELF header magic: != ELF [ 259.702243][ T8554] overlayfs: overlapping lowerdir path [ 259.709446][ T63] hid_parser_main: 5 callbacks suppressed [ 259.709465][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709489][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709636][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709658][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709679][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709699][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709720][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709739][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709761][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.709780][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 259.729748][ T63] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 259.897604][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.898327][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.028117][ T8559] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 261.680107][ T50] usb 5-1: USB disconnect, device number 21 [ 261.694689][ T8543] veth0: left promiscuous mode [ 262.332049][ T8575] overlayfs: failed to resolve './bus': -2 [ 262.536727][ T853] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.702322][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 262.710694][ T853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.710938][ T853] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 262.719483][ T853] usb 5-1: config 254 has an invalid interface number: 213 but max is 0 [ 262.719856][ T853] usb 5-1: config 254 has no interface number 0 [ 262.720461][ T853] usb 5-1: config 254 interface 213 has no altsetting 0 [ 262.725574][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 262.746005][ T853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.746491][ T853] usb 5-1: Product: syz [ 262.746540][ T853] usb 5-1: Manufacturer: syz [ 262.747154][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 262.747441][ T853] usb 5-1: SerialNumber: syz [ 262.752238][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 262.755352][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 263.449820][ T853] usb_ehset_test 5-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 263.454261][ T853] usb 5-1: USB disconnect, device number 22 [ 263.756435][ T63] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 263.896572][ T63] usb 6-1: device descriptor read/64, error -71 [ 264.146389][ T63] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 264.276303][ T63] usb 6-1: device descriptor read/64, error -71 [ 264.402312][ T63] usb usb6-port1: attempt power cycle [ 264.766284][ T63] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 264.796802][ T63] usb 6-1: device descriptor read/8, error -71 [ 265.424498][ T63] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 265.494845][ T63] usb 6-1: device descriptor read/8, error -71 [ 265.566353][ T5832] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 265.622667][ T63] usb usb6-port1: unable to enumerate USB device [ 266.483057][ T8629] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 266.814177][ T8637] overlayfs: missing 'lowerdir' [ 266.814948][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 267.402791][ T8641] overlayfs: failed lookup in lower (newroot/151, name='file0', err=-40): overlapping layers [ 268.106397][ T50] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 268.203614][ T8656] comedi comedi1: dt2815: I/O port conflict (0x3c4,2) [ 268.256804][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 268.258008][ T50] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 268.260022][ T50] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 268.260060][ T50] usb 5-1: config 0 has no interface number 0 [ 268.260128][ T50] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 268.264660][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.264757][ T50] usb 5-1: Product: syz [ 268.264801][ T50] usb 5-1: Manufacturer: syz [ 268.264844][ T50] usb 5-1: SerialNumber: syz [ 268.340819][ T50] usb 5-1: config 0 descriptor?? [ 268.355467][ T8650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.625622][ T8661] overlayfs: failed lookup in lower (newroot/145, name='file0', err=-40): overlapping layers [ 269.330193][ T8667] trusted_key: encrypted_key: insufficient parameters specified [ 269.373797][ T8667] UDC core: g1: couldn't find an available UDC or it's busy [ 269.682788][ T50] asix 5-1:0.188: probe with driver asix failed with error -71 [ 269.692887][ T50] usb 5-1: USB disconnect, device number 23 [ 269.734998][ T8675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.764298][ T8675] random: crng reseeded on system resumption [ 269.896665][ T35] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 269.956329][ T5832] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 270.036322][ T35] usb 8-1: device descriptor read/64, error -71 [ 270.096312][ T5832] usb 7-1: device descriptor read/64, error -71 [ 270.286654][ T35] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 270.366311][ T5832] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 270.427921][ T35] usb 8-1: device descriptor read/64, error -71 [ 270.448630][ T8677] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.496366][ T5832] usb 7-1: device descriptor read/64, error -71 [ 270.540750][ T35] usb usb8-port1: attempt power cycle [ 270.606826][ T5832] usb usb7-port1: attempt power cycle [ 270.916487][ T35] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 270.939424][ T35] usb 8-1: device descriptor read/8, error -71 [ 270.956333][ T5832] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 270.988635][ T5832] usb 7-1: device descriptor read/8, error -71 [ 271.216289][ T35] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 271.237161][ T35] usb 8-1: device descriptor read/8, error -71 [ 271.240284][ T5832] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 271.257321][ T5832] usb 7-1: device descriptor read/8, error -71 [ 271.346504][ T35] usb usb8-port1: unable to enumerate USB device [ 271.367415][ T5832] usb usb7-port1: unable to enumerate USB device [ 271.560168][ T8692] overlayfs: failed lookup in lower (newroot/142, name='file0', err=-40): overlapping layers [ 272.407292][ T8695] overlayfs: failed lookup in lower (newroot/156, name='file0', err=-40): overlapping layers [ 272.507805][ T8702] overlayfs: failed lookup in lower (newroot/143, name='file0', err=-40): overlapping layers [ 272.599952][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 273.199034][ T5832] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 273.326339][ T5832] usb 8-1: device descriptor read/64, error -71 [ 273.431329][ T8720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.566376][ T5832] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 273.676517][ T50] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 273.696312][ T5832] usb 8-1: device descriptor read/64, error -71 [ 273.806586][ T5832] usb usb8-port1: attempt power cycle [ 273.827893][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 273.827924][ T50] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 273.828874][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.828886][ T50] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.830672][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.830685][ T50] usb 6-1: Product: syz [ 273.830692][ T50] usb 6-1: Manufacturer: syz [ 273.830699][ T50] usb 6-1: SerialNumber: syz [ 274.037707][ T8720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.038880][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 274.146350][ T5832] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 274.170156][ T5832] usb 8-1: device descriptor read/8, error -71 [ 274.406345][ T5832] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 274.427087][ T5832] usb 8-1: device descriptor read/8, error -71 [ 274.537094][ T5832] usb usb8-port1: unable to enumerate USB device [ 274.722257][ T50] usb 6-1: 0:1 : does not exist [ 274.722294][ T50] usb 6-1: BAAD SPEAKER p_chmask mismatch [ 274.758108][ T50] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.761206][ T50] usb 6-1: USB disconnect, device number 38 [ 274.773452][ T8073] udevd[8073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.931663][ T8725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 275.782128][ T8748] overlayfs: failed lookup in lower (newroot/148, name='file0', err=-40): overlapping layers [ 276.006314][ T5832] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 276.059456][ T8752] CIFS: Attempting to mount //127.0.0.1/share [ 276.136315][ T5832] usb 5-1: device descriptor read/64, error -71 [ 276.346289][ T5848] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 276.536251][ T5832] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 276.680606][ T5832] usb 5-1: device descriptor read/64, error -71 [ 276.732355][ T5848] usb 8-1: device descriptor read/64, error -71 [ 276.829960][ T5832] usb usb5-port1: attempt power cycle [ 276.940559][ T8752] CIFS: VFS: Error connecting to socket. Aborting operation. [ 276.940599][ T8752] CIFS: VFS: cifs_mount failed w/return code = -4 [ 277.126374][ T5848] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 277.256417][ T5848] usb 8-1: device descriptor read/64, error -71 [ 277.360304][ T8771] overlayfs: failed lookup in lower (newroot/151, name='file0', err=-40): overlapping layers [ 277.367006][ T5848] usb usb8-port1: attempt power cycle [ 277.396405][ T5832] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 277.417959][ T5832] usb 5-1: device descriptor read/8, error -71 [ 277.656972][ T5832] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 277.679591][ T5832] usb 5-1: device descriptor read/8, error -71 [ 277.707058][ T5848] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 277.728083][ T5848] usb 8-1: device descriptor read/8, error -71 [ 277.745712][ T8775] overlayfs: missing 'lowerdir' [ 277.747444][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 277.789067][ T5832] usb usb5-port1: unable to enumerate USB device [ 277.976553][ T5848] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 277.999061][ T5848] usb 8-1: device descriptor read/8, error -71 [ 278.107010][ T5848] usb usb8-port1: unable to enumerate USB device [ 278.316361][ T853] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 278.379492][ T8784] overlayfs: failed lookup in lower (newroot/153, name='file0', err=-40): overlapping layers [ 278.456328][ T853] usb 6-1: device descriptor read/64, error -71 [ 278.696373][ T853] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 278.826307][ T853] usb 6-1: device descriptor read/64, error -71 [ 278.946803][ T853] usb usb6-port1: attempt power cycle [ 279.032160][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 279.061043][ T5752] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 279.296305][ T853] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 279.327623][ T853] usb 6-1: device descriptor read/8, error -71 [ 279.470921][ T8825] overlayfs: failed lookup in lower (newroot/157, name='file0', err=-40): overlapping layers [ 279.576274][ T853] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 279.596848][ T853] usb 6-1: device descriptor read/8, error -71 [ 279.707480][ T853] usb usb6-port1: unable to enumerate USB device [ 279.906137][ T8827] overlayfs: failed lookup in lower (newroot/158, name='file0', err=-40): overlapping layers [ 280.278916][ T8841] overlayfs: missing 'lowerdir' [ 280.282260][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 281.857520][ T35] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 281.996281][ T35] usb 6-1: device descriptor read/64, error -71 [ 282.256304][ T35] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 282.396923][ T35] usb 6-1: device descriptor read/64, error -71 [ 282.517247][ T35] usb usb6-port1: attempt power cycle [ 282.600677][ T8873] overlayfs: failed lookup in lower (newroot/161, name='file0', err=-40): overlapping layers [ 282.856261][ T35] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 282.876827][ T35] usb 6-1: device descriptor read/8, error -71 [ 283.129971][ T35] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 283.151590][ T35] usb 6-1: device descriptor read/8, error -71 [ 283.276144][ T35] usb usb6-port1: unable to enumerate USB device [ 283.810109][ T8897] overlayfs: missing 'lowerdir' [ 283.812969][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 283.947925][ T8915] overlayfs: failed lookup in lower (newroot/159, name='file0', err=-40): overlapping layers [ 284.196330][ T5832] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 284.326287][ T5832] usb 5-1: device descriptor read/64, error -71 [ 284.534784][ T8922] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.576579][ T5832] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 284.716388][ T5832] usb 5-1: device descriptor read/64, error -71 [ 284.826924][ T5832] usb usb5-port1: attempt power cycle [ 285.166328][ T5832] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 285.236697][ T5832] usb 5-1: device descriptor read/8, error -71 [ 285.333278][ T8932] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 285.333355][ T8932] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 285.546337][ T5832] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.632212][ T5832] usb 5-1: device descriptor read/8, error -71 [ 285.754449][ T5832] usb usb5-port1: unable to enumerate USB device [ 287.861271][ T35] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 288.016444][ T35] usb 8-1: device descriptor read/64, error -71 [ 288.069577][ T43] audit: type=1800 audit(1792134659.006:260): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 288.266633][ T35] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 288.351160][ T8962] overlayfs: missing 'lowerdir' [ 288.354935][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 288.396382][ T35] usb 8-1: device descriptor read/64, error -71 [ 288.448025][ T8969] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 288.448050][ T8969] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 288.506606][ T35] usb usb8-port1: attempt power cycle [ 289.236279][ T35] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 289.257006][ T35] usb 8-1: device descriptor read/8, error -71 [ 289.516353][ T35] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 289.598715][ T35] usb 8-1: device descriptor read/8, error -71 [ 289.726842][ T35] usb usb8-port1: unable to enumerate USB device [ 290.181665][ T43] audit: type=1800 audit(1792134661.116:261): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.667" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 291.036859][ T9010] ±ÿ)”ëfl: renamed from lo (while UP) [ 292.090097][ T9016] overlayfs: failed lookup in lower (newroot/167, name='file0', err=-40): overlapping layers [ 292.398851][ T9024] pci_bus 0000:01: busn_res: [bus 01] is released [ 292.863004][ T9041] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 292.863097][ T9041] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 294.782033][ T9054] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 294.855223][ T9052] bridge0: entered allmulticast mode [ 295.146308][ T35] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 295.296335][ T35] usb 7-1: device descriptor read/64, error -71 [ 295.549142][ T35] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 295.787928][ T35] usb 7-1: device descriptor read/64, error -71 [ 295.907315][ T35] usb usb7-port1: attempt power cycle [ 296.256313][ T35] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 296.276962][ T35] usb 7-1: device descriptor read/8, error -71 [ 296.526834][ T35] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 296.546928][ T35] usb 7-1: device descriptor read/8, error -71 [ 296.666738][ T35] usb usb7-port1: unable to enumerate USB device [ 297.559268][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 297.561555][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 297.561851][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 297.562515][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 298.273071][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 298.354165][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 302.440530][ T5749] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 302.526339][ T853] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 302.686629][ T5848] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 302.902773][ T5848] usb 5-1: device descriptor read/64, error -71 [ 303.436350][ T5848] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 303.566355][ T5848] usb 5-1: device descriptor read/64, error -71 [ 303.678549][ T5848] usb usb5-port1: attempt power cycle [ 304.026306][ T5848] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 304.046835][ T5848] usb 5-1: device descriptor read/8, error -71 [ 304.286298][ T5848] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 304.317271][ T5848] usb 5-1: device descriptor read/8, error -71 [ 304.426568][ T5848] usb usb5-port1: unable to enumerate USB device [ 305.418270][ T9187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.418299][ T9187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.421233][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 305.695240][ T9193] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 306.550385][ T9202] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 306.554592][ T9202] pci 0000:00:04.0: PCI bridge to [bus 01] [ 306.554732][ T9202] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 306.555012][ T9202] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 306.556936][ T9202] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 306.558658][ T9202] pci 0000:00:04.0: enabling Extended Tags [ 306.628873][ T9202] pci 0000:00:04.0: Adding to iommu group 4 [ 306.669835][ T9202] pci 0000:00:04.0: PCI bridge to [bus 01] [ 306.675220][ T9202] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 306.675390][ T9202] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 306.675882][ T9202] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 306.675928][ T9202] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 306.675972][ T9202] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 306.676461][ T9202] pci 0000:00:04.0: PCI bridge to [bus 01] [ 306.676536][ T9202] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 306.678331][ T9202] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 306.679471][ T9202] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 306.893430][ T9202] pcieport 0000:00:04.0: PCI INT A: failed to register GSI [ 306.893549][ T9202] pcieport 0000:00:04.0: probe with driver pcieport failed with error -16 [ 306.904458][ T5832] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 307.056262][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 307.057276][ T5832] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 307.059126][ T5832] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 307.059141][ T5832] usb 8-1: config 0 has no interface number 0 [ 307.059567][ T5832] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 307.062325][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.062417][ T5832] usb 8-1: Product: syz [ 307.062425][ T5832] usb 8-1: Manufacturer: syz [ 307.062433][ T5832] usb 8-1: SerialNumber: syz [ 307.107306][ T5832] usb 8-1: config 0 descriptor?? [ 307.110161][ T9207] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 307.137755][ T9211] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 308.258566][ T9213] 8021q: adding VLAN 0 to HW filter on device eth0 [ 308.260139][ T9213] 8021q: adding VLAN 0 to HW filter on device eth1 [ 308.263355][ T9213] 8021q: adding VLAN 0 to HW filter on device eth2 [ 308.267281][ T9213] 8021q: adding VLAN 0 to HW filter on device eth3 [ 308.440411][ T9220] overlayfs: failed lookup in lower (newroot/171, name='file0', err=-40): overlapping layers [ 308.567067][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 308.567965][ T9218] sctp_transport_update_pmtu: 35 callbacks suppressed [ 308.567976][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.568181][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.568352][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.569313][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.569906][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.570442][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.570898][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.571281][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.571601][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 308.571972][ T9218] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 309.009550][ T5832] asix 8-1:0.188: probe with driver asix failed with error -71 [ 309.022604][ T5832] usb 8-1: USB disconnect, device number 48 [ 309.025819][ T9166] udevd[9166]: setting mode of /dev/bus/usb/008/048 to 020664 failed: No such file or directory [ 309.025874][ T9166] udevd[9166]: setting owner of /dev/bus/usb/008/048 to uid=0, gid=0 failed: No such file or directory [ 309.289387][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 309.586981][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 310.245285][ T9240] tunl0: entered allmulticast mode [ 310.245374][ T9240] gre0: entered allmulticast mode [ 310.245453][ T9240] gretap0: entered allmulticast mode [ 310.245509][ T9240] erspan0: entered allmulticast mode [ 310.245556][ T9240] ip_vti0: entered allmulticast mode [ 310.245616][ T9240] ip6_vti0: entered allmulticast mode [ 310.245666][ T9240] sit0: entered allmulticast mode [ 310.245709][ T9240] ip6tnl0: entered allmulticast mode [ 310.245782][ T9240] ip6gre0: entered allmulticast mode [ 310.245860][ T9240] lapb0: entered allmulticast mode [ 310.246001][ T9240] lapb1: entered allmulticast mode [ 310.270624][ T9240] lapb2: entered allmulticast mode [ 310.270920][ T9240] lapb3: entered allmulticast mode [ 310.272485][ T9240] lapb4: entered allmulticast mode [ 310.294053][ T9240] lapb5: entered allmulticast mode [ 310.294998][ T9240] lapb6: entered allmulticast mode [ 310.300818][ T9240] lowpan0: entered allmulticast mode [ 310.305627][ T9240] rxe_eth0: entered allmulticast mode [ 311.309225][ T43] audit: type=1804 audit(1792134682.246:262): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.709" name="bus" dev="ramfs" ino=24254 res=1 errno=0 [ 311.310279][ T43] audit: type=1804 audit(1792134682.246:263): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.709" name="bus" dev="ramfs" ino=24254 res=1 errno=0 [ 311.472226][ T9273] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 312.429229][ T9295] overlayfs: failed lookup in lower (newroot/174, name='file0', err=-40): overlapping layers [ 312.550808][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 313.037893][ T9305] pci_bus 0000:01: busn_res: [bus 01] is released [ 313.460489][ T9312] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 313.476980][ T9312] pci 0000:00:04.0: PCI bridge to [bus 01] [ 313.477147][ T9312] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 313.477399][ T9312] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 313.491854][ T9312] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 313.494903][ T9312] pci 0000:00:04.0: enabling Extended Tags [ 313.510230][ T9312] pci 0000:00:04.0: Adding to iommu group 4 [ 313.522753][ T9312] pci 0000:00:04.0: PCI bridge to [bus 01] [ 313.524689][ T9312] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 313.524718][ T9312] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 313.524788][ T9312] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 313.524811][ T9312] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 313.524829][ T9312] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 313.524894][ T9312] pci 0000:00:04.0: PCI bridge to [bus 01] [ 313.524946][ T9312] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 313.528996][ T9312] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 313.531281][ T9312] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 313.574256][ T9312] pcieport 0000:00:04.0: PCI INT A: failed to register GSI [ 313.574284][ T9312] pcieport 0000:00:04.0: probe with driver pcieport failed with error -16 [ 314.229206][ T9323] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 314.753250][ T9345] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 315.480450][ T9360] netlink: 'syz.3.725': attribute type 11 has an invalid length. [ 315.756878][ T9365] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 315.844917][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 315.844946][ T9355] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 315.862127][ T9361] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 315.862144][ T9361] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 316.281276][ T9383] overlayfs: failed lookup in lower (newroot/189, name='file0', err=-40): overlapping layers [ 316.647935][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.647966][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.047871][ T43] audit: type=1107 audit(1792134687.976:264): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 317.318289][ T9390] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.485326][ T9398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'. [ 317.933900][ T9411] overlayfs: failed lookup in lower (newroot/185, name='file0', err=-40): overlapping layers [ 319.499520][ T9435] overlayfs: failed lookup in lower (newroot/180, name='file0', err=-40): overlapping layers [ 319.643409][ T43] audit: type=1804 audit(1792134690.576:265): pid=9441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.743" name="bus" dev="ramfs" ino=24378 res=1 errno=0 [ 319.644988][ T43] audit: type=1804 audit(1792134690.576:266): pid=9441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.743" name="bus" dev="ramfs" ino=24378 res=1 errno=0 [ 320.634873][ T9450] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 320.964757][ T9457] overlayfs: failed lookup in lower (newroot/182, name='file0', err=-40): overlapping layers [ 321.470488][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 321.632946][ T9463] overlayfs: failed lookup in lower (newroot/189, name='file0', err=-40): overlapping layers [ 322.380171][ T9473] pci 0000:00:04.0: PCI bridge to [bus 01] [ 322.380365][ T9473] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 322.382418][ T9473] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 322.383805][ T9473] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 322.637375][ T5898] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 322.826437][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 322.827687][ T5898] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 322.832648][ T5898] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 322.832668][ T5898] usb 6-1: config 0 has no interface number 0 [ 322.832874][ T5898] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 322.850056][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.850076][ T5898] usb 6-1: Product: syz [ 322.850118][ T5898] usb 6-1: Manufacturer: syz [ 322.850165][ T5898] usb 6-1: SerialNumber: syz [ 322.959731][ T9482] IPVS: ip_vs_add_dest(): server weight less than zero [ 323.248325][ T43] audit: type=1326 audit(1792134693.876:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248359][ T43] audit: type=1326 audit(1792134693.876:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248380][ T43] audit: type=1326 audit(1792134693.886:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71277eb code=0x7ffc0000 [ 323.248401][ T43] audit: type=1326 audit(1792134693.886:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248422][ T43] audit: type=1326 audit(1792134693.886:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248443][ T43] audit: type=1326 audit(1792134693.886:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248462][ T43] audit: type=1326 audit(1792134693.886:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248482][ T43] audit: type=1326 audit(1792134693.886:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248502][ T43] audit: type=1326 audit(1792134693.886:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.248522][ T43] audit: type=1326 audit(1792134693.886:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.3.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 323.269494][ T5898] usb 6-1: config 0 descriptor?? [ 323.278189][ T9473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.293638][ T9477] overlayfs: failed lookup in lower (newroot/193, name='file0', err=-40): overlapping layers [ 323.748882][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 323.917551][ T9494] overlayfs: failed lookup in lower (newroot/192, name='file0', err=-40): overlapping layers [ 324.183026][ T9500] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 325.118393][ T9503] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 325.257321][ T5898] asix 6-1:0.188: probe with driver asix failed with error -71 [ 325.262873][ T5898] usb 6-1: USB disconnect, device number 47 [ 325.602853][ T9512] Invalid ELF header magic: != ELF [ 325.638842][ T9512] overlay: Unknown parameter '/' [ 325.665029][ T9511] pci 0000:00:04.0: PCI bridge to [bus 01] [ 325.665402][ T9511] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 325.667891][ T9511] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 325.669195][ T9511] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 326.147205][ T853] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 326.274688][ T9515] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 326.296344][ T853] usb 7-1: Using ep0 maxpacket: 32 [ 326.299578][ T853] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 326.303134][ T853] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 326.303421][ T853] usb 7-1: config 0 has no interface number 0 [ 326.303902][ T853] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 326.330047][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.330103][ T853] usb 7-1: Product: syz [ 326.330197][ T853] usb 7-1: Manufacturer: syz [ 326.330291][ T853] usb 7-1: SerialNumber: syz [ 326.397039][ T853] usb 7-1: config 0 descriptor?? [ 326.400328][ T9511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.090843][ T853] asix 7-1:0.188: probe with driver asix failed with error -71 [ 327.094287][ T853] usb 7-1: USB disconnect, device number 34 [ 328.064579][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.771'. [ 329.434784][ T9539] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.706329][ T853] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 329.869576][ T853] usb 8-1: unable to get BOS descriptor or descriptor too short [ 329.869665][ T853] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 329.870664][ T853] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.870684][ T853] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.873803][ T853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.873880][ T853] usb 8-1: Product: syz [ 329.873893][ T853] usb 8-1: Manufacturer: syz [ 329.873905][ T853] usb 8-1: SerialNumber: syz [ 330.148156][ T9539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.175372][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 331.597293][ T9570] ±ÿ)”ëfl: renamed from lo (while UP) [ 331.631680][ T853] usb 8-1: 0:1 : does not exist [ 331.631741][ T853] usb 8-1: BAAD SPEAKER p_chmask mismatch [ 331.722830][ T853] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 331.724162][ T853] usb 8-1: USB disconnect, device number 49 [ 331.799390][ T9166] udevd[9166]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.356344][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 333.356361][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 334.104567][ T9607] IPVS: ip_vs_add_dest(): server weight less than zero [ 334.352263][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 334.352274][ T43] audit: type=1326 audit(1792134705.026:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352304][ T43] audit: type=1326 audit(1792134705.026:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352323][ T43] audit: type=1326 audit(1792134705.026:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71a77eb code=0x7ffc0000 [ 334.352344][ T43] audit: type=1326 audit(1792134705.026:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352363][ T43] audit: type=1326 audit(1792134705.026:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352384][ T43] audit: type=1326 audit(1792134705.026:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352404][ T43] audit: type=1326 audit(1792134705.036:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352425][ T43] audit: type=1326 audit(1792134705.036:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352445][ T43] audit: type=1326 audit(1792134705.036:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.352465][ T43] audit: type=1326 audit(1792134705.036:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.0.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 334.643279][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 334.655704][ T9611] overlayfs: failed lookup in lower (newroot/200, name='file0', err=-40): overlapping layers [ 335.316398][ T853] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 335.466730][ T853] usb 7-1: Using ep0 maxpacket: 32 [ 335.467183][ T853] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 335.467979][ T853] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 335.467992][ T853] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 335.468000][ T853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.468009][ T853] usb 7-1: config 0 has no interface number 0 [ 335.468025][ T853] usb 7-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 335.468039][ T853] usb 7-1: config 0 interface 196 has no altsetting 0 [ 335.551725][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.551747][ T853] usb 7-1: Product: syz [ 335.551758][ T853] usb 7-1: Manufacturer: syz [ 335.551770][ T853] usb 7-1: SerialNumber: syz [ 335.572186][ T853] usb 7-1: config 0 descriptor?? [ 335.908430][ T853] usb 7-1: USB disconnect, device number 35 [ 336.939858][ T9643] bond1: entered promiscuous mode [ 336.939882][ T9643] bond1: entered allmulticast mode [ 337.047183][ T9649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.792'. [ 337.820994][ T9658] IPVS: ip_vs_add_dest(): server weight less than zero [ 338.071869][ T9652] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 338.306355][ T63] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 338.460428][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 338.460453][ T63] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 338.461587][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.461599][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.463553][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.463566][ T63] usb 5-1: Product: syz [ 338.463573][ T63] usb 5-1: Manufacturer: syz [ 338.463580][ T63] usb 5-1: SerialNumber: syz [ 338.678027][ T9652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.679480][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.803'. [ 338.879850][ T9673] pci_bus 0000:01: busn_res: [bus 01] is released [ 338.987168][ T63] usb 5-1: 0:1 : does not exist [ 338.987202][ T63] usb 5-1: BAAD SPEAKER p_chmask mismatch [ 339.031603][ T63] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 339.033002][ T63] usb 5-1: USB disconnect, device number 36 [ 339.047938][ T9166] udevd[9166]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.992845][ T9692] syz_tun: entered allmulticast mode [ 340.105680][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 340.105693][ T43] audit: type=1804 audit(1792134711.036:365): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.804" name="bus" dev="ramfs" ino=25938 res=1 errno=0 [ 340.107887][ T43] audit: type=1804 audit(1792134711.046:366): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.804" name="bus" dev="ramfs" ino=25938 res=1 errno=0 [ 340.233833][ T9692] syz_tun: left allmulticast mode [ 340.282347][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 340.500689][ T9712] overlayfs: failed lookup in lower (newroot/195, name='file0', err=-40): overlapping layers [ 340.668524][ T9715] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 340.897287][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 342.908827][ T9730] bond1: entered promiscuous mode [ 342.908849][ T9730] bond1: entered allmulticast mode [ 343.175295][ T9736] overlayfs: failed lookup in lower (newroot/198, name='file0', err=-40): overlapping layers [ 343.682717][ T9748] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 343.682736][ T9748] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.683900][ T9748] vhci_hcd vhci_hcd.0: Device attached [ 343.946694][ T5832] usb 38-1: SetAddress Request (3) to port 0 [ 343.946754][ T5832] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd [ 344.301289][ T9749] vhci_hcd: connection reset by peer [ 344.304411][ T5855] vhci_hcd vhci_hcd.0: stop threads [ 344.304434][ T5855] vhci_hcd vhci_hcd.0: release socket [ 344.304478][ T5855] vhci_hcd vhci_hcd.0: disconnect device [ 344.358128][ T9757] all (unregistering): Released all slaves [ 344.449012][ T9762] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 345.294012][ T43] audit: type=1804 audit(1792134716.226:367): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.820" name="bus" dev="ramfs" ino=25976 res=1 errno=0 [ 345.298598][ T43] audit: type=1804 audit(1792134716.236:368): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.820" name="bus" dev="ramfs" ino=25976 res=1 errno=0 [ 346.493302][ T9781] overlayfs: failed lookup in lower (newroot/201, name='file0', err=-40): overlapping layers [ 346.736350][ T5898] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 346.867088][ T5898] usb 5-1: device descriptor read/64, error -71 [ 347.107067][ T5898] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 347.205249][ T9796] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 347.236314][ T5898] usb 5-1: device descriptor read/64, error -71 [ 347.359579][ T5898] usb usb5-port1: attempt power cycle [ 347.706625][ T5898] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 347.728408][ T5898] usb 5-1: device descriptor read/8, error -71 [ 347.996069][ T5898] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 348.017205][ T5898] usb 5-1: device descriptor read/8, error -71 [ 348.126486][ T5898] usb usb5-port1: unable to enumerate USB device [ 348.305713][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 348.312452][ T9807] sctp_transport_update_pmtu: 35 callbacks suppressed [ 348.312465][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.313086][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.313929][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.315646][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.316152][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.318311][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.319698][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.320963][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.322177][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.323484][ T9807] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 348.605652][ T9812] Cannot find add_set index 0 as target [ 349.037028][ T5832] usb 38-1: device descriptor read/8, error -110 [ 349.448621][ T5832] usb usb38-port1: attempt power cycle [ 350.030069][ T5832] usb usb38-port1: unable to enumerate USB device [ 350.153676][ T9827] overlayfs: failed lookup in lower (newroot/212, name='file0', err=-40): overlapping layers [ 350.862056][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 350.944539][ T9837] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 351.774178][ T9842] overlayfs: failed lookup in lower (newroot/214, name='file0', err=-40): overlapping layers [ 352.422432][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 352.473531][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 353.486340][ T5898] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 353.626437][ T5898] usb 5-1: device descriptor read/64, error -71 [ 353.756569][ T5821] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 353.876300][ T5898] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 353.909410][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 353.915241][ T5821] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 353.924953][ T5821] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 353.925034][ T5821] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 353.928863][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.928877][ T5821] usb 8-1: config 0 has no interface number 0 [ 353.932245][ T5821] usb 8-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 353.932473][ T5821] usb 8-1: config 0 interface 196 has no altsetting 0 [ 353.948553][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.948696][ T5821] usb 8-1: Product: syz [ 353.948994][ T5821] usb 8-1: Manufacturer: syz [ 353.949102][ T5821] usb 8-1: SerialNumber: syz [ 353.970178][ T5821] usb 8-1: config 0 descriptor?? [ 354.016317][ T5898] usb 5-1: device descriptor read/64, error -71 [ 354.126451][ T5898] usb usb5-port1: attempt power cycle [ 354.466325][ T5898] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 354.497087][ T5898] usb 5-1: device descriptor read/8, error -71 [ 354.531999][ T5821] usb 8-1: USB disconnect, device number 50 [ 354.736436][ T5898] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 354.758201][ T5898] usb 5-1: device descriptor read/8, error -71 [ 354.800189][ T9873] overlayfs: failed lookup in lower (newroot/207, name='file0', err=-40): overlapping layers [ 354.866520][ T5898] usb usb5-port1: unable to enumerate USB device [ 354.917107][ T9877] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.955294][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 357.376343][ T5832] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 357.506270][ T5832] usb 5-1: device descriptor read/64, error -71 [ 357.756312][ T5832] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 357.853797][ T9920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.863'. [ 357.897305][ T5832] usb 5-1: device descriptor read/64, error -71 [ 358.023888][ T5832] usb usb5-port1: attempt power cycle [ 358.376913][ T5832] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 358.398846][ T5832] usb 5-1: device descriptor read/8, error -71 [ 358.660978][ T5832] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 358.691165][ T5832] usb 5-1: device descriptor read/8, error -71 [ 358.796738][ T5832] usb usb5-port1: unable to enumerate USB device [ 360.109479][ T9932] syz_tun: entered allmulticast mode [ 360.185059][ T9938] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 360.332817][ T9932] syz_tun: left allmulticast mode [ 361.065172][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 361.256264][ T9] usb 7-1: device descriptor read/64, error -71 [ 362.043299][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 362.206261][ T9] usb 7-1: device descriptor read/64, error -71 [ 362.326518][ T9] usb usb7-port1: attempt power cycle [ 362.846278][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 362.868459][ T9] usb 7-1: device descriptor read/8, error -71 [ 363.093704][ T9987] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 363.093832][ T9987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.116313][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 363.127335][ T9] usb 7-1: device descriptor read/8, error -71 [ 363.247577][ T9] usb usb7-port1: unable to enumerate USB device [ 364.010020][T10007] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 365.374508][T10019] 9p: Bad value for 'rfdno' [ 365.376038][T10019] jffs2: notice: (10019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 365.456350][ T63] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 365.586355][ T63] usb 8-1: device descriptor read/64, error -71 [ 365.836331][ T63] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 365.955298][T10027] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 365.955311][T10027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.877'. [ 366.007944][ T63] usb 8-1: device descriptor read/64, error -71 [ 366.112270][T10028] input: syz0 as /devices/virtual/input/input8 [ 366.121611][ T63] usb usb8-port1: attempt power cycle [ 366.456385][ T63] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 366.476656][ T63] usb 8-1: device descriptor read/8, error -71 [ 366.520448][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 366.626074][T10042] overlayfs: failed lookup in lower (newroot/216, name='file0', err=-40): overlapping layers [ 366.716302][ T63] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 366.737582][ T63] usb 8-1: device descriptor read/8, error -71 [ 366.846735][ T63] usb usb8-port1: unable to enumerate USB device [ 366.901707][T10048] Invalid ELF header magic: != ELF [ 367.027897][T10048] overlay: Unknown parameter '/' [ 367.347752][T10052] syz_tun: entered allmulticast mode [ 367.618441][T10052] syz_tun: left allmulticast mode [ 367.693440][T10057] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 368.331786][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 368.340608][T10071] overlayfs: failed lookup in lower (newroot/227, name='file0', err=-40): overlapping layers [ 368.568489][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 369.026504][T10084] netlink: 'syz.1.890': attribute type 13 has an invalid length. [ 369.762212][T10092] Invalid ELF header magic: != ELF [ 369.823482][T10092] overlay: Unknown parameter '/' [ 370.097950][T10100] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 372.128508][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 372.139066][T10132] overlayfs: failed lookup in lower (newroot/218, name='file0', err=-40): overlapping layers [ 372.289329][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.900'. [ 372.522419][T10147] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 372.522445][T10147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.522606][T10147] vhci_hcd vhci_hcd.0: Device attached [ 372.786370][ T5832] usb 40-1: SetAddress Request (6) to port 0 [ 372.786427][ T5832] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 372.866827][T10148] vhci_hcd: connection reset by peer [ 372.867157][ T5551] vhci_hcd vhci_hcd.1: stop threads [ 372.867178][ T5551] vhci_hcd vhci_hcd.1: release socket [ 372.867216][ T5551] vhci_hcd vhci_hcd.1: disconnect device [ 372.950527][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 373.046379][T10154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 373.122661][T10163] overlayfs: failed lookup in lower (newroot/230, name='file0', err=-40): overlapping layers [ 373.405111][T10167] Invalid ELF header magic: != ELF [ 373.627251][T10172] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 373.691869][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 373.877870][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 373.877895][ T9] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 373.878669][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.878681][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.880275][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.880287][ T9] usb 7-1: Product: syz [ 373.880294][ T9] usb 7-1: Manufacturer: syz [ 373.880301][ T9] usb 7-1: SerialNumber: syz [ 374.119712][T10154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.127974][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 374.942913][ T43] audit: type=1800 audit(1792134745.876:369): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.909" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 375.163949][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 375.317520][ T9] usb 7-1: 0:1 : does not exist [ 375.317730][ T9] usb 7-1: BAAD SPEAKER p_chmask mismatch [ 375.332992][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 375.344180][T10194] overlayfs: failed lookup in lower (newroot/234, name='file0', err=-40): overlapping layers [ 375.419819][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 375.421442][ T9] usb 7-1: USB disconnect, device number 40 [ 375.447854][T10150] udevd[10150]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.928470][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 377.248572][T10218] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 377.297725][T10205] tipc: Cannot configure node identity twice [ 377.628406][T10220] 9p: Bad value for 'rfdno' [ 377.631056][T10220] jffs2: notice: (10220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 377.846798][ T5832] usb 40-1: device descriptor read/8, error -110 [ 378.081262][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.125400][T10227] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 378.537107][ T5832] usb usb40-port1: attempt power cycle [ 378.740673][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 378.870398][T10246] overlayfs: failed lookup in lower (newroot/233, name='file0', err=-40): overlapping layers [ 379.303398][ T5832] usb usb40-port1: unable to enumerate USB device [ 379.574784][T10258] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 379.574831][T10258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.074483][T10264] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 381.643693][T10281] Invalid ELF header magic: != ELF [ 381.654589][T10281] overlayfs: overlapping lowerdir path [ 381.901274][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 382.016010][T10288] overlayfs: failed lookup in lower (newroot/235, name='file0', err=-40): overlapping layers [ 382.787829][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 382.840438][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 382.843676][T10301] overlayfs: failed lookup in lower (newroot/233, name='file0', err=-40): overlapping layers [ 382.896771][T10303] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 383.106920][T10310] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 383.106945][T10310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.107026][T10310] vhci_hcd vhci_hcd.0: Device attached [ 383.396681][ T5832] usb 42-1: SetAddress Request (2) to port 0 [ 383.396737][ T5832] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 383.487368][T10320] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 383.522390][T10311] vhci_hcd: connection reset by peer [ 383.547023][ T5551] vhci_hcd vhci_hcd.2: stop threads [ 383.547065][ T5551] vhci_hcd vhci_hcd.2: release socket [ 383.547187][ T5551] vhci_hcd vhci_hcd.2: disconnect device [ 384.506059][T10330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.683440][T10336] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 385.116779][T10339] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 385.179669][T10339] md: invalid raid superblock magic on ram0 [ 385.179683][T10339] md: ram0 does not have a valid v0.0 superblock, not importing! [ 385.179724][T10339] md: md_import_device returned -22 [ 386.602000][T10367] Invalid ELF header magic: != ELF [ 386.640893][T10367] overlay: Unknown parameter '/' [ 386.855790][T10374] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 387.346341][ T50] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 387.506741][ T50] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 387.507856][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.507881][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 387.507904][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 387.510013][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.510032][ T50] usb 6-1: Product: syz [ 387.510045][ T50] usb 6-1: Manufacturer: syz [ 387.510058][ T50] usb 6-1: SerialNumber: syz [ 387.512335][ T50] usb 6-1: config 0 descriptor?? [ 387.513876][T10377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.586336][ T50] rc_core: IR keymap rc-streamzap not found [ 387.586354][ T50] Registered IR keymap rc-empty [ 387.589358][ T50] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 387.591785][ T50] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 387.660238][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 387.791158][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 388.093073][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.093456][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.407889][T10394] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 388.408094][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.491704][ T5832] usb 42-1: device descriptor read/8, error -110 [ 388.501925][T10393] overlayfs: failed lookup in lower (newroot/246, name='file0', err=-40): overlapping layers [ 389.196405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 389.836247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 389.837025][ T5832] usb usb42-port1: attempt power cycle [ 390.123327][ T5898] usb 6-1: USB disconnect, device number 48 [ 390.418597][ T5832] usb usb42-port1: unable to enumerate USB device [ 391.417115][T10428] all (unregistering): Released all slaves [ 391.662329][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 391.707710][T10446] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 392.186578][ T43] audit: type=1800 audit(1792134763.116:370): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.968" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 393.735918][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 393.748125][T10474] overlayfs: failed lookup in lower (newroot/250, name='file0', err=-40): overlapping layers [ 394.145097][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 394.154523][T10484] overlayfs: failed lookup in lower (newroot/245, name='file0', err=-40): overlapping layers [ 394.391630][T10483] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 394.490320][T10492] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 394.609253][T10494] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 394.609281][T10494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.609337][T10494] vhci_hcd vhci_hcd.0: Device attached [ 394.876387][ T63] usb 44-1: SetAddress Request (6) to port 0 [ 394.876460][ T63] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 395.373588][T10495] vhci_hcd: connection reset by peer [ 395.375808][ T5551] vhci_hcd vhci_hcd.3: stop threads [ 395.375830][ T5551] vhci_hcd vhci_hcd.3: release socket [ 395.375872][ T5551] vhci_hcd vhci_hcd.3: disconnect device [ 395.557568][T10503] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 397.710111][T10533] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 397.710141][T10533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.997732][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 399.016450][T10542] overlayfs: failed lookup in lower (newroot/238, name='file0', err=-40): overlapping layers [ 399.921579][ T63] usb 44-1: device descriptor read/8, error -110 [ 400.339434][ T63] usb usb44-port1: attempt power cycle [ 400.917788][ T63] usb usb44-port1: unable to enumerate USB device [ 402.250399][T10590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 406.164731][ T43] audit: type=1800 audit(1792134777.091:371): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1000" name="file0" dev="overlay" ino=1565 res=0 errno=0 [ 406.168374][T10613] jffs2: notice: (10613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 406.332485][T10616] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 406.591826][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 407.922388][ C1] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 407.922433][ C1] sr 2:0:0:0: [sr0] tag#1 CDB: Release(6) [ 407.922452][ C1] sr 2:0:0:0: [sr0] tag#1 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 407.922471][ C1] sr 2:0:0:0: [sr0] tag#1 CDB[10]: 41 [ 407.927879][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 407.931670][T10633] overlayfs: failed lookup in lower (newroot/254, name='file0', err=-40): overlapping layers [ 410.071142][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 410.272458][T10667] overlayfs: failed lookup in lower (newroot/253, name='file0', err=-40): overlapping layers [ 410.291687][T10659] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.417114][T10659] md: invalid raid superblock magic on ram0 [ 410.417131][T10659] md: ram0 does not have a valid v0.0 superblock, not importing! [ 410.417184][T10659] md: md_import_device returned -22 [ 410.829390][T10674] Invalid ELF header magic: != ELF [ 410.984545][T10672] overlayfs: overlapping lowerdir path [ 411.753827][T10692] 8021q: VLANs not supported on gre0 [ 412.155688][T10693] Invalid ELF header magic: != ELF [ 413.571740][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 414.266764][T10725] Invalid ELF header magic: != ELF [ 414.280559][T10725] overlayfs: overlapping lowerdir path [ 414.387055][T10714] tipc: Cannot configure node identity twice [ 414.454866][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 414.568985][T10730] overlayfs: failed lookup in lower (newroot/264, name='file0', err=-40): overlapping layers [ 414.760505][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 414.927568][T10741] overlayfs: failed lookup in lower (newroot/261, name='file0', err=-40): overlapping layers [ 415.184796][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.185166][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.578539][T10751] jffs2: notice: (10751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 415.596943][T10751] jffs2: warning: (10751) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000 [ 418.597316][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 418.956321][ T853] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 419.108057][ T853] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 419.109028][ T853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.109052][ T853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.109074][ T853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 419.115435][ T853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.115456][ T853] usb 5-1: Product: syz [ 419.115468][ T853] usb 5-1: Manufacturer: syz [ 419.115479][ T853] usb 5-1: SerialNumber: syz [ 419.121198][ T853] usb 5-1: config 0 descriptor?? [ 419.125137][T10779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.162378][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'. [ 419.185191][T10784] tipc: Cannot configure node identity twice [ 419.216316][ T853] rc_core: IR keymap rc-streamzap not found [ 419.216335][ T853] Registered IR keymap rc-empty [ 419.217964][ T853] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 419.220060][ T853] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 419.436895][T10793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1041'. [ 419.486406][ T63] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 419.616314][ T63] usb 7-1: device descriptor read/64, error -71 [ 419.758209][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.758540][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.866351][ T63] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 419.996369][ T63] usb 7-1: device descriptor read/64, error -71 [ 420.106790][ T63] usb usb7-port1: attempt power cycle [ 420.446994][ T63] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 420.467064][ T63] usb 7-1: device descriptor read/8, error -71 [ 420.706345][ T63] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 420.726933][ T63] usb 7-1: device descriptor read/8, error -71 [ 420.837214][ T63] usb usb7-port1: unable to enumerate USB device [ 420.968622][T10808] tipc: Enabling of bearer rejected, failed to enable media [ 420.986111][T10808] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 420.986568][T10808] rt1719 0-0049: probe with driver rt1719 failed with error -16 [ 420.986699][T10808] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 420.990122][T10808] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 421.032131][T10808] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 421.410021][T10810] dummy0: left allmulticast mode [ 421.414584][T10810] lapb0: left allmulticast mode [ 421.750957][ T853] usb 5-1: USB disconnect, device number 49 [ 421.807974][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 421.955516][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.955902][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.978202][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 423.162579][T10845] overlayfs: failed lookup in lower (newroot/252, name='file0', err=-40): overlapping layers [ 423.166593][ T5551] bond0: (slave bond_slave_0): interface is now down [ 423.166610][ T5551] bond0: (slave bond_slave_1): interface is now down [ 423.278048][ T5551] bond0: (slave bond_slave_0): interface is now down [ 423.278142][ T5551] bond0: (slave bond_slave_1): interface is now down [ 423.407849][ T5551] bond0: now running without any active interface! [ 424.412848][ T5749] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 424.419631][T10858] input: syz1 as /devices/virtual/input/input12 [ 424.451668][T10858] db_root: cannot open: ./my_ [ 425.948894][T10889] 8021q: VLANs not supported on gre0 [ 427.070343][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 427.243174][T10903] overlayfs: failed lookup in lower (newroot/263, name='file0', err=-40): overlapping layers [ 427.829634][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 428.001816][T10908] overlayfs: failed lookup in lower (newroot/256, name='file0', err=-40): overlapping layers [ 428.129213][T10915] Invalid ELF header magic: != ELF [ 428.173511][T10915] overlayfs: overlapping lowerdir path [ 428.524280][T10922] tipc: Enabling of bearer rejected, failed to enable media [ 428.538634][T10922] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 428.539232][T10922] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 428.608346][ T43] audit: type=1800 audit(1792134799.541:372): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1077" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 431.248164][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 431.491040][T10968] 8021q: VLANs not supported on gre0 [ 431.496717][T10967] overlayfs: failed lookup in lower (newroot/279, name='file0', err=-40): overlapping layers [ 431.674857][ T5832] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 431.796327][ T5832] usb 6-1: device descriptor read/64, error -71 [ 432.036322][ T5832] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 432.173079][ T5832] usb 6-1: device descriptor read/64, error -71 [ 432.213006][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 432.276502][ T5832] usb usb6-port1: attempt power cycle [ 432.381285][T10980] overlayfs: failed lookup in lower (newroot/267, name='file0', err=-40): overlapping layers [ 432.416964][T10982] futex_wake_op: syz.3.1089 tries to shift op by 144; fix this program [ 432.627260][ T5832] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 432.650658][ T5832] usb 6-1: device descriptor read/8, error -71 [ 432.906547][ T5832] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 432.930875][ T5832] usb 6-1: device descriptor read/8, error -71 [ 433.048024][ T5832] usb usb6-port1: unable to enumerate USB device [ 433.601765][T10988] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 433.601791][T10988] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 433.724580][ T5551] bond0: (slave bond_slave_0): interface is now down [ 433.724596][ T5551] bond0: (slave bond_slave_1): interface is now down [ 433.826375][ T12] bond0: (slave bond_slave_0): interface is now down [ 433.826392][ T12] bond0: (slave bond_slave_1): interface is now down [ 433.831526][ T12] bond0: now running without any active interface! [ 438.459267][T11023] loop9: detected capacity change from 0 to 7 [ 438.490438][T11023] Dev loop9: unable to read RDB block 7 [ 438.490470][T11023] loop9: unable to read partition table [ 438.491525][T11023] loop9: partition table beyond EOD, truncated [ 438.491538][T11023] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 438.635391][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 439.012673][T11039] overlayfs: failed lookup in lower (newroot/274, name='file0', err=-40): overlapping layers [ 439.529030][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113372][ T35] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 440.238123][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 440.506328][ T35] usb 8-1: device descriptor read/64, error -71 [ 440.766330][ T35] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 440.896840][ T35] usb 8-1: device descriptor read/64, error -71 [ 441.009780][ T35] usb usb8-port1: attempt power cycle [ 441.211780][T11071] futex_wake_op: syz.1.1104 tries to shift op by 144; fix this program [ 441.456295][ T35] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 441.513028][ T35] usb 8-1: device descriptor read/8, error -71 [ 442.016297][ T35] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 442.172108][ T35] usb 8-1: device descriptor read/8, error -71 [ 442.358444][ T35] usb usb8-port1: unable to enumerate USB device [ 442.896740][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1105'. [ 443.256275][ T63] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 443.426601][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 443.441563][ T63] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 443.456243][ T63] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 443.457628][ T63] usb 6-1: config 0 has no interface number 0 [ 443.457906][ T63] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.457957][ T63] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 443.458905][ T63] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.459361][ T63] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.459561][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.502755][ T63] usb 6-1: config 0 descriptor?? [ 443.616322][T11087] md: superblock version 8 not known [ 443.616338][T11087] md: couldn't set array info. -22 [ 443.701870][T11090] md: invalid raid superblock magic on ram0 [ 443.701919][T11090] md: ram0 does not have a valid v0.0 superblock, not importing! [ 443.705821][T11090] md: md_import_device returned -22 [ 443.714296][ T63] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 444.904554][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 444.922660][T11105] Bluetooth: MGMT ver 1.23 [ 444.943265][T11107] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 444.954889][T11107] fuse: Bad value for 'fd' [ 445.226302][ T853] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 445.366330][ T853] usb 8-1: device descriptor read/64, error -71 [ 445.606367][ T853] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 445.737383][ T853] usb 8-1: device descriptor read/64, error -71 [ 445.849923][ T853] usb usb8-port1: attempt power cycle [ 446.148699][ T5832] usb 6-1: USB disconnect, device number 53 [ 446.151016][ T5832] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 446.227363][ T853] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 446.257746][ T853] usb 8-1: device descriptor read/8, error -71 [ 446.496891][ T853] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 446.520494][ T853] usb 8-1: device descriptor read/8, error -71 [ 446.639239][ T853] usb usb8-port1: unable to enumerate USB device [ 446.971133][T11145] Invalid ELF header magic: != ELF [ 446.983827][T11145] overlayfs: overlapping lowerdir path [ 447.275271][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 447.455683][T11148] overlayfs: failed lookup in lower (newroot/272, name='file0', err=-40): overlapping layers [ 448.113264][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 448.153991][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 448.342698][T11187] overlayfs: failed lookup in lower (newroot/282, name='file0', err=-40): overlapping layers [ 448.433157][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 448.552923][T11211] overlayfs: failed lookup in lower (newroot/274, name='file0', err=-40): overlapping layers [ 450.606374][ T853] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 450.737998][ T853] usb 7-1: device descriptor read/64, error -71 [ 450.926946][T11232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.976285][ T853] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 451.110997][ T853] usb 7-1: device descriptor read/64, error -71 [ 451.241868][T11248] 8021q: VLANs not supported on gre0 [ 451.397520][ T853] usb usb7-port1: attempt power cycle [ 451.736403][ T853] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 451.757660][ T853] usb 7-1: device descriptor read/8, error -71 [ 451.996394][ T853] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 452.021743][ T853] usb 7-1: device descriptor read/8, error -71 [ 452.127729][ T853] usb usb7-port1: unable to enumerate USB device [ 452.549877][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 452.662238][T11275] overlayfs: failed lookup in lower (newroot/283, name='file0', err=-40): overlapping layers [ 452.729890][T11270] loop9: detected capacity change from 0 to 7 [ 452.741047][T11270] Dev loop9: unable to read RDB block 7 [ 452.741110][T11270] loop9: unable to read partition table [ 452.742133][T11270] loop9: partition table beyond EOD, truncated [ 452.742248][T11270] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.927111][T11278] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 453.376447][ T1038] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 453.546816][ T1038] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 453.547727][ T1038] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.547742][ T1038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 453.547754][ T1038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 453.549342][ T1038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.549354][ T1038] usb 5-1: Product: syz [ 453.549361][ T1038] usb 5-1: Manufacturer: syz [ 453.549368][ T1038] usb 5-1: SerialNumber: syz [ 453.550644][ T1038] usb 5-1: config 0 descriptor?? [ 453.553848][T11280] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 453.606305][ T1038] rc_core: IR keymap rc-streamzap not found [ 453.606317][ T1038] Registered IR keymap rc-empty [ 453.606812][ T1038] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 453.608698][ T1038] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 453.746242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 453.766227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 453.806232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 453.962795][T11280] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 453.974410][T11280] FAULT_INJECTION: forcing a failure. [ 453.974410][T11280] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 453.974440][T11280] CPU: 3 UID: 0 PID: 11280 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT(full) [ 453.974461][T11280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.974472][T11280] Call Trace: [ 453.974478][T11280] [ 453.974486][T11280] dump_stack_lvl+0x100/0x190 [ 453.974518][T11280] should_fail_ex.cold+0x5/0xa [ 453.974543][T11280] _copy_from_user+0x2e/0xd0 [ 453.974564][T11280] do_seccomp+0x622/0x2730 [ 453.974588][T11280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.974614][T11280] ? __pfx_do_seccomp+0x10/0x10 [ 453.974637][T11280] ? xfd_validate_state+0x129/0x190 [ 453.974671][T11280] __do_fast_syscall_32+0x13a/0x8b0 [ 453.974686][T11280] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.974713][T11280] do_fast_syscall_32+0x32/0x70 [ 453.974733][T11280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.974757][T11280] RIP: 0023:0xf7fb4fec [ 453.974777][T11280] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 453.974785][T11280] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 453.974805][T11280] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 453.974818][T11280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.974831][T11280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.974843][T11280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.974856][T11280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.974881][T11280] [ 453.993561][ T63] usb 5-1: USB disconnect, device number 50 [ 455.382624][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 455.565536][T11313] overlayfs: failed lookup in lower (newroot/297, name='file0', err=-40): overlapping layers [ 456.230943][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 456.503824][T11327] 8021q: VLANs not supported on gre0 [ 456.743851][T11330] tipc: Cannot configure node identity twice [ 457.086016][ T43] audit: type=1800 audit(1792134827.997:373): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 458.865140][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 459.375539][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 460.499576][T11367] tipc: Cannot configure node identity twice [ 460.846344][ T1038] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 461.016319][ T1038] usb 5-1: Using ep0 maxpacket: 8 [ 461.018828][ T1038] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 461.021626][ T1038] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.021641][ T1038] usb 5-1: config 0 has no interface number 0 [ 461.021659][ T1038] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.021670][ T1038] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 461.021683][ T1038] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.021699][ T1038] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.021719][ T1038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.023153][ T1038] usb 5-1: config 0 descriptor?? [ 461.034953][ T1038] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 461.189794][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 461.427935][T11401] overlayfs: failed lookup in lower (newroot/303, name='file0', err=-40): overlapping layers [ 461.606371][ T63] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 461.776298][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 461.776991][ T63] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.782378][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.782415][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.784661][ T63] usb 7-1: config 0 descriptor?? [ 462.005092][ T63] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 463.558838][ T30] usb 5-1: USB disconnect, device number 51 [ 463.562234][ T30] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 463.982976][ T43] audit: type=1800 audit(1792134834.917:374): pid=11418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1167" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 464.696384][T11427] md: superblock version 8 not known [ 464.696402][T11427] md: couldn't set array info. -22 [ 465.067160][T11429] md: invalid raid superblock magic on ram0 [ 465.067496][T11429] md: ram0 does not have a valid v0.0 superblock, not importing! [ 465.068383][T11429] md: md_import_device returned -22 [ 465.616263][ T50] usb 7-1: USB disconnect, device number 49 [ 465.837011][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 465.961149][T11452] loop9: detected capacity change from 0 to 7 [ 465.972678][T11452] Dev loop9: unable to read RDB block 7 [ 465.972729][T11452] loop9: unable to read partition table [ 465.973044][T11452] loop9: partition table beyond EOD, truncated [ 465.973149][T11452] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.026286][T11461] 8021q: VLANs not supported on gre0 [ 467.303307][T11474] Console: switching to colour dummy device 80x25 [ 467.769515][T11475] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 467.785220][T11475] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 467.785350][T11475] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 467.785580][T11475] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 467.786307][T11475] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 467.948835][T11475] pci 0000:00:01.0: Adding to iommu group 1 [ 467.951975][T11475] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 467.951995][T11475] pci 0000:00:01.0: vgaarb: bridge control possible [ 467.952008][T11475] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 467.956293][T11475] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 467.962581][T11475] pci 0000:00:04.0: PCI bridge to [bus 01] [ 467.962750][T11475] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 467.962844][T11475] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 467.964364][T11475] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 467.964918][T11475] pci 0000:00:04.0: enabling Extended Tags [ 467.979817][T11475] pci 0000:00:04.0: Adding to iommu group 4 [ 468.001956][T11475] pci 0000:00:04.0: PCI bridge to [bus 01] [ 468.013027][T11475] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 468.013076][T11475] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 468.013231][T11475] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 468.021485][T11475] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 468.021508][T11475] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 468.021526][T11475] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 468.022277][T11475] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 468.022374][T11475] pci 0000:00:04.0: PCI bridge to [bus 01] [ 468.022480][T11475] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 468.031176][T11475] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 468.032072][T11475] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 468.043251][T11475] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 468.072085][T11475] [drm] Found bochs VGA, ID 0xb0c5. [ 468.072101][T11475] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 468.195538][T11475] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 468.513989][T11475] Console: switching to colour frame buffer device 160x50 [ 468.559324][T11475] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 468.604246][T11475] pcieport 0000:00:04.0: PCI INT A: failed to register GSI [ 468.604274][T11475] pcieport 0000:00:04.0: probe with driver pcieport failed with error -16 [ 468.719040][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 469.613546][T11510] tipc: Cannot configure node identity twice [ 470.255611][T11520] loop9: detected capacity change from 0 to 7 [ 470.266230][T11520] Dev loop9: unable to read RDB block 7 [ 470.266253][T11520] loop9: unable to read partition table [ 470.266596][T11520] loop9: partition table beyond EOD, truncated [ 470.266633][T11520] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.598983][T11524] tipc: Cannot configure node identity twice [ 471.581589][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 471.790626][T11550] overlayfs: failed lookup in lower (newroot/294, name='file0', err=-40): overlapping layers [ 471.873407][T11552] input: syz0 as /devices/virtual/input/input17 [ 471.932875][T11552] netlink: 'syz.3.1193': attribute type 3 has an invalid length. [ 473.033123][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 473.976073][T11578] tipc: Cannot configure node identity twice [ 474.176307][ T5832] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 474.406393][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 474.407138][ T5832] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.408202][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.408240][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.411941][ T5832] usb 5-1: config 0 descriptor?? [ 474.624336][ T5832] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 475.029732][T11593] tipc: Cannot configure node identity twice [ 475.823225][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 475.823568][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 475.845575][T11599] IPVS: Unknown mcast interface: lo [ 475.951829][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 476.122657][T11604] overlayfs: failed lookup in lower (newroot/291, name='file0', err=-40): overlapping layers [ 476.262038][T11606] openvswitch: netlink: Unknown key attributes 20 [ 476.726345][ T63] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 476.885946][T11613] dvmrp0: entered allmulticast mode [ 476.893738][T11613] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 477.005006][T11625] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 477.006158][T11625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1209'. [ 477.024495][T11625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.030244][T11625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.033462][T11625] bond0 (unregistering): Released all slaves [ 477.066158][T11627] syz.2.1209: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 477.066397][T11627] CPU: 3 UID: 0 PID: 11627 Comm: syz.2.1209 Not tainted syzkaller #0 PREEMPT(full) [ 477.066412][T11627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.066419][T11627] Call Trace: [ 477.066424][T11627] [ 477.066429][T11627] dump_stack_lvl+0x100/0x190 [ 477.066510][T11627] warn_alloc.cold+0x9e/0xb2 [ 477.066525][T11627] ? __pfx_warn_alloc+0x10/0x10 [ 477.066566][T11627] ? __lock_acquire+0x5c0/0x1f40 [ 477.066586][T11627] __vmalloc_node_range_noprof+0x123b/0x1420 [ 477.066605][T11627] ? __lock_acquire+0x5c0/0x1f40 [ 477.066623][T11627] ? __lock_acquire+0x5c0/0x1f40 [ 477.066642][T11627] ? __lock_acquire+0x5c0/0x1f40 [ 477.066660][T11627] ? do_replace+0x1c6/0x490 [ 477.066694][T11627] ? do_raw_spin_lock+0x128/0x260 [ 477.066708][T11627] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 477.066728][T11627] ? __lock_acquire+0x5c0/0x1f40 [ 477.066745][T11627] ? do_raw_spin_unlock+0x145/0x1e0 [ 477.066759][T11627] ? do_replace+0x1c6/0x490 [ 477.066772][T11627] __vmalloc_node_noprof+0xad/0xf0 [ 477.066790][T11627] ? do_replace+0x1c6/0x490 [ 477.066805][T11627] __vmalloc_noprof+0xa3/0x120 [ 477.066816][T11627] ? __pfx___vmalloc_noprof+0x10/0x10 [ 477.066833][T11627] do_replace+0x1c6/0x490 [ 477.066849][T11627] ? __pfx_do_replace+0x10/0x10 [ 477.066869][T11627] ? register_lock_class+0x3f/0x7b0 [ 477.066891][T11627] compat_do_replace+0x589/0x7a0 [ 477.066907][T11627] ? __pfx_compat_do_replace+0x10/0x10 [ 477.066930][T11627] ? bpf_lsm_capable+0x9/0x10 [ 477.066942][T11627] ? security_capable+0x80/0x260 [ 477.066962][T11627] do_ebt_set_ctl+0x3f4/0x4a0 [ 477.066977][T11627] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 477.066993][T11627] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 477.067004][T11627] ? futex_wake+0x4ea/0x5e0 [ 477.067022][T11627] ? nf_sockopt_find.isra.0+0x222/0x290 [ 477.067039][T11627] nf_setsockopt+0x8d/0xf0 [ 477.067056][T11627] ip_setsockopt+0xcb/0xf0 [ 477.067068][T11627] tcp_setsockopt+0xa7/0x100 [ 477.067083][T11627] smc_setsockopt+0x1b6/0xa40 [ 477.067116][T11627] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.067136][T11627] ? __pfx_smc_setsockopt+0x10/0x10 [ 477.067157][T11627] ? aa_sock_opt_perm+0x114/0x1e0 [ 477.067177][T11627] ? __pfx_smc_setsockopt+0x10/0x10 [ 477.067193][T11627] do_sock_setsockopt+0xf3/0x1d0 [ 477.067212][T11627] __sys_setsockopt+0x119/0x190 [ 477.067229][T11627] __ia32_sys_setsockopt+0xbc/0x160 [ 477.067242][T11627] ? __do_fast_syscall_32+0xb3/0x8b0 [ 477.067255][T11627] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.067286][T11627] __do_fast_syscall_32+0x13a/0x8b0 [ 477.067302][T11627] do_fast_syscall_32+0x32/0x70 [ 477.067315][T11627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.067330][T11627] RIP: 0023:0xf7f86fec [ 477.067344][T11627] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 477.067350][T11627] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 477.067361][T11627] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 477.067368][T11627] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 477.067375][T11627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.067381][T11627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.067388][T11627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.067402][T11627] [ 477.067814][T11627] Mem-Info: [ 477.067821][T11627] active_anon:4962 inactive_anon:960 isolated_anon:0 [ 477.067821][T11627] active_file:1746 inactive_file:9437 isolated_file:0 [ 477.067821][T11627] unevictable:1000 dirty:507 writeback:0 [ 477.067821][T11627] slab_reclaimable:6855 slab_unreclaimable:58510 [ 477.067821][T11627] mapped:27630 shmem:3951 pagetables:1192 [ 477.067821][T11627] sec_pagetables:317 bounce:0 [ 477.067821][T11627] kernel_misc_reclaimable:0 [ 477.067821][T11627] free:31225 free_pcp:14628 free_cma:0 [ 477.067851][T11627] Node 0 active_anon:4kB inactive_anon:20kB active_file:8kB inactive_file:1284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:464kB dirty:116kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:1148kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 477.067882][T11627] Node 1 active_anon:19844kB inactive_anon:3820kB active_file:6976kB inactive_file:36464kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:110056kB dirty:1912kB writeback:0kB shmem:15804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5548kB pagetables:3620kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 477.067960][T11627] Node 0 DMA free:2556kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 477.067993][T11627] lowmem_reserve[]: 0 259 259 259 259 [ 477.068012][T11627] Node 0 DMA32 free:18620kB boost:22528kB min:34232kB low:37156kB high:40080kB reserved_highatomic:2048kB free_highatomic:892kB active_anon:4kB inactive_anon:20kB active_file:8kB inactive_file:1284kB unevictable:0kB writepending:116kB zspages:56kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:8040kB local_pcp:460kB free_cma:0kB [ 477.068042][T11627] lowmem_reserve[]: 0 0 0 0 0 [ 477.068060][T11627] Node 1 DMA32 free:103724kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19844kB inactive_anon:3820kB active_file:6976kB inactive_file:36464kB unevictable:4000kB writepending:1912kB zspages:4340kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:50296kB local_pcp:9660kB free_cma:0kB [ 477.068137][T11627] lowmem_reserve[]: 0 0 0 0 0 [ 477.068162][T11627] Node 0 DMA: 173*4kB (U) 7*8kB (UM) 9*16kB (UM) 6*32kB (UM) 5*64kB (M) 7*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2556kB [ 477.068897][T11627] Node 0 DMA32: 451*4kB (UMEH) 136*8kB (UMEH) 97*16kB (UMEH) 139*32kB (UEH) 30*64kB (UMEH) 11*128kB (UMEH) 9*256kB (UM) 4*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 18620kB [ 477.069033][T11627] Node 1 DMA32: 860*4kB (UME) 494*8kB (UME) 271*16kB (UME) 164*32kB (UME) 274*64kB (UME) 78*128kB (UME) 39*256kB (UME) 30*512kB (UME) 7*1024kB (UM) 11*2048kB (UM) 1*4096kB (U) = 103632kB [ 477.069397][T11627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.069612][T11627] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 477.069623][T11627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.069632][T11627] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 477.069641][T11627] 15548 total pagecache pages [ 477.069645][T11627] 416 pages in swap cache [ 477.069649][T11627] Free swap = 109212kB [ 477.069654][T11627] Total swap = 124996kB [ 477.069659][T11627] 524155 pages RAM [ 477.069662][T11627] 0 pages HighMem/MovableOnly [ 477.069666][T11627] 216924 pages reserved [ 477.069671][T11627] 0 pages cma reserved [ 477.331933][ T50] usb 5-1: USB disconnect, device number 52 [ 477.586271][T11631] md: superblock version 8 not known [ 477.586284][T11631] md: couldn't set array info. -22 [ 477.626811][T11631] md: invalid raid superblock magic on ram0 [ 477.626824][T11631] md: ram0 does not have a valid v0.0 superblock, not importing! [ 477.627077][T11631] md: md_import_device returned -22 [ 478.556551][T11614] Bluetooth: hci4: command 0x1003 tx timeout [ 478.562379][ T5752] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 479.683240][ T43] audit: type=1326 audit(1792134850.617:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.1215" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x0 [ 479.685166][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 479.685322][ T63] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 479.698672][ T63] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 479.698769][ T63] usb 6-1: can't read configurations, error -71 [ 479.769802][ T5749] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 479.815655][T11656] tipc: Cannot configure node identity twice [ 479.836475][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 480.742044][T11676] ucma_write: process 1240 (syz.2.1220) changed security contexts after opening file descriptor, this is not allowed. [ 480.870409][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870484][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870528][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870572][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870615][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870659][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870701][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870742][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 480.870784][T11680] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 481.131715][T11688] tipc: Cannot configure node identity twice [ 481.917603][T11680] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1219'. [ 481.917684][T11680] openvswitch: netlink: Message has 512 unknown bytes. [ 482.285922][T11702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.269154][T11715] kernel profiling enabled (shift: 17) [ 483.282645][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 483.812273][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 484.110620][T11739] overlayfs: failed lookup in lower (newroot/320, name='file0', err=-40): overlapping layers [ 484.275172][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 484.281387][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 484.282295][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 484.283082][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 484.283283][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 484.452143][T11728] tipc: Cannot configure node identity twice [ 485.658348][T11756] tipc: Cannot configure node identity twice [ 486.259871][T11762] tipc: Cannot configure node identity twice [ 486.334889][ C2] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 486.334914][ C2] sr 2:0:0:0: [sr0] tag#15 CDB: Release(6) [ 486.334924][ C2] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 486.334973][ C2] sr 2:0:0:0: [sr0] tag#15 CDB[10]: 41 [ 487.617097][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 487.697571][ T50] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 487.846382][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 487.847901][ T50] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 487.848972][ T50] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 487.848994][ T50] usb 7-1: config 0 has no interface number 0 [ 487.849024][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.849044][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 487.849065][ T50] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.849087][ T50] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.849120][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.853331][ T50] usb 7-1: config 0 descriptor?? [ 487.875694][ T50] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 488.478608][T11822] tipc: Cannot configure node identity twice [ 488.616397][ T5821] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 488.746278][ T5821] usb 8-1: device descriptor read/64, error -71 [ 488.986310][ T5821] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 489.126452][ T5821] usb 8-1: device descriptor read/64, error -71 [ 489.246634][ T5821] usb usb8-port1: attempt power cycle [ 489.358503][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 489.537520][T11837] overlayfs: failed lookup in lower (newroot/311, name='file0', err=-40): overlapping layers [ 489.586533][ T5821] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 489.618633][ T5821] usb 8-1: device descriptor read/8, error -71 [ 489.866268][ T5821] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 489.886667][ T5821] usb 8-1: device descriptor read/8, error -71 [ 489.916316][T11834] ================================================================== [ 489.916331][T11834] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0xb87/0x2090 [ 489.916377][T11834] Read of size 2 at addr ffffc90004e2fcc0 by task iou-wrk-11833/11834 [ 489.916400][T11834] [ 489.916410][T11834] CPU: 1 UID: 0 PID: 11834 Comm: iou-wrk-11833 Not tainted syzkaller #0 PREEMPT(full) [ 489.916447][T11834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.916460][T11834] Call Trace: [ 489.916466][T11834] [ 489.916473][T11834] dump_stack_lvl+0x100/0x190 [ 489.916499][T11834] print_report+0x13d/0x4b0 [ 489.916543][T11834] ? _raw_spin_lock_irqsave+0x52/0x60 [ 489.916572][T11834] ? unwind_next_frame+0xb87/0x2090 [ 489.916595][T11834] kasan_report+0xdf/0x1c0 [ 489.916625][T11834] ? unwind_next_frame+0xb87/0x2090 [ 489.916652][T11834] unwind_next_frame+0xb87/0x2090 [ 489.916673][T11834] ? rcu_is_watching+0x5/0xc0 [ 489.916696][T11834] ? __pfx_stack_trace_consume_entry_nosched+0x10/0x10 [ 489.916724][T11834] arch_stack_walk+0x94/0xf0 [ 489.916747][T11834] ? rcu_is_watching+0x5/0xc0 [ 489.916768][T11834] stack_trace_save_tsk+0x16d/0x210 [ 489.916793][T11834] ? __pfx_stack_trace_save_tsk+0x10/0x10 [ 489.916819][T11834] ? find_held_lock+0x2b/0x80 [ 489.916843][T11834] ? do_raw_spin_unlock+0x145/0x1e0 [ 489.916866][T11834] proc_pid_stack+0x16e/0x2b0 [ 489.916889][T11834] proc_single_show+0x124/0x1f0 [ 489.916911][T11834] seq_read_iter+0x32f/0x1270 [ 489.916940][T11834] seq_read+0x344/0x4d0 [ 489.916962][T11834] ? __pfx_seq_read+0x10/0x10 [ 489.916985][T11834] ? irqentry_exit+0x24d/0xa10 [ 489.917008][T11834] ? common_file_perm+0x266/0x500 [ 489.917030][T11834] loop_rw_iter+0x305/0x6a0 [ 489.917058][T11834] __io_read+0x1084/0x1470 [ 489.917088][T11834] io_read+0x8d/0x230 [ 489.917104][T11834] ? __pfx_io_read+0x10/0x10 [ 489.917121][T11834] ? __lock_acquire+0x5c0/0x1f40 [ 489.917148][T11834] __io_issue_sqe+0xe8/0x7a0 [ 489.917175][T11834] io_issue_sqe+0x88/0x1540 [ 489.917192][T11834] ? find_held_lock+0x2b/0x80 [ 489.917212][T11834] ? kcov_remote_start+0x2e6/0x6d0 [ 489.917240][T11834] io_wq_submit_work+0x3b6/0xf70 [ 489.917262][T11834] io_worker_handle_work+0x60a/0x15e0 [ 489.917286][T11834] io_wq_worker+0x33e/0xe60 [ 489.917306][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 489.917326][T11834] ? lock_acquire+0x1d1/0x380 [ 489.917352][T11834] ? do_raw_spin_lock+0x128/0x260 [ 489.917371][T11834] ? find_held_lock+0x2b/0x80 [ 489.917398][T11834] ? ret_from_fork+0x79/0xd60 [ 489.917418][T11834] ? rcu_is_watching+0x13/0xc0 [ 489.917440][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 489.917458][T11834] ret_from_fork+0x730/0xd60 [ 489.917477][T11834] ? __pfx_ret_from_fork+0x10/0x10 [ 489.917494][T11834] ? native_load_gs_index+0x1e/0xc0 [ 489.917519][T11834] ? __switch_to+0x800/0x10f0 [ 489.917543][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 489.917561][T11834] ret_from_fork_asm+0x1a/0x30 [ 489.917585][T11834] [ 489.917592][T11834] [ 489.917597][T11834] The buggy address belongs to a vmalloc virtual mapping [ 489.917611][T11834] The buggy address belongs to the physical page: [ 489.917618][T11834] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805475fe00 pfn:0x5475f [ 489.917637][T11834] memcg:ffff88806decb202 [ 489.917644][T11834] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 489.917666][T11834] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 489.917683][T11834] raw: ffff88805475fe00 0000000000000000 00000001ffffffff ffff88806decb202 [ 489.917694][T11834] page dumped because: kasan: bad access detected [ 489.917702][T11834] page_owner tracks the page as allocated [ 489.917708][T11834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5746, tgid 5746 (syz-executor), ts 489149299983 [ 489.917736][T11834] post_alloc_hook+0xfd/0x120 [ 489.917756][T11834] get_page_from_freelist+0x110d/0x35d0 [ 489.917774][T11834] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 489.917796][T11834] alloc_pages_mpol+0x201/0x550 [ 489.917810][T11834] alloc_pages_noprof+0x1a/0x160 [ 489.917828][T11834] __vmalloc_node_range_noprof+0x833/0x1420 [ 489.917855][T11834] __vmalloc_node_noprof+0xad/0xf0 [ 489.917880][T11834] copy_process+0x803/0x8380 [ 489.917895][T11834] kernel_clone+0x176/0x9d0 [ 489.917911][T11834] __do_compat_sys_ia32_clone+0xd4/0x120 [ 489.917935][T11834] __do_fast_syscall_32+0x13a/0x8b0 [ 489.917952][T11834] do_fast_syscall_32+0x32/0x70 [ 489.917969][T11834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.917990][T11834] page last free pid 5746 tgid 5746 ts 489138505491 stack trace: [ 489.918003][T11834] __free_frozen_pages+0x79f/0x10f0 [ 489.918019][T11834] qlist_free_all+0x47/0xf0 [ 489.918042][T11834] kasan_quarantine_reduce+0x1a0/0x1f0 [ 489.918065][T11834] __kasan_slab_alloc+0x69/0x90 [ 489.918088][T11834] kmem_cache_alloc_noprof+0x269/0x6a0 [ 489.918111][T11834] do_getname+0x35/0x390 [ 489.918127][T11834] user_path_at+0x26/0x60 [ 489.918146][T11834] __ia32_sys_umount+0x109/0x190 [ 489.918170][T11834] __do_fast_syscall_32+0x13a/0x8b0 [ 489.918187][T11834] do_fast_syscall_32+0x32/0x70 [ 489.918203][T11834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.918224][T11834] [ 489.918228][T11834] Memory state around the buggy address: [ 489.918237][T11834] ffffc90004e2fb80: 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 [ 489.918249][T11834] ffffc90004e2fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.918261][T11834] >ffffc90004e2fc80: 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 00 00 [ 489.918272][T11834] ^ [ 489.918282][T11834] ffffc90004e2fd00: 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 [ 489.918296][T11834] ffffc90004e2fd80: 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 [ 489.918307][T11834] ================================================================== [ 489.918682][T11834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 490.134560][T11834] CPU: 1 UID: 0 PID: 11834 Comm: iou-wrk-11833 Not tainted syzkaller #0 PREEMPT(full) [ 490.137753][T11834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.141075][T11834] Call Trace: [ 490.142193][T11834] [ 490.143197][T11834] dump_stack_lvl+0x100/0x190 [ 490.144807][T11834] vpanic+0x553/0x970 [ 490.146131][T11834] ? __pfx_vpanic+0x10/0x10 [ 490.147711][T11834] ? unwind_next_frame+0xb87/0x2090 [ 490.149502][T11834] panic+0xd1/0xe0 [ 490.150893][T11834] ? __pfx_panic+0x10/0x10 [ 490.152430][T11834] ? unwind_next_frame+0xb87/0x2090 [ 490.154203][T11834] ? preempt_schedule_common+0x3c/0xb0 [ 490.156092][T11834] check_panic_on_warn.cold+0x19/0x34 [ 490.157935][T11834] end_report.part.0+0x3a/0x90 [ 490.159555][T11834] kasan_report.cold+0xe/0x18 [ 490.161216][T11834] ? unwind_next_frame+0xb87/0x2090 [ 490.162934][T11834] unwind_next_frame+0xb87/0x2090 [ 490.164630][T11834] ? rcu_is_watching+0x5/0xc0 [ 490.166202][T11834] ? __pfx_stack_trace_consume_entry_nosched+0x10/0x10 [ 490.168889][T11834] arch_stack_walk+0x94/0xf0 [ 490.170843][T11834] ? rcu_is_watching+0x5/0xc0 [ 490.172760][T11834] stack_trace_save_tsk+0x16d/0x210 [ 490.174876][T11834] ? __pfx_stack_trace_save_tsk+0x10/0x10 [ 490.177134][T11834] ? find_held_lock+0x2b/0x80 [ 490.179161][T11834] ? do_raw_spin_unlock+0x145/0x1e0 [ 490.181385][T11834] proc_pid_stack+0x16e/0x2b0 [ 490.183400][T11834] proc_single_show+0x124/0x1f0 [ 490.185501][T11834] seq_read_iter+0x32f/0x1270 [ 490.187518][T11834] seq_read+0x344/0x4d0 [ 490.189319][T11834] ? __pfx_seq_read+0x10/0x10 [ 490.191313][T11834] ? irqentry_exit+0x24d/0xa10 [ 490.193354][T11834] ? common_file_perm+0x266/0x500 [ 490.195549][T11834] loop_rw_iter+0x305/0x6a0 [ 490.197532][T11834] __io_read+0x1084/0x1470 [ 490.199475][T11834] io_read+0x8d/0x230 [ 490.201326][T11834] ? __pfx_io_read+0x10/0x10 [ 490.203344][T11834] ? __lock_acquire+0x5c0/0x1f40 [ 490.205583][T11834] __io_issue_sqe+0xe8/0x7a0 [ 490.207612][T11834] io_issue_sqe+0x88/0x1540 [ 490.209357][T11834] ? find_held_lock+0x2b/0x80 [ 490.211228][T11834] ? kcov_remote_start+0x2e6/0x6d0 [ 490.213308][T11834] io_wq_submit_work+0x3b6/0xf70 [ 490.215465][T11834] io_worker_handle_work+0x60a/0x15e0 [ 490.217875][T11834] io_wq_worker+0x33e/0xe60 [ 490.219924][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 490.222030][T11834] ? lock_acquire+0x1d1/0x380 [ 490.224061][T11834] ? do_raw_spin_lock+0x128/0x260 [ 490.226206][T11834] ? find_held_lock+0x2b/0x80 [ 490.228331][T11834] ? ret_from_fork+0x79/0xd60 [ 490.230431][T11834] ? rcu_is_watching+0x13/0xc0 [ 490.232494][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 490.234634][T11834] ret_from_fork+0x730/0xd60 [ 490.236627][T11834] ? __pfx_ret_from_fork+0x10/0x10 [ 490.238746][T11834] ? native_load_gs_index+0x1e/0xc0 [ 490.240815][T11834] ? __switch_to+0x800/0x10f0 [ 490.242640][T11834] ? __pfx_io_wq_worker+0x10/0x10 [ 490.244678][T11834] ret_from_fork_asm+0x1a/0x30 [ 490.246740][T11834] [ 490.248857][T11834] Kernel Offset: disabled [ 490.250691][T11834] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:14:21 Registers: info registers vcpu 0 CPU#0 RAX=ffff88802a532620 RBX=ffff88802b03c100 RCX=0000000000200b20 RDX=0000000000000001 RSI=0000000000200b20 RDI=ffff88802a532648 RBP=dffffc0000000000 RSP=ffffc90004e0f8a8 R8 =0000001be81b756b R9 =0000000000200b20 R10=0000000000200b20 R11=1ffff110054a64c9 R12=ffff88801df800a0 R13=0000000000a05152 R14=ffff88802a532620 R15=ffff88802b03c148 RIP=ffffffff81d98ccc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000007944b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b10895 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc90003b86d08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3265343030306552 R12=0000000000000000 R13=0000000000000033 R14=0000000000000002 R15=ffffc90003b87020 RIP=ffffffff85b108bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809584a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000004c5047 CR3=000000007944b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000012cc0 RCX=0000000000000000 RDX=1ffff9200083eef5 RSI=ffffffff8bcfeeb0 RDI=ffffc900041f7790 RBP=ffffc900041f7790 RSP=ffffc900041f76b8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc900041f77a8 R14=00000000000000ff R15=0000000000000000 RIP=ffffffff820ba2b0 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff3d078b300 ffffffff 00c00000 GS =0000 ffff88809594a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564d57b19f40 CR3=0000000053028000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=5521b8a9de61cff5 5b843ff51ee6fa81 5521b8a9de61cff5 5b843ff51ee6fa81 5521b8a9de61cff5 5b843ff51ee6fa81 5521b8a9de61cff5 5b843ff51ee6fa81 ZMM18=21f6cd104853d8f8 0a885459138197eb 21f6cd104853d8f8 0a885459138197eb 21f6cd104853d8f8 0a885459138197eb 21f6cd104853d8f8 0a885459138197eb ZMM19=c511000000000000 0000000000000004 c511000000000000 0000000000000003 c511000000000000 0000000000000002 c511000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b78affffffff88d9 3668ffffffff88d3 258dffffffff88de d425ffffffff88f4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d68fffffffff851f 08f3ffffffff88d9 38f6ffffffff8994 973dffffffff8255 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a19ffffffff82d7 fdcaffffffff88d9 3d9affffffff8b18 8d96ffffffff88d2 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff88d87f5e ffffffff8b6bf8fc ffffffff82f5cbe6 ffffffff88272808 ZMM25=0a8854590a885459 0a8854590a885459 0a8854590a885459 0a8854590a885459 0a8854590a885459 0a8854590a885459 0a8854590a885459 0a8854590a885459 ZMM26=4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 4853d8f84853d8f8 ZMM27=21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 21f6cd1021f6cd10 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c3110000c3110000 c3110000c3110000 c3110000c3110000 c3110000c3110000 c3110000c3110000 c3110000c3110000 c3110000c3110000 c3110000c3110000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b323f00 RCX=000000000000080b RDX=0000000000000000 RSI=ffffffff81b887fc RDI=ffff88801df00000 RBP=0000000000000003 RSP=ffffc900005f8fb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900005f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b7e99f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a820a CR3=00000000623da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000