last executing test programs: 16.206950076s ago: executing program 1 (id=5823): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x5451, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) close(r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0x5451, 0x0) 14.473818712s ago: executing program 0 (id=5824): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5450, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5450, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063e80)={0x4dd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8383a79fb95367"}) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000700)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "ceef64c0436dfb"}) r7 = mq_open(&(0x7f0000000000)='!:\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x1}) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5450, 0x0) 13.975155818s ago: executing program 0 (id=5825): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5451, 0x0) close(0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x102, 0x7, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) socket(0x1, 0x80003, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0x5450, 0x0) write$P9_RWSTAT(r1, 0x0, 0x0) mlockall(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 13.556835616s ago: executing program 1 (id=5826): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = memfd_create(&(0x7f0000000040)='}\xa4-}{\xfd', 0x3) dup(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x5450, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0) mq_open(0x0, 0x4a1483037702dbc5, 0x0, &(0x7f0000000080)={0x80, 0x2, 0x2, 0xffffffff}) socket$unix(0x1, 0x5, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x5452, &(0x7f0000000180)={0x3, 'veth1_vlan\x00'}) mq_open(&(0x7f0000001400)='\x89\x14\xc5H\x9d\xd3\x03(#X\xa61\x8b?\xef\x03\xe9\vQh?\x10\x13\x9dG\x0f\xc0\x9c\x05\xd2\xaa\xd0\x83\xa3\xf8\xe8_\x1d\xf3\xa3^\xed\xfe7\xa8\xfb&[\x8a\x85\xd4\xdd\xac\xb9IR\x15;ceF3\xc0\xd3\xca{\xbc\xcf\xce\xa8F\a_\x88q\xaf\a\xb5\b\xe3@\x12\x18\x10\x89\xe7\x97\x86G\x05.b\xd6\x0e\xa7\x1a\xc7J\tc\xf4\xb8p\xec\x9a\n\xe9\xa1\xbb\'', 0x841, 0x19, 0x0) 13.33711604s ago: executing program 1 (id=5827): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20000) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) 8.39657761s ago: executing program 0 (id=5828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_SCRNMAP(r0, 0x5451, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) 5.537597233s ago: executing program 0 (id=5829): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x40040, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) dup3(r2, r1, 0x0) r3 = accept4$packet(r0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x5451, 0x0) 2.630345602s ago: executing program 0 (id=5830): epoll_create1(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) pipe2$watch_queue(&(0x7f0000000040), 0xb82e336200000000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5450, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETCARRIER(r0, 0x5451, 0x0) 2.015234782s ago: executing program 1 (id=5831): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20240) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x83dd, 0x6}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x248000, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000000c0)=0xffffffff, 0x4) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xc00) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @local}, {0x6}, 0x10, {0x2, 0x4e24, @loopback}, 'ip_vti0\x00'}) r2 = signalfd4(r1, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x80000) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a0, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x59}}}}, [@NL80211_ATTR_BEACON_HEAD={0x17f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x4, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0xab8b, 0x440, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x9, 0xff, 0x7, 0x7ff}}, @void, @val={0x5, 0x6e, {0x1, 0x4f, 0x8, "a6b33de6e1429ce55c6cf91362a49132f74582429daee775f6def7a4bde8da28e3f2671cb78f76b5bef8b4c402e53ec3ccd45ed25499c02b842e2c11f83c52cc496211605e4dd92c074b1da73a9b41b85850905082271fc0634dbacb9f7686925742dae40145113cc0eec6"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4, 0x61}}, @void, [{0xdd, 0xc5, "5bd25277843d4340951e23c81441d59022e4de9865e8d7f9c1d30bb3077e74e1093385564dcf6975308ce80515c28f62ca802820611502b7c021b4ca257230e813ebea2f075871b78fce37ddc027663601db5ab20b4c2099cf61ca420ec24af245a8b769bbac45e3af8951690916c5850dd3d5f8615da3f00bee168710a7b2ae662a136971fdc11a2c9e31b9598ab3602621d7444761701f6bf55397bf0b8b934383b5acf034e22ecc6f11ee1355d0c652901b81311154cc45ce9b6b9460f20e3c53327b1d"}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) dup3(r3, 0xffffffffffffffff, 0x80000) r5 = syz_open_dev$hidraw(&(0x7f0000004880), 0x7, 0x48040) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000048c0), &(0x7f0000004900)={0x0, 0xfb, 0x1d, 0x2, 0x77, "e7ee2ceba004285b86d9734ac156fa15", "c5822e74257d52db"}, 0x1d, 0x1) 1.657573482s ago: executing program 1 (id=5832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = io_uring_setup(0x40c7, &(0x7f0000001440)) write$P9_RUNLINKAT(r0, 0x0, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x814}, 0x20004000) close(r4) close(r2) 380.214716ms ago: executing program 1 (id=5833): ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0x5451, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = epoll_create1(0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fcntl$lock(r1, 0x7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) r2 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r3) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5450, 0x0) 0s ago: executing program 0 (id=5834): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000}) ioctl$KVM_CREATE_VCPU(r4, 0xb702, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x141001, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53639' (ED25519) to the list of known hosts. syzkaller login: [ 135.395620][ T3312] cgroup: Unknown subsys name 'net' [ 135.663948][ T3312] cgroup: Unknown subsys name 'cpuset' [ 135.692843][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 136.337595][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 151.123734][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.241898][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.266643][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.468207][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.810492][ T3317] hsr_slave_0: entered promiscuous mode [ 152.819871][ T3317] hsr_slave_1: entered promiscuous mode [ 153.063962][ T3318] hsr_slave_0: entered promiscuous mode [ 153.078728][ T3318] hsr_slave_1: entered promiscuous mode [ 153.091069][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 153.092148][ T3318] Cannot create hsr debugfs directory [ 154.576522][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.650396][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.686129][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.759109][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.108884][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.137705][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.168361][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.206312][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.794287][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.087552][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.605320][ T3318] veth0_vlan: entered promiscuous mode [ 162.725997][ T3318] veth1_vlan: entered promiscuous mode [ 162.812068][ T3317] veth0_vlan: entered promiscuous mode [ 162.925869][ T3317] veth1_vlan: entered promiscuous mode [ 163.155226][ T3318] veth0_macvtap: entered promiscuous mode [ 163.243624][ T3318] veth1_macvtap: entered promiscuous mode [ 163.325067][ T3317] veth0_macvtap: entered promiscuous mode [ 163.387938][ T3317] veth1_macvtap: entered promiscuous mode [ 163.700688][ T994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.703758][ T994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.715763][ T994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.717424][ T994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.865527][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.866338][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.866712][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.867146][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.578767][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 168.401174][ T3481] fuse: root generation should be zero [ 172.918311][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 174.157771][ T3524] input: syz0 as /devices/virtual/input/input1 [ 176.297219][ T3536] input: syz0 as /devices/virtual/input/input2 [ 199.113472][ T3585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 201.750889][ T3615] input: syz0 as /devices/virtual/input/input3 [ 205.092982][ T3597] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 216.104889][ T3643] input: syz0 as /devices/virtual/input/input4 [ 239.771399][ T3706] input: syz0 as /devices/virtual/input/input5 [ 239.949212][ T3708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.021137][ T3773] serio: Serial port pts0 [ 273.011654][ T3808] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 274.177247][ T3827] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 275.242159][ T3834] input: syz0 as /devices/virtual/input/input6 [ 276.230185][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.120331][ T3854] input: syz0 as /devices/virtual/input/input7 [ 289.968498][ T3861] serio: Serial port pts0 [ 301.106402][ T3894] input: syz0 as /devices/virtual/input/input8 [ 309.536501][ T3902] serio: Serial port pts0 [ 331.086146][ T3939] Zero length message leads to an empty skb [ 347.058269][ T3988] input: syz0 as /devices/virtual/input/input9 [ 352.250081][ T4017] serio: Serial port pts0 [ 370.128342][ T4058] input: syz0 as /devices/virtual/input/input10 [ 376.215510][ T4099] serio: Serial port pts0 [ 384.807232][ T4113] serio: Serial port pts1 [ 393.127136][ T4123] serio: Serial port pts0 [ 399.943537][ T4130] serio: Serial port pts1 [ 416.174558][ T4183] serio: Serial port pts0 [ 423.811115][ T4195] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 437.767155][ T4260] input: syz0 as /devices/virtual/input/input11 [ 444.126628][ T4270] input: syz0 as /devices/virtual/input/input12 [ 460.172717][ T4330] input: syz0 as /devices/virtual/input/input13 [ 478.517240][ T4407] input: syz0 as /devices/virtual/input/input14 [ 482.485493][ T4424] input: syz0 as /devices/virtual/input/input15 [ 486.153923][ T4453] input: syz0 as /devices/virtual/input/input16 [ 493.853513][ T4487] input: syz0 as /devices/virtual/input/input17 [ 495.636799][ T4493] syz_tun: entered promiscuous mode [ 505.521610][ T4523] input: syz0 as /devices/virtual/input/input18 [ 508.355051][ T4534] input: syz0 as /devices/virtual/input/input19 [ 538.801878][ T4604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 550.168374][ T4642] input: syz0 as /devices/virtual/input/input20 [ 569.637536][ T4769] serio: Serial port pts0 [ 575.797046][ T4781] serio: Serial port pts0 [ 581.498776][ T4795] serio: Serial port pts0 [ 582.336049][ T4800] serio: Serial port pts1 [ 602.649049][ T4852] input: syz0 as /devices/virtual/input/input21 [ 613.778379][ T4934] binder: 4933:4934 ioctl 40046205 0 returned -22 [ 613.790230][ T4934] binder: 4934 RLIMIT_NICE not set [ 620.201464][ T4962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.974931][ T4999] input: syz0 as /devices/virtual/input/input22 [ 646.016405][ T5009] serio: Serial port pts0 [ 647.941731][ T5016] serio: Serial port pts1 [ 699.419926][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.796318][ T5386] serio: Serial port pts0 [ 749.441564][ T5463] input: syz0 as /devices/virtual/input/input23 [ 758.719026][ T5493] input: syz1 as /devices/virtual/input/input24 [ 770.667905][ T5542] input: syz0 as /devices/virtual/input/input25 [ 782.238651][ T5593] input: syz0 as /devices/virtual/input/input26 [ 785.846973][ T5598] serio: Serial port pts0 [ 815.544058][ T5725] input: syz0 as /devices/virtual/input/input27 [ 817.132404][ T5739] input: syz0 as /devices/virtual/input/input28 [ 823.115341][ T5791] input: syz0 as /devices/virtual/input/input29 [ 850.473927][ T5867] serio: Serial port pts1 [ 872.247115][ T994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.253785][ T994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.303541][ T994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.308026][ T994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.904074][ T5919] input: syz0 as /devices/virtual/input/input30 [ 875.481003][ T5924] serio: Serial port pts0 [ 898.214401][ T6002] serio: Serial port pts0 [ 899.654108][ T6010] input: syz0 as /devices/virtual/input/input31 [ 914.175070][ T6018] syz.1.920 uses obsolete (PF_INET,SOCK_PACKET) [ 915.027828][ T6022] input: syz0 as /devices/virtual/input/input32 [ 918.181559][ T6043] input: syz0 as /devices/virtual/input/input33 [ 920.330432][ T6050] serio: Serial port pts0 [ 935.997646][ T6063] serio: Serial port pts0 [ 948.502873][ T6128] binder: 6127:6128 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 948.503418][ T6128] binder: 6128 RLIMIT_NICE not set [ 949.010015][ T6128] binder: 6127:6128 ioctl c0306201 20000240 returned -14 [ 952.126493][ T6153] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 956.984887][ T6184] input: syz0 as /devices/virtual/input/input34 [ 1003.728797][ T6425] serio: Serial port pts0 [ 1008.048771][ T6459] serio: Serial port pts1 [ 1039.931478][ T6528] input: syz0 as /devices/virtual/input/input35 [ 1049.397420][ T6561] input: syz0 as /devices/virtual/input/input36 [ 1059.526587][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.677848][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.827369][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.003509][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.601782][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.648186][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.705740][ T30] bond0 (unregistering): Released all slaves [ 1062.002901][ T30] hsr_slave_0: left promiscuous mode [ 1062.021188][ T30] hsr_slave_1: left promiscuous mode [ 1062.143880][ T30] veth1_macvtap: left promiscuous mode [ 1062.144635][ T30] veth0_macvtap: left promiscuous mode [ 1062.145743][ T30] veth1_vlan: left promiscuous mode [ 1062.146298][ T30] veth0_vlan: left promiscuous mode [ 1068.543915][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.574937][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.959205][ T6571] hsr_slave_0: entered promiscuous mode [ 1070.972852][ T6571] hsr_slave_1: entered promiscuous mode [ 1074.278135][ T6571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1074.333564][ T6571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1074.378030][ T6571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1074.418722][ T6571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1076.015782][ T6571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.062316][ T6730] input: syz0 as /devices/virtual/input/input37 [ 1083.558633][ T6571] veth0_vlan: entered promiscuous mode [ 1083.654610][ T6571] veth1_vlan: entered promiscuous mode [ 1083.937924][ T6571] veth0_macvtap: entered promiscuous mode [ 1083.973528][ T6571] veth1_macvtap: entered promiscuous mode [ 1084.287919][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.294752][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.304067][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.322587][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.921889][ T6807] input: syz0 as /devices/virtual/input/input38 [ 1221.282190][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1416'. [ 1308.234812][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.238187][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.273220][ T7512] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1311.480657][ T7512] usb 1-1: Using ep0 maxpacket: 32 [ 1312.445138][ T7512] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.445805][ T7512] usb 1-1: config 0 has no interfaces? [ 1312.446552][ T7512] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=bb.c7 [ 1312.446853][ T7512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.480087][ T7512] usb 1-1: config 0 descriptor?? [ 1313.476526][ T7512] usb 1-1: string descriptor 0 read error: -71 [ 1313.492666][ T7512] usb 1-1: USB disconnect, device number 2 [ 1356.157005][ T8430] capability: warning: `syz.1.1724' uses deprecated v2 capabilities in a way that may be insecure [ 1400.823351][ T8715] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1400.835857][ T8715] veth0: entered promiscuous mode [ 1400.864177][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 1509.264868][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 1524.673264][ T9557] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1578.433030][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1627.037960][T10304] lo: entered promiscuous mode [ 1627.050557][T10303] lo: left promiscuous mode [ 1728.677865][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 2010.466169][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 2019.880469][T12579] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2020.061399][T12579] usb 1-1: Using ep0 maxpacket: 16 [ 2020.126238][T12579] usb 1-1: config 0 has no interfaces? [ 2020.183061][T12579] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2020.186787][T12579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.194142][T12579] usb 1-1: Product: syz [ 2020.199046][T12579] usb 1-1: Manufacturer: syz [ 2020.206638][T12579] usb 1-1: SerialNumber: syz [ 2020.238609][T12579] usb 1-1: config 0 descriptor?? [ 2026.456917][ T6439] usb 1-1: USB disconnect, device number 3 [ 2106.257135][T12579] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2106.420363][T12579] usb 1-1: Using ep0 maxpacket: 8 [ 2106.455065][T12579] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2106.459061][T12579] usb 1-1: config 179 has no interface number 0 [ 2106.465030][T12579] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2106.469965][T12579] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 2106.475100][T12579] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2106.479126][T12579] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2106.483259][T12579] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2106.488165][T12579] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2106.492723][T12579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.523249][T13530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2106.748103][T12579] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input40 [ 2107.296668][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2107.300979][T12579] usb 1-1: USB disconnect, device number 4 [ 2118.946401][T13601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.195434][T13601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.361744][T13601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.494412][T13601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.788740][ T6581] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.864601][ T14] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.949117][ T14] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.065397][ T6581] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2223.698927][T14318] serio: Serial port pts0 [ 2277.586533][T14659] dvmrp1: entered allmulticast mode [ 2297.215489][T14781] loop7: detected capacity change from 0 to 16385 [ 2454.858378][T15876] syz_tun: entered allmulticast mode [ 2454.883576][T15875] syz_tun: left allmulticast mode [ 2466.360264][T15926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4329'. [ 2499.554197][T16104] process 'syz.0.4388' launched './file0' with NULL argv: empty string added [ 2586.026919][T16599] lo: entered promiscuous mode [ 2586.033819][T16598] lo: left promiscuous mode [ 2596.318164][T12570] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 2596.556100][T12570] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2596.560958][T12570] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2596.599060][T12570] usb 1-1: string descriptor 0 read error: -22 [ 2596.603832][T12570] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2596.610778][T12570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.690785][T12570] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2596.694302][T12570] usb 1-1: MIDIStreaming interface descriptor not found [ 2596.864511][T12579] usb 1-1: USB disconnect, device number 5 [ 2597.616488][T16668] udevd[16668]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2598.805229][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 2627.396531][T16839] : renamed from ipvlan1 [ 2674.407797][T17120] lo: entered promiscuous mode [ 2674.431002][T17119] lo: left promiscuous mode [ 2698.151091][T17271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2698.163478][T17271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2716.183684][T17393] 8021q: VLANs not supported on ip6_vti0 [ 2789.535403][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4990'. [ 2830.731256][T18049] serio: Serial port pts0 [ 2840.594515][ T7512] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2840.626780][ T7512] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2850.281822][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2850.292074][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.620637][ T7512] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 2970.932272][ T7512] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2970.933057][ T7512] usb 1-1: can't read configurations, error -71 [ 2983.766825][T18844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2983.771276][T18844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2988.139729][ C1] hrtimer: interrupt took 36274276 ns [ 3003.198391][T18942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5363'. [ 3034.700933][T19082] serio: Serial port pts0 [ 3095.377211][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3095.560794][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 3095.581463][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3095.588572][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3095.595132][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.627994][ T11] usb 1-1: config 0 descriptor?? [ 3095.920438][ T11] usb 1-1: string descriptor 0 read error: -71 [ 3095.945611][ T11] hub 1-1:0.0: bad descriptor, ignoring hub [ 3095.952911][ T11] hub 1-1:0.0: probe with driver hub failed with error -5 [ 3096.026004][ T11] usb 1-1: USB disconnect, device number 8 [ 3173.762354][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 3173.882591][T19558] vxcan3: entered promiscuous mode [ 3174.443178][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 3202.391949][T19660] serio: Serial port pts0 [ 3203.451151][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5605'. [ 3217.578326][T19690] infiniband syz1: set down [ 3217.580682][T19690] infiniband syz1: added syz_tun [ 3217.855854][T19690] RDS/IB: syz1: added [ 3217.861793][T19690] smc: adding ib device syz1 with port count 1 [ 3217.871602][T19690] smc: ib device syz1 port 1 has no pnetid [ 3218.264689][T19693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3218.295128][T19693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3220.306307][T19693] smc: removing ib device syz1 [ 3225.538449][ T31] audit: type=1326 audit(3225.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19716 comm="syz.0.5621" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d55b9e8 code=0x0 [ 3244.880935][T19779] serio: Serial port pts0 [ 3271.484061][T19877] fuse: Bad value for 'fd' [ 3277.104284][T19892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5679'. [ 3363.073730][T20190] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5781'. [ 3365.866612][T20190] gretap0: entered promiscuous mode [ 3417.009203][T20355] ------------[ cut here ]------------ [ 3417.012552][T20355] WARNING: CPU: 0 PID: 20355 at arch/arm64/kvm/sys_regs.c:2353 kvm_set_vm_id_reg+0x60/0xf4 [ 3417.020981][T20355] Modules linked in: [ 3417.024137][T20355] CPU: 0 UID: 0 PID: 20355 Comm: syz.0.5834 Not tainted syzkaller #0 PREEMPT [ 3417.026041][T20355] Hardware name: linux,dummy-virt (DT) [ 3417.026947][T20355] pstate: a1402009 (NzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3417.027958][T20355] pc : kvm_set_vm_id_reg+0x60/0xf4 [ 3417.028679][T20355] lr : kvm_finalize_sys_regs+0x88/0x244 [ 3417.029829][T20355] sp : ffff80008a15bab0 [ 3417.030508][T20355] x29: ffff80008a15bab0 x28: fdf0000005210000 x27: 0000000000000000 [ 3417.031772][T20355] x26: 0000000000000000 x25: f6f000000ab21ca0 x24: 0000000000000000 [ 3417.033080][T20355] x23: f6f000000ab21ce8 x22: 0000000000000000 x21: f5ff800089e67bd0 [ 3417.034188][T20355] x20: f5ff800089e67000 x19: f6f000000ab21ca0 x18: 00000000ffffffff [ 3417.035220][T20355] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008a15ba90 [ 3417.036242][T20355] x14: ffff80008a15bd98 x13: ffff80008a15bd5a x12: 0000000000000000 [ 3417.037298][T20355] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000059 [ 3417.038494][T20355] x8 : ffff80008a15bda8 x7 : f2f00000050fb53c x6 : 0000000000000058 [ 3417.039827][T20355] x5 : fdf0000005210000 x4 : 0000000000000001 x3 : f5ff800089e67d18 [ 3417.041058][T20355] x2 : 1101001020110222 x1 : 0000000000000000 x0 : f5ff800089e67000 [ 3417.042596][T20355] Call trace: [ 3417.043378][T20355] kvm_set_vm_id_reg+0x60/0xf4 (P) [ 3417.044362][T20355] kvm_finalize_sys_regs+0x88/0x244 [ 3417.045149][T20355] kvm_arch_vcpu_run_pid_change+0x8c/0x36c [ 3417.045820][T20355] kvm_vcpu_ioctl+0x7f8/0x878 [ 3417.046469][T20355] __arm64_sys_ioctl+0xac/0x104 [ 3417.047243][T20355] invoke_syscall+0x48/0x110 [ 3417.048060][T20355] el0_svc_common.constprop.0+0x40/0xe0 [ 3417.048816][T20355] do_el0_svc+0x1c/0x28 [ 3417.049835][T20355] el0_svc+0x34/0x10c [ 3417.050646][T20355] el0t_64_sync_handler+0xa0/0xe4 [ 3417.051347][T20355] el0t_64_sync+0x1a4/0x1a8 [ 3417.052303][T20355] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 08:13:32 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b58b08 X00=0000000000000000 X01=0000000000000023 X02=0000000000000000 X03=0000000000000000 X04=0000000000000018 X05=0000000000000010 X06=396364736d686053 X07=7f7f7f7f7f7f7f7f X08=0101010101010101 X09=000000000002ffe8 X10=0000000000000001 X11=0000000000000001 X12=ffff800082a5fa00 X13=ffff80008a15b5b8 X14=00000000ffffffea X15=ffff80008a15b200 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=ffff800082c0cb8b X20=ffff8000824a4ca0 X21=ffff800082c0cb8b X22=ffff80008268a810 X23=0000000000000009 X24=0000000000000000 X25=0000000000004f83 X26=0000000000000000 X27=ffff80008268a810 X28=ffff800082c50510 X29=ffff80008a15b6b0 X30=ffff800081b58b08 SP=ffff80008a15b6b0 PSTATE=824023c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000018:0000000000000005 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776428:0000ffff8d776440 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776438:0000ffff8d776480 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8e2dca20:0000ffff8d776420 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776458:0000ffff8d776430 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776468:0000ffff8d776460 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776468:0000ffff8d776460 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8d776478:0000ffff8d776470 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffcb3041e0:0000ffffcb3041e0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffcb3041b0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080398ffc X00=ffff8000882abc80 X01=ffff80008297a000 X02=0000000100000000 X03=fffffffffffffff1 X04=fffffffffffffff2 X05=ffff8000826fae88 X06=000000000000010f X07=f2f00000030bd77c X08=0000000000000090 X09=0000000000000110 X10=0000000000000000 X11=0000000000000000 X12=0000000000000000 X13=0000000000000000 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=fbf0000003f8e000 X20=ffff8000882abdb4 X21=f0f0000004302b40 X22=0000000000000101 X23=fbf000000314ddc0 X24=0000000000000030 X25=0000000000000000 X26=61c8864680b583eb X27=0000000000000002 X28=0000000003f8e020 X29=ffff8000882abb40 X30=ffff80008039bdd4 SP=ffff8000882abb00 PSTATE=61402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff000000000000:ff00000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff000000f0000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3333333333333333:3333333333333333 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000cccccc00 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaaeca53c90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaaeca50f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff7c3dbe0:0000fffff7c3dbe0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff7c3dbb0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000