last executing test programs: 20m12.021702767s ago: executing program 1 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 20m10.973569572s ago: executing program 1 (id=330): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) 20m9.930612957s ago: executing program 1 (id=331): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect$uac1(0x0, 0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000020fd07040040000102030109027c00030104808109040000"], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000010000000000fcdbdf250a0000000000000000000000080017e288c246d36f573dbd225cac1b88c623c72ce3896d9d2530330341ba2aa81ac652da50ea8d13e4cda23d2741fa0f40fb51162e190d50a31f572ab913ec85f8000efd7afac4cd21167e7aff4dd990726500744a090c51"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0xff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001fc0)=[{{&(0x7f00000002c0)=@generic, 0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/170}, {&(0x7f0000000800)=""/4096}, {&(0x7f0000001800)=""/216}, {&(0x7f0000001900)=""/136}, {&(0x7f00000019c0)=""/62}], 0x0, &(0x7f0000001a40)=""/189}, 0x1ff}, {{&(0x7f0000001b00)=@rc={0x1f, @none}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001b80)=""/106}, {&(0x7f0000001c00)=""/151}, {&(0x7f0000001cc0)=""/157}, {&(0x7f0000001d80)=""/69}, {&(0x7f0000001e00)=""/201}], 0x0, &(0x7f0000001f40)=""/98}, 0x2}], 0x800000000000178, 0x40010180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x2, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000200)={0x38, 0x0, 0x41, 0x4, 0xe, 0x9, 0x0, 0x100000000, 0x0, 0x6}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 20m7.233989173s ago: executing program 1 (id=339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x7, &(0x7f0000000800)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @tail_call], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r3 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010106}, {@private}, {@remote}, {@remote}, {@private}, {@remote}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x80) r5 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030345e00a7005e28112e2d2b295e3a2605e800e85b212e2f215b28232c00002b002300d0002000007153000000000000000024f65fbd491cf2a95dcce02aef018d15d26893c9b537c3ea5c4562f8e62cdfd4fa6584ccd52264f0442d989f817bfc24c4bc46f8c88dcbb8f21ee42755b3b8d3e6d78059c2eb0ab85fe8965959e3c7e6f23819a6a7fadb1c65c103864ab2666819ee23cc0fedfe61dc88cb256257d335da3dac1dae93fd275436940aa49c55c40c417e5bbf8b90fe04e755f36881146c37759596745c0fef3b03a443bc2856632161c1e339c6629035f8c9406801f5cb88df39af35c8613a7ae4cb61672636378134f67de13076366cd62c1ea0ccbffd6b6d083f8339854e1cc1cbfc85d20a0222f2816790016e257f5fe12e663e3ea5fb22abdb06126514117e9a08522d85c3a9e6f6521122c3c9fc14732058ecddc2714285f0d704dd3c9a8427a3f1d93cb96b40215c0075646600726663343534332867636d28616573292900de75a82269478b8375d05dd94781bae7eefc9b490781ce6debfa67b9570d4268069a1d6ccf35c8b74b25ea42b4a659e52359f1bb112a198579c734703942a5bf49423adc6c728743748566ed800edbe33e9f4add1ba7b526baac20734725310abbc5f0b0a60df20cf2727a1c507d2d892ac664b0c8d9cc49"], 0x187) r6 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x101240, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x339}}, './file0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r8, 0xffffffffffffffff, 0x0) 20m6.27019478s ago: executing program 1 (id=340): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 20m4.160102802s ago: executing program 1 (id=355): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, r5, 0x0, 0x4ff9c, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x4, 0xc0}) 19m48.849910508s ago: executing program 32 (id=355): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, r5, 0x0, 0x4ff9c, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x4, 0xc0}) 12.1465142s ago: executing program 4 (id=3571): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e0c0)="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", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x3, 0xfffffffc}]}) syz_usb_disconnect(r1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x80) renameat2(r8, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 11.280582498s ago: executing program 2 (id=3573): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r7) keyctl$unlink(0x9, r8, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r9, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 9.967293325s ago: executing program 3 (id=3575): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, 0x0, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r8, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 9.545583565s ago: executing program 2 (id=3576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x80880) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 9.154501623s ago: executing program 0 (id=3577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x80880) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcba}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}]}]}, 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 7.441616001s ago: executing program 2 (id=3578): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES32=r3, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) 7.440685192s ago: executing program 0 (id=3579): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 7.071170751s ago: executing program 0 (id=3580): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r7) keyctl$unlink(0x9, r8, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r9, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 6.644596469s ago: executing program 4 (id=3581): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000000000000f0000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) 6.539368834s ago: executing program 3 (id=3582): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = socket$phonet(0x23, 0x2, 0x1) dup2(0xffffffffffffffff, r6) 6.428503119s ago: executing program 2 (id=3583): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = socket$phonet(0x23, 0x2, 0x1) dup2(0xffffffffffffffff, r6) 5.438538678s ago: executing program 3 (id=3584): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e105", 0x13}, {&(0x7f0000000040)="00000000000000a0c8d492507b", 0xd}], 0x2}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x0, 0x0, 0x0) 5.258355529s ago: executing program 0 (id=3585): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES32=r3, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) 5.186817884s ago: executing program 4 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x80880) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 3.141382038s ago: executing program 3 (id=3587): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) epoll_create1(0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x400885d) 3.136216636s ago: executing program 0 (id=3595): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000000000000f0000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) 3.132470327s ago: executing program 2 (id=3588): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = socket$phonet(0x23, 0x2, 0x1) dup2(0xffffffffffffffff, r6) 2.163001284s ago: executing program 2 (id=3589): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f0000000140)=[{r6, 0x44}], 0x1, 0xe6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.153993066s ago: executing program 4 (id=3598): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = socket$phonet(0x23, 0x2, 0x1) dup2(0xffffffffffffffff, r6) 1.887754955s ago: executing program 3 (id=3590): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, 0x0, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r8, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 1.11962619s ago: executing program 0 (id=3591): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e0c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff70, 0x0, 0x3, 0xfffffffc}]}) syz_usb_disconnect(r1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x80) renameat2(r8, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 880.235081ms ago: executing program 4 (id=3592): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = socket$phonet(0x23, 0x2, 0x1) dup2(0xffffffffffffffff, r6) 381.617976ms ago: executing program 3 (id=3593): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, 0x0, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r8, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 0s ago: executing program 4 (id=3594): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES32=r3, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r8, &(0x7f00000001c0)=""/70, 0xffffffd8) kernel console output (not intermixed with test programs): libceph: connect (1)[c::]:6789 error -22 [ 889.312622][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 889.589281][ T61] libceph: connect (1)[c::]:6789 error -22 [ 889.637885][T16733] ceph: No mds server is up or the cluster is laggy [ 889.647160][ T55] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 889.685598][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 889.846978][ T55] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 889.852505][ T55] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 889.856672][ T55] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.860906][ T55] usb 9-1: config 0 has no interface number 0 [ 889.863526][ T55] usb 9-1: config 0 interface 205 has no altsetting 0 [ 889.912695][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.928673][ T55] usb 9-1: Product: syz [ 889.936035][ T55] usb 9-1: Manufacturer: syz [ 889.947844][ T55] usb 9-1: SerialNumber: syz [ 890.027180][ T55] usb 9-1: config 0 descriptor?? [ 890.069062][ T55] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 890.097068][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 890.157817][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 890.161060][T16752] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2394'. [ 890.164107][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 890.167123][T16752] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2394'. [ 890.170284][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 890.210833][ T55] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 890.220800][ T55] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 890.237420][ T55] usb 9-1: media controller created [ 890.533767][T16725] Bluetooth: hci4: command 0x0406 tx timeout [ 891.885731][T16767] usb usb5: usbfs: process 16767 (syz.0.2397) did not claim interface 0 before use [ 892.020350][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.029484][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 892.033163][ T55] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 892.042830][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input41 [ 892.051377][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 892.054400][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 892.073956][ T55] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 892.143126][T14749] usb 9-1: USB disconnect, device number 17 [ 892.178999][T14749] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 893.887455][T16792] siw: device registration error -23 [ 894.152181][ T850] libceph: connect (1)[c::]:6789 error -22 [ 894.178112][T16794] binder: 16789:16794 ioctl 400c620e 0 returned -14 [ 894.712424][T16795] ceph: No mds server is up or the cluster is laggy [ 894.950766][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 895.274382][T16806] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 895.277184][T16806] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.281726][T16806] vhci_hcd vhci_hcd.0: Device attached [ 895.355032][T16812] CIFS: Attempting to mount //127.0.0.1/share [ 895.568488][ T850] usb 38-1: SetAddress Request (34) to port 0 [ 895.572633][ T850] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 895.625275][T16807] vhci_hcd: connection reset by peer [ 895.639158][T15086] vhci_hcd vhci_hcd.0: stop threads [ 895.646664][T15086] vhci_hcd vhci_hcd.0: release socket [ 895.652353][T15086] vhci_hcd vhci_hcd.0: disconnect device [ 895.817845][T16822] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 896.401233][T16812] CIFS: VFS: Error connecting to socket. Aborting operation. [ 896.404525][T16812] CIFS: VFS: cifs_mount failed w/return code = -4 [ 896.936605][T16848] 9pnet_virtio: no channels available for device syz [ 897.473284][T16844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 897.691516][T16861] lo speed is unknown, defaulting to 1000 [ 897.727399][T16862] ptrace attach of "/syz-executor exec"[7900] was attempted by " [ 897.796249][T16862] tipc: Enabled bearer , priority 10 [ 897.913670][T16861] lo speed is unknown, defaulting to 1000 [ 898.014847][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 898.629078][T16881] fuse: Bad value for 'fd' [ 898.648970][T16872] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 898.787820][ T5878] tipc: Node number set to 3145728 [ 898.818537][T14749] libceph: connect (1)[c::]:6789 error -22 [ 898.821405][T14749] libceph: mon0 (1)[c::]:6789 connect error [ 898.972385][T16866] ceph: No mds server is up or the cluster is laggy [ 899.276834][T16896] 9pnet_virtio: no channels available for device syz [ 899.783109][T16907] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 900.768431][ T42] audit: type=1800 audit(1787015871.119:1231): pid=16918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2433" name="file0" dev="overlay" ino=3944 res=0 errno=0 [ 900.889440][ T850] usb 38-1: device descriptor read/8, error -110 [ 900.932980][ T41] Process accounting resumed [ 901.812008][T16903] input: syz0 as /devices/virtual/input/input42 [ 902.043147][T16903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.052061][T16903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.079230][T16933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 902.081756][T16933] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.085516][T16933] vhci_hcd vhci_hcd.0: Device attached [ 902.148630][ T850] usb usb38-port1: attempt power cycle [ 902.363707][T12250] usb 42-1: SetAddress Request (18) to port 0 [ 902.373653][T12250] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 902.738638][ T850] usb usb38-port1: unable to enumerate USB device [ 903.293276][T16934] vhci_hcd: connection reset by peer [ 903.314089][T15086] vhci_hcd vhci_hcd.2: stop threads [ 903.316408][T15086] vhci_hcd vhci_hcd.2: release socket [ 903.318748][T15086] vhci_hcd vhci_hcd.2: disconnect device [ 904.193923][T16947] netlink: 'syz.3.2437': attribute type 2 has an invalid length. [ 904.707463][T16962] 9pnet_virtio: no channels available for device syz [ 906.363980][T16985] tipc: Enabling of bearer rejected, failed to enable media [ 906.476700][ T42] audit: type=1800 audit(1787015876.779:1232): pid=16986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2444" name="file0" dev="overlay" ino=2799 res=0 errno=0 [ 906.573525][T16985] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 906.614723][T16988] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 906.806262][T16988] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 907.472791][T12250] usb 42-1: device descriptor read/8, error -110 [ 907.695656][T16998] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 907.874847][T12250] usb usb42-port1: attempt power cycle [ 908.599344][ T850] libceph: connect (1)[c::]:6789 error -22 [ 908.601938][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 908.778670][T12250] usb usb42-port1: unable to enumerate USB device [ 908.927593][T17018] loop5: detected capacity change from 0 to 6 [ 908.934302][T17018] Dev loop5: unable to read RDB block 6 [ 908.937125][T17018] loop5: unable to read partition table [ 908.939492][T17018] loop5: partition table beyond EOD, truncated [ 908.941615][T17018] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.143277][T17009] ceph: No mds server is up or the cluster is laggy [ 909.151946][T12250] libceph: connect (1)[c::]:6789 error -22 [ 909.155050][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 909.971274][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 910.009043][T17025] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 910.017112][T17025] fuse: Bad value for 'fd' [ 910.416159][T17033] netlink: 'syz.4.2450': attribute type 2 has an invalid length. [ 910.507177][T17037] kvm: pic: level sensitive irq not supported [ 912.256589][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 912.290788][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2460'. [ 912.297131][T17060] bond_slave_0: entered allmulticast mode [ 912.478416][T17060] lo speed is unknown, defaulting to 1000 [ 912.642368][ T42] audit: type=1800 audit(1787015882.989:1233): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2458" name="file0" dev="overlay" ino=3655 res=0 errno=0 [ 913.354719][T17060] lo speed is unknown, defaulting to 1000 [ 915.555786][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 915.559425][T17093] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2464'. [ 915.563225][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 915.566822][T17093] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2464'. [ 915.571076][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 916.287116][T17098] CIFS: Attempting to mount //127.0.0.1/share [ 917.275030][T17098] CIFS: VFS: Error connecting to socket. Aborting operation. [ 917.280438][T17098] CIFS: VFS: cifs_mount failed w/return code = -4 [ 917.535812][T17116] 9pnet_virtio: no channels available for device syz [ 917.743948][ T41] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 917.905136][ T41] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 917.910982][ T41] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.916549][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 917.921718][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.927151][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 917.933125][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.941565][ T41] usb 7-1: config 0 descriptor?? [ 917.947830][T17112] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.117749][ T41] usbhid 7-1:0.0: can't add hid device: -71 [ 919.401479][ T41] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 919.411658][ T41] usb 7-1: USB disconnect, device number 24 [ 919.423961][ T42] audit: type=1800 audit(1787015889.779:1234): pid=17136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2478" name="zoned" dev="configfs" ino=65232 res=0 errno=0 [ 919.435120][ T42] audit: type=1800 audit(1787015889.789:1235): pid=17136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2478" name="zone_nr_conv" dev="configfs" ino=65233 res=0 errno=0 [ 919.681665][ T42] audit: type=1800 audit(1787015890.029:1236): pid=17142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2478" name="zoned" dev="configfs" ino=67026 res=0 errno=0 [ 919.743014][ T42] audit: type=1800 audit(1787015890.089:1237): pid=17142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2478" name="power" dev="configfs" ino=67027 res=0 errno=0 [ 920.582328][T17148] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 920.584467][T17148] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 920.590891][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 920.832730][T17156] CIFS: Attempting to mount //127.0.0.1/share [ 921.853850][T17156] CIFS: VFS: Error connecting to socket. Aborting operation. [ 921.856242][T17156] CIFS: VFS: cifs_mount failed w/return code = -4 [ 921.928250][T17166] lo: entered allmulticast mode [ 922.251862][T17177] Invalid ELF header magic: != ELF [ 922.281733][T17166] lo: left allmulticast mode [ 922.367046][T17180] 9pnet_virtio: no channels available for device syz [ 923.381399][T17186] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 924.420882][ T6491] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 924.585065][ T6491] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 924.589005][ T6491] usb 9-1: config 0 has no interfaces? [ 924.590973][ T6491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.594918][ T6491] usb 9-1: config 0 descriptor?? [ 924.875596][ T6491] usb 9-1: USB disconnect, device number 18 [ 926.046891][T17227] netlink: 'syz.2.2498': attribute type 2 has an invalid length. [ 927.716036][T17241] 9pnet_virtio: no channels available for device syz [ 928.423987][T17252] Invalid ELF header magic: != ELF [ 928.883757][ T6491] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 929.035360][ T6491] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.039813][ T6491] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.043486][ T6491] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 929.047124][ T6491] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 929.050895][ T6491] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.110023][ T6491] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.116254][ T6491] usb 8-1: config 0 descriptor?? [ 929.123259][T17251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 929.425977][T17263] lo speed is unknown, defaulting to 1000 [ 929.443713][ T5878] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 929.505089][T17263] lo speed is unknown, defaulting to 1000 [ 929.606753][ C1] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 929.610014][ C1] sr 2:0:0:0: [sr0] tag#21 CDB: Test Unit Ready [ 929.751359][ T5878] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 929.812152][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 929.899776][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2510'. [ 929.903042][T17271] bond_slave_0: entered allmulticast mode [ 930.049553][T17271] lo speed is unknown, defaulting to 1000 [ 930.441400][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.449399][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 930.455811][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 930.460018][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 930.465292][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 930.469283][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 930.473257][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 930.477360][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 930.481253][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 930.485322][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 930.489220][ T5878] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 930.493002][ T5878] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 930.499101][ T5878] usb 7-1: config 1 interface 0 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 930.505533][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.508055][ T5878] usb 7-1: Product: syz [ 930.509660][ T5878] usb 7-1: Manufacturer: syz [ 930.511197][ T5878] usb 7-1: SerialNumber: syz [ 930.545073][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.548295][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.551042][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.558051][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.560458][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.563245][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.566131][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.571293][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.574546][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.577285][T17261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 930.586607][ T5878] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 930.591839][ T5878] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 930.612639][ T5878] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 930.664689][ T5878] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 930.721074][ T5878] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 930.723680][ T5878] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 930.731952][ T5878] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 931.744533][T17271] lo speed is unknown, defaulting to 1000 [ 931.906677][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 932.027097][T17289] lo speed is unknown, defaulting to 1000 [ 932.029850][T17289] lo speed is unknown, defaulting to 1000 [ 932.061048][ T6491] usbhid 8-1:0.0: can't add hid device: -71 [ 932.138039][T17289] lo speed is unknown, defaulting to 1000 [ 932.143212][T17289] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 932.155399][T17289] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 932.162693][T17289] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 932.169940][T17288] lo speed is unknown, defaulting to 1000 [ 932.195246][T17289] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 932.487863][ T6491] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 932.643988][ T6491] usb 8-1: USB disconnect, device number 26 [ 932.664038][T17288] lo speed is unknown, defaulting to 1000 [ 932.685391][T17289] lo speed is unknown, defaulting to 1000 [ 932.716005][T17288] lo speed is unknown, defaulting to 1000 [ 932.739272][T12250] usb 7-1: USB disconnect, device number 25 [ 932.776447][T17289] lo speed is unknown, defaulting to 1000 [ 932.878679][T12250] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 932.905548][T12250] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 932.913846][T12250] keyspan 7-1:1.0: device disconnected [ 932.919158][T17289] lo speed is unknown, defaulting to 1000 [ 932.991896][T17289] lo speed is unknown, defaulting to 1000 [ 934.728523][T17317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 934.731371][T17317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.095630][T17317] vhci_hcd vhci_hcd.0: Device attached [ 935.466075][ T850] usb 44-1: SetAddress Request (22) to port 0 [ 935.466156][ T850] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 935.697975][ T42] audit: type=1400 audit(1787015906.049:1238): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17324 comm="syz.2.2521" [ 935.702053][T17329] 9p: Bad value for 'rfdno' [ 937.080505][T17319] vhci_hcd: connection reset by peer [ 937.084608][ T7169] vhci_hcd vhci_hcd.3: stop threads [ 937.086644][ T7169] vhci_hcd vhci_hcd.3: release socket [ 937.089038][ T7169] vhci_hcd vhci_hcd.3: disconnect device [ 937.356926][T17337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2523'. [ 937.361767][T17337] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 937.666366][T17342] Invalid ELF header magic: != ELF [ 939.491374][T17367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.500456][T17367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.606507][ T850] usb 44-1: device descriptor read/8, error -110 [ 941.283693][ T6491] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 941.334712][ T850] usb usb44-port1: attempt power cycle [ 941.345414][T17378] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 941.454635][ T6491] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 941.460678][ T6491] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 941.464979][ T6491] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 941.469130][ T6491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.492001][ T6491] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 941.551782][ T6491] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 941.857621][T17376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 941.914881][ T850] usb usb44-port1: unable to enumerate USB device [ 942.105313][T17397] netlink: zone id is out of range [ 942.110857][T17397] netlink: zone id is out of range [ 942.116322][T17397] netlink: zone id is out of range [ 942.122066][T17397] netlink: zone id is out of range [ 942.127132][T17397] netlink: zone id is out of range [ 942.144922][T17397] netlink: zone id is out of range [ 942.149734][T17397] netlink: zone id is out of range [ 942.151595][T17397] netlink: zone id is out of range [ 942.155560][T17397] netlink: zone id is out of range [ 942.163311][T17397] netlink: zone id is out of range [ 943.393673][ T6491] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 943.543620][ T6491] usb 7-1: Using ep0 maxpacket: 32 [ 943.548022][ T6491] usb 7-1: unable to get BOS descriptor or descriptor too short [ 943.551122][ T6491] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 943.555469][ T6491] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 943.558704][ T6491] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 943.561653][ T6491] usb 7-1: config 14 has no interface number 0 [ 943.564126][ T6491] usb 7-1: config 14 has no interface number 1 [ 943.566323][ T6491] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 943.569959][ T6491] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 943.573955][ T6491] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 943.577716][ T6491] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 943.581339][ T6491] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 943.585246][ T6491] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.589475][ T6491] usb 7-1: config 14 interface 57 has no altsetting 0 [ 943.591805][ T6491] usb 7-1: config 14 interface 228 has no altsetting 0 [ 943.596381][ T6491] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.599126][ T6491] usb 7-1: Product: syz [ 943.600658][ T6491] usb 7-1: Manufacturer: syz [ 943.602200][ T6491] usb 7-1: SerialNumber: syz [ 944.015637][ T6491] legousbtower 7-1:14.57: interrupt endpoints not found [ 944.053250][ T5878] usb 9-1: USB disconnect, device number 19 [ 944.068113][ T5878] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 944.071959][ T5878] spcp8x5 9-1:1.0: device disconnected [ 944.189336][T17411] smc: net device vlan1 applied user defined pnetid SYZ2 [ 945.121019][ T6491] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 945.155560][ T6491] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 945.719086][ T41] Process accounting resumed [ 945.727036][T17426] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 945.853664][ T5878] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 946.004315][ T5878] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.011785][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.017369][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 946.022552][ T5878] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.033036][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.036826][ T5878] usb 9-1: Product: syz [ 946.040491][ T5878] usb 9-1: Manufacturer: syz [ 946.043160][ T5878] usb 9-1: SerialNumber: syz [ 946.050033][ T5878] cdc_mbim 9-1:1.0: skipping garbage [ 946.052779][ T5878] cdc_mbim 9-1:1.0: skipping garbage [ 946.054851][ T5878] cdc_mbim 9-1:1.0: CDC Union missing and no IAD found [ 946.057213][ T5878] cdc_mbim 9-1:1.0: bind() failure [ 946.420178][T17405] usb 7-1: LEGO USB Tower reset control request failed [ 946.468212][ T5878] usb 9-1: USB disconnect, device number 20 [ 946.592264][ T41] usb 7-1: USB disconnect, device number 26 [ 946.614392][ T41] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 947.464385][ T42] audit: type=1800 audit(1787015917.819:1239): pid=17447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2551" name="file0" dev="overlay" ino=2956 res=0 errno=0 [ 949.552177][ T42] audit: type=1400 audit(1787015919.899:1240): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17475 comm="syz.4.2561" [ 949.564949][T17481] 9p: Bad value for 'rfdno' [ 951.218708][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 951.287873][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 951.293692][T17497] bond_slave_0: entered allmulticast mode [ 951.324943][ T5805] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 951.480324][T17497] lo speed is unknown, defaulting to 1000 [ 951.835335][T17497] lo speed is unknown, defaulting to 1000 [ 951.841714][T17497] lo speed is unknown, defaulting to 1000 [ 952.696538][T17511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2570'. [ 952.705753][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 953.015359][T17514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 953.333391][T17526] netlink: 'syz.0.2575': attribute type 4 has an invalid length. [ 953.339843][T17526] netlink: 'syz.0.2575': attribute type 4 has an invalid length. [ 953.344143][T17526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2575'. [ 953.353116][T17526] tipc: New replicast peer: 255.255.255.255 [ 953.360597][T17526] tipc: Enabled bearer , priority 10 [ 953.699169][T17537] CIFS: Attempting to mount //127.0.0.1/share [ 953.719493][T17537] CIFS: VFS: Error connecting to socket. Aborting operation. [ 953.723102][T17537] CIFS: VFS: cifs_mount failed w/return code = -111 [ 954.486913][ T850] tipc: Node number set to 3145728 [ 955.053821][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 955.401049][ T850] Process accounting resumed [ 956.969200][T17568] jffs2: notice: (17568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 957.309071][T17578] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 957.834986][T17585] CIFS: Attempting to mount //127.0.0.1/share [ 958.433932][ T5878] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 958.608177][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 958.628926][ T5878] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 958.645053][ T5878] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 958.671200][ T5878] usb 7-1: config 0 has no interface number 0 [ 958.698120][ T5878] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 958.730025][ T5878] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 958.784750][ T5878] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.818493][ T5878] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 958.847495][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.927880][ T5878] usb 7-1: config 0 descriptor?? [ 959.048452][T17585] CIFS: VFS: Error connecting to socket. Aborting operation. [ 959.055740][T17585] CIFS: VFS: cifs_mount failed w/return code = -4 [ 959.108146][ T5878] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 959.774716][T17599] lo speed is unknown, defaulting to 1000 [ 959.856903][ T850] usb 7-1: USB disconnect, device number 27 [ 959.856996][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 959.878341][ T850] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 959.932630][T17599] lo speed is unknown, defaulting to 1000 [ 959.936579][T17599] lo speed is unknown, defaulting to 1000 [ 960.042579][T17615] JFS: discard option not supported on device [ 960.049471][T17615] Mount JFS Failure: -22 [ 960.051004][T17615] jfs_mount failed w/return code = -22 [ 960.378124][ T5878] Process accounting resumed [ 962.118957][T17624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 962.301469][T17648] binder: 17640:17648 ioctl c0306201 0 returned -14 [ 962.493713][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 962.522599][T17655] batadv_slave_1: entered promiscuous mode [ 962.529462][T17655] macvlan2: entered allmulticast mode [ 962.531836][T17655] batadv_slave_1: entered allmulticast mode [ 963.995803][ T850] Process accounting resumed [ 966.208960][T17695] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 966.456586][T17705] batadv_slave_1: entered promiscuous mode [ 966.525983][T17707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'. [ 966.543433][T17707] batadv_slave_1: left promiscuous mode [ 966.757198][T17702] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 967.082298][ T5581] Process accounting resumed [ 967.804886][T17728] 9p: Bad value for 'rfdno' [ 967.810555][ T42] audit: type=1400 audit(1787015938.149:1241): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17724 comm="syz.3.2624" [ 968.967977][T17727] jffs2: notice: (17727) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 969.954778][T17740] zonefs (nullb0) ERROR: Not a zoned block device [ 969.975631][T17738] net_ratelimit: 32 callbacks suppressed [ 969.975645][T17738] socket: no more sockets [ 969.985657][T17738] Failed to initialize the IGMP6 autojoin socket (err -23) [ 970.112963][ T42] audit: type=1800 audit(1787015940.459:1242): pid=17747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2632" name="zoned" dev="configfs" ino=72178 res=0 errno=0 [ 970.122564][ T42] audit: type=1800 audit(1787015940.469:1243): pid=17747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2632" name="zone_nr_conv" dev="configfs" ino=72179 res=0 errno=0 [ 970.250589][T17751] 9p: Bad value for 'version' [ 970.493788][ T42] audit: type=1800 audit(1787015940.679:1244): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2632" name="zoned" dev="configfs" ino=70113 res=0 errno=0 [ 971.350684][ T42] audit: type=1800 audit(1787015940.749:1245): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2632" name="power" dev="configfs" ino=70114 res=0 errno=0 [ 971.661895][T17765] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 971.797658][T17777] zonefs (nullb0) ERROR: Not a zoned block device [ 973.646800][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 973.731992][T17793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2642'. [ 973.739040][T17793] bond_slave_0: entered allmulticast mode [ 974.122074][T17794] lo speed is unknown, defaulting to 1000 [ 974.312416][T17794] lo speed is unknown, defaulting to 1000 [ 974.316558][T17794] lo speed is unknown, defaulting to 1000 [ 974.636464][ T42] audit: type=1400 audit(1787015944.989:1246): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17800 comm="syz.0.2644" [ 974.681433][T17806] 9p: Bad value for 'rfdno' [ 975.092025][T17810] netlink: zone id is out of range [ 975.094905][T17810] netlink: zone id is out of range [ 975.096719][T17810] netlink: zone id is out of range [ 975.099485][T17810] netlink: zone id is out of range [ 975.101318][T17810] netlink: zone id is out of range [ 975.103155][T17810] netlink: zone id is out of range [ 975.105115][T17810] netlink: zone id is out of range [ 975.106891][T17810] netlink: zone id is out of range [ 975.108812][T17810] netlink: zone id is out of range [ 975.110556][T17810] netlink: zone id is out of range [ 975.572196][ T42] audit: type=1800 audit(1787015945.919:1247): pid=17818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2649" name="zoned" dev="configfs" ino=69269 res=0 errno=0 [ 975.592028][ T42] audit: type=1800 audit(1787015945.919:1248): pid=17818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2649" name="zone_nr_conv" dev="configfs" ino=69270 res=0 errno=0 [ 976.455381][ T42] audit: type=1800 audit(1787015946.479:1249): pid=17821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2649" name="zoned" dev="configfs" ino=71405 res=0 errno=0 [ 976.548843][ T42] audit: type=1800 audit(1787015946.499:1250): pid=17821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2649" name="power" dev="configfs" ino=71406 res=0 errno=0 [ 977.154530][T17835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.188972][T17835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.924057][ T5581] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 977.935670][T17844] lo speed is unknown, defaulting to 1000 [ 978.061574][T17844] lo speed is unknown, defaulting to 1000 [ 978.064553][T17844] lo speed is unknown, defaulting to 1000 [ 978.371422][T17858] smc: net device vlan1 applied user defined pnetid SYZ2 [ 979.408547][ T42] audit: type=1800 audit(1787015949.759:1251): pid=17887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="zoned" dev="configfs" ino=69298 res=0 errno=0 [ 979.421889][ T42] audit: type=1800 audit(1787015949.769:1252): pid=17887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="zone_nr_conv" dev="configfs" ino=69299 res=0 errno=0 [ 980.488270][ T42] audit: type=1800 audit(1787015949.949:1253): pid=17891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="zoned" dev="configfs" ino=71460 res=0 errno=0 [ 980.501281][ T42] audit: type=1800 audit(1787015949.979:1254): pid=17891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="power" dev="configfs" ino=71461 res=0 errno=0 [ 990.092094][T17932] zonefs (nullb0) ERROR: Not a zoned block device [ 990.303683][T17927] netlink: 'syz.0.2666': attribute type 4 has an invalid length. [ 990.351043][T17938] smc: net device vlan1 applied user defined pnetid SYZ2 [ 990.408664][T17939] /dev/nullb0: Can't open blockdev [ 991.003958][ T6491] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 991.153667][ T6491] usb 9-1: Using ep0 maxpacket: 8 [ 991.156077][ T6491] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 991.160057][ T6491] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 991.163613][ T6491] usb 9-1: config 0 has no interface number 0 [ 991.169233][ T6491] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.172812][ T6491] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 991.179476][ T6491] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 991.183804][ T6491] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 991.189971][ T6491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.196155][ T6491] usb 9-1: config 0 descriptor?? [ 991.210533][ T6491] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 991.543753][ T42] audit: type=1800 audit(1787015961.889:1255): pid=17956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2675" name="zoned" dev="configfs" ino=72475 res=0 errno=0 [ 991.565919][ T42] audit: type=1800 audit(1787015961.909:1256): pid=17956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2675" name="zone_nr_conv" dev="configfs" ino=72476 res=0 errno=0 [ 992.191678][ T42] audit: type=1800 audit(1787015962.419:1257): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2675" name="zoned" dev="configfs" ino=70372 res=0 errno=0 [ 993.012602][T17957] lo speed is unknown, defaulting to 1000 [ 993.271785][ T42] audit: type=1800 audit(1787015963.619:1258): pid=17958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2675" name="power" dev="configfs" ino=70378 res=0 errno=0 [ 993.908745][T17957] lo speed is unknown, defaulting to 1000 [ 993.911404][T17957] lo speed is unknown, defaulting to 1000 [ 993.996533][T12924] usb 9-1: USB disconnect, device number 21 [ 994.018225][T12924] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 994.041795][T17966] 9p: Bad value for 'version' [ 994.431880][T17978] zonefs (nullb0) ERROR: Not a zoned block device [ 994.442326][ T850] Process accounting resumed [ 994.667928][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 994.731397][T17990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 997.100903][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 997.272352][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 997.296846][ T850] usb 5-1: USB disconnect, device number 17 [ 998.226592][T18047] 9pnet_virtio: no channels available for device syz [ 998.725920][T18055] netlink: 'syz.3.2695': attribute type 4 has an invalid length. [ 999.271580][T18058] lo speed is unknown, defaulting to 1000 [ 999.936935][ C1] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 999.940298][ C1] sr 2:0:0:0: [sr0] tag#22 CDB: Test Unit Ready [ 1000.412322][T18058] lo speed is unknown, defaulting to 1000 [ 1000.435321][T18058] lo speed is unknown, defaulting to 1000 [ 1001.920770][T18097] binder: 18092:18097 ioctl c0306201 0 returned -14 [ 1002.325504][T18098] batadv_slave_1: entered promiscuous mode [ 1002.328760][T18098] macvlan2: entered allmulticast mode [ 1002.331508][T18098] batadv_slave_1: entered allmulticast mode [ 1002.354155][T18098] batman_adv: batadv0: Adding interface: macvlan2 [ 1002.356822][T18098] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.366392][T18098] batman_adv: batadv0: Interface activated: macvlan2 [ 1003.293364][T18111] zonefs (nullb0) ERROR: Not a zoned block device [ 1003.958195][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 1004.433688][T18126] lo speed is unknown, defaulting to 1000 [ 1005.146967][ C2] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1005.151269][ C2] sr 2:0:0:0: [sr0] tag#1 CDB: Test Unit Ready [ 1005.932841][T18126] lo speed is unknown, defaulting to 1000 [ 1005.936808][T18126] lo speed is unknown, defaulting to 1000 [ 1006.106074][T18151] zonefs (nullb0) ERROR: Not a zoned block device [ 1006.953028][T18170] jffs2: notice: (18170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1009.246803][T18186] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1010.437165][T18203] zonefs (nullb0) ERROR: Not a zoned block device [ 1011.830281][T18216] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1012.764558][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1012.974246][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 1014.195650][T18243] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 1014.267670][T18243] bond2: entered promiscuous mode [ 1014.271909][T18243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.305479][T18250] zonefs (nullb0) ERROR: Not a zoned block device [ 1014.309507][T18243] bond2: (slave bridge2): making interface the new active one [ 1014.325466][T18243] bridge2: entered promiscuous mode [ 1014.344916][T18243] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1014.417987][T18255] 9pnet_virtio: no channels available for device syz [ 1014.542792][T18259] 9pnet_virtio: no channels available for device syz [ 1014.795137][T18265] 9pnet_virtio: no channels available for device syz [ 1015.930555][T18274] IPVS: ip_vs_add_dest(): server weight less than zero [ 1016.044339][ T42] audit: type=1326 audit(1787015985.225:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.122310][ T42] audit: type=1326 audit(1787015985.225:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.132545][ T42] audit: type=1326 audit(1787015985.245:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71274eb code=0x7ffc0000 [ 1016.141954][ T42] audit: type=1326 audit(1787015985.245:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.149194][ T42] audit: type=1326 audit(1787015985.245:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.156408][ T42] audit: type=1326 audit(1787015985.245:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.164574][ T42] audit: type=1326 audit(1787015985.245:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.172180][ T42] audit: type=1326 audit(1787015985.245:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.180782][ T42] audit: type=1326 audit(1787015985.255:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.202855][ T42] audit: type=1326 audit(1787015985.255:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18271 comm="syz.3.2744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 1016.209636][T18276] mmap: syz.4.2746 (18276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1016.319542][T18281] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 1016.321843][T18281] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 1016.664847][T18287] zonefs (nullb0) ERROR: Not a zoned block device [ 1017.259374][T18301] 9pnet_virtio: no channels available for device syz [ 1019.562835][T18321] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1019.641057][T18321] udc dummy_udc.0: failed to start g1: -19 [ 1019.648510][T18321] UDC core: g1: couldn't find an available UDC or it's busy [ 1020.071761][ T5581] Process accounting resumed [ 1020.782357][ T64] Bluetooth: hci4: Malformed Event: 0x2f [ 1022.727010][T18354] pim6reg: entered allmulticast mode [ 1023.108225][T18352] pim6reg: left allmulticast mode [ 1023.382992][T18358] Cannot find set identified by id 2 to match [ 1023.586121][T18352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2766'. [ 1024.280977][T18376] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1024.294880][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1024.297121][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1024.300067][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1024.302272][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1024.334644][T18358] ceph: No mds server is up or the cluster is laggy [ 1025.843219][T18387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.703671][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 1029.013360][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 1029.013489][ T42] audit: type=1800 audit(1787015998.355:1300): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2784" name="zoned" dev="configfs" ino=75096 res=0 errno=0 [ 1029.030833][ T42] audit: type=1800 audit(1787015998.375:1301): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2784" name="memory_backed" dev="configfs" ino=74481 res=0 errno=0 [ 1029.042165][ T42] audit: type=1800 audit(1787015998.385:1302): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2784" name="zone_nr_conv" dev="configfs" ino=74482 res=0 errno=0 [ 1029.055273][ T42] audit: type=1800 audit(1787015998.405:1303): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2784" name="power" dev="configfs" ino=74483 res=0 errno=0 [ 1029.076296][T18420] null_blk: nullb1: using native zone append [ 1029.248501][T18420] null_blk: disk nullb1 created [ 1029.269451][T18430] overlay: Unknown parameter '/' [ 1029.390757][T18430] input: syz0 as /devices/virtual/input/input45 [ 1029.791814][T18424] block device autoloading is deprecated and will be removed. [ 1029.836314][T18428] block device autoloading is deprecated and will be removed. [ 1030.766541][T18443] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 1031.612495][T18452] CIFS mount error: No usable UNC path provided in device string! [ 1031.612495][T18452] [ 1031.618287][T18452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1036.338513][T18491] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1036.964928][T18491] udc dummy_udc.0: failed to start g1: -19 [ 1036.967302][T18491] UDC core: g1: couldn't find an available UDC or it's busy [ 1037.740522][T18509] pim6reg: entered allmulticast mode [ 1038.211023][T18514] pim6reg: left allmulticast mode [ 1040.725727][T18545] NILFS (loop0): device size too small [ 1041.933298][T18556] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1042.016127][T18556] udc dummy_udc.0: failed to start g1: -19 [ 1042.022569][T18556] UDC core: g1: couldn't find an available UDC or it's busy [ 1042.273193][T18565] lo speed is unknown, defaulting to 1000 [ 1042.308933][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 1042.608346][T18565] lo speed is unknown, defaulting to 1000 [ 1042.615217][T18565] lo speed is unknown, defaulting to 1000 [ 1042.819855][T18576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1042.822005][T18576] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1042.827682][T18576] vhci_hcd vhci_hcd.0: Device attached [ 1043.114480][ T61] usb 44-1: SetAddress Request (26) to port 0 [ 1043.117080][ T61] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1045.682198][T18613] Cannot find add_set index 0 as target [ 1045.702979][T18615] 9pnet_virtio: no channels available for device syz [ 1045.733108][T18416] libceph: connect (1)[c::]:6789 error -22 [ 1045.737157][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1045.844598][T18416] libceph: connect (1)[c::]:6789 error -22 [ 1045.847850][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1045.966533][T18611] ceph: No mds server is up or the cluster is laggy [ 1046.182379][T18622] jffs2: notice: (18622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1046.967698][T18636] pim6reg: entered allmulticast mode [ 1047.912640][T18650] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1047.934343][T18082] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1047.937537][T18631] pim6reg: left allmulticast mode [ 1048.898285][T18656] jffs2: notice: (18656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1048.900118][T18082] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1048.996584][T18082] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1049.000341][T18082] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1049.002764][T18082] usb 5-1: can't read configurations, error -71 [ 1049.322772][T12250] libceph: connect (1)[c::]:6789 error -22 [ 1049.353153][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 1049.415036][T18577] vhci_hcd: connection reset by peer [ 1049.421255][ T5805] vhci_hcd vhci_hcd.3: stop threads [ 1049.428286][ T5805] vhci_hcd vhci_hcd.3: release socket [ 1049.432991][ T5805] vhci_hcd vhci_hcd.3: disconnect device [ 1049.434398][ T61] usb 44-1: device descriptor read/8, error -110 [ 1049.479642][T18661] ceph: No mds server is up or the cluster is laggy [ 1049.626073][T12250] libceph: connect (1)[c::]:6789 error -22 [ 1049.632492][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 1050.127393][T18684] net_ratelimit: 11 callbacks suppressed [ 1050.127409][T18684] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1051.118077][ T61] usb usb44-port1: attempt power cycle [ 1051.219432][T18683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1051.690724][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 1051.694968][ T61] usb usb44-port1: unable to enumerate USB device [ 1052.095507][T18699] binder: 18698:18699 ioctl c00c6211 0 returned -14 [ 1052.161483][T18700] loop2: detected capacity change from 0 to 2640 [ 1052.457997][T18700] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1052.462399][T18700] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1052.466482][T18700] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1052.470287][T18700] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1052.474711][T18700] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1052.479010][T18700] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1052.483839][T18700] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1052.487683][T18700] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1052.491794][T18700] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1052.495902][T18700] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1052.753747][ T6491] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1052.903758][ T6491] usb 5-1: Using ep0 maxpacket: 32 [ 1052.907770][ T6491] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1052.920038][ T6491] usb 5-1: config index 0 descriptor too short (expected 49, got 27) [ 1052.923827][ T6491] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1052.927392][ T6491] usb 5-1: config 0 has no interface number 0 [ 1052.930184][ T6491] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1052.935979][ T6491] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1052.942777][ T6491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.953716][ T6491] usb 5-1: Product: syz [ 1052.955554][ T6491] usb 5-1: Manufacturer: syz [ 1052.957574][ T6491] usb 5-1: SerialNumber: syz [ 1053.027752][ T6491] usb 5-1: config 0 descriptor?? [ 1053.038616][ T6491] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1053.043220][ T6491] em28xx 5-1:0.89: Video interface 89 found: [ 1053.049606][ T6491] em28xx 5-1:0.89: DVB interface 89 found: [ 1053.254809][T18704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.286868][T18704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.336650][T18709] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1053.351639][T18704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.372723][T18704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.172008][ T6491] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1054.365327][ T6491] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1054.369130][ T6491] em28xx 5-1:0.89: board has no eeprom [ 1054.423574][T18718] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 1054.445112][ T6491] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1054.448310][ T6491] em28xx 5-1:0.89: analog set to bulk mode. [ 1054.452325][ T6491] em28xx 5-1:0.89: dvb set to bulk mode. [ 1054.464797][T18082] em28xx 5-1:0.89: Registering V4L2 extension [ 1054.608345][T18720] overlay: Unknown parameter '/' [ 1054.673656][T18416] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1054.704235][T18723] input: syz0 as /devices/virtual/input/input46 [ 1054.834508][T18416] usb 7-1: Using ep0 maxpacket: 32 [ 1054.839067][T18416] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1054.842431][T18416] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1054.846775][T18416] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1054.849719][T18416] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1054.853217][T18416] usb 7-1: config 14 has no interface number 0 [ 1054.856035][T18416] usb 7-1: config 14 has no interface number 1 [ 1054.858811][T18416] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1054.863397][T18416] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1054.868323][T18416] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1054.873121][T18416] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1054.877998][T18416] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1054.880956][T18416] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1054.886621][T18416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.890278][T18416] usb 7-1: Product: syz [ 1054.892193][T18416] usb 7-1: Manufacturer: syz [ 1054.894500][T18416] usb 7-1: SerialNumber: syz [ 1055.078823][T18724] pim6reg: entered allmulticast mode [ 1055.388107][T18724] pim6reg: left allmulticast mode [ 1055.543402][T18733] 9p: Bad value for 'rfdno' [ 1057.422378][ T6491] usb 5-1: USB disconnect, device number 20 [ 1057.429455][ T6491] em28xx 5-1:0.89: Disconnecting em28xx [ 1057.447819][T18082] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1057.451391][T18082] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1057.453848][T18082] em28xx 5-1:0.89: No AC97 audio processor [ 1057.483497][T18082] usb 5-1: Decoder not found [ 1057.485123][T18082] em28xx 5-1:0.89: failed to create media graph [ 1057.487745][T18082] em28xx 5-1:0.89: V4L2 device video7 deregistered [ 1057.526857][T18416] legousbtower 7-1:14.57: interrupt endpoints not found [ 1057.528289][T18082] em28xx 5-1:0.89: Registering snapshot button... [ 1057.534585][T18733] Console: switching to colour dummy device 80x25 [ 1057.535824][T18082] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.89/input/input47 [ 1057.545606][T18416] legousbtower 7-1:14.228: interrupt endpoints not found [ 1057.567463][T18082] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1057.572910][ T6491] em28xx 5-1:0.89: Closing input extension [ 1057.582667][ T6491] em28xx 5-1:0.89: Deregistering snapshot button [ 1057.615371][T18416] usb 7-1: USB disconnect, device number 28 [ 1058.572363][T18734] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1058.786820][T18734] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1058.794092][T18734] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1058.807011][T18734] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1058.826851][T18734] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1058.840396][T18734] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 13364 usecs [ 1058.872515][T18734] pci 0000:00:01.0: Adding to iommu group 1 [ 1058.888802][T18734] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1058.890989][T18734] pci 0000:00:01.0: vgaarb: bridge control possible [ 1058.893031][T18734] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1058.909646][ T6491] em28xx 5-1:0.89: Freeing device [ 1058.928419][T18734] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1058.931086][T18734] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1058.935655][T18734] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1058.958158][T18734] [drm] Found bochs VGA, ID 0xb0c5. [ 1058.959909][T18734] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1058.963405][T18734] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1059.042385][T18753] pim6reg: entered allmulticast mode [ 1059.045557][T18761] pim6reg: left allmulticast mode [ 1059.087442][T18763] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1059.303851][T18753] 9pnet_virtio: no channels available for device syz [ 1059.365845][T18753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2853'. [ 1061.116688][T18777] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1062.190251][T18792] jffs2: notice: (18792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1062.211964][T18790] Cannot find set identified by id 2 to match [ 1062.391409][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1062.397652][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1062.654053][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1062.657808][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1063.121126][T18810] input: syz1 as /devices/virtual/input/input48 [ 1063.124035][T18810] input: failed to attach handler leds to device input48, error: -6 [ 1063.278062][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1063.282287][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1063.380262][T18790] ceph: No mds server is up or the cluster is laggy [ 1063.556762][T18815] NILFS (loop3): device size too small [ 1064.477834][T18824] pim6reg: entered allmulticast mode [ 1064.884431][T18822] pim6reg: left allmulticast mode [ 1064.959038][T18824] 9pnet_virtio: no channels available for device syz [ 1065.040605][T18824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1066.109953][T18843] jffs2: notice: (18843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1067.661371][T18873] Cannot find set identified by id 2 to match [ 1067.680187][T18416] libceph: connect (1)[c::]:6789 error -101 [ 1067.682248][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1067.691767][T18416] libceph: connect (1)[c::]:6789 error -101 [ 1067.694620][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1067.953873][T18416] libceph: connect (1)[c::]:6789 error -101 [ 1067.957503][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1068.354750][T18881] pim6reg: entered allmulticast mode [ 1068.467318][T18416] libceph: connect (1)[c::]:6789 error -101 [ 1068.470376][T18416] libceph: mon0 (1)[c::]:6789 connect error [ 1068.494185][T18873] ceph: No mds server is up or the cluster is laggy [ 1068.499160][T18881] pim6reg: left allmulticast mode [ 1068.874716][T18892] NILFS (loop4): device size too small [ 1070.136611][T18895] cgroup: release_agent respecified [ 1070.147644][T18895] random: crng reseeded on system resumption [ 1071.334676][T18918] jffs2: notice: (18918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1072.581131][T18416] lo speed is unknown, defaulting to 1000 [ 1072.592786][T18416] syz2: Port: 1 Link ACTIVE [ 1074.504355][T18954] NILFS (loop2): device size too small [ 1074.543834][T18955] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1074.545938][T18955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1074.570442][T18955] vhci_hcd vhci_hcd.0: Device attached [ 1074.895896][T12250] usb 46-1: SetAddress Request (30) to port 0 [ 1074.899527][T12250] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1076.492837][T18973] zonefs (nullb0) ERROR: Not a zoned block device [ 1076.857504][T18979] jffs2: notice: (18979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1077.235940][T18988] jffs2: notice: (18988) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1077.946128][T18956] vhci_hcd: connection reset by peer [ 1077.950125][ T5805] vhci_hcd vhci_hcd.4: stop threads [ 1077.952680][ T5805] vhci_hcd vhci_hcd.4: release socket [ 1077.965452][ T5805] vhci_hcd vhci_hcd.4: disconnect device [ 1079.935028][T12250] usb 46-1: device descriptor read/8, error -110 [ 1080.324341][T12250] usb usb46-port1: attempt power cycle [ 1080.537528][T19014] zonefs (nullb0) ERROR: Not a zoned block device [ 1081.873159][T12250] usb usb46-port1: unable to enumerate USB device [ 1083.116812][T19045] zonefs (nullb0) ERROR: Not a zoned block device [ 1083.116833][ T42] audit: type=1800 audit(1787016052.465:1304): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2926" name="zoned" dev="configfs" ino=77459 res=0 errno=0 [ 1083.134705][ T42] audit: type=1800 audit(1787016052.475:1305): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2926" name="memory_backed" dev="configfs" ino=77460 res=0 errno=0 [ 1083.145958][ T42] audit: type=1800 audit(1787016052.495:1306): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2926" name="zone_nr_conv" dev="configfs" ino=80029 res=0 errno=0 [ 1083.154864][ T42] audit: type=1800 audit(1787016052.495:1307): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2926" name="power" dev="configfs" ino=80030 res=0 errno=0 [ 1084.818600][ T55] lo speed is unknown, defaulting to 1000 [ 1085.219779][T19073] pim6reg: entered allmulticast mode [ 1085.376575][T19073] pim6reg: left allmulticast mode [ 1086.049507][T19072] lo speed is unknown, defaulting to 1000 [ 1086.174123][T19069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2924'. [ 1086.435310][T19072] lo speed is unknown, defaulting to 1000 [ 1086.439396][T19072] lo speed is unknown, defaulting to 1000 [ 1086.777761][ T34] libceph: connect (1)[c::]:6789 error -22 [ 1086.786054][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1086.926592][T19086] ceph: No mds server is up or the cluster is laggy [ 1087.118960][ T34] libceph: connect (1)[c::]:6789 error -22 [ 1087.141270][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1087.210557][T19093] NILFS (loop4): device size too small [ 1087.729810][T19097] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1089.015544][ T42] audit: type=1800 audit(1787016058.365:1308): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2933" name="zoned" dev="configfs" ino=79461 res=0 errno=0 [ 1089.331597][ T42] audit: type=1800 audit(1787016058.675:1309): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2933" name="memory_backed" dev="configfs" ino=79462 res=0 errno=0 [ 1089.409098][ T42] audit: type=1800 audit(1787016058.755:1310): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2933" name="zone_nr_conv" dev="configfs" ino=79466 res=0 errno=0 [ 1089.420050][T19109] buffer_io_error: 320 callbacks suppressed [ 1089.420064][T19109] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1089.432670][ T42] audit: type=1800 audit(1787016058.755:1311): pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2933" name="power" dev="configfs" ino=79467 res=0 errno=0 [ 1092.283655][T18082] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1092.445875][T18082] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1092.450184][T18082] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1092.453884][T18082] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1092.457594][T18082] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1092.461302][T18082] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1092.465596][T18082] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.470297][T18082] usb 9-1: config 0 descriptor?? [ 1092.475473][T19147] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1093.484300][T18082] usbhid 9-1:0.0: can't add hid device: -71 [ 1093.492466][T18082] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1093.555923][T18082] usb 9-1: USB disconnect, device number 22 [ 1093.932359][T19177] Cannot find set identified by id 2 to match [ 1094.388497][T12250] libceph: connect (1)[c::]:6789 error -22 [ 1094.391214][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 1094.543821][T19177] ceph: No mds server is up or the cluster is laggy [ 1094.653971][T12250] libceph: connect (1)[c::]:6789 error -22 [ 1094.656192][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 1096.509630][T19205] lo speed is unknown, defaulting to 1000 [ 1096.733677][T19221] pim6reg: entered allmulticast mode [ 1097.082902][T19226] pim6reg: left allmulticast mode [ 1097.470469][T19228] 9pnet_virtio: no channels available for device syz [ 1098.999079][T19205] lo speed is unknown, defaulting to 1000 [ 1099.008320][T19205] lo speed is unknown, defaulting to 1000 [ 1100.936063][ T6491] libceph: connect (1)[c::]:6789 error -101 [ 1100.969457][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1100.985774][ T6491] libceph: connect (1)[c::]:6789 error -101 [ 1100.993465][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1101.020819][T19260] ceph: No mds server is up or the cluster is laggy [ 1103.583831][ T61] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1105.402115][T19306] pim6reg: entered allmulticast mode [ 1105.737882][T19311] pim6reg: left allmulticast mode [ 1105.827791][ T61] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1105.830286][ T61] usb 7-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1105.834119][ T61] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1105.836548][ T61] usb 7-1: can't read configurations, error -71 [ 1107.029462][ T34] libceph: connect (1)[c::]:6789 error -22 [ 1107.031527][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1107.101509][T19325] ceph: No mds server is up or the cluster is laggy [ 1107.299277][ T34] libceph: connect (1)[c::]:6789 error -22 [ 1107.303043][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1107.765001][ T34] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1107.836769][T14749] libceph: connect (1)[c::]:6789 error -22 [ 1107.840631][T14749] libceph: mon0 (1)[c::]:6789 connect error [ 1108.014296][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 1108.110692][ T34] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1108.286353][ T34] usb 9-1: config 0 has no interfaces? [ 1108.386230][ T34] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1108.405292][ T34] usb 9-1: Product: syz [ 1108.412581][ T34] usb 9-1: Manufacturer: syz [ 1108.414408][ T34] usb 9-1: SerialNumber: syz [ 1108.532447][ T34] usb 9-1: config 0 descriptor?? [ 1109.043963][T19344] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1111.081968][ T34] usb 9-1: USB disconnect, device number 23 [ 1115.202308][ T42] audit: type=1800 audit(1787016084.545:1312): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3002" name="zoned" dev="configfs" ino=80950 res=0 errno=0 [ 1115.212921][ T42] audit: type=1800 audit(1787016084.555:1313): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3002" name="memory_backed" dev="configfs" ino=80951 res=0 errno=0 [ 1115.225851][T19412] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 1115.228607][ T42] audit: type=1800 audit(1787016084.565:1314): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3002" name="zone_nr_conv" dev="configfs" ino=80952 res=0 errno=0 [ 1115.241006][ T42] audit: type=1800 audit(1787016084.565:1315): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3002" name="power" dev="configfs" ino=80953 res=0 errno=0 [ 1115.416657][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1115.429824][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1115.435376][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1115.443093][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1115.451790][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1115.488127][T19418] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1115.490223][T19418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1115.493209][T19418] vhci_hcd vhci_hcd.0: Device attached [ 1115.763694][ T61] usb 38-1: SetAddress Request (38) to port 0 [ 1115.765696][ T61] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1116.714314][T19419] vhci_hcd: connection reset by peer [ 1116.716456][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1116.718192][ T12] vhci_hcd vhci_hcd.0: release socket [ 1116.720042][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1117.993855][T12250] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1118.296977][T12250] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1118.299878][T12250] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1118.303680][T12250] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1118.306102][T12250] usb 9-1: can't read configurations, error -71 [ 1118.904641][T19452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1118.907420][T19452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1118.943759][T19452] vhci_hcd vhci_hcd.0: Device attached [ 1119.253620][ T34] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1119.604083][T19466] jffs2: notice: (19466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1119.886116][T19453] vhci_hcd: connection reset by peer [ 1119.890001][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1119.892325][ T12] vhci_hcd vhci_hcd.3: release socket [ 1119.894486][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1121.119620][ T61] usb 38-1: device descriptor read/8, error -110 [ 1121.612609][ T61] usb usb38-port1: attempt power cycle [ 1122.083626][T19482] pim6reg: entered allmulticast mode [ 1122.148403][ T42] audit: type=1804 audit(1787016091.495:1316): pid=19490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3019" name="/newroot/787/bus/bus" dev="overlay" ino=4717 res=1 errno=0 [ 1122.226516][ T61] usb usb38-port1: unable to enumerate USB device [ 1122.244424][T19482] pim6reg: left allmulticast mode [ 1122.284067][T19495] rdma_rxe: rxe_newlink: failed to add lo [ 1122.382648][T19482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1123.981096][T19519] jffs2: notice: (19519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1124.814885][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1125.301536][T19534] jffs2: notice: (19534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1126.584963][T19551] pim6reg: entered allmulticast mode [ 1126.780864][T19553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1126.783160][T19553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1126.799304][T19553] vhci_hcd vhci_hcd.0: Device attached [ 1127.002138][T19542] pim6reg: left allmulticast mode [ 1127.211172][T19551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3032'. [ 1127.412092][T19559] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1127.524092][ T61] usb 42-1: SetAddress Request (22) to port 0 [ 1127.526336][ T61] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1127.867159][T19554] vhci_hcd: connection reset by peer [ 1127.869714][ T5805] vhci_hcd vhci_hcd.2: stop threads [ 1127.871428][ T5805] vhci_hcd vhci_hcd.2: release socket [ 1127.873233][ T5805] vhci_hcd vhci_hcd.2: disconnect device [ 1129.267526][T19553] orangefs_mount: mount request failed with -4 [ 1132.584110][ T61] usb 42-1: device descriptor read/8, error -110 [ 1132.909793][T19616] sysfs: Unknown parameter 'euid<' [ 1132.973326][T19617] rdma_rxe: rxe_newlink: failed to add bond0 [ 1133.026416][ T61] usb usb42-port1: attempt power cycle [ 1133.712240][ T61] usb usb42-port1: unable to enumerate USB device [ 1138.514305][T12924] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1138.743920][T12924] usb 7-1: Using ep0 maxpacket: 32 [ 1140.785858][T12924] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1140.805462][T12924] usb 7-1: config 0 has no interfaces? [ 1140.818471][T12924] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1140.840015][T12924] usb 7-1: Product: syz [ 1140.884302][T12924] usb 7-1: Manufacturer: syz [ 1140.898656][T12924] usb 7-1: SerialNumber: syz [ 1140.937327][T12924] usb 7-1: config 0 descriptor?? [ 1141.021248][T12924] usb 7-1: can't set config #0, error -71 [ 1141.052990][T12924] usb 7-1: USB disconnect, device number 31 [ 1141.261811][T19708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1141.265276][T19708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1141.296758][T19708] vhci_hcd vhci_hcd.0: Device attached [ 1141.594359][ T61] usb 46-1: SetAddress Request (34) to port 0 [ 1141.597438][ T61] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1144.756142][T19742] jffs2: notice: (19742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1145.840129][T19709] vhci_hcd: connection reset by peer [ 1145.847538][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1145.858250][ T12] vhci_hcd vhci_hcd.4: release socket [ 1145.862960][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1146.077798][T19759] jffs2: notice: (19759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1146.876805][ T61] usb 46-1: device descriptor read/8, error -110 [ 1147.830600][ T61] usb usb46-port1: attempt power cycle qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 1148.370238][T19778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3086'. [ 1148.375058][T19778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3086'. [ 1148.844892][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1148.876223][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1148.883134][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1148.891926][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1148.900262][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1149.369506][ T61] usb usb46-port1: unable to enumerate USB device [ 1149.746268][T19791] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1152.349608][T19816] comedi comedi0: comedi_config --init_data is deprecated [ 1153.436542][T19827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1153.439183][T19827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1153.443162][T19827] vhci_hcd vhci_hcd.0: Device attached [ 1153.673685][ T6491] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1155.213861][T12924] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1155.365015][T12924] usb 5-1: Using ep0 maxpacket: 32 [ 1155.368845][T12924] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1155.386937][T12924] usb 5-1: config 0 has no interfaces? [ 1155.401906][T12924] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1155.405433][T12924] usb 5-1: Product: syz [ 1155.408218][T12924] usb 5-1: Manufacturer: syz [ 1155.455272][T12924] usb 5-1: SerialNumber: syz [ 1155.786218][T19828] vhci_hcd: connection reset by peer [ 1155.903295][ T5805] vhci_hcd vhci_hcd.2: stop threads [ 1155.923116][ T5805] vhci_hcd vhci_hcd.2: release socket [ 1155.928252][ T5805] vhci_hcd vhci_hcd.2: disconnect device [ 1155.968553][T12924] usb 5-1: config 0 descriptor?? [ 1156.726293][T12924] usb 5-1: USB disconnect, device number 21 [ 1158.936491][T19889] pim6reg: entered allmulticast mode [ 1159.373878][ T6491] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1159.997605][T19902] sysfs: Unknown parameter 'euid<' [ 1160.085209][T19903] rdma_rxe: rxe_newlink: failed to add bond0 [ 1161.143172][T19889] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1161.302604][T19909] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1161.307550][T19909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1161.311334][T19909] vhci_hcd vhci_hcd.0: Device attached [ 1161.569206][T14749] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1164.788084][T19910] vhci_hcd: connection reset by peer [ 1164.790001][T19935] pim6reg: entered allmulticast mode [ 1164.872059][ T5805] vhci_hcd vhci_hcd.0: stop threads [ 1164.873983][ T5805] vhci_hcd vhci_hcd.0: release socket [ 1164.876002][ T5805] vhci_hcd vhci_hcd.0: disconnect device [ 1165.225819][T19945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1165.232110][T19945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1166.833908][T14749] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1166.873263][T19955] pim6reg: entered allmulticast mode [ 1172.285441][T20019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1172.287719][T20019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1172.344562][T20019] vhci_hcd vhci_hcd.0: Device attached [ 1172.363823][T20018] jffs2: notice: (20018) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1172.764011][ T61] usb 42-1: SetAddress Request (26) to port 0 [ 1172.766359][ T61] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1174.777930][T20045] pim6reg: entered allmulticast mode [ 1174.983842][T20053] pim6reg: left allmulticast mode [ 1176.155188][T20062] jffs2: notice: (20062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1176.802632][T20065] pim6reg: entered allmulticast mode [ 1176.833661][T20068] pim6reg: left allmulticast mode [ 1177.280416][T20020] vhci_hcd: connection reset by peer [ 1177.282636][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1177.286734][ T12] vhci_hcd vhci_hcd.2: release socket [ 1177.288684][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1177.866493][ T61] usb 42-1: device descriptor read/8, error -110 [ 1178.260072][ T61] usb usb42-port1: attempt power cycle [ 1178.832290][ T61] usb usb42-port1: unable to enumerate USB device [ 1179.820010][T20099] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3151'. [ 1181.081790][T20117] kAFS: unable to lookup cell '/,c¾ûL' [ 1181.098062][T20118] pim6reg: left allmulticast mode [ 1181.357829][T20117] binder: 20109:20117 ioctl c0506107 80000180 returned -22 [ 1182.006729][T20121] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1184.198077][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1184.470218][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1184.475401][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1184.485259][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1184.489502][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1185.147313][T20156] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1186.234632][T20167] kAFS: unable to lookup cell '/,c¾ûL' [ 1186.409766][T20167] binder: 20163:20167 ioctl c0506107 80000180 returned -22 [ 1186.442711][T20169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1186.448050][T20169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1187.177694][T20171] comedi comedi0: comedi_config --init_data is deprecated [ 1187.356003][T20174] usb usb8: usbfs: process 20174 (syz.2.3171) did not claim interface 0 before use [ 1188.475988][T20193] pim6reg: left allmulticast mode [ 1189.249654][T20196] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1189.252448][T20196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1189.257098][T20196] vhci_hcd vhci_hcd.0: Device attached [ 1189.879576][T12924] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1189.969550][T20211] jffs2: notice: (20211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1190.486102][T20197] vhci_hcd: connection reset by peer [ 1190.491771][ T5805] vhci_hcd vhci_hcd.4: stop threads [ 1190.513592][ T5805] vhci_hcd vhci_hcd.4: release socket [ 1190.541691][ T5805] vhci_hcd vhci_hcd.4: disconnect device [ 1191.198716][T20220] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1192.611308][T20232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3181'. [ 1192.618348][T20232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3181'. [ 1193.574454][T20237] kAFS: unable to lookup cell '/,c¾ûL' [ 1193.831340][T20237] binder: 20235:20237 ioctl c0506107 80000180 returned -22 [ 1195.453668][T12924] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1196.552153][T20264] jffs2: notice: (20264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1197.505159][T20274] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3195'. [ 1198.997849][T20292] pim6reg: left allmulticast mode [ 1199.492756][T20293] kAFS: unable to lookup cell '/,c¾ûL' [ 1199.586065][T20293] binder: 20284:20293 ioctl c0506107 80000180 returned -22 [ 1200.793401][T20308] pim6reg: entered allmulticast mode [ 1201.033057][T20314] pim6reg: left allmulticast mode [ 1201.716094][T20316] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1201.795854][T20316] cramfs: wrong magic [ 1202.413087][T20325] kAFS: unable to lookup cell '/,c¾ûL' [ 1202.708602][T20325] binder: 20320:20325 ioctl c0506107 80000180 returned -22 [ 1203.104059][T19752] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1203.918319][T19752] usb 9-1: Using ep0 maxpacket: 32 [ 1204.071648][T19752] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1204.220538][T19752] usb 9-1: config 0 has no interfaces? [ 1204.401839][T19752] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1204.637365][T19752] usb 9-1: Product: syz [ 1204.699078][T19752] usb 9-1: Manufacturer: syz [ 1204.720364][T19752] usb 9-1: SerialNumber: syz [ 1204.914577][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1204.954093][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1204.959023][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1204.967681][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1204.972273][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1205.055917][T19752] usb 9-1: config 0 descriptor?? [ 1205.491042][T14347] usb 9-1: USB disconnect, device number 26 [ 1207.127260][T20363] pim6reg: entered allmulticast mode [ 1207.355720][T20380] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1208.265263][T12924] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1208.291791][T20386] pim6reg: entered allmulticast mode [ 1208.310254][T20391] binder: 20387:20391 ioctl c0306201 0 returned -14 [ 1208.324021][T20391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1208.371426][T20396] pim6reg: left allmulticast mode [ 1208.414327][T12924] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1208.418311][T12924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1208.485527][T20398] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1208.532596][T20398] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1208.535915][T20398] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1208.539462][T20398] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1208.551030][T20398] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1208.559974][T20398] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 16146 usecs [ 1208.581290][T20398] pci 0000:00:01.0: Adding to iommu group 1 [ 1208.616455][T20398] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1208.619422][T20398] pci 0000:00:01.0: vgaarb: bridge control possible [ 1208.622135][T20398] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1208.665349][T20398] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1208.699284][T20398] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1208.734964][T20398] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1208.769249][T20398] [drm] Found bochs VGA, ID 0xb0c5. [ 1208.787107][T20398] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1208.855978][T12924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1209.207456][T12924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.212086][T12924] usb 7-1: Product: syz [ 1209.213796][T12924] usb 7-1: Manufacturer: syz [ 1209.215290][T12924] usb 7-1: SerialNumber: syz [ 1209.263446][T12924] usb 7-1: config 0 descriptor?? [ 1209.266529][T12924] hub 7-1:0.0: bad descriptor, ignoring hub [ 1209.268482][T12924] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1209.331403][T12924] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input49 [ 1209.347315][T20398] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1209.394610][T20398] Console: switching to colour frame buffer device 160x50 [ 1209.396882][T20398] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1212.203919][T12924] usb 7-1: USB disconnect, device number 32 [ 1214.835692][T20442] pim6reg: entered allmulticast mode [ 1215.584420][T20455] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1218.859832][T20488] jffs2: notice: (20488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1218.896041][T20490] pim6reg: entered allmulticast mode [ 1219.025469][T20486] pim6reg: left allmulticast mode [ 1226.347659][T20566] pim6reg: left allmulticast mode [ 1226.959398][T20578] kAFS: unable to lookup cell '/,c¾ûL' [ 1227.076746][T20568] pim6reg: left allmulticast mode [ 1227.212144][T20578] binder: 20576:20578 ioctl c0506107 80000180 returned -22 [ 1231.475916][T20621] pim6reg: entered allmulticast mode [ 1231.734195][T20619] pim6reg: left allmulticast mode [ 1233.369099][T20635] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1233.381807][T20635] cramfs: wrong magic [ 1237.647885][T20675] netlink: 'syz.0.3279': attribute type 2 has an invalid length. [ 1239.020065][T20696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1239.031585][T20696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1241.978374][T20720] pim6reg: entered allmulticast mode [ 1242.073491][T20724] pim6reg: left allmulticast mode [ 1242.715038][T20720] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1242.728686][ T6491] libceph: connect (1)[c::]:6789 error -22 [ 1242.733689][ T6491] libceph: mon0 (1)[c::]:6789 connect error [ 1242.790705][T20733] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1242.793814][T20733] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1242.797478][T20733] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1242.800449][T20733] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1242.917826][T20723] ceph: No mds server is up or the cluster is laggy [ 1245.092767][T20759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.515784][T20779] syzkaller0: entered promiscuous mode [ 1246.517673][T20779] syzkaller0: entered allmulticast mode [ 1246.752275][T20783] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1246.780392][T20784] pim6reg: entered allmulticast mode [ 1246.881876][T20784] pim6reg: left allmulticast mode [ 1248.634190][T20801] pim6reg: entered allmulticast mode [ 1248.721828][T20801] pim6reg: left allmulticast mode [ 1249.840080][T20806] comedi comedi0: comedi_config --init_data is deprecated [ 1250.466434][T19752] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1250.614817][T19752] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1250.627891][T19752] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 1250.642534][T19752] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 1250.654082][T19752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.662313][T19752] usb 7-1: Product: syz [ 1250.667511][T19752] usb 7-1: Manufacturer: syz [ 1250.681073][T19752] usb 7-1: SerialNumber: syz [ 1250.768008][T19752] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 1250.798546][T19752] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1250.813316][T19752] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1251.654597][T20831] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1251.675122][T20831] cramfs: wrong magic [ 1251.765908][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1252.070428][T20835] pim6reg: entered allmulticast mode [ 1252.181105][T20835] pim6reg: left allmulticast mode [ 1253.870814][T20847] pim6reg: entered allmulticast mode [ 1254.162445][T20817] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 1254.214710][T20817] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 1254.297880][T20817] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 1254.300820][T20847] pim6reg: left allmulticast mode [ 1254.593464][T19752] usb 7-1: USB disconnect, device number 33 [ 1255.418121][T20857] netlink: 'syz.4.3321': attribute type 2 has an invalid length. [ 1255.555107][T19752] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1255.574882][T19752] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1255.586096][T19752] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1256.217801][T20877] pim6reg: entered allmulticast mode [ 1256.320505][T20877] pim6reg: left allmulticast mode [ 1259.787397][T20896] pim6reg: entered allmulticast mode [ 1259.869537][T20901] pim6reg: left allmulticast mode [ 1260.780277][T20918] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1260.787625][T20918] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1261.934878][T20927] netlink: 'syz.3.3334': attribute type 2 has an invalid length. [ 1263.290873][T20944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 1266.004067][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 1266.904738][T20965] pim6reg: entered allmulticast mode [ 1267.016068][T20957] pim6reg: left allmulticast mode [ 1269.135136][T20982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.981744][T20992] netlink: 'syz.2.3347': attribute type 2 has an invalid length. [ 1272.989634][ T850] libceph: connect (1)[c::]:6789 error -101 [ 1272.992218][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 1273.037279][T21018] ceph: No mds server is up or the cluster is laggy [ 1273.045864][T16725] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1273.632926][T21024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1275.876967][T21050] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95 [ 1275.886103][T21050] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 1275.892680][T21050] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 1275.927112][T21030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.951791][T21030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.136288][T21030] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1276.138693][T21030] batadv_slave_1: left allmulticast mode [ 1276.163139][T21038] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1276.169137][T21038] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1276.176030][T21042] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1276.180013][T21042] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1276.186616][ T55] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1276.200780][T21041] pim6reg: entered allmulticast mode [ 1276.204511][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.207468][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.210537][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.218361][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.297175][T21044] pim6reg: left allmulticast mode [ 1276.344471][ T55] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1276.352324][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1276.360522][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1276.374968][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.378535][ T55] usb 9-1: Product: syz [ 1276.380273][ T55] usb 9-1: Manufacturer: syz [ 1276.382277][ T55] usb 9-1: SerialNumber: syz [ 1276.392753][ T55] usb 9-1: config 0 descriptor?? [ 1276.399565][ T55] hub 9-1:0.0: bad descriptor, ignoring hub [ 1276.401954][ T55] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1276.419260][ T55] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input50 [ 1277.285593][T21070] pim6reg: entered allmulticast mode [ 1277.496211][ T6491] usb 9-1: USB disconnect, device number 27 [ 1277.574396][T21065] pim6reg: left allmulticast mode [ 1277.863694][T21077] pim6reg: entered allmulticast mode [ 1278.013717][T21077] pim6reg: left allmulticast mode [ 1279.942353][T21102] pim6reg: entered allmulticast mode [ 1280.133164][T21102] pim6reg: left allmulticast mode [ 1280.800792][T21111] binder: 21109:21111 ioctl c0306201 0 returned -14 [ 1280.973799][T21119] netlink: 'syz.2.3377': attribute type 2 has an invalid length. [ 1281.098103][T21111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1282.364980][T21132] Console: switching to colour dummy device 80x25 [ 1283.048213][T21147] pim6reg: entered allmulticast mode [ 1283.201382][T21134] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1283.230119][T21134] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1283.232689][T21134] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1283.238219][T21134] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1283.241266][T21134] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1283.271911][T21134] pci 0000:00:01.0: Adding to iommu group 1 [ 1283.282900][T21134] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1283.285091][T21134] pci 0000:00:01.0: vgaarb: bridge control possible [ 1283.287306][T21134] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1283.302801][T21134] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1283.306452][T21134] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1283.311870][T21134] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1283.329973][T21134] [drm] Found bochs VGA, ID 0xb0c5. [ 1283.332449][T21134] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1283.357124][T21134] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1283.412685][T21134] Console: switching to colour frame buffer device 160x50 [ 1283.415952][T21134] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1283.602486][T21145] pim6reg: left allmulticast mode [ 1284.610281][T21162] pim6reg: entered allmulticast mode [ 1284.782660][T21165] pim6reg: left allmulticast mode [ 1285.774469][T21175] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1285.934666][T21175] binder: 21172:21175 ioctl c0306201 80000040 returned -14 [ 1285.951832][T21175] ublk6: read batch cmd buffer failed [ 1285.955181][T21175] ublk6: read batch cmd buffer failed [ 1286.818270][T21174] syz.0.3387 (21174): drop_caches: 2 [ 1287.107311][T21191] pim6reg: entered allmulticast mode [ 1287.357264][T21201] pim6reg: left allmulticast mode [ 1288.940617][T21204] pim6reg: entered allmulticast mode [ 1289.046409][T21203] pim6reg: left allmulticast mode [ 1290.973478][T21238] pim6reg: entered allmulticast mode [ 1291.171594][T21236] pim6reg: left allmulticast mode [ 1292.672911][T21264] pim6reg: entered allmulticast mode [ 1292.839396][T21273] pim6reg: left allmulticast mode [ 1293.231309][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1294.648449][T21260] can0: slcan on ttyS3. [ 1294.833064][T21293] pim6reg: entered allmulticast mode [ 1297.126588][T21321] Console: switching to colour dummy device 80x25 [ 1299.274855][T21325] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1299.310446][T21325] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1299.314064][T21325] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1299.317401][T21325] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1299.327626][T21325] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1299.485751][T21295] pim6reg: left allmulticast mode [ 1299.549735][T21325] pci 0000:00:01.0: Adding to iommu group 1 [ 1299.630079][T21325] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1299.632273][T21325] pci 0000:00:01.0: vgaarb: bridge control possible [ 1299.634342][T21325] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1299.661032][T21325] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1299.663779][T21260] can0 (unregistered): slcan off ttyS3. [ 1299.683941][T21325] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1299.687985][T21325] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1299.708811][T21325] [drm] Found bochs VGA, ID 0xb0c5. [ 1299.711003][T21325] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1299.765922][T21325] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1300.408628][T21339] pim6reg: entered allmulticast mode [ 1300.588151][T21348] pim6reg: left allmulticast mode [ 1300.939179][T21325] Console: switching to colour frame buffer device 160x50 [ 1301.060997][T21325] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1301.672069][T21361] Console: switching to colour dummy device 80x25 [ 1301.740764][T21362] program syz.2.3420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1302.397639][T21362] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1302.604689][T21362] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1302.607644][T21362] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1302.622607][T21362] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1302.642458][T21362] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1303.059909][T21362] pci 0000:00:01.0: Adding to iommu group 1 [ 1303.100872][T21362] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1303.103044][T21362] pci 0000:00:01.0: vgaarb: bridge control possible [ 1303.105100][T21362] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1303.149817][T21362] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1303.153188][T21362] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1303.217240][T21362] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1303.350201][T21362] [drm] Found bochs VGA, ID 0xb0c5. [ 1303.352259][T21362] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1303.408061][T21362] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1303.789258][T21362] Console: switching to colour frame buffer device 160x50 [ 1303.791817][T21362] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1305.347921][T21413] pim6reg: entered allmulticast mode [ 1305.539033][T21420] pim6reg: left allmulticast mode [ 1305.958531][T21425] pim6reg: entered allmulticast mode [ 1306.104192][T21429] pim6reg: left allmulticast mode [ 1308.987004][T21451] overlayfs: overlapping lowerdir path [ 1309.176199][T21455] binder: 21454:21455 ioctl c0306201 0 returned -14 [ 1309.186804][T21455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3437'. [ 1309.201880][T21455] Console: switching to colour dummy device 80x25 [ 1309.330988][T21456] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1309.392764][T21456] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1309.401511][T21456] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1309.408778][T21456] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1309.416192][T21456] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1309.474165][T21456] pci 0000:00:01.0: Adding to iommu group 1 [ 1309.480155][T21456] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1309.482356][T21456] pci 0000:00:01.0: vgaarb: bridge control possible [ 1309.484417][T21456] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1309.494481][T21456] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1309.497186][T21456] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1309.500962][T21456] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1309.511521][T21456] [drm] Found bochs VGA, ID 0xb0c5. [ 1309.513264][T21456] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1309.523155][T21456] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1309.567777][T21456] Console: switching to colour frame buffer device 160x50 [ 1309.570137][T21456] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1315.018660][T21488] netlink: 'syz.0.3444': attribute type 2 has an invalid length. [ 1315.883341][T21506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1316.422526][T21515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1316.451495][T21512] binder: 21511:21512 ioctl c0306201 0 returned -14 [ 1316.492548][T21515] Console: switching to colour dummy device 80x25 [ 1316.527244][T21512] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1316.590531][T21512] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1316.681924][T21517] overlayfs: overlapping lowerdir path [ 1316.686534][T21512] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1316.689397][T21512] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1316.702244][T21512] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1316.863723][T21512] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 158263 usecs [ 1316.885505][T21510] can0: slcan on ttyS3. [ 1316.925464][T21512] pci 0000:00:01.0: Adding to iommu group 1 [ 1316.942220][T21512] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1316.944984][T21512] pci 0000:00:01.0: vgaarb: bridge control possible [ 1316.947690][T21512] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1316.965508][T21512] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1316.968583][T21512] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1317.280753][T21525] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1317.325812][T21512] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1317.348854][T21512] [drm] Found bochs VGA, ID 0xb0c5. [ 1317.351234][T21512] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1317.371404][T21512] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1317.454326][T21523] pim6reg: entered allmulticast mode [ 1317.464210][T21512] Console: switching to colour frame buffer device 160x50 [ 1317.469319][T21512] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1317.494463][T21523] pim6reg: left allmulticast mode [ 1317.499243][T21518] can0 (unregistered): slcan off ttyS3. [ 1317.613974][T14749] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1317.796889][T14749] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1317.803236][T14749] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.810111][T14749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.836897][T14749] usb 9-1: config 0 descriptor?? [ 1318.443741][T21549] pim6reg: entered allmulticast mode [ 1319.266642][T21549] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1319.279814][T21526] bond2: Removing last ns target with arp_interval on [ 1319.285605][T21556] pim6reg: left allmulticast mode [ 1319.437565][T14749] ath6kl: Failed to submit usb control message: -71 [ 1319.439596][T14749] ath6kl: unable to send the bmi data to the device: -71 [ 1319.447646][T14749] ath6kl: Unable to send get target info: -71 [ 1319.470285][T14749] ath6kl: Failed to init ath6kl core: -71 [ 1319.486975][T14749] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1319.491315][T14749] usb 9-1: USB disconnect, device number 28 [ 1319.627565][ T42] audit: type=1804 audit(1787016288.965:1317): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3455" name="bus" dev="ramfs" ino=98775 res=1 errno=0 [ 1319.637962][ T42] audit: type=1804 audit(1787016288.985:1318): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3455" name="bus" dev="ramfs" ino=98775 res=1 errno=0 [ 1320.554797][T21572] pim6reg: entered allmulticast mode [ 1322.082146][T21586] pim6reg: left allmulticast mode [ 1323.505092][T21617] pim6reg: entered allmulticast mode [ 1323.636104][T21625] pim6reg: left allmulticast mode [ 1324.220434][T21624] pim6reg: entered allmulticast mode [ 1324.318916][T21629] pim6reg: left allmulticast mode [ 1324.875059][T21640] Console: switching to colour dummy device 80x25 [ 1324.954379][T21641] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1324.982404][T21641] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1324.985578][T21641] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1324.988811][T21641] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1324.993041][T21641] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1325.030531][T21641] pci 0000:00:01.0: Adding to iommu group 1 [ 1325.038916][T21641] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1325.041167][T21641] pci 0000:00:01.0: vgaarb: bridge control possible [ 1325.043172][T21641] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1325.061469][T21641] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1325.064615][T21641] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1325.068596][T21641] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1325.079560][T21641] [drm] Found bochs VGA, ID 0xb0c5. [ 1325.081619][T21641] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1325.103610][T21641] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1325.154572][T21641] Console: switching to colour frame buffer device 160x50 [ 1325.156891][T21641] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1326.339600][T21654] pim6reg: entered allmulticast mode [ 1326.586002][T21661] pim6reg: left allmulticast mode [ 1328.031817][T21666] pim6reg: entered allmulticast mode [ 1328.153902][T21663] pim6reg: left allmulticast mode [ 1329.246090][T21706] pim6reg: entered allmulticast mode [ 1329.523179][T21706] pim6reg: left allmulticast mode [ 1331.624660][T21735] pim6reg: entered allmulticast mode [ 1331.646233][T21736] pim6reg: entered allmulticast mode [ 1331.791899][T21739] pim6reg: left allmulticast mode [ 1332.220592][T21745] pim6reg: left allmulticast mode [ 1335.464618][T21774] pim6reg: entered allmulticast mode [ 1335.590272][T21773] pim6reg: left allmulticast mode [ 1336.056011][T19068] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1336.367174][T19068] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1336.434270][T19068] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1336.438187][T19068] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1336.451620][T19068] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1336.466560][T19068] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1336.469994][T19068] usb 5-1: Product: syz [ 1336.471662][T19068] usb 5-1: Manufacturer: syz [ 1336.473786][T19068] usb 5-1: SerialNumber: syz [ 1336.482904][T19068] usb 5-1: config 0 descriptor?? [ 1336.485813][T21777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1336.493460][T19068] usb 5-1: selecting invalid altsetting 0 [ 1337.068571][T21798] ptrace attach of ""[21799] was attempted by "/syz-executor exec"[21798] [ 1337.545938][T19068] usb 5-1: USB disconnect, device number 22 [ 1337.951678][T21824] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1339.844466][T21842] pim6reg: entered allmulticast mode [ 1340.026707][T21839] pim6reg: left allmulticast mode [ 1340.300271][T21852] pim6reg: entered allmulticast mode [ 1340.572057][T21857] pim6reg: left allmulticast mode [ 1346.147532][T21894] pim6reg: entered allmulticast mode [ 1346.295010][T21894] pim6reg: left allmulticast mode [ 1347.486622][T21902] pim6reg: entered allmulticast mode [ 1347.590454][T21905] pim6reg: left allmulticast mode [ 1348.706604][T21916] pim6reg: entered allmulticast mode [ 1350.213768][T19068] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1350.437106][T19068] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1350.702009][T19068] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1351.143576][T19068] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1351.199506][T19068] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1351.207921][T19068] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1351.210563][T19068] usb 9-1: Product: syz [ 1351.211933][T19068] usb 9-1: Manufacturer: syz [ 1351.213458][T19068] usb 9-1: SerialNumber: syz [ 1351.216851][T19068] usb 9-1: config 0 descriptor?? [ 1351.219178][T21944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1351.226270][T19068] usb 9-1: selecting invalid altsetting 0 [ 1351.730403][T14749] usb 9-1: USB disconnect, device number 29 [ 1352.019950][T21965] pim6reg: left allmulticast mode [ 1352.570485][T21972] pim6reg: entered allmulticast mode [ 1352.588523][T21970] pim6reg: left allmulticast mode [ 1354.098626][T21990] Console: switching to colour dummy device 80x25 [ 1354.836002][T21992] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1354.897462][T21992] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1354.900982][T21992] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1354.905042][T21992] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1354.909464][T21992] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1354.929691][T21992] pci 0000:00:01.0: Adding to iommu group 1 [ 1354.938873][T21992] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1354.941791][T21992] pci 0000:00:01.0: vgaarb: bridge control possible [ 1354.944473][T21992] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1354.955700][T21992] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1354.959564][T21992] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1354.969035][T21992] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1354.981686][T21992] [drm] Found bochs VGA, ID 0xb0c5. [ 1354.984098][T21992] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1354.999663][T21992] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1355.181749][T21992] Console: switching to colour frame buffer device 160x50 [ 1355.189401][T21992] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1357.135899][T22032] pim6reg: entered allmulticast mode [ 1357.382725][T22041] pim6reg: left allmulticast mode [ 1358.526954][T22050] pim6reg: entered allmulticast mode [ 1358.621638][T22043] pim6reg: left allmulticast mode [ 1359.917901][T22077] program syz.2.3551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1359.933075][T22077] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1364.566540][T22109] Invalid ELF header magic: != ELF [ 1365.859040][T22116] pim6reg: entered allmulticast mode [ 1365.862103][T22122] pim6reg: left allmulticast mode [ 1368.803682][ T55] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1369.197245][T22184] pim6reg: entered allmulticast mode [ 1369.323320][T22184] pim6reg: left allmulticast mode [ 1369.354127][ T55] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1369.628251][ T55] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1369.631921][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.635007][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.638442][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.641391][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.644446][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.647885][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.650766][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.653846][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.657419][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.660343][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.663333][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.678427][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.687573][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.719303][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.755165][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.783842][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.792278][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.815721][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.862712][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.873654][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.895527][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1369.946409][ T55] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.949976][ T55] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.968078][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1370.209881][ T55] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1370.217399][ T55] usb 9-1: Product: syz [ 1370.222559][ T55] usb 9-1: Manufacturer: syz [ 1370.224303][ T55] usb 9-1: SerialNumber: syz [ 1370.253745][ T55] usb 9-1: config 0 descriptor?? [ 1370.261719][ T55] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1371.456370][T18416] usb 9-1: USB disconnect, device number 30 [ 1371.826634][T18416] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1372.538621][T22163] bond_slave_0: left allmulticast mode [ 1372.550176][T22163] veth1_to_hsr: left allmulticast mode [ 1372.694131][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.698132][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.706739][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.713901][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.814900][T19068] lo speed is unknown, defaulting to 1000 [ 1372.817907][T19068] syz0: Port: 1 Link DOWN [ 1372.896598][T22204] pim6reg: entered allmulticast mode [ 1373.049962][T22218] pim6reg: left allmulticast mode [ 1373.196861][T22206] Process accounting resumed [ 1373.582188][T22243] pim6reg: entered allmulticast mode [ 1375.031077][T22272] input: syz1 as /devices/virtual/input/input51 [ 1375.033236][T22272] input: failed to attach handler leds to device input51, error: -6 [ 1378.686416][T22307] pim6reg: entered allmulticast mode [ 1378.820028][T22312] pim6reg: left allmulticast mode [ 1379.203865][T14749] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1379.362185][T14749] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1379.832900][T14749] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1379.891033][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.893989][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.897382][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.900560][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.903631][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.909254][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.913162][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.916245][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.919763][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.924301][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.929068][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.932798][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.940722][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.943729][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.947305][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.952938][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.956683][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.960410][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.965384][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.968890][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.973558][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1379.982535][T14749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.026283][T14749] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.039925][T14749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1380.089403][T14749] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1380.103579][T14749] usb 5-1: Product: syz [ 1380.114569][T14749] usb 5-1: Manufacturer: syz [ 1380.116187][T14749] usb 5-1: SerialNumber: syz [ 1380.215849][T14749] usb 5-1: config 0 descriptor?? [ 1380.331629][ C3] ================================================================== [ 1380.334244][ C3] BUG: KASAN: slab-out-of-bounds in find_endpoint+0x2a3/0x2c0 [ 1380.336664][ C3] Read of size 1 at addr ffff888029597293 by task syz.3.3593/22326 [ 1380.339288][ C3] [ 1380.340703][ C3] CPU: 3 UID: 0 PID: 22326 Comm: syz.3.3593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.340721][ C3] Tainted: [L]=SOFTLOCKUP [ 1380.340726][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1380.340742][ C3] Call Trace: [ 1380.340748][ C3] [ 1380.340753][ C3] dump_stack_lvl+0x100/0x190 [ 1380.340803][ C3] print_report+0x13d/0x4b0 [ 1380.340840][ C3] ? __virt_addr_valid+0x239/0x430 [ 1380.340877][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1380.340888][ C3] kasan_report+0xdf/0x1c0 [ 1380.340923][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1380.340935][ C3] find_endpoint+0x2a3/0x2c0 [ 1380.340947][ C3] dummy_timer+0x500/0x36f0 [ 1380.340962][ C3] ? do_raw_spin_lock+0x128/0x260 [ 1380.340982][ C3] ? find_held_lock+0x2b/0x80 [ 1380.341003][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.341066][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.341103][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1380.341152][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.341170][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1380.341189][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1380.341202][ C3] ? mark_held_locks+0x40/0x70 [ 1380.341220][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1380.341234][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1380.341247][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 1380.341270][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 1380.341285][ C3] handle_softirqs+0x1ea/0x9b0 [ 1380.341306][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1380.341319][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1380.341332][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1380.341349][ C3] __irq_exit_rcu+0x162/0x210 [ 1380.341362][ C3] irq_exit_rcu+0x9/0x30 [ 1380.341375][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1380.341391][ C3] [ 1380.341395][ C3] [ 1380.341400][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.341414][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 1380.341430][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 00 0c e8 09 e8 ab 93 3c 00 fb 48 8d bb 00 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1380.341442][ C3] RSP: 0000:ffffc90004b5f078 EFLAGS: 00000206 [ 1380.341454][ C3] RAX: 0000000000006471 RBX: ffff888023e62580 RCX: 0000000000000040 [ 1380.341462][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a6ce3 RDI: ffff888023e63c80 [ 1380.341470][ C3] RBP: ffffc90004b5f0d0 R08: 0000000000000001 R09: 0000000000000000 [ 1380.341477][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880208a0000 [ 1380.341485][ C3] R13: 0000000000000001 R14: ffffffff91224184 R15: ffff88802b53b800 [ 1380.341496][ C3] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1380.341512][ C3] __schedule+0x1264/0x6730 [ 1380.341525][ C3] ? __lock_acquire+0x49f/0x1a40 [ 1380.341537][ C3] ? __pfx_trace_clock_local+0x10/0x10 [ 1380.341566][ C3] ? __pfx___schedule+0x10/0x10 [ 1380.341820][ C3] ? mark_held_locks+0x40/0x70 [ 1380.341841][ C3] preempt_schedule_irq+0x50/0x90 [ 1380.341854][ C3] irqentry_exit+0x205/0xa10 [ 1380.341869][ C3] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1380.341881][ C3] RIP: 0010:lock_acquire+0x5e/0x370 [ 1380.341892][ C3] Code: 05 fb 50 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 8e 3c 0f 0f 82 ac 02 00 00 8b 35 2e c2 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 50 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 1380.341903][ C3] RSP: 0000:ffffc90004b5f358 EFLAGS: 00000206 [ 1380.341912][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 1bc7805e9d2ad394 [ 1380.341919][ C3] RDX: 0000000000000000 RSI: ffffffff8e180d11 RDI: ffffffff8c400d80 [ 1380.341927][ C3] RBP: ffffffff8ede2ae0 R08: 00000000986878b0 R09: 00000000000000b5 [ 1380.341934][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 1380.341941][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1380.341952][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 1380.341965][ C3] ? fs_reclaim_acquire+0x70/0x100 [ 1380.341982][ C3] fs_reclaim_acquire+0x8c/0x100 [ 1380.341998][ C3] ? fs_reclaim_acquire+0x70/0x100 [ 1380.342014][ C3] prepare_alloc_pages+0x166/0x5f0 [ 1380.342032][ C3] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1380.342046][ C3] ? hrtimer_reprogram+0x165/0x6c0 [ 1380.342059][ C3] ? find_held_lock+0x2b/0x80 [ 1380.342074][ C3] ? mark_held_locks+0x40/0x70 [ 1380.342091][ C3] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1380.342104][ C3] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 1380.342117][ C3] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1380.342133][ C3] ? __lock_acquire+0x49f/0x1a40 [ 1380.342143][ C3] ? __css_rstat_updated+0x1ce/0x5a0 [ 1380.342164][ C3] ? lock_acquire+0x1b9/0x370 [ 1380.342174][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.342191][ C3] ? policy_nodemask+0xed/0x4f0 [ 1380.342210][ C3] alloc_pages_mpol+0x1fb/0x540 [ 1380.342226][ C3] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1380.342244][ C3] folio_alloc_mpol_noprof+0x36/0x260 [ 1380.342256][ C3] vma_alloc_folio_noprof+0xed/0x1d0 [ 1380.342267][ C3] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1380.342280][ C3] do_anonymous_page+0xb2b/0x2080 [ 1380.342299][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1380.342313][ C3] __handle_mm_fault+0x1d2c/0x2a00 [ 1380.342325][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1380.342339][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 1380.342351][ C3] ? pte_offset_map_lock+0x174/0x320 [ 1380.342367][ C3] ? find_held_lock+0x2b/0x80 [ 1380.342382][ C3] ? follow_page_pte+0x4d0/0x13f0 [ 1380.342401][ C3] handle_mm_fault+0x37b/0xa30 [ 1380.342414][ C3] __get_user_pages+0x1178/0x32a0 [ 1380.342432][ C3] ? __pfx___get_user_pages+0x10/0x10 [ 1380.342450][ C3] populate_vma_page_range+0x267/0x3f0 [ 1380.342467][ C3] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1380.342484][ C3] ? __pfx_find_vma_intersection+0x10/0x10 [ 1380.342501][ C3] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1380.342515][ C3] __mm_populate+0x107/0x3a0 [ 1380.342532][ C3] ? __pfx___mm_populate+0x10/0x10 [ 1380.342550][ C3] ? up_write+0x2e5/0x5c0 [ 1380.342562][ C3] do_mlock+0x3f0/0x7f0 [ 1380.342575][ C3] ? __pfx_do_mlock+0x10/0x10 [ 1380.342587][ C3] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1380.342602][ C3] ? xfd_validate_state+0x129/0x190 [ 1380.342625][ C3] __ia32_sys_mlock+0x57/0x80 [ 1380.342638][ C3] __do_fast_syscall_32+0xe7/0x970 [ 1380.342655][ C3] do_fast_syscall_32+0x32/0x70 [ 1380.342670][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.342685][ C3] RIP: 0023:0xf6feefec [ 1380.342701][ C3] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1380.342707][ C3] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 1380.342717][ C3] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 1380.342724][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.342731][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.342737][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1380.342744][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.342754][ C3] [ 1380.342758][ C3] [ 1380.562174][ C3] Allocated by task 18098: [ 1380.563589][ C3] kasan_save_stack+0x30/0x50 [ 1380.565101][ C3] kasan_save_track+0x14/0x30 [ 1380.566593][ C3] __kasan_kmalloc+0xaa/0xb0 [ 1380.568092][ C3] __kmalloc_node_noprof+0x339/0x830 [ 1380.569791][ C3] qdisc_alloc+0xbb/0xb30 [ 1380.571200][ C3] qdisc_create_dflt+0x93/0x490 [ 1380.572734][ C3] dev_activate+0x64f/0xce0 [ 1380.574189][ C3] __dev_open+0x490/0x8f0 [ 1380.575560][ C3] __dev_change_flags+0x596/0x850 [ 1380.577162][ C3] rtnl_configure_link+0xfe/0x280 [ 1380.578801][ C3] rtnl_newlink+0x153b/0x2380 [ 1380.580294][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 1380.581896][ C3] netlink_rcv_skb+0x159/0x420 [ 1380.583590][ C3] netlink_unicast+0x585/0x850 [ 1380.585137][ C3] netlink_sendmsg+0x8b0/0xda0 [ 1380.586805][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 1380.588364][ C3] ___sys_sendmsg+0x190/0x1e0 [ 1380.589890][ C3] __sys_sendmsg+0x160/0x210 [ 1380.591363][ C3] __do_fast_syscall_32+0xe7/0x970 [ 1380.592982][ C3] do_fast_syscall_32+0x32/0x70 [ 1380.594533][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.596514][ C3] [ 1380.597290][ C3] The buggy address belongs to the object at ffff888029597000 [ 1380.597290][ C3] which belongs to the cache kmalloc-1k of size 1024 [ 1380.601915][ C3] The buggy address is located 19 bytes to the right of [ 1380.601915][ C3] allocated 640-byte region [ffff888029597000, ffff888029597280) [ 1380.606967][ C3] [ 1380.607837][ C3] The buggy address belongs to the physical page: [ 1380.609853][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29590 [ 1380.613351][ C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1380.616047][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1380.619014][ C3] page_type: f5(slab) [ 1380.620628][ C3] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 1380.623330][ C3] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1380.626740][ C3] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 1380.629589][ C3] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1380.632978][ C3] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1380.635967][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1380.639131][ C3] page dumped because: kasan: bad access detected [ 1380.641636][ C3] page_owner tracks the page as allocated [ 1380.643416][ C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6051, tgid 6045 (syz.0.30), ts 61753541031, free_ts 60933937423 [ 1380.650195][ C3] post_alloc_hook+0xfd/0x120 [ 1380.651989][ C3] get_page_from_freelist+0xf48/0x3530 [ 1380.654184][ C3] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 1380.656090][ C3] new_slab+0xa2/0x640 [ 1380.657552][ C3] ___slab_alloc+0x5d1/0x800 [ 1380.659457][ C3] __kmalloc_cache_node_noprof+0x391/0x6c0 [ 1380.661540][ C3] alloc_shrinker_info+0x192/0x470 [ 1380.663175][ C3] mem_cgroup_css_online+0xa4/0xbf0 [ 1380.665244][ C3] online_css+0xb2/0x350 [ 1380.666908][ C3] cgroup_apply_control_enable+0xa8d/0xdd0 [ 1380.668753][ C3] cgroup_mkdir+0x57f/0x1330 [ 1380.670482][ C3] kernfs_iop_mkdir+0x111/0x190 [ 1380.672467][ C3] vfs_mkdir+0x364/0x850 [ 1380.673974][ C3] filename_mkdirat+0x48b/0x5e0 [ 1380.675511][ C3] __ia32_sys_mkdirat+0x88/0xc0 [ 1380.677454][ C3] __do_fast_syscall_32+0xe7/0x970 [ 1380.679419][ C3] page last free pid 5732 tgid 5732 stack trace: [ 1380.681398][ C3] __free_frozen_pages+0x79f/0x1090 [ 1380.683455][ C3] qlist_free_all+0x47/0xf0 [ 1380.685282][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1380.686951][ C3] __kasan_slab_alloc+0x69/0x90 [ 1380.688716][ C3] __kmalloc_noprof+0x2bf/0x820 [ 1380.690696][ C3] tomoyo_encode2+0xfb/0x3c0 [ 1380.692581][ C3] tomoyo_encode+0x29/0x50 [ 1380.694020][ C3] tomoyo_path_perm+0x3a7/0x460 [ 1380.695688][ C3] tomoyo_path_symlink+0x97/0xe0 [ 1380.697694][ C3] security_path_symlink+0x152/0x2d0 [ 1380.699605][ C3] filename_symlinkat+0x122/0x560 [ 1380.701201][ C3] __x64_sys_symlink+0x79/0xb0 [ 1380.703092][ C3] do_syscall_64+0x115/0x840 [ 1380.704910][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.706765][ C3] [ 1380.707582][ C3] Memory state around the buggy address: [ 1380.709846][ C3] ffff888029597180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1380.712663][ C3] ffff888029597200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1380.715470][ C3] >ffff888029597280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1380.718547][ C3] ^ [ 1380.720015][ C3] ffff888029597300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1380.723028][ C3] ffff888029597380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1380.725786][ C3] ================================================================== [ 1380.728630][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1380.731401][ C3] CPU: 3 UID: 0 PID: 22326 Comm: syz.3.3593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.735108][ C3] Tainted: [L]=SOFTLOCKUP [ 1380.736841][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1380.740147][ C3] Call Trace: [ 1380.741515][ C3] [ 1380.742695][ C3] dump_stack_lvl+0x100/0x190 [ 1380.744516][ C3] vpanic+0x552/0x970 [ 1380.745818][ C3] ? __pfx_vpanic+0x10/0x10 [ 1380.747389][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 1380.749396][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1380.751183][ C3] panic+0xd1/0xe0 [ 1380.752324][ C3] ? __pfx_panic+0x10/0x10 [ 1380.753757][ C3] ? end_report.part.0+0x23/0x90 [ 1380.755670][ C3] ? rcu_is_watching+0x12/0xc0 [ 1380.757469][ C3] ? end_report.part.0+0x23/0x90 [ 1380.759044][ C3] ? check_panic_on_warn+0x1f/0x90 [ 1380.760974][ C3] check_panic_on_warn.cold+0x19/0x34 [ 1380.763138][ C3] end_report.part.0+0x3a/0x90 [ 1380.764736][ C3] kasan_report.cold+0xe/0x18 [ 1380.766281][ C3] ? find_endpoint+0x2a3/0x2c0 [ 1380.768220][ C3] find_endpoint+0x2a3/0x2c0 [ 1380.770111][ C3] dummy_timer+0x500/0x36f0 [ 1380.771603][ C3] ? do_raw_spin_lock+0x128/0x260 [ 1380.773322][ C3] ? find_held_lock+0x2b/0x80 [ 1380.775227][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.777287][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.779090][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1380.781445][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 1380.783489][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1380.785427][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1380.787442][ C3] ? mark_held_locks+0x40/0x70 [ 1380.789303][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1380.791147][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 1380.793006][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 1380.795108][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 1380.796718][ C3] handle_softirqs+0x1ea/0x9b0 [ 1380.798468][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1380.800589][ C3] ? _raw_spin_unlock+0x28/0x50 [ 1380.802388][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1380.804157][ C3] __irq_exit_rcu+0x162/0x210 [ 1380.806060][ C3] irq_exit_rcu+0x9/0x30 [ 1380.807802][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1380.809716][ C3] [ 1380.810670][ C3] [ 1380.811809][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.814223][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 1380.816451][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 00 0c e8 09 e8 ab 93 3c 00 fb 48 8d bb 00 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1380.823403][ C3] RSP: 0000:ffffc90004b5f078 EFLAGS: 00000206 [ 1380.825474][ C3] RAX: 0000000000006471 RBX: ffff888023e62580 RCX: 0000000000000040 [ 1380.828624][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a6ce3 RDI: ffff888023e63c80 [ 1380.831157][ C3] RBP: ffffc90004b5f0d0 R08: 0000000000000001 R09: 0000000000000000 [ 1380.834205][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880208a0000 [ 1380.836968][ C3] R13: 0000000000000001 R14: ffffffff91224184 R15: ffff88802b53b800 [ 1380.839859][ C3] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1380.842258][ C3] __schedule+0x1264/0x6730 [ 1380.843789][ C3] ? __lock_acquire+0x49f/0x1a40 [ 1380.845401][ C3] ? __pfx_trace_clock_local+0x10/0x10 [ 1380.847514][ C3] ? __pfx___schedule+0x10/0x10 [ 1380.849201][ C3] ? mark_held_locks+0x40/0x70 [ 1380.850733][ C3] preempt_schedule_irq+0x50/0x90 [ 1380.852788][ C3] irqentry_exit+0x205/0xa10 [ 1380.854673][ C3] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1380.856511][ C3] RIP: 0010:lock_acquire+0x5e/0x370 [ 1380.858288][ C3] Code: 05 fb 50 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 8e 3c 0f 0f 82 ac 02 00 00 8b 35 2e c2 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 50 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 1380.865114][ C3] RSP: 0000:ffffc90004b5f358 EFLAGS: 00000206 [ 1380.867550][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 1bc7805e9d2ad394 [ 1380.870339][ C3] RDX: 0000000000000000 RSI: ffffffff8e180d11 RDI: ffffffff8c400d80 [ 1380.873214][ C3] RBP: ffffffff8ede2ae0 R08: 00000000986878b0 R09: 00000000000000b5 [ 1380.876372][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 1380.878926][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1380.882083][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 1380.884022][ C3] ? fs_reclaim_acquire+0x70/0x100 [ 1380.885635][ C3] fs_reclaim_acquire+0x8c/0x100 [ 1380.887556][ C3] ? fs_reclaim_acquire+0x70/0x100 [ 1380.889681][ C3] prepare_alloc_pages+0x166/0x5f0 [ 1380.891403][ C3] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1380.893465][ C3] ? hrtimer_reprogram+0x165/0x6c0 [ 1380.895530][ C3] ? find_held_lock+0x2b/0x80 [ 1380.897347][ C3] ? mark_held_locks+0x40/0x70 [ 1380.898893][ C3] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1380.901123][ C3] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 1380.903452][ C3] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1380.905502][ C3] ? __lock_acquire+0x49f/0x1a40 [ 1380.907068][ C3] ? __css_rstat_updated+0x1ce/0x5a0 [ 1380.909137][ C3] ? lock_acquire+0x1b9/0x370 [ 1380.911067][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.913232][ C3] ? policy_nodemask+0xed/0x4f0 [ 1380.914778][ C3] alloc_pages_mpol+0x1fb/0x540 [ 1380.916714][ C3] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1380.918905][ C3] folio_alloc_mpol_noprof+0x36/0x260 [ 1380.920669][ C3] vma_alloc_folio_noprof+0xed/0x1d0 [ 1380.922485][ C3] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1380.924857][ C3] do_anonymous_page+0xb2b/0x2080 [ 1380.926730][ C3] ? rcu_read_unlock+0x2d/0xb0 [ 1380.928279][ C3] __handle_mm_fault+0x1d2c/0x2a00 [ 1380.930252][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1380.932357][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 1380.933993][ C3] ? pte_offset_map_lock+0x174/0x320 [ 1380.935766][ C3] ? find_held_lock+0x2b/0x80 [ 1380.937691][ C3] ? follow_page_pte+0x4d0/0x13f0 [ 1380.939531][ C3] handle_mm_fault+0x37b/0xa30 [ 1380.941045][ C3] __get_user_pages+0x1178/0x32a0 [ 1380.943009][ C3] ? __pfx___get_user_pages+0x10/0x10 [ 1380.945189][ C3] populate_vma_page_range+0x267/0x3f0 [ 1380.947189][ C3] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1380.949117][ C3] ? __pfx_find_vma_intersection+0x10/0x10 [ 1380.951484][ C3] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1380.953780][ C3] __mm_populate+0x107/0x3a0 [ 1380.955443][ C3] ? __pfx___mm_populate+0x10/0x10 [ 1380.957067][ C3] ? up_write+0x2e5/0x5c0 [ 1380.958791][ C3] do_mlock+0x3f0/0x7f0 [ 1380.960472][ C3] ? __pfx_do_mlock+0x10/0x10 [ 1380.962102][ C3] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1380.963943][ C3] ? xfd_validate_state+0x129/0x190 [ 1380.966040][ C3] __ia32_sys_mlock+0x57/0x80 [ 1380.967966][ C3] __do_fast_syscall_32+0xe7/0x970 [ 1380.969694][ C3] do_fast_syscall_32+0x32/0x70 [ 1380.971320][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.973747][ C3] RIP: 0023:0xf6feefec [ 1380.975288][ C3] Code: Unable to access opcode bytes at 0xf6feefc2. [ 1380.977536][ C3] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 1380.980578][ C3] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 1380.983719][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.986388][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.989354][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1380.992409][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.994998][ C3] [ 1380.997047][ C3] Kernel Offset: disabled [ 1380.998829][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:25:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000001f6375d RBX=ffffffff8e891500 RCX=ffffffff8bbab345 RDX=0000000000000000 RSI=ffffffff8e1a6ce3 RDI=ffffffff8c400d80 RBP=fffffbfff1d122a0 RSP=ffffffff8e807cf0 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fa2 R15=dffffc0000000000 RIP=ffffffff8bba98ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540aff4 CR3=000000006da06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffffff8ebe80a0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e29ca96 RDI=ffffffff8c400d80 RBP=ffff888022504b00 RSP=ffffc90003da78f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffff8880455ce800 R15=1ffff920007b4f53 RIP=ffffffff8bbaa1ad RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000006da06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc900052776f0 RCX=ffffffff820c6f4e RDX=1ffff11002708b02 RSI=0000000000000008 RDI=ffff888013845810 RBP=0000000012503344 RSP=ffffc900052775a8 R8 =0000000000000000 R9 =ffffed1002708b02 R10=ffff888013845817 R11=0000000000000002 R12=0000000000000000 R13=ffff88801d2bc000 R14=ffff888013845800 R15=ffff888013845810 RIP=ffffffff820c6f6d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005641d4425000 CR3=0000000055b0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e14 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01080000080007b8 80080006016d8036 0000054e00000015 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301000000080615 8003158004119003 0608001188033008 0011800300080040 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8084080014080006 06749a0008000208 00140800060474a6 0100000208060201 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e8000800040800 1408000602749a00 040024e580080000 0201c7080008004c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea006c6f72746e6f 632d706f6f6c2f76 65642f01ffffffff ffffffffdb080003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffff040d c0030008000db803 0008000db0030fff ffffff040da00300 ZMM25=4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd 4cbe5fdd4cbe5fdd ZMM26=2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec 2f8104ec2f8104ec ZMM27=f121010af121010a f121010af121010a f121010af121010a f121010af121010a f121010af121010a f121010af121010a f121010af121010a f121010af121010a ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8b2600008b260000 8b2600008b260000 8b2600008b260000 8b2600008b260000 8b2600008b260000 8b2600008b260000 8b2600008b260000 8b2600008b260000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000400001000 RCX=ffffffff8175c618 RDX=ffff888023e62580 RSI=ffffffff8175c628 RDI=ffff888023e62580 RBP=0000000000000001 RSP=ffffc900005e89a0 R8 =0000000000000007 R9 =ffffffffff600000 R10=0000000400001000 R11=00000000000abb8a R12=0000000000000000 R13=ffff888023e62580 R14=0000000000000000 R15=ffffffff8e192489 RIP=ffffffff8209d1d5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f655c0 CR3=0000000055b0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000