last executing test programs: 7m50.130015173s ago: executing program 1 (id=4158): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x2, 0x2, {0x0}, {0xee00}, 0x200}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b48, &(0x7f0000000100)) prlimit64(r6, 0x2, 0x0, 0x0) 7m49.213526571s ago: executing program 1 (id=4159): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r2 = userfaultfd(0x80001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) flock(r3, 0x5) fcntl$lock(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x8}) unshare(0x20000400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) accept4(r0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) 7m48.993251945s ago: executing program 1 (id=4161): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 7m48.67503168s ago: executing program 1 (id=4162): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000780)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="200000001100010003000000000064000000000064"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x43c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, 0x80, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000406030000000000000000000100000305000100070000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 7m47.335267413s ago: executing program 1 (id=4169): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1fb) io_uring_enter(0xffffffffffffffff, 0x52e6, 0x4e38, 0xd8, &(0x7f0000000200)={[0x10]}, 0x8) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r2 = io_uring_setup(0x36c2, &(0x7f0000000480)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/19, 0x13}, {0x0}], 0x0, 0x3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10080, 0x10) write(r3, &(0x7f0000000180)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) 7m46.28542538s ago: executing program 1 (id=4177): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x24044005) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r2, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000780)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000007c0)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000800)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) r7 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r7, r5, r7}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7m31.156498692s ago: executing program 32 (id=4177): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x24044005) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r2, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000780)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000007c0)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000800)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) r7 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r7, r5, r7}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7m23.615127708s ago: executing program 4 (id=4349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{@fixed}]}) connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000640)={r0, r0, 0x7, 0x3, &(0x7f0000000580)='9Y<', 0xb, 0x2, 0x8, 0x7, 0x3, 0x2, 0x5, 'syz0\x00'}) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @empty}}}}}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000740)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 7m23.613537092s ago: executing program 4 (id=4350): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000000f1401"], 0x2c}}, 0x84) 7m23.54494078s ago: executing program 4 (id=4352): r0 = socket(0x3f, 0x80000, 0x4) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r0, 0x8, r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000880)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x3ffffffc, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x0, 0x4000000, 0x5, 0x4829e, 0x7, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x80000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800c, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x10003, 0x4, 0xfdfffffffffffffe, 0xdd0, 0x0, 0xfffffffffffffffe, 0x400000000000000, 0x1, 0x5d78, 0x2, 0x80000001, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xc, 0x9, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x4, 0x40000000001075, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x7]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x4, 0x8001, 0x3171}, 0x50) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1100000000000000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x82) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000009060500000000000000000006000007140007800600044000080000060005404e20000005000100070000000900020073797a30"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x4) 7m23.181191382s ago: executing program 4 (id=4356): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0x320, &(0x7f0000000640)={0x0, 0xf1bf, 0x1, 0x0, 0x3c3}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 7m23.084878164s ago: executing program 4 (id=4357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000009c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) write(r1, &(0x7f0000000a00)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000a40)={0x7, 0x3, 0x6, 0x7fff, 0x17, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 7m22.944772507s ago: executing program 4 (id=4361): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x24044005) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r3, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000780)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000007c0)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000800)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r6, r8}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7m7.89556643s ago: executing program 33 (id=4361): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x24044005) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r3, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000780)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000007c0)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000800)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r6, r8}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6m59.45519115s ago: executing program 0 (id=4508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 6m59.454652112s ago: executing program 0 (id=4509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dededb7db7c468a3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f7e5bf051f44000000000000f3416816"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="838b21a2124b7a87cd35769c185a040d"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) init_module(0x0, 0x1b4, &(0x7f0000001040)='debugfs\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4) 6m58.462873539s ago: executing program 0 (id=4510): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) io_setup(0x4000008, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000100)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x4000002, 0x40}, &(0x7f0000000300), &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) io_setup(0x69, &(0x7f0000000380)) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='sysfs\x00', 0x1214040, 0x0) 6m58.284009314s ago: executing program 0 (id=4511): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f0000001c40)=""/102392, 0x18ff8) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) sched_setaffinity(r2, 0x47, &(0x7f000001ac40)=0x7) sendfile(r3, 0xffffffffffffffff, &(0x7f000001ac80)=0x100000000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f000001acc0)={0x8, 0x22fc73203698a420, 0x41, 0x0, 'syz1\x00', 0x5}) r4 = add_key$user(&(0x7f000001ad00), &(0x7f000001ad40)={'syz', 0x0}, &(0x7f000001ad80)="166ec4b16abf8d", 0x7, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f000001adc0), &(0x7f000001ae00), &(0x7f000001ae40), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f000001ae80)={r4, r5, r4}, &(0x7f000001aec0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000001af40), 0x20042, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000280)}) r7 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x2002) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000340)=""/133, 0x18}, {&(0x7f0000000400)=""/114}], 0x44) write$evdev(r7, &(0x7f0000000480)=[{{}, 0x0, 0x2}], 0x37) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x1010, 0xffffffffffffffff, 0x0) 6m56.14510352s ago: executing program 0 (id=4526): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) close(0x3) 6m55.984872571s ago: executing program 0 (id=4528): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000001240)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f000001a280)={0x1, &(0x7f000001a2c0)=[{0x6}]}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xd7a10da4a7122766, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6m40.926259834s ago: executing program 34 (id=4528): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000001240)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f000001a280)={0x1, &(0x7f000001a2c0)=[{0x6}]}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xd7a10da4a7122766, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2m42.66014799s ago: executing program 3 (id=6627): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000240)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000807, 0x200000000000000) 2m39.553633311s ago: executing program 3 (id=6645): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x200}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8000, 0x1) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, 0x0, 0x0, 0x8040) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = dup(r5) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 2m38.500848276s ago: executing program 3 (id=6662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfce) 2m38.272956148s ago: executing program 3 (id=6664): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x1, 0xc, 0x1, 0x6, @vifc_lcl_ifindex, @loopback}, 0x10) 2m38.27268771s ago: executing program 3 (id=6665): mkdir(&(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/tty/ttyS0/console\x00', 0x42002, 0x0) fcntl$getownex(r0, 0x10, 0x0) setpriority(0x1, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019640), 0x41, 0x0) r6 = dup(r5) write$P9_RSTATFS(r6, &(0x7f0000019680)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x7fff, 0x5, 0x1, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000019700)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) dup3(0xffffffffffffffff, r5, 0x80000) sendfile(r0, r0, 0x0, 0x8fb3) 2m37.440107635s ago: executing program 3 (id=6674): capset(&(0x7f0000001240)={0x19980330}, &(0x7f0000001280)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 2m22.13476792s ago: executing program 35 (id=6674): capset(&(0x7f0000001240)={0x19980330}, &(0x7f0000001280)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 2.102653962s ago: executing program 6 (id=8126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1', 0x1) 2.102513495s ago: executing program 6 (id=8127): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)="38000000240001040300000000000000000000000100000000000300020001000000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000280)="240000002a0001039900000000000000000000000100"/36, 0x24) read(r0, &(0x7f00000002c0), 0x8000) 2.012034069s ago: executing program 6 (id=8130): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000240)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000000280), r5, 0x2) syz_ublk_setup_queues(r8, r7, 0x0, &(0x7f00000048c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x4, 0x2, 0x1b6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x40000000, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766e, 0x8, 0x0, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d05, 0x8000, 0x0, 0xf8}}], 0x4, &(0x7f0000004b40)={0x2e, 0x10, 0x0, r8, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0x157, 0x0, 0x0}}, 0x0) 1.953217606s ago: executing program 6 (id=8132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.950634565s ago: executing program 6 (id=8134): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 1.723270354s ago: executing program 2 (id=8138): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x26, 0x0, 0x100}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) 1.582944755s ago: executing program 2 (id=8139): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/185, 0x0}) r1 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000400)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x1) 1.582834931s ago: executing program 2 (id=8140): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003440), 0x80200, 0x0) 1.492845598s ago: executing program 2 (id=8141): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x704, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048084}, 0x80) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="20200000b885c20c3a62e7fa40f144595474176e", @ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x8088}, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f00000005c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001380)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000013c0)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) close_range(r3, 0xffffffffffffffff, 0x0) 1.443290226s ago: executing program 2 (id=8142): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.380284686s ago: executing program 2 (id=8144): setresuid(0x0, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f00000046c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000004700)={0x1, &(0x7f0000004740)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000004780)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f00000047c0)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d02"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000004840), 0x3, 0x208002) bpf$MAP_CREATE(0x0, &(0x7f0000004880)=ANY=[@ANYBLOB="010000000800000043000e007f0000"], 0x50) 1.380208967s ago: executing program 6 (id=8145): syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000000)=[{r0, 0x880}], 0x1, 0x7fff) close(r0) 1.296540659s ago: executing program 5 (id=8146): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8806) 1.230954691s ago: executing program 5 (id=8147): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 1.152796168s ago: executing program 5 (id=8148): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 1.080555031s ago: executing program 5 (id=8149): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003440), 0x80200, 0x0) 1.079947381s ago: executing program 5 (id=8150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000006c0)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000700)=0x4) syz_create_resource$binfmt(&(0x7f0000001f80)='./file0\x00') syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_create_resource$futex(&(0x7f0000001fc0)) futex(0x0, 0x85, 0x1, 0x0, r3, 0xb009019c) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000000)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000140)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000200)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 732.651955ms ago: executing program 7 (id=8151): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xa, 0xb}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40850) 732.461937ms ago: executing program 7 (id=8152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000f00)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x4c}}, 0x0) 642.892541ms ago: executing program 7 (id=8153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 576.206899ms ago: executing program 7 (id=8154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r0, &(0x7f0000000a80)="09000000010001", 0x7) 473.15574ms ago: executing program 7 (id=8155): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xfffffffffffffffe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000002400)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000002440)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000024c0)="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", 0x2000, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xf000, 0x0, r2, r3, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r6, &(0x7f0000006780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f00000087c0)={0x10, 0xfffffffffffffffe, r7}, 0x66) splice(r4, 0x0, r6, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f0000008800)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000003, 0x3}, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000008840)=0x2e8d, 0x6) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000008880), 0x88002, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000088c0)=0xd) r10 = open(&(0x7f0000008900)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r9, r10, 0x0, 0x1000000201002) creat(&(0x7f0000008940)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000008980)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000089c0)={0x0, 0x0, &(0x7f0000008a00)={&(0x7f0000008a40)=ANY=[@ANYBLOB="1c0000000203013bd24d830000000008000100010000000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000008a80)={0x0, 0x0, &(0x7f0000008ac0)={&(0x7f0000008b00)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800197202000000"], 0x1c}}, 0x0) 61.830152ms ago: executing program 5 (id=8156): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) ptrace$setsig(0x4203, r0, 0x4, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000002f00)}, 0x20040890) write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x5, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8b, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000bc0)={{0x77359400}, 0x15}, 0xfe4f) mount(0x0, 0x0, 0x0, 0x20400, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0f, 0x0) 0s ago: executing program 7 (id=8157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): out failed -512 [ 1383.016619][T30500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1383.046544][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1383.053877][T30500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1383.070139][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1383.071134][T30500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1383.089893][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1383.090890][T30500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1383.095422][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1383.369927][T30500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.384303][T30500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.391973][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.392019][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.396153][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.396197][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.412797][T30500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1383.412811][T30500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1383.729149][T30603] Console: switching to colour dummy device 80x25 [ 1383.824301][T30606] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1383.849345][T30606] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1383.849481][T30606] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff] [ 1383.849683][T30606] pci 0000:00:01.0: ROM [mem 0x69700000-0x6970ffff pref] [ 1383.852295][T30606] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1383.865558][T30606] pci 0000:00:01.0: Adding to iommu group 1 [ 1383.888619][T30606] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1383.888641][T30606] pci 0000:00:01.0: vgaarb: bridge control possible [ 1383.888654][T30606] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1383.923363][T30606] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1383.923494][T30606] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 1383.951452][T30606] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1383.976475][T30606] [drm] Found bochs VGA, ID 0xb0c5. [ 1383.976492][T30606] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 1384.047145][T30606] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1384.084536][T30500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.297210][T30634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1384.383513][T30500] veth0_vlan: entered promiscuous mode [ 1384.399948][T30500] veth1_vlan: entered promiscuous mode [ 1384.477503][T30500] veth0_macvtap: entered promiscuous mode [ 1384.486815][T30500] veth1_macvtap: entered promiscuous mode [ 1384.524965][T30500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.537684][T24673] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1384.547186][T30606] Console: switching to colour frame buffer device 160x50 [ 1384.550568][T30500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.593031][T30606] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1384.628370][T27346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.628452][T27346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.628475][T27346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.628492][T27346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.707544][T24673] usb 7-1: Using ep0 maxpacket: 16 [ 1384.708325][T24673] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1384.708457][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.708473][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.710602][T24673] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1384.710617][T24673] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.710628][T24673] usb 7-1: config 0 has no interface number 0 [ 1384.712341][T24673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.712354][T24673] usb 7-1: Product: syz [ 1384.712363][T24673] usb 7-1: Manufacturer: syz [ 1384.712372][T24673] usb 7-1: SerialNumber: syz [ 1384.716174][T24673] usb 7-1: config 0 descriptor?? [ 1384.746566][T24673] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1384.746586][T24673] uvcvideo 7-1:0.105: No valid video chain found. [ 1384.755625][T25011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.755638][T25011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.917598][ T67] Bluetooth: hci3: command tx timeout [ 1384.925629][T24673] usb 7-1: USB disconnect, device number 61 [ 1385.250025][ T5204] kernel read not supported for file /video9 (pid: 5204 comm: kworker/0:3) [ 1385.627596][ T5896] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1385.752655][ T5204] asus 0005:0B05:8502.001F: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 1386.998814][ T67] Bluetooth: hci3: command tx timeout [ 1387.273489][T30690] Console: switching to colour dummy device 80x25 [ 1387.311768][T25792] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 1387.390541][T30692] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1387.433565][T30692] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1387.433679][T30692] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff] [ 1387.433858][T30692] pci 0000:00:01.0: ROM [mem 0x69700000-0x6970ffff pref] [ 1387.434205][T30692] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1387.452162][T30692] pci 0000:00:01.0: Adding to iommu group 1 [ 1387.467136][T30692] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1387.467150][T30692] pci 0000:00:01.0: vgaarb: bridge control possible [ 1387.467158][T30692] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1387.478337][T25792] usb 12-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1387.485051][T25792] usb 12-1: config 0 has an invalid interface number: 251 but max is 0 [ 1387.485075][T25792] usb 12-1: config 0 has no interface number 0 [ 1387.497344][T25792] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.497369][T25792] usb 12-1: Product: syz [ 1387.497382][T25792] usb 12-1: Manufacturer: syz [ 1387.497395][T25792] usb 12-1: SerialNumber: syz [ 1387.507579][T30692] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1387.507759][T30692] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 1387.508870][T30692] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1387.521185][T25792] usb 12-1: config 0 descriptor?? [ 1387.617481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1387.821364][T30692] [drm] Found bochs VGA, ID 0xb0c5. [ 1387.821376][T30692] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 1387.844175][T30692] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1388.099215][ T75] IPVS: starting estimator thread 0... [ 1388.156779][T30692] Console: switching to colour frame buffer device 160x50 [ 1388.194952][T30692] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1388.205562][T30706] IPVS: using max 44 ests per chain, 105600 per kthread [ 1388.213008][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1388.354424][T25792] asix 12-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1388.354443][T25792] asix 12-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1388.354546][T25792] asix 12-1:0.251: probe with driver asix failed with error -71 [ 1388.368582][T25792] usb 12-1: USB disconnect, device number 2 [ 1389.087874][ T5204] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 1389.237632][ T5204] usb 11-1: Using ep0 maxpacket: 32 [ 1389.241341][ T5204] usb 11-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1389.244351][ T5204] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1389.244366][ T5204] usb 11-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1389.244378][ T5204] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1389.246185][ T5204] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.246199][ T5204] usb 11-1: Product: syz [ 1389.246243][ T5204] usb 11-1: Manufacturer: syz [ 1389.246252][ T5204] usb 11-1: SerialNumber: syz [ 1389.252466][ T5204] usb 11-1: config 0 descriptor?? [ 1389.777677][T30736] bridge0: port 3(netdevsim0) entered blocking state [ 1389.777787][T30736] bridge0: port 3(netdevsim0) entered disabled state [ 1389.780198][T30736] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1389.812836][T30736] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1389.860454][T30736] bridge0: port 3(netdevsim0) entered blocking state [ 1389.860510][T30736] bridge0: port 3(netdevsim0) entered forwarding state [ 1389.863443][ T5204] gs_usb 11-1:0.0: Configuring for 1 interfaces [ 1389.930414][T15819] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1390.089545][T15819] usb 10-1: Using ep0 maxpacket: 32 [ 1390.090557][T15819] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1390.092178][T15819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.116955][T15819] usb 10-1: config 0 descriptor?? [ 1390.131988][T15819] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1390.273384][ T1352] usb 11-1: USB disconnect, device number 20 [ 1390.506536][T30772] fuse: Bad value for 'fd' [ 1390.536773][T30765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.537048][T30765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.592453][T30735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1390.603807][T15819] gspca_sunplus: reg_w_riv err -71 [ 1390.603848][T15819] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1390.606277][T15819] usb 10-1: USB disconnect, device number 28 [ 1390.720517][T30765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.728509][T30765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.837557][T20255] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.837586][T20255] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.837719][T20255] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.837833][T20220] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.472254][T30781] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1391.700316][T30803] syzkaller0: entered promiscuous mode [ 1391.700330][T30803] syzkaller0: entered allmulticast mode [ 1392.087564][T15819] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1392.217667][ T5569] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1392.238110][T15819] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1392.239125][T15819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.354052][T30814] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1392.382001][ T1157] nvmet: Created nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1392.382699][T30814] nvme nvme17: creating 3 I/O queues. [ 1392.389094][T30814] nvme nvme17: new ctrl: "testsubsys" [ 1392.445225][T30808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6877'. [ 1392.453748][T15819] usb 10-1: Firmware version (0.0) predates our first public release. [ 1392.453763][T15819] usb 10-1: Please update to version 0.2 or newer [ 1392.611486][T15819] usb 10-1: USB disconnect, device number 29 [ 1392.847650][T30832] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1393.477517][T22783] Bluetooth: hci1: command 0x0406 tx timeout [ 1393.771310][ T5204] kernel read not supported for file /video9 (pid: 5204 comm: kworker/0:3) [ 1394.407566][ T5569] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1395.285118][T30869] trusted_key: encrypted_key: insufficient parameters specified [ 1395.436583][T30871] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1396.022635][ T1352] kernel read not supported for file /video9 (pid: 1352 comm: kworker/3:2) [ 1396.612874][T30900] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1396.860988][T30902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1397.407582][ T5569] usb 10-1: device descriptor read/64, error -71 [ 1397.447583][T30908] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1397.584894][ T1157] nvmet: Created nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1397.587336][T30908] nvme nvme18: creating 3 I/O queues. [ 1397.597056][T30908] nvme nvme18: new ctrl: "testsubsys" [ 1397.647584][ T5569] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1397.807683][T15819] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 1397.812092][ T5569] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1397.812909][ T5569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.971380][T15819] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1397.973022][T15819] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.973092][T15819] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1397.974778][T15819] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1397.974796][T15819] usb 11-1: SerialNumber: syz [ 1397.997908][T30945] Console: switching to colour dummy device 80x25 [ 1398.009345][T30947] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1398.019589][T30906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6911'. [ 1398.024559][ T5569] usb 10-1: Firmware version (0.0) predates our first public release. [ 1398.024573][ T5569] usb 10-1: Please update to version 0.2 or newer [ 1398.056809][T30951] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1398.066897][T25011] nvmet: Created nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1398.069706][T30951] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1398.069824][T30951] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff] [ 1398.070001][T30951] pci 0000:00:01.0: ROM [mem 0x69700000-0x6970ffff pref] [ 1398.070427][T30951] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1398.071467][T30947] nvme nvme19: creating 3 I/O queues. [ 1398.077570][T30951] pci 0000:00:01.0: Adding to iommu group 1 [ 1398.080118][T30951] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1398.080130][T30951] pci 0000:00:01.0: vgaarb: bridge control possible [ 1398.080137][T30951] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1398.086474][T30951] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1398.086582][T30951] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 1398.087922][T30951] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1398.088037][T30947] nvme nvme19: new ctrl: "testsubsys" [ 1398.093114][T30951] [drm] Found bochs VGA, ID 0xb0c5. [ 1398.093124][T30951] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 1398.108969][T30951] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1398.122896][ T5569] usb 10-1: USB disconnect, device number 31 [ 1398.199087][T15819] usb 11-1: 0:2 : does not exist [ 1398.199125][T15819] usb 11-1: unit 120 not found! [ 1398.200327][T30951] Console: switching to colour frame buffer device 160x50 [ 1398.223393][T30951] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1398.245022][T15819] usb 11-1: USB disconnect, device number 21 [ 1398.320379][T26436] udevd[26436]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.857947][T30993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1399.792023][T31024] syzkaller0: entered promiscuous mode [ 1399.792037][T31024] syzkaller0: entered allmulticast mode [ 1400.117268][T31034] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6954'. [ 1401.003378][T31075] netlink: 'syz.6.6971': attribute type 1 has an invalid length. [ 1401.022962][T31075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1401.063995][T31075] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1401.080584][T31075] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 1401.305483][T31089] fuse: Unknown parameter 'fd0x0000000000000003' [ 1401.871932][T31129] syzkaller0: entered promiscuous mode [ 1401.871946][T31129] syzkaller0: entered allmulticast mode [ 1402.057190][T31139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1402.113499][T31142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1402.132125][ T67] Bluetooth: to_multiplier 0 < 10 [ 1402.377247][T31157] syzkaller0: entered promiscuous mode [ 1402.377261][T31157] syzkaller0: entered allmulticast mode [ 1402.428329][T31159] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1402.455448][ T37] nvmet: Created nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1402.456991][T31159] nvme nvme20: creating 3 I/O queues. [ 1402.477359][T31159] nvme nvme20: new ctrl: "testsubsys" [ 1403.055435][T31194] syzkaller0: entered promiscuous mode [ 1403.055449][T31194] syzkaller0: entered allmulticast mode [ 1403.153146][T28816] kernel read not supported for file /video9 (pid: 28816 comm: kworker/3:4) [ 1403.645502][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1403.651781][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1404.197655][ T67] Bluetooth: hci2: command tx timeout [ 1404.297800][ T5204] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 1404.410166][T31246] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1404.450129][ T5204] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1404.456198][ T5204] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.456236][ T5204] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1404.456271][ T5204] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.461167][ T5204] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1404.461350][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1404.461406][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1404.470370][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1404.470432][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1404.475211][ T5204] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1404.493385][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1404.493439][ T107] nvmet: Created nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1404.493447][ T5204] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1404.494655][ T5204] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1404.506096][T31246] nvme nvme21: creating 3 I/O queues. [ 1404.521056][T31246] nvme nvme21: new ctrl: "testsubsys" [ 1404.668924][ T5204] usb 11-1: USB disconnect, device number 22 [ 1404.679610][ T5204] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1404.685095][ T5204] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1404.685692][ T5204] keyspan 11-1:1.0: device disconnected [ 1404.889962][T15819] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1405.059067][T15819] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1405.060382][T15819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.212333][T31285] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1405.243807][T25011] nvmet: Created nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1405.245064][T31285] nvme nvme22: creating 3 I/O queues. [ 1405.251217][T31285] nvme nvme22: new ctrl: "testsubsys" [ 1405.272874][T31259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1405.275380][T15819] usb 7-1: Firmware version (0.0) predates our first public release. [ 1405.275395][T15819] usb 7-1: Please update to version 0.2 or newer [ 1405.310025][T15819] usb 7-1: USB disconnect, device number 63 [ 1405.724920][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7047'. [ 1405.725963][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7047'. [ 1405.912541][T31325] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1405.940406][ T1157] nvmet: Created nvm controller 24 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1405.947132][T31325] nvme nvme23: creating 3 I/O queues. [ 1405.952823][T31325] nvme nvme23: new ctrl: "testsubsys" [ 1406.097584][ T5569] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1406.278366][ T5569] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1406.279183][ T5569] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.279209][ T5569] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1406.279229][ T5569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.284595][ T5569] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1406.284686][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1406.284715][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1406.285253][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1406.285293][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1406.288762][ T5569] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1406.289941][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1406.289974][ T5569] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1406.290841][ T5569] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1406.417639][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1406.488427][ T5204] usb 10-1: USB disconnect, device number 32 [ 1406.496510][ T5204] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1406.508194][ T5204] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1406.508697][ T5204] keyspan 10-1:1.0: device disconnected [ 1406.568039][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1406.568964][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.772123][T31351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7058'. [ 1406.774789][ T9] usb 7-1: Firmware version (0.0) predates our first public release. [ 1406.774803][ T9] usb 7-1: Please update to version 0.2 or newer [ 1406.813835][ T9] usb 7-1: USB disconnect, device number 64 [ 1406.944635][T31364] binder: 31363:31364 ioctl 4018620d 0 returned -22 [ 1407.099864][T31370] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1407.236495][T31375] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1407.264056][T20740] nvmet: Created nvm controller 25 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1407.264839][T31375] nvme nvme24: creating 3 I/O queues. [ 1407.270705][T31375] nvme nvme24: new ctrl: "testsubsys" [ 1407.400530][T31379] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7066'. [ 1407.621115][T20255] bridge_slave_1: left allmulticast mode [ 1407.621132][T20255] bridge_slave_1: left promiscuous mode [ 1407.621249][T20255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.625511][T20255] bridge_slave_0: left allmulticast mode [ 1407.625525][T20255] bridge_slave_0: left promiscuous mode [ 1407.625671][T20255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.656127][T20255] pimreg: left allmulticast mode [ 1407.666973][T20255] bridge_slave_1: left allmulticast mode [ 1407.666989][T20255] bridge_slave_1: left promiscuous mode [ 1407.667115][T20255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.673522][T20255] bridge_slave_0: left allmulticast mode [ 1407.673536][T20255] bridge_slave_0: left promiscuous mode [ 1407.674224][T20255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.691887][T20255] pimreg: left allmulticast mode [ 1408.031411][T20255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.033125][T20255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.034002][T20255] bond0 (unregistering): Released all slaves [ 1408.117365][T20255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.126035][T20255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.127129][T20255] bond0 (unregistering): Released all slaves [ 1408.133360][ T5492] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1408.146033][T31402] syzkaller0: entered promiscuous mode [ 1408.146046][T31402] syzkaller0: entered allmulticast mode [ 1408.417975][T16660] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1408.418670][T31415] syzkaller0: entered promiscuous mode [ 1408.418682][T31415] syzkaller0: entered allmulticast mode [ 1408.471127][ T5492] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1408.568127][T16660] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1408.569102][T16660] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.569138][T16660] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1408.569172][T16660] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.573823][T16660] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 1408.574002][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 1408.574054][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 1408.576146][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 1408.576215][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 1408.617241][T16660] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1408.627410][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 1408.627562][T16660] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 1408.650546][T16660] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1408.763866][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1408.788119][T16660] usb 12-1: USB disconnect, device number 3 [ 1408.791377][T16660] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1408.796603][T16660] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1408.797135][T16660] keyspan 12-1:1.0: device disconnected [ 1408.935507][ T5492] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1409.249801][T31452] binder: 31451:31452 ioctl 4018620d 0 returned -22 [ 1409.317036][ T5492] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1409.368335][T31461] syzkaller0: entered promiscuous mode [ 1409.368349][T31461] syzkaller0: entered allmulticast mode [ 1409.476994][T20255] hsr_slave_0: left promiscuous mode [ 1409.483888][T20255] hsr_slave_1: left promiscuous mode [ 1409.485368][T20255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.485381][T20255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.496054][T20255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.496067][T20255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.524140][T20255] hsr_slave_0: left promiscuous mode [ 1409.526047][T20255] hsr_slave_1: left promiscuous mode [ 1409.531629][T20255] veth1_macvtap: left promiscuous mode [ 1409.531668][T20255] veth0_macvtap: left promiscuous mode [ 1409.607266][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7093'. [ 1409.699855][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1409.758079][T20255] team0 (unregistering): Port device team_slave_1 removed [ 1409.766253][T20255] team0 (unregistering): Port device team_slave_0 removed [ 1409.909784][T31483] binder: 31482:31483 ioctl 4018620d 0 returned -22 [ 1410.123314][T31498] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1410.343281][T20255] team0 (unregistering): Port device 26±ÿ removed [ 1410.386444][T20255] team0 (unregistering): Port device team_slave_0 removed [ 1410.817937][T31504] syzkaller0: entered promiscuous mode [ 1410.817951][T31504] syzkaller0: entered allmulticast mode [ 1411.108619][ T5896] kernel read not supported for file /video9 (pid: 5896 comm: kworker/3:5) [ 1411.320814][T31524] overlayfs: failed to resolve './file0': -2 [ 1411.507857][T20255] IPVS: stop unused estimator thread 0... [ 1411.511750][ T1157] nvmet: Created nvm controller 26 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1411.512959][T31535] nvme nvme25: creating 3 I/O queues. [ 1411.514627][T31535] nvme nvme25: new ctrl: "testsubsys" [ 1411.639106][ T5204] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1411.639240][T16660] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1411.678899][ T42] audit: type=1326 audit(1792729372.635:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.678943][ T42] audit: type=1326 audit(1792729372.635:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.679096][ T42] audit: type=1326 audit(1792729372.635:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.680325][ T42] audit: type=1326 audit(1792729372.635:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.680428][ T42] audit: type=1326 audit(1792729372.635:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.681602][ T42] audit: type=1326 audit(1792729372.635:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 1411.682027][ T42] audit: type=1326 audit(1792729372.635:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.682878][ T42] audit: type=1326 audit(1792729372.635:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.685438][ T42] audit: type=1326 audit(1792729372.635:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.685479][ T42] audit: type=1326 audit(1792729372.635:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31547 comm="syz.7.7114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 1411.787669][ T5204] usb 10-1: Using ep0 maxpacket: 8 [ 1411.788474][T16660] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1411.788970][ T5204] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1411.789797][ T5204] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1411.789847][ T5204] usb 10-1: config 0 has no interface number 0 [ 1411.789866][ T5204] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1411.789878][ T5204] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1411.789891][ T5204] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1411.789903][ T5204] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1411.789924][ T5204] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.791109][T16660] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.791143][T16660] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1411.791163][T16660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.795103][ T5204] usb 10-1: config 0 descriptor?? [ 1411.797236][T16660] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1411.797330][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1411.797358][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1411.802351][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1411.802387][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1411.802928][ T5204] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1411.804282][T16660] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1411.804945][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1411.804981][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1411.805920][T16660] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1411.937633][T28816] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1412.001494][ T1352] usb 7-1: USB disconnect, device number 65 [ 1412.003077][ T1352] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1412.004531][ T1352] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1412.004852][ T1352] keyspan 7-1:1.0: device disconnected [ 1412.071540][ T5896] usb 10-1: USB disconnect, device number 33 [ 1412.081252][ T5896] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1412.100663][T28816] usb 12-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1412.103182][T28816] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.103206][T28816] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1412.105892][T28816] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.105905][T28816] usb 12-1: Product: syz [ 1412.105912][T28816] usb 12-1: Manufacturer: syz [ 1412.105920][T28816] usb 12-1: SerialNumber: syz [ 1412.120297][T28816] sisusb 12-1:1.0: Invalid USB2VGA device [ 1412.120311][T28816] sisusb 12-1:1.0: probe with driver sisusb failed with error -22 [ 1412.318745][ T5896] usb 12-1: USB disconnect, device number 4 [ 1412.650818][T31563] syzkaller0: entered promiscuous mode [ 1412.650835][T31563] syzkaller0: entered allmulticast mode [ 1412.747173][T28816] kernel read not supported for file /video9 (pid: 28816 comm: kworker/3:4) [ 1413.692945][T31580] overlayfs: failed to resolve './file0': -2 [ 1414.017634][ T5896] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 1414.167514][ T5896] usb 11-1: Using ep0 maxpacket: 8 [ 1414.168001][ T5896] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1414.168974][ T5896] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 1414.168988][ T5896] usb 11-1: config 0 has no interface number 0 [ 1414.169014][ T5896] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1414.169026][ T5896] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1414.169039][ T5896] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1414.169542][ T5896] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1414.169565][ T5896] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.170650][ T5896] usb 11-1: config 0 descriptor?? [ 1414.173719][ T5896] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1414.449868][T15819] usb 11-1: USB disconnect, device number 23 [ 1414.451870][T15819] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 1414.879121][T31605] overlayfs: failed to resolve './file0': -2 [ 1415.101815][T31616] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7139'. [ 1415.105266][T31609] loop5: detected capacity change from 0 to 7 [ 1415.128333][T31609] Dev loop5: unable to read RDB block 7 [ 1415.128366][T31609] loop5: unable to read partition table [ 1415.131211][T31609] loop5: partition table beyond EOD, truncated [ 1415.131224][T31609] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1415.452704][T31609] ovs-dp0: entered promiscuous mode [ 1415.750364][T28816] kernel read not supported for file /video9 (pid: 28816 comm: kworker/3:4) [ 1415.769706][ T75] nvmet: Created nvm controller 27 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1415.771683][T31658] nvme nvme26: creating 3 I/O queues. [ 1415.773314][T31658] nvme nvme26: new ctrl: "testsubsys" [ 1417.092356][ T56] nvmet: Created nvm controller 28 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1417.095367][T31734] nvme nvme27: creating 3 I/O queues. [ 1417.113741][T31734] nvme nvme27: new ctrl: "testsubsys" [ 1417.628977][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7189'. [ 1417.729681][ T67] Bluetooth: to_multiplier 0 < 10 [ 1417.854612][T31787] xt_hashlimit: size too large, truncated to 1048576 [ 1417.854687][T31787] xt_hashlimit: max too large, truncated to 1048576 [ 1417.927636][ T1352] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1418.081607][ T1352] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1418.086590][ T1352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.086616][ T1352] usb 7-1: Product: syz [ 1418.086629][ T1352] usb 7-1: Manufacturer: syz [ 1418.086642][ T1352] usb 7-1: SerialNumber: syz [ 1418.224768][ T5896] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1418.656003][T24673] usb 7-1: USB disconnect, device number 66 [ 1418.677868][T16660] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1418.828706][T16660] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1418.829835][T16660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.038206][T31800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7196'. [ 1419.039592][T16660] usb 10-1: Firmware version (0.0) predates our first public release. [ 1419.039607][T16660] usb 10-1: Please update to version 0.2 or newer [ 1419.084872][T16660] usb 10-1: USB disconnect, device number 34 [ 1419.243455][T22783] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1419.250331][ T5896] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1419.252115][ T5896] ath9k_htc: Failed to initialize the device [ 1419.260586][T24673] usb 7-1: ath9k_htc: USB layer deinitialized [ 1419.604425][T31828] overlayfs: failed to resolve './file1': -2 [ 1419.666890][T31833] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1419.667651][T31832] IPVS: stopping backup sync thread 31833 ... [ 1419.807749][T22783] Bluetooth: hci2: command tx timeout [ 1419.862955][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7213'. [ 1420.074487][T31850] overlayfs: failed to resolve './file1': -2 [ 1420.373275][T31865] caif0: tun_chr_ioctl cmd 2148553947 [ 1420.756371][T31871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1421.002661][T22783] Bluetooth: hci0: command 0x040f tx timeout [ 1421.045943][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7227'. [ 1421.275668][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1421.328012][ T67] Bluetooth: to_multiplier 0 < 10 [ 1421.672302][T31904] overlayfs: failed to resolve './file1': -2 [ 1421.943054][ T67] Bluetooth: hci2: link tx timeout [ 1421.943071][ T67] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1422.520469][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.003968][T31944] syzkaller0: entered promiscuous mode [ 1423.003983][T31944] syzkaller0: entered allmulticast mode [ 1423.087545][ T67] Bluetooth: hci0: command 0x040f tx timeout [ 1423.397835][ T67] Bluetooth: hci2: command tx timeout [ 1423.929572][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7255'. [ 1425.165623][T22783] Bluetooth: hci0: command 0x040f tx timeout [ 1425.477592][T22783] Bluetooth: hci2: command 0x0406 tx timeout [ 1425.802784][T32003] syzkaller0: entered promiscuous mode [ 1425.802799][T32003] syzkaller0: entered allmulticast mode [ 1426.952723][T24673] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1427.077617][T24673] usb 10-1: device descriptor read/64, error -71 [ 1427.247597][T22783] Bluetooth: hci0: command 0x040f tx timeout [ 1427.332130][T24673] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1427.467510][T24673] usb 10-1: device descriptor read/64, error -71 [ 1427.578008][T24673] usb usb10-port1: attempt power cycle [ 1427.927665][T24673] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1427.948348][T24673] usb 10-1: device descriptor read/8, error -71 [ 1428.142746][T32048] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7283'. [ 1428.187693][T24673] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1428.220162][T24673] usb 10-1: device descriptor read/8, error -71 [ 1428.288357][T22783] Bluetooth: hci1: command 0x0406 tx timeout [ 1428.329409][T24673] usb usb10-port1: unable to enumerate USB device [ 1428.647094][T32078] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7293'. [ 1428.695281][T32080] binder: 32079:32080 ioctl 4018620d 0 returned -22 [ 1429.325878][T32092] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1429.369475][ T107] nvmet: Created nvm controller 29 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1429.370697][T32092] nvme nvme28: creating 3 I/O queues. [ 1429.377207][T32092] nvme nvme28: new ctrl: "testsubsys" [ 1429.707391][T32110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7301'. [ 1429.792571][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1430.115204][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7306'. [ 1430.286552][T32129] kAFS: unable to lookup cell '.' [ 1430.373662][T32132] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1430.383528][T32136] binder: 32135:32136 ioctl 4018620d 0 returned -22 [ 1430.414305][T20740] nvmet: Created nvm controller 30 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1430.415536][T32132] nvme nvme29: creating 3 I/O queues. [ 1430.457594][T32132] nvme nvme29: new ctrl: "testsubsys" [ 1430.777580][ T5569] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1430.889180][T32174] overlayfs: missing 'lowerdir' [ 1430.907646][ T5569] usb 7-1: device descriptor read/64, error -71 [ 1431.005733][T32185] overlayfs: missing 'lowerdir' [ 1431.079400][T32186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7321'. [ 1431.158121][ T5569] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1431.297642][ T5569] usb 7-1: device descriptor read/64, error -71 [ 1431.419199][ T5569] usb usb7-port1: attempt power cycle [ 1431.787539][ T5569] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1431.818230][ T5569] usb 7-1: device descriptor read/8, error -71 [ 1432.057618][ T5569] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1432.090006][ T5569] usb 7-1: device descriptor read/8, error -71 [ 1432.197840][ T5569] usb usb7-port1: unable to enumerate USB device [ 1432.225569][T32242] netlink: 'syz.7.7338': attribute type 2 has an invalid length. [ 1432.801200][T32271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7351'. [ 1432.994891][T32284] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1433.374328][T32287] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1433.406455][ T107] nvmet: Created nvm controller 31 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1433.418529][T32287] nvme nvme30: creating 3 I/O queues. [ 1433.469802][T32287] nvme nvme30: new ctrl: "testsubsys" [ 1434.005228][T32308] binder: 32306:32308 ioctl 4018620d 0 returned -22 [ 1434.065894][T22783] Bluetooth: hci3: link tx timeout [ 1434.065914][T22783] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1434.439055][T32319] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1434.459396][T20740] nvmet: Created nvm controller 32 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1434.460343][T32319] nvme nvme31: creating 3 I/O queues. [ 1434.463746][T32319] nvme nvme31: new ctrl: "testsubsys" [ 1434.609194][T32327] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1435.526522][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1435.772875][T20740] nvmet: Created nvm controller 33 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1435.775067][T32355] nvme nvme32: creating 3 I/O queues. [ 1435.795726][T32355] nvme nvme32: new ctrl: "testsubsys" [ 1435.954629][T32374] binder: 32373:32374 ioctl 4018620d 0 returned -22 [ 1436.074057][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7381'. [ 1436.118331][ T67] Bluetooth: hci3: command 0x0406 tx timeout [ 1436.658354][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1437.074775][T32407] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1437.385521][T25572] nvmet: Created nvm controller 34 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1437.404039][T32414] nvme nvme33: creating 3 I/O queues. [ 1437.416977][T32414] nvme nvme33: new ctrl: "testsubsys" [ 1437.482254][T32432] overlayfs: missing 'lowerdir' [ 1437.589247][T32442] device-mapper: table: 248:12: crypt: Error decoding and setting key (-EINVAL) [ 1437.589262][T32442] device-mapper: ioctl: error adding target to table [ 1437.649509][T32450] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7397'. [ 1437.888064][T25792] kernel read not supported for file /video9 (pid: 25792 comm: kworker/2:6) [ 1437.897604][ T5204] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1438.028903][ T5204] usb 12-1: device descriptor read/64, error -71 [ 1438.298746][ T5204] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1438.427728][ T5204] usb 12-1: device descriptor read/64, error -71 [ 1438.537764][ T5204] usb usb12-port1: attempt power cycle [ 1438.639525][T32482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1438.639552][T32482] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1438.818425][T32505] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1438.818469][T32505] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1438.877757][ T5204] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1438.898228][ T5204] usb 12-1: device descriptor read/8, error -71 [ 1439.137693][ T5204] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 1439.161689][ T5204] usb 12-1: device descriptor read/8, error -71 [ 1439.268574][ T5204] usb usb12-port1: unable to enumerate USB device [ 1439.602664][T32514] binder: 32513:32514 ioctl 4018620d 0 returned -22 [ 1439.740402][T25792] kernel read not supported for file /video9 (pid: 25792 comm: kworker/2:6) [ 1439.778864][T32521] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1439.778909][T32521] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1440.535746][T32549] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1440.535772][T32549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1440.635999][ T37] nvmet: Created nvm controller 35 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1440.639380][T32550] nvme nvme34: creating 3 I/O queues. [ 1440.651819][T32550] nvme nvme34: new ctrl: "testsubsys" [ 1441.767726][T16660] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1441.834876][ T37] nvmet: Created nvm controller 36 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1441.838572][T32624] nvme nvme35: creating 3 I/O queues. [ 1441.845522][T32624] nvme nvme35: new ctrl: "testsubsys" [ 1441.928223][T16660] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1441.931105][T16660] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.931215][T16660] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.931251][T16660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.937101][T16660] usb 7-1: config 0 descriptor?? [ 1442.023813][T32651] jffs2: notice: (32651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1442.569060][T16660] usb 7-1: string descriptor 0 read error: -22 [ 1442.774685][T16660] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.0020/input/input27 [ 1442.789107][T16660] uclogic 0003:256C:006D.0020: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1442.907591][ T5204] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1442.975779][T16660] usb 7-1: USB disconnect, device number 71 [ 1443.060248][ T5204] usb 10-1: Using ep0 maxpacket: 16 [ 1443.063856][ T5204] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1443.063881][ T5204] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1443.064670][ T5204] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 1443.064684][ T5204] usb 10-1: config 9 has no interface number 0 [ 1443.064698][ T5204] usb 10-1: config 9 interface 57 has no altsetting 0 [ 1443.067137][ T5204] usb 10-1: string descriptor 0 read error: -22 [ 1443.067317][ T5204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.281112][ T5204] (null): keene_cmd_main failed (-71) [ 1443.296849][ T5204] video4linux radio48: keene_cmd_main failed (-71) [ 1443.296864][ T5204] radio-keene 10-1:9.57: V4L2 device registered as radio48 [ 1443.298145][ T5204] usb 10-1: USB disconnect, device number 39 [ 1443.344304][T32677] orangefs_mount: mount request failed with -4 [ 1443.797609][ T67] Bluetooth: hci3: command 0x0406 tx timeout [ 1443.827726][ T107] nvmet: Created nvm controller 37 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1443.829666][T32733] nvme nvme36: creating 3 I/O queues. [ 1443.832935][T32733] nvme nvme36: new ctrl: "testsubsys" [ 1444.695483][ T308] binder: 307:308 ioctl 4018620d 0 returned -22 [ 1444.796349][ T312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1444.866576][ T323] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7474'. [ 1445.131010][ T337] null_blk: disk nullb1 created [ 1445.253226][T25011] nvmet: Created nvm controller 38 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1445.254569][ T342] nvme nvme37: creating 3 I/O queues. [ 1445.263990][ T342] nvme nvme37: new ctrl: "testsubsys" [ 1445.441280][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7481'. [ 1445.805258][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7491'. [ 1446.911216][ T447] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1446.985257][ T1157] nvmet: Created nvm controller 39 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1446.987285][ T447] nvme nvme38: creating 3 I/O queues. [ 1447.040355][ T447] nvme nvme38: new ctrl: "testsubsys" [ 1447.146912][ T5204] kernel read not supported for file /video9 (pid: 5204 comm: kworker/0:3) [ 1447.412727][ T476] FAULT_INJECTION: forcing a failure. [ 1447.412727][ T476] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.412791][ T476] CPU: 2 UID: 0 PID: 476 Comm: syz.6.7518 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.412813][ T476] Tainted: [L]=SOFTLOCKUP [ 1447.412818][ T476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1447.412824][ T476] Call Trace: [ 1447.412829][ T476] [ 1447.412835][ T476] dump_stack_lvl+0x100/0x190 [ 1447.412853][ T476] should_fail_ex.cold+0x5/0xa [ 1447.412868][ T476] should_failslab+0xc2/0x120 [ 1447.412887][ T476] __kmalloc_cache_noprof+0x91/0x6d0 [ 1447.412916][ T476] ? shrinker_alloc+0xf5/0xd00 [ 1447.412933][ T476] shrinker_alloc+0xf5/0xd00 [ 1447.412949][ T476] ? mark_held_locks+0x40/0x70 [ 1447.412965][ T476] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1447.413019][ T476] ? rcu_is_watching+0x13/0xc0 [ 1447.413034][ T476] ? __pfx_shrinker_alloc+0x10/0x10 [ 1447.413050][ T476] ? lockdep_init_map_type+0x5c/0x250 [ 1447.413067][ T476] ? lockdep_init_map_type+0x5c/0x250 [ 1447.413085][ T476] ? __raw_spin_lock_init+0x3a/0x110 [ 1447.413096][ T476] ? __init_rwsem+0x10e/0x180 [ 1447.413115][ T476] sget_fc+0x97d/0x1f60 [ 1447.413134][ T476] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1447.413148][ T476] ? __pfx_sget_fc+0x10/0x10 [ 1447.413160][ T476] ? refcount_dec_not_one+0x136/0x1b0 [ 1447.413176][ T476] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1447.413189][ T476] ? __kasan_kmalloc+0xaa/0xb0 [ 1447.413205][ T476] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1447.413221][ T476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1447.413232][ T476] get_tree_nodev+0x28/0x190 [ 1447.413247][ T476] mqueue_get_tree+0xf1/0x130 [ 1447.413258][ T476] vfs_get_tree+0x92/0x320 [ 1447.413270][ T476] fc_mount_longterm+0x1a/0x270 [ 1447.413286][ T476] mq_init_ns+0x482/0x820 [ 1447.413300][ T476] copy_ipcs+0x3d8/0x7e0 [ 1447.413314][ T476] create_new_namespaces+0x20a/0xac0 [ 1447.413330][ T476] ? security_capable+0x80/0x260 [ 1447.413344][ T476] unshare_nsproxy_namespaces+0xf6/0x210 [ 1447.413361][ T476] ksys_unshare+0x44f/0x980 [ 1447.413397][ T476] ? __pfx_ksys_unshare+0x10/0x10 [ 1447.413417][ T476] ? __might_fault+0xc5/0x140 [ 1447.413435][ T476] __ia32_sys_unshare+0x30/0x40 [ 1447.413452][ T476] __do_fast_syscall_32+0x14b/0x8c0 [ 1447.413468][ T476] do_fast_syscall_32+0x32/0x70 [ 1447.413482][ T476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1447.413499][ T476] RIP: 0023:0xf73eefbc [ 1447.413509][ T476] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1447.413520][ T476] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1447.413531][ T476] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1447.413538][ T476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1447.413545][ T476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1447.413552][ T476] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1447.413558][ T476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1447.413573][ T476] [ 1447.571492][ T484] jffs2: notice: (484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1447.688367][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 1447.688381][ T42] audit: type=1326 audit(1792729408.645:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.688405][ T42] audit: type=1326 audit(1792729408.645:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.691655][ T42] audit: type=1326 audit(1792729408.645:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.691711][ T42] audit: type=1326 audit(1792729408.645:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.691776][ T42] audit: type=1326 audit(1792729408.645:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.691971][ T42] audit: type=1326 audit(1792729408.645:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.692623][ T42] audit: type=1326 audit(1792729408.645:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.693087][ T42] audit: type=1326 audit(1792729408.645:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.693633][ T42] audit: type=1326 audit(1792729408.645:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71477ab code=0x7ffc0000 [ 1447.693899][ T42] audit: type=1326 audit(1792729408.645:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=490 comm="syz.6.7523" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1447.816557][ T498] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7524'. [ 1447.839958][ T501] binder: 500:501 ioctl 4018620d 0 returned -22 [ 1447.937527][ T5569] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 1448.089349][ T5569] usb 11-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1448.091345][ T5569] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.091381][ T5569] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1448.091398][ T5569] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1448.091416][ T5569] usb 11-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1448.095194][ T5569] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.095212][ T5569] usb 11-1: Product: syz [ 1448.095224][ T5569] usb 11-1: Manufacturer: syz [ 1448.095235][ T5569] usb 11-1: SerialNumber: syz [ 1448.103019][ T5569] sisusb 11-1:1.0: Invalid USB2VGA device [ 1448.103031][ T5569] sisusb 11-1:1.0: probe with driver sisusb failed with error -22 [ 1449.083968][ T521] syzkaller0: entered promiscuous mode [ 1449.083996][ T521] syzkaller0: entered allmulticast mode [ 1451.010236][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7532'. [ 1451.159655][T25792] usb 11-1: USB disconnect, device number 24 [ 1451.624016][ T1352] kernel read not supported for file /video9 (pid: 1352 comm: kworker/3:2) [ 1451.715387][ T565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3838270764 (30706166112 ns) > initial count (15986925640 ns). Using initial count to start timer. [ 1451.775914][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7541'. [ 1451.948503][T25792] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 1452.077558][T25792] usb 11-1: device descriptor read/64, error -71 [ 1452.317725][T25792] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 1452.447920][T25792] usb 11-1: device descriptor read/64, error -71 [ 1452.558053][T25792] usb usb11-port1: attempt power cycle [ 1452.808077][ T601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1452.897628][T25792] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 1452.918421][T25792] usb 11-1: device descriptor read/8, error -71 [ 1452.997647][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 1453.235868][T25792] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 1453.248355][T25792] usb 11-1: device descriptor read/8, error -71 [ 1453.355493][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1453.367954][T25792] usb usb11-port1: unable to enumerate USB device [ 1454.758875][ T629] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7558'. [ 1455.020397][ T586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1455.442810][ T654] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1455.542599][T25573] nvmet: Created nvm controller 40 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1455.543487][ T654] nvme nvme39: creating 3 I/O queues. [ 1455.547622][T16660] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1455.555964][ T654] nvme nvme39: new ctrl: "testsubsys" [ 1455.677712][T16660] usb 7-1: device descriptor read/64, error -71 [ 1455.928539][T16660] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1456.057653][T16660] usb 7-1: device descriptor read/64, error -71 [ 1456.163177][ T692] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7576'. [ 1456.170905][T16660] usb usb7-port1: attempt power cycle [ 1456.229226][ T698] tipc: Started in network mode [ 1456.229244][ T698] tipc: Node identity ac1414aa, cluster identity 4711 [ 1456.229964][ T698] tipc: New replicast peer: 172.20.20.187 [ 1456.230309][ T698] tipc: Enabled bearer , priority 10 [ 1456.427556][ T5204] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 1456.507534][T16660] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1456.528102][T16660] usb 7-1: device descriptor read/8, error -71 [ 1456.601042][ T5204] usb 11-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1456.602062][ T5204] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.782168][T16660] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1456.808145][T16660] usb 7-1: device descriptor read/8, error -71 [ 1456.817412][ T691] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7575'. [ 1456.833822][ T5204] usb 11-1: Firmware version (0.0) predates our first public release. [ 1456.833836][ T5204] usb 11-1: Please update to version 0.2 or newer [ 1456.892134][ T5204] usb 11-1: USB disconnect, device number 29 [ 1456.918288][T16660] usb usb7-port1: unable to enumerate USB device [ 1456.928445][ T726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1457.003032][T25573] nvmet: Created nvm controller 41 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1457.003665][ T726] nvme nvme40: creating 3 I/O queues. [ 1457.005384][ T726] nvme nvme40: new ctrl: "testsubsys" [ 1457.239240][T25024] tipc: Node number set to 2886997162 [ 1457.609060][ T5569] kernel read not supported for file /video9 (pid: 5569 comm: kworker/2:2) [ 1457.759736][ T748] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1457.760803][ T748] i2c i2c-0: delete_device: Can't find device in list [ 1457.939284][ T752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7589'. [ 1458.362917][ T783] jffs2: notice: (783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1458.399945][ T783] overlay: ./file0 is not a directory [ 1458.565106][ T791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7598'. [ 1458.967393][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7601'. [ 1459.297524][ T5204] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 1459.337598][ T1352] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1459.378942][ T820] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1459.407844][ T5896] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 1459.450342][ T5204] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1459.452764][ T5204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.452779][ T5204] usb 10-1: Product: syz [ 1459.452786][ T5204] usb 10-1: Manufacturer: syz [ 1459.452794][ T5204] usb 10-1: SerialNumber: syz [ 1459.456593][ T5204] usb 10-1: config 0 descriptor?? [ 1459.467739][ T1352] usb 7-1: device descriptor read/64, error -71 [ 1459.556598][ T826] netlink: 'syz.6.7613': attribute type 1 has an invalid length. [ 1459.560976][ T5896] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1459.562337][ T5896] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.562357][ T5896] usb 12-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1459.562386][ T5896] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.575651][ T826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1459.584022][ T826] veth0_virt_wifi: entered promiscuous mode [ 1459.590956][ T826] bond2: (slave veth0_virt_wifi): making interface the new active one [ 1459.592962][ T826] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1459.666772][ T5204] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1459.671939][ T5204] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1459.675650][ T5204] usb 10-1: USB disconnect, device number 40 [ 1459.719725][ T1352] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1459.770533][T16660] usb 12-1: USB disconnect, device number 9 [ 1459.847592][ T1352] usb 7-1: device descriptor read/64, error -71 [ 1459.968470][ T1352] usb usb7-port1: attempt power cycle [ 1460.327682][ T1352] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1460.360796][ T1352] usb 7-1: device descriptor read/8, error -71 [ 1460.607922][ T1352] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1460.629059][ T1352] usb 7-1: device descriptor read/8, error -71 [ 1460.737927][ T1352] usb usb7-port1: unable to enumerate USB device [ 1461.026918][ T863] netlink: 'syz.6.7629': attribute type 61 has an invalid length. [ 1461.056960][T22783] Bluetooth: hci0: Malformed HCI Event [ 1462.167548][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1462.790489][ T897] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1462.849972][T16660] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 1462.924784][ T909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7645'. [ 1462.946839][T25573] nvmet: Created nvm controller 42 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1462.949941][ T897] nvme nvme41: creating 3 I/O queues. [ 1462.959052][ T897] nvme nvme41: new ctrl: "testsubsys" [ 1462.999210][T16660] usb 12-1: Using ep0 maxpacket: 16 [ 1462.999770][T16660] usb 12-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1463.004069][T16660] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.004083][T16660] usb 12-1: Product: syz [ 1463.004091][T16660] usb 12-1: Manufacturer: syz [ 1463.004099][T16660] usb 12-1: SerialNumber: syz [ 1463.006808][T16660] usb 12-1: config 0 descriptor?? [ 1463.431043][T16660] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1463.443066][T16660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1463.443841][T16660] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1463.443866][T16660] usb 12-1: media controller created [ 1463.464677][T16660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1463.636614][T16660] zl10353_read_register: readreg error (reg=127, ret==0) [ 1463.636643][T16660] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1463.636650][T16660] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1463.641121][T16660] usb 12-1: USB disconnect, device number 10 [ 1463.684057][T16660] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1463.960931][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1464.255941][ T969] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7657'. [ 1464.367759][T16660] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1464.554578][T16660] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1464.555448][T16660] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.555472][T16660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.558697][T16660] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1464.558801][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1464.558829][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1464.559641][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1464.559675][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1464.560414][T16660] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1464.562756][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1464.562789][T16660] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1464.563551][T16660] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1464.797550][ T1352] usb 11-1: new low-speed USB device number 30 using dummy_hcd [ 1464.866858][T25792] usb 7-1: USB disconnect, device number 80 [ 1464.871328][T25792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1464.872920][T25792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1464.873266][T25792] keyspan 7-1:1.0: device disconnected [ 1464.959660][ T1352] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1464.959689][ T1352] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1464.960591][ T1352] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 1464.960605][ T1352] usb 11-1: config 142 has no interface number 0 [ 1464.960623][ T1352] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1464.960637][ T1352] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1464.960649][ T1352] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1464.960661][ T1352] usb 11-1: config 142 interface 251 has no altsetting 0 [ 1464.963184][ T1352] usb 11-1: string descriptor 0 read error: -22 [ 1464.963238][ T1352] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.965412][ T985] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1464.965507][ T985] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1464.966570][ T1352] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 1464.971742][ T1352] usb 11-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1465.559587][ T1023] netlink: 'syz.2.7671': attribute type 1 has an invalid length. [ 1465.576259][ T1023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.595400][ T1023] bond1: (slave dummy0): making interface the new active one [ 1465.596598][ T1023] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1465.721172][ T985] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 1465.721199][ T985] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1465.721421][ C0] usb 11-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1465.897561][T28816] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1465.988415][ T5204] usb 11-1: USB disconnect, device number 30 [ 1465.991310][ T5204] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1465.991648][ T5204] cypress_m8 11-1:142.251: device disconnected [ 1466.048019][T28816] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1466.048886][T28816] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.048899][T28816] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1466.048916][T28816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.260077][ T5569] usb 10-1: USB disconnect, device number 41 [ 1467.132503][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7695'. [ 1467.267857][ T1097] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1467.527684][ T5569] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1467.698054][ T5569] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1467.698914][ T5569] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.698930][ T5569] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1467.698957][ T5569] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.914339][ T5569] usb 7-1: USB disconnect, device number 81 [ 1468.487564][ T5204] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 1468.532600][ T1155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 1468.637619][ T5204] usb 12-1: Using ep0 maxpacket: 32 [ 1468.638228][ T5204] usb 12-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1468.639393][ T5204] usb 12-1: config 0 has an invalid interface number: 85 but max is 0 [ 1468.639415][ T5204] usb 12-1: config 0 has no interface number 0 [ 1468.639444][ T5204] usb 12-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1468.639460][ T5204] usb 12-1: config 0 interface 85 has no altsetting 0 [ 1468.641733][ T5204] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.641751][ T5204] usb 12-1: Product: syz [ 1468.641763][ T5204] usb 12-1: Manufacturer: syz [ 1468.641777][ T5204] usb 12-1: SerialNumber: syz [ 1468.645022][ T5204] usb 12-1: config 0 descriptor?? [ 1468.873143][T16660] kernel read not supported for file /video9 (pid: 16660 comm: kworker/0:1) [ 1469.255823][ T5204] appletouch 12-1:0.85: Geyser mode initialized. [ 1469.256832][ T1183] tipc: Started in network mode [ 1469.256847][ T1183] tipc: Node identity bef8857e8eae, cluster identity 4711 [ 1469.266169][ T5204] input: appletouch as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.85/input/input28 [ 1469.277597][ T1183] tipc: Enabled bearer , priority 0 [ 1469.341676][ T1183] syzkaller0: entered promiscuous mode [ 1469.341691][ T1183] syzkaller0: entered allmulticast mode [ 1469.342147][ T1183] tipc: Resetting bearer [ 1469.371437][ T1182] tipc: Resetting bearer [ 1469.458052][ T1352] usb 12-1: USB disconnect, device number 11 [ 1469.499698][ T1352] appletouch 12-1:0.85: input: appletouch disconnected [ 1469.552946][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7723'. [ 1470.831057][ T1224] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1471.217617][ T5569] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 1471.367649][ T5569] usb 11-1: device descriptor read/64, error -71 [ 1471.617707][ T5569] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 1471.757509][ T5569] usb 11-1: device descriptor read/64, error -71 [ 1471.861221][ T5569] usb usb11-port1: attempt power cycle [ 1471.942757][ T1182] tipc: Disabling bearer [ 1471.950802][T16660] tipc: Node number set to 810976638 [ 1472.207621][ T5569] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 1472.229021][ T5569] usb 11-1: device descriptor read/8, error -71 [ 1472.259755][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7743'. [ 1472.316815][ T1266] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1472.334027][ T1266] nvme_fabrics: missing parameter 'transport=%s' [ 1472.334037][ T1266] nvme_fabrics: missing parameter 'nqn=%s' [ 1472.487542][ T5569] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 1472.518152][ T5569] usb 11-1: device descriptor read/8, error -71 [ 1472.640015][ T5569] usb usb11-port1: unable to enumerate USB device [ 1473.062184][ T1313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7759'. [ 1473.631774][ T1360] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1473.654903][ T1360] nvme_fabrics: missing parameter 'transport=%s' [ 1473.654923][ T1360] nvme_fabrics: missing parameter 'nqn=%s' [ 1473.728402][T15819] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 1473.880535][T15819] usb 12-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1473.881361][T15819] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.881383][T15819] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1473.881397][T15819] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1473.881408][T15819] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1473.881420][T15819] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.881439][T15819] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.883025][ T1345] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1473.884016][T15819] pl2303 12-1:1.0: required interrupt-in endpoint missing [ 1474.026711][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7770'. [ 1474.092803][T23277] usb 12-1: USB disconnect, device number 12 [ 1474.577526][T28816] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 1474.757611][T28816] usb 11-1: Using ep0 maxpacket: 32 [ 1474.758098][T28816] usb 11-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1474.759737][T28816] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.759750][T28816] usb 11-1: config 0 has no interfaces? [ 1474.759764][T28816] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.762949][T28816] usb 11-1: config 0 descriptor?? [ 1474.877574][T23277] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 1474.907898][T16660] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1475.028370][T23277] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1475.029284][T23277] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1475.029300][T23277] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1475.029386][T23277] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.031103][T23277] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1475.031116][T23277] usb 12-1: Product: syz [ 1475.031123][T23277] usb 12-1: Manufacturer: syz [ 1475.031131][T23277] usb 12-1: SerialNumber: syz [ 1475.043053][T16660] usb 10-1: device descriptor read/64, error -71 [ 1475.252656][T23277] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1475.287792][T16660] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1475.424038][T16660] usb 10-1: device descriptor read/64, error -71 [ 1475.509978][T23277] usb 12-1: USB disconnect, device number 13 [ 1475.519647][ T1405] usblp0: removed [ 1475.528458][T16660] usb usb10-port1: attempt power cycle [ 1475.871828][T16660] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1475.888006][T16660] usb 10-1: device descriptor read/8, error -71 [ 1476.170676][T22783] Bluetooth: hci0: unexpected event for opcode 0x080b [ 1476.185848][T16660] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1476.220122][T16660] usb 10-1: device descriptor read/8, error -71 [ 1476.327922][T16660] usb usb10-port1: unable to enumerate USB device [ 1477.075997][ T1437] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1477.114911][ T1440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1477.147411][ T1437] nvme_fabrics: missing parameter 'transport=%s' [ 1477.147476][ T1437] nvme_fabrics: missing parameter 'nqn=%s' [ 1477.315119][T16660] usb 11-1: USB disconnect, device number 35 [ 1477.757589][T16660] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 1477.907757][T16660] usb 11-1: Using ep0 maxpacket: 8 [ 1477.910442][T16660] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1477.911435][T16660] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 1477.911449][T16660] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.911459][T16660] usb 11-1: config 0 has no interface number 0 [ 1477.911478][T16660] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.916540][T16660] usb 11-1: config 0 descriptor?? [ 1477.920399][T16660] ldusb 11-1:0.55: Interrupt in endpoint not found [ 1479.952217][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7799'. [ 1480.200373][T22783] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1480.200415][T22783] Bluetooth: hci0: Injecting HCI hardware error event [ 1480.204706][ T67] Bluetooth: hci0: hardware error 0x00 [ 1480.257281][ T1524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1480.257304][ T1524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1480.263889][ T1524] vhci_hcd vhci_hcd.0: Device attached [ 1480.440795][T16660] usb 11-1: USB disconnect, device number 36 [ 1480.540273][ T1352] usb 48-1: SetAddress Request (2) to port 0 [ 1480.540329][ T1352] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1480.981577][ T1525] vhci_hcd: connection reset by peer [ 1480.988905][T20220] vhci_hcd vhci_hcd.5: stop threads [ 1480.988924][T20220] vhci_hcd vhci_hcd.5: release socket [ 1480.988949][T20220] vhci_hcd vhci_hcd.5: disconnect device [ 1481.054440][ T1550] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1481.086121][ T1550] nvme_fabrics: missing parameter 'transport=%s' [ 1481.086137][ T1550] nvme_fabrics: missing parameter 'nqn=%s' [ 1481.267573][T16660] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1481.437552][T16660] usb 7-1: Using ep0 maxpacket: 8 [ 1481.438572][T16660] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1481.439880][T16660] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1481.439902][T16660] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.439920][T16660] usb 7-1: config 0 has no interface number 0 [ 1481.439956][T16660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.443155][T16660] usb 7-1: config 0 descriptor?? [ 1481.446195][T16660] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1481.615289][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7814'. [ 1481.629016][ T1568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7815'. [ 1481.914236][ T1577] syzkaller0: entered promiscuous mode [ 1481.914266][ T1577] syzkaller0: entered allmulticast mode [ 1482.287262][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1483.707531][ T5896] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1483.858379][ T5896] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1483.859456][ T5896] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.861603][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.861623][ T5896] usb 10-1: Product: syz [ 1483.861636][ T5896] usb 10-1: Manufacturer: syz [ 1483.861650][ T5896] usb 10-1: SerialNumber: syz [ 1483.908973][ T1620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7828'. [ 1483.961643][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.048551][T16660] usb 7-1: USB disconnect, device number 82 [ 1484.967688][T25024] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 1485.090705][ T5896] usb 10-1: USB disconnect, device number 46 [ 1485.122719][T25024] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1485.123790][T25024] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1485.123813][T25024] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1485.123832][T25024] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.147196][T25024] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1485.147221][T25024] usb 12-1: Product: syz [ 1485.147233][T25024] usb 12-1: Manufacturer: syz [ 1485.147246][T25024] usb 12-1: SerialNumber: syz [ 1485.399258][T25024] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1485.485615][ T1652] netlink: 'syz.6.7839': attribute type 1 has an invalid length. [ 1485.505172][ T1652] vlan2: entered allmulticast mode [ 1485.505186][ T1652] bond3: entered allmulticast mode [ 1485.516213][ T1655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7840'. [ 1485.641356][ T1352] usb 48-1: device descriptor read/8, error -110 [ 1485.645812][ T1661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7843'. [ 1485.675288][ T1666] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7845'. [ 1485.839121][ T1682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7846'. [ 1485.846933][ T1684] syzkaller0: entered promiscuous mode [ 1485.846946][ T1684] syzkaller0: entered allmulticast mode [ 1486.039185][ T1352] usb usb48-port1: attempt power cycle [ 1486.367538][T16660] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 1486.517609][T16660] usb 11-1: Using ep0 maxpacket: 32 [ 1486.519369][T16660] usb 11-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1486.525782][T16660] usb 11-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.525800][T16660] usb 11-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.534202][T16660] usb 11-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1486.534225][T16660] usb 11-1: Product: syz [ 1486.534237][T16660] usb 11-1: Manufacturer: syz [ 1486.550474][T16660] hub 11-1:4.0: USB hub found [ 1486.634558][ T1352] usb usb48-port1: unable to enumerate USB device [ 1486.657032][ T1713] netlink: 'syz.2.7859': attribute type 15 has an invalid length. [ 1486.756305][T16660] hub 11-1:4.0: config failed, can't read hub descriptor (err -22) [ 1486.778401][T16660] usb 11-1: USB disconnect, device number 37 [ 1486.838777][ T1727] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7866'. [ 1486.882497][ T1730] syzkaller0: entered promiscuous mode [ 1486.882511][ T1730] syzkaller0: entered allmulticast mode [ 1487.197613][T25024] usb 11-1: new full-speed USB device number 38 using dummy_hcd [ 1487.358274][T25024] usb 11-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1487.359412][T25024] usb 11-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1487.359429][T25024] usb 11-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.360760][T25024] usb 11-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1487.360772][T25024] usb 11-1: Product: syz [ 1487.360780][T25024] usb 11-1: Manufacturer: syz [ 1487.367258][T25024] hub 11-1:4.0: USB hub found [ 1487.568929][T25024] hub 11-1:4.0: config failed, hub has too many ports! (err -19) [ 1487.665223][ T1735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7869'. [ 1487.748825][ T5204] usb 12-1: USB disconnect, device number 14 [ 1487.755459][ T5204] usblp0: removed [ 1487.887641][T16660] usb 11-1: USB disconnect, device number 38 [ 1487.982144][ T1754] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1488.039636][T25011] nvmet: connect request for invalid subsystem tes! [ 1488.039755][ T1754] nvme nvme42: Connect Invalid Data Parameter, subsysnqn "tes" [ 1488.141999][T15819] kernel read not supported for file /video9 (pid: 15819 comm: kworker/2:0) [ 1488.212922][ T5204] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1488.363667][ T5204] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1488.363693][ T5204] usb 7-1: no configurations [ 1488.363702][ T5204] usb 7-1: can't read configurations, error -22 [ 1488.497721][ T5204] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1488.647644][T16660] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 1488.648664][ T5204] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1488.648687][ T5204] usb 7-1: no configurations [ 1488.648694][ T5204] usb 7-1: can't read configurations, error -22 [ 1488.648833][ T5204] usb usb7-port1: attempt power cycle [ 1488.810008][T16660] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1488.810859][T16660] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.810882][T16660] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.813375][T16660] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1488.813480][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1488.813508][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1488.814111][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1488.814143][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1488.818398][T16660] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1488.862570][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1488.862608][T16660] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1488.863350][T16660] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1488.988700][ T5204] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1489.009152][ T5204] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1489.009195][ T5204] usb 7-1: no configurations [ 1489.009204][ T5204] usb 7-1: can't read configurations, error -22 [ 1489.060598][T30636] usb 11-1: USB disconnect, device number 39 [ 1489.063970][T30636] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1489.078377][T30636] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1489.078715][T30636] keyspan 11-1:1.0: device disconnected [ 1489.138527][ T5204] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1489.160780][ T5204] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1489.160805][ T5204] usb 7-1: no configurations [ 1489.160812][ T5204] usb 7-1: can't read configurations, error -22 [ 1489.160959][ T5204] usb usb7-port1: unable to enumerate USB device [ 1490.062152][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7888'. [ 1490.837630][T20193] Bluetooth: hci3: command 0x0406 tx timeout [ 1491.217709][ T1352] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1491.368025][ T1352] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1491.368936][ T1352] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.368959][ T1352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.375250][ T1352] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1491.375484][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1491.375536][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1491.389658][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1491.389726][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1491.408583][ T1352] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1491.411359][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1491.411430][ T1352] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1491.414107][ T1352] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1491.507833][ T5204] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 1491.603986][T16660] usb 10-1: USB disconnect, device number 47 [ 1491.607398][T16660] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1491.618415][T16660] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1491.619005][T16660] keyspan 10-1:1.0: device disconnected [ 1491.659723][ T5204] usb 11-1: Using ep0 maxpacket: 32 [ 1491.660312][ T5204] usb 11-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1491.664910][ T5204] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.664924][ T5204] usb 11-1: Product: syz [ 1491.664932][ T5204] usb 11-1: Manufacturer: syz [ 1491.664940][ T5204] usb 11-1: SerialNumber: syz [ 1491.669039][ T5204] usb 11-1: config 0 descriptor?? [ 1491.673817][ T5204] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1491.674027][ T1879] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1491.674161][ T1879] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1491.674386][ T1879] bridge0: port 3(netdevsim0) entered disabled state [ 1491.695213][ T1879] bridge_slave_1: left allmulticast mode [ 1491.695230][ T1879] bridge_slave_1: left promiscuous mode [ 1491.695352][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.705860][ T1879] bridge_slave_0: left allmulticast mode [ 1491.705877][ T1879] bridge_slave_0: left promiscuous mode [ 1491.705978][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.300573][ T1909] syzkaller0: entered promiscuous mode [ 1492.300587][ T1909] syzkaller0: entered allmulticast mode [ 1492.489652][ T5204] gspca_topro: reg_w err -71 [ 1492.517638][ T5204] gspca_topro: Sensor soi763a [ 1492.531606][ T5204] usb 11-1: USB disconnect, device number 40 [ 1492.669744][T15819] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1492.693764][ T1933] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7928'. [ 1492.839029][T15819] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1492.839839][T15819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1492.839854][T15819] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1492.839868][T15819] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.841382][T15819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1492.841395][T15819] usb 7-1: Product: syz [ 1492.841404][T15819] usb 7-1: Manufacturer: syz [ 1492.841412][T15819] usb 7-1: SerialNumber: syz [ 1493.075876][T15819] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1493.216697][ T1959] syzkaller0: entered promiscuous mode [ 1493.216717][ T1959] syzkaller0: entered allmulticast mode [ 1493.547594][ T5204] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 1493.698057][ T5204] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1493.698928][ T5204] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.698941][ T5204] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1493.700727][ T5204] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.700804][ T5204] usb 11-1: Product: syz [ 1493.700813][ T5204] usb 11-1: Manufacturer: syz [ 1493.700821][ T5204] usb 11-1: SerialNumber: syz [ 1493.702095][ T5204] usb 11-1: config 0 descriptor?? [ 1493.911761][ T5204] cypress_m8 11-1:0.0: HID->COM RS232 Adapter converter detected [ 1493.912232][ T5204] cyphidcom ttyUSB0: required endpoint is missing [ 1493.917794][ T5204] usb 11-1: USB disconnect, device number 41 [ 1493.918526][ T5204] cypress_m8 11-1:0.0: device disconnected [ 1494.170357][ T1980] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7942'. [ 1494.303206][ T1987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7941'. [ 1494.311369][ T1987] bond0: (slave bond_slave_0): Releasing backup interface [ 1494.622365][ T2009] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1494.660961][T25011] nvmet: connect request for invalid subsystem testsubsy! [ 1494.661048][ T2009] nvme nvme42: Connect Invalid Data Parameter, subsysnqn "testsubsy" [ 1495.451492][T15819] usb 7-1: USB disconnect, device number 87 [ 1495.458988][ T2028] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7951'. [ 1495.459053][T15819] usblp0: removed [ 1495.551179][ T2036] jffs2: notice: (2036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1495.797640][T25024] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 1495.959120][T25024] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1495.960460][T25024] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.960493][T25024] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.963535][T25024] usb 11-1: config 0 descriptor?? [ 1496.175890][T25024] usbhid 11-1:0.0: can't add hid device: -71 [ 1496.175949][T25024] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1496.182006][T25024] usb 11-1: USB disconnect, device number 42 [ 1496.617561][T25024] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 1496.769193][T25024] usb 11-1: Using ep0 maxpacket: 32 [ 1496.769650][T25024] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1496.770444][T25024] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.770466][T25024] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.771679][T25024] usb 11-1: config 0 descriptor?? [ 1496.773647][T25024] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1496.774551][T25024] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1497.179503][T30636] usb 11-1: USB disconnect, device number 43 [ 1497.180740][T30636] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 1497.547602][T25024] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 1497.712202][T25024] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1497.712229][T25024] usb 12-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1497.713018][T25024] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.713030][T25024] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.714983][ T2093] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7966'. [ 1497.715407][T25024] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.715420][T25024] usb 12-1: Product: syz [ 1497.715427][T25024] usb 12-1: Manufacturer: syz [ 1497.715435][T25024] usb 12-1: SerialNumber: syz [ 1497.721366][T25024] usb 12-1: selecting invalid altsetting 1 [ 1497.723092][T25024] usb 12-1: unit 6 not found! [ 1497.934689][T25024] usb 12-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1497.957927][T25024] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1497.974879][T26436] udevd[26436]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.139581][T25024] usb 12-1: USB disconnect, device number 15 [ 1498.929587][ T2115] FAULT_INJECTION: forcing a failure. [ 1498.929587][ T2115] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.929620][ T2115] CPU: 0 UID: 0 PID: 2115 Comm: syz.6.7975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.929646][ T2115] Tainted: [L]=SOFTLOCKUP [ 1498.929668][ T2115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1498.929681][ T2115] Call Trace: [ 1498.929688][ T2115] [ 1498.929697][ T2115] dump_stack_lvl+0x100/0x190 [ 1498.929735][ T2115] should_fail_ex.cold+0x5/0xa [ 1498.929763][ T2115] should_failslab+0xc2/0x120 [ 1498.929796][ T2115] __kmalloc_cache_noprof+0x91/0x6d0 [ 1498.929820][ T2115] ? lockdep_hardirqs_on+0x7d/0x110 [ 1498.929841][ T2115] ? pkcs8_key_preparse+0x128/0x480 [ 1498.929873][ T2115] pkcs8_key_preparse+0x128/0x480 [ 1498.929899][ T2115] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 1498.929925][ T2115] ? x509_cert_parse+0x6a5/0x910 [ 1498.929952][ T2115] ? x509_key_preparse+0x655/0x9c0 [ 1498.929982][ T2115] asymmetric_key_preparse+0xce/0x1d0 [ 1498.930001][ T2115] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1498.930022][ T2115] __key_create_or_update+0x3f6/0xe10 [ 1498.930057][ T2115] ? __pfx___key_create_or_update+0x10/0x10 [ 1498.930085][ T2115] ? lookup_user_key+0x3fc/0x1330 [ 1498.930113][ T2115] ? __pfx_lookup_user_key+0x10/0x10 [ 1498.930161][ T2115] key_create_or_update+0x42/0x60 [ 1498.930194][ T2115] __do_sys_add_key+0x2e8/0x460 [ 1498.930216][ T2115] ? __pfx___do_sys_add_key+0x10/0x10 [ 1498.930248][ T2115] __do_fast_syscall_32+0x14b/0x8c0 [ 1498.930274][ T2115] do_fast_syscall_32+0x32/0x70 [ 1498.930298][ T2115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1498.930323][ T2115] RIP: 0023:0xf73eefbc [ 1498.930339][ T2115] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1498.930357][ T2115] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 1498.930377][ T2115] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 0000000000000000 [ 1498.930389][ T2115] RDX: 0000000080000500 RSI: 0000000000000001 RDI: 00000000fffffffd [ 1498.930401][ T2115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.930413][ T2115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1498.930425][ T2115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.930454][ T2115] [ 1499.274633][ T2066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.327032][ T2120] syzkaller0: entered promiscuous mode [ 1499.327045][ T2120] syzkaller0: entered allmulticast mode [ 1499.479816][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1500.268053][ T2151] jffs2: notice: (2151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 1500.667557][T15819] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 1500.828005][T15819] usb 11-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 1500.828935][T15819] usb 11-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1500.828951][T15819] usb 11-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 1500.828965][T15819] usb 11-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1500.828979][T15819] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1500.828994][T15819] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.830066][T15819] usb 11-1: config 0 descriptor?? [ 1500.833031][ T2157] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1500.896686][ T2166] FAULT_INJECTION: forcing a failure. [ 1500.896686][ T2166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.896710][ T2166] CPU: 2 UID: 0 PID: 2166 Comm: syz.5.7995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.896725][ T2166] Tainted: [L]=SOFTLOCKUP [ 1500.896730][ T2166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1500.896736][ T2166] Call Trace: [ 1500.896751][ T2166] [ 1500.896758][ T2166] dump_stack_lvl+0x100/0x190 [ 1500.896777][ T2166] should_fail_ex.cold+0x5/0xa [ 1500.896793][ T2166] _copy_from_user+0x2e/0xd0 [ 1500.896808][ T2166] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 1500.896828][ T2166] bpf_vlog_finalize+0x2bf/0x360 [ 1500.896842][ T2166] bpf_log_attr_finalize+0x86/0x1a0 [ 1500.896856][ T2166] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1500.896873][ T2166] btf_new_fd+0x712/0x38f0 [ 1500.896886][ T2166] ? __lock_acquire+0x5c0/0x1f40 [ 1500.896905][ T2166] ? lock_acquire+0x1d1/0x380 [ 1500.896924][ T2166] ? __pfx_btf_new_fd+0x10/0x10 [ 1500.896936][ T2166] ? rcu_is_watching+0x13/0xc0 [ 1500.896948][ T2166] ? apparmor_capable+0x1d7/0x4d0 [ 1500.896963][ T2166] ? bpf_lsm_capable+0x9/0x10 [ 1500.896975][ T2166] ? security_capable+0x80/0x260 [ 1500.896987][ T2166] ? ns_capable+0xcd/0xf0 [ 1500.897002][ T2166] __sys_bpf+0x13ef/0x4a30 [ 1500.897019][ T2166] ? __pfx___sys_bpf+0x10/0x10 [ 1500.897031][ T2166] ? find_held_lock+0x2b/0x80 [ 1500.897043][ T2166] ? futex_wake+0x4ea/0x5e0 [ 1500.897067][ T2166] ? rcu_read_lock_any_held+0x6a/0x90 [ 1500.897080][ T2166] ? find_held_lock+0x2b/0x80 [ 1500.897091][ T2166] ? ksys_write+0x190/0x250 [ 1500.897106][ T2166] ? ksys_write+0x190/0x250 [ 1500.897147][ T2166] ? lock_acquire+0x1d1/0x380 [ 1500.897164][ T2166] ? __might_fault+0xc5/0x140 [ 1500.897178][ T2166] ? find_held_lock+0x2b/0x80 [ 1500.897193][ T2166] ? __ia32_sys_bpf+0xcc/0x170 [ 1500.897208][ T2166] __ia32_sys_bpf+0xcc/0x170 [ 1500.897223][ T2166] ? __might_fault+0x111/0x140 [ 1500.897236][ T2166] __do_fast_syscall_32+0x14b/0x8c0 [ 1500.897251][ T2166] do_fast_syscall_32+0x32/0x70 [ 1500.897263][ T2166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.897278][ T2166] RIP: 0023:0xf7fa4fbc [ 1500.897287][ T2166] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1500.897298][ T2166] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1500.897314][ T2166] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001b40 [ 1500.897323][ T2166] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.897330][ T2166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.897338][ T2166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1500.897345][ T2166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.897361][ T2166] [ 1501.244601][T15819] sony 0003:1430:474C.0021: ignoring exceeding usage max [ 1501.256858][T15819] sony 0003:1430:474C.0021: hidraw0: USB HID v0.10 Joystick [HID 1430:474c] on usb-dummy_hcd.6-1/input0 [ 1501.256886][T15819] sony 0003:1430:474C.0021: failed to claim input [ 1501.372237][ T2174] futex_wake_op: syz.7.7998 tries to shift op by 144; fix this program [ 1501.374620][ T2174] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1501.442849][T25024] usb 11-1: USB disconnect, device number 44 [ 1502.045593][ T2193] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8004'. [ 1502.106259][ T2197] FAULT_INJECTION: forcing a failure. [ 1502.106259][ T2197] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.106281][ T2197] CPU: 0 UID: 0 PID: 2197 Comm: syz.5.8006 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.106297][ T2197] Tainted: [L]=SOFTLOCKUP [ 1502.106302][ T2197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1502.106309][ T2197] Call Trace: [ 1502.106314][ T2197] [ 1502.106319][ T2197] dump_stack_lvl+0x100/0x190 [ 1502.106337][ T2197] should_fail_ex.cold+0x5/0xa [ 1502.106353][ T2197] should_failslab+0xc2/0x120 [ 1502.106373][ T2197] __kmalloc_cache_noprof+0x91/0x6d0 [ 1502.106388][ T2197] ? snd_seq_oss_timer_new+0x43/0x230 [ 1502.106408][ T2197] snd_seq_oss_timer_new+0x43/0x230 [ 1502.106426][ T2197] snd_seq_oss_open+0x4fc/0xa10 [ 1502.106444][ T2197] odev_open+0x6f/0x90 [ 1502.106477][ T2197] ? __pfx_odev_open+0x10/0x10 [ 1502.106493][ T2197] soundcore_open+0x2e3/0x5a0 [ 1502.106511][ T2197] ? __pfx_soundcore_open+0x10/0x10 [ 1502.106528][ T2197] chrdev_open+0x234/0x6a0 [ 1502.106545][ T2197] ? __pfx_apparmor_file_open+0x10/0x10 [ 1502.106559][ T2197] ? __pfx_chrdev_open+0x10/0x10 [ 1502.106576][ T2197] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1502.106591][ T2197] do_dentry_open+0x674/0x1470 [ 1502.106606][ T2197] ? __pfx_chrdev_open+0x10/0x10 [ 1502.106625][ T2197] vfs_open_consume+0xcc/0x460 [ 1502.106639][ T2197] path_openat+0x1547/0x23f0 [ 1502.106665][ T2197] ? __pfx_path_openat+0x10/0x10 [ 1502.106686][ T2197] do_file_open+0x20e/0x430 [ 1502.106704][ T2197] ? __pfx_do_file_open+0x10/0x10 [ 1502.106733][ T2197] ? _raw_spin_unlock+0x28/0x50 [ 1502.106750][ T2197] ? alloc_fd+0x471/0x7a0 [ 1502.106770][ T2197] do_sys_openat2+0x163/0x1d0 [ 1502.106782][ T2197] ? __pfx_do_sys_openat2+0x10/0x10 [ 1502.106799][ T2197] __ia32_compat_sys_openat+0x12d/0x210 [ 1502.106812][ T2197] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1502.106831][ T2197] __do_fast_syscall_32+0x14b/0x8c0 [ 1502.106845][ T2197] do_fast_syscall_32+0x32/0x70 [ 1502.106858][ T2197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.106873][ T2197] RIP: 0023:0xf7fa4fbc [ 1502.106882][ T2197] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1502.106892][ T2197] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1502.106904][ T2197] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080003440 [ 1502.106911][ T2197] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1502.106918][ T2197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.106924][ T2197] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1502.106931][ T2197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.106945][ T2197] [ 1502.106993][ T2197] ALSA: seq_oss: can't alloc timer [ 1502.270017][ T2202] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8009'. [ 1502.674289][ T2240] futex_wake_op: syz.6.8021 tries to shift op by 144; fix this program [ 1503.269834][ T2252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1503.269848][ T2252] block device autoloading is deprecated and will be removed. [ 1503.928133][ T2274] input: syz1 as /devices/virtual/input/input30 [ 1504.577631][T15819] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1504.727525][T15819] usb 10-1: Using ep0 maxpacket: 32 [ 1504.728051][T15819] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1504.729032][T15819] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1504.729048][T15819] usb 10-1: config 0 has no interface number 0 [ 1504.729077][T15819] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1504.730918][T15819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.730935][T15819] usb 10-1: Product: syz [ 1504.730948][T15819] usb 10-1: Manufacturer: syz [ 1504.730959][T15819] usb 10-1: SerialNumber: syz [ 1504.733337][T15819] usb 10-1: config 0 descriptor?? [ 1505.545866][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1505.545884][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1505.546163][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1505.546178][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1505.546188][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1505.546198][T15819] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1505.546301][T15819] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1505.551846][T15819] usb 10-1: USB disconnect, device number 48 [ 1505.725838][ T2296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8041'. [ 1506.443680][ T2325] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1506.482068][ T2329] fuse: Bad value for 'fd' [ 1506.482383][T25573] nvmet: Created nvm controller 43 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1506.484491][ T2325] nvme nvme42: creating 3 I/O queues. [ 1506.490716][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8052'. [ 1506.502974][ T2325] nvme nvme42: new ctrl: "testsubsys" [ 1506.688272][ T2342] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0106 with DS=0x91 [ 1507.347545][T16660] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1507.518149][T16660] usb 7-1: Using ep0 maxpacket: 8 [ 1507.519737][T16660] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1507.527161][T16660] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1507.527178][T16660] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.527203][T16660] usb 7-1: config 0 has no interface number 0 [ 1507.527222][T16660] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1507.527242][T16660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.529910][T16660] usb 7-1: config 0 descriptor?? [ 1507.534063][T16660] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1508.752521][ T2400] No control pipe specified [ 1508.827592][ T5896] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1508.978062][ T5896] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1508.981857][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.003500][ T2414] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1509.059415][ T2418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8074'. [ 1509.117012][ T64] nvmet: Created nvm controller 44 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1509.119084][ T2414] nvme nvme43: creating 3 I/O queues. [ 1509.126977][ T2414] nvme nvme43: new ctrl: "testsubsys" [ 1509.196734][ T2392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8067'. [ 1509.202265][T25024] usb 10-1: USB disconnect, device number 49 [ 1509.843285][ T2442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8078'. [ 1509.981769][ T2446] futex_wake_op: syz.7.8079 tries to shift op by 144; fix this program [ 1509.985408][ T2446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1510.150083][T16660] usb 7-1: USB disconnect, device number 88 [ 1510.179784][ T2456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8078'. [ 1510.476373][ T2469] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8084'. [ 1510.838219][ T2483] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1510.897825][ T1157] nvmet: Created nvm controller 45 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c0ac9123-cad9-4008-b4c8-ead97c08d5b6. [ 1510.901604][ T2483] nvme nvme44: creating 3 I/O queues. [ 1510.917584][ T2483] nvme nvme44: new ctrl: "testsubsys" [ 1510.934663][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8089'. [ 1510.938524][ T2491] syz_tun: entered promiscuous mode [ 1510.938726][ T2491] macvlan2: entered promiscuous mode [ 1510.939775][ T2491] syz_tun: left promiscuous mode [ 1511.215844][ T2519] futex_wake_op: syz.6.8096 tries to shift op by 144; fix this program [ 1512.279329][T20193] Bluetooth: hci3: command 0x0406 tx timeout [ 1512.292191][ T2571] FAULT_INJECTION: forcing a failure. [ 1512.292191][ T2571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1512.292212][ T2571] CPU: 0 UID: 0 PID: 2571 Comm: syz.5.8107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1512.292230][ T2571] Tainted: [L]=SOFTLOCKUP [ 1512.292234][ T2571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1512.292241][ T2571] Call Trace: [ 1512.292246][ T2571] [ 1512.292251][ T2571] dump_stack_lvl+0x100/0x190 [ 1512.292270][ T2571] should_fail_ex.cold+0x5/0xa [ 1512.292287][ T2571] get_futex_key+0x1c9/0x13e0 [ 1512.292302][ T2571] ? __pfx_get_futex_key+0x10/0x10 [ 1512.292322][ T2571] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1512.292336][ T2571] futex_wait_setup+0x91/0x540 [ 1512.292356][ T2571] __futex_wait+0x19f/0x360 [ 1512.292373][ T2571] ? __pfx___futex_wait+0x10/0x10 [ 1512.292387][ T2571] ? __pfx_try_to_wake_up+0x10/0x10 [ 1512.292403][ T2571] ? futex_hash+0x311/0x400 [ 1512.292417][ T2571] ? __pfx_futex_wake_mark+0x10/0x10 [ 1512.292436][ T2571] ? find_held_lock+0x2b/0x80 [ 1512.292448][ T2571] ? futex_wake+0x4ea/0x5e0 [ 1512.292466][ T2571] futex_wait+0xe6/0x370 [ 1512.292482][ T2571] ? __pfx_futex_wait+0x10/0x10 [ 1512.292502][ T2571] ? putname+0xb1/0x110 [ 1512.292511][ T2571] ? kmem_cache_free+0x127/0x6c0 [ 1512.292527][ T2571] do_futex+0x265/0x440 [ 1512.292540][ T2571] ? __pfx_do_futex+0x10/0x10 [ 1512.292556][ T2571] __ia32_sys_futex_time32+0x2f4/0x470 [ 1512.292573][ T2571] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1512.292587][ T2571] ? __might_fault+0xc5/0x140 [ 1512.292617][ T2571] __do_fast_syscall_32+0x14b/0x8c0 [ 1512.292634][ T2571] do_fast_syscall_32+0x32/0x70 [ 1512.292660][ T2571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1512.292677][ T2571] RIP: 0023:0xf7fa4fbc [ 1512.292687][ T2571] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1512.292698][ T2571] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1512.292710][ T2571] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 1512.292717][ T2571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 1512.292724][ T2571] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1512.292731][ T2571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1512.292739][ T2571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1512.292754][ T2571] [ 1512.562948][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 1512.562968][ T42] audit: type=1800 audit(1792729473.505:4759): pid=2582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8109" name=08 dev="sda1" ino=2042 res=0 errno=-22 [ 1512.610086][T25573] IPVS: starting estimator thread 0... [ 1512.701456][ T2584] IPVS: using max 44 ests per chain, 105600 per kthread [ 1512.780587][ T2586] kAFS: unable to lookup cell '.' [ 1513.508398][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8125'. [ 1513.799260][ T2681] pim6reg: entered allmulticast mode [ 1513.801239][ T2680] pim6reg: left allmulticast mode [ 1514.179622][ T42] audit: type=1326 audit(1792729475.125:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.179670][ T42] audit: type=1326 audit(1792729475.125:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.179708][ T42] audit: type=1326 audit(1792729475.135:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.179745][ T42] audit: type=1326 audit(1792729475.135:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.179783][ T42] audit: type=1326 audit(1792729475.135:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.179818][ T42] audit: type=1326 audit(1792729475.135:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.180364][ T42] audit: type=1326 audit(1792729475.135:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.180412][ T42] audit: type=1326 audit(1792729475.135:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34fbc code=0x7ffc0000 [ 1514.186697][ T42] audit: type=1326 audit(1792729475.135:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2696 comm="syz.2.8144" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 1514.437801][T25024] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1514.545660][ T2713] futex_wake_op: syz.5.8150 tries to shift op by 144; fix this program [ 1514.547121][ T2713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1514.589638][T25024] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1514.591711][T25024] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.591740][T25024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1514.591753][T25024] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1514.591767][T25024] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1514.595075][T25024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.595088][T25024] usb 7-1: Product: syz [ 1514.595096][T25024] usb 7-1: Manufacturer: syz [ 1514.595105][T25024] usb 7-1: SerialNumber: syz [ 1514.605255][T25024] sisusb 7-1:1.0: Invalid USB2VGA device [ 1514.605269][T25024] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 1514.879203][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8153'. [ 1514.879219][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8153'. [ 1515.358882][ T2729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8155'. [ 1516.074234][ T2698] ------------[ cut here ]------------ [ 1516.074248][ T2698] current->flags & PF_MEMALLOC [ 1516.074255][ T2698] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1e92/0x32e0, CPU#3: syz.2.8144/2698 [ 1516.083457][ T2698] Modules linked in: [ 1516.086307][ T2698] CPU: 3 UID: 0 PID: 2698 Comm: syz.2.8144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.090106][ T2698] Tainted: [L]=SOFTLOCKUP [ 1516.091988][ T2698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1516.095653][ T2698] RIP: 0010:__alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.098506][ T2698] Code: 38 d0 7c 08 84 d2 0f 85 59 12 00 00 65 48 8b 05 9c 4e 43 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ca e7 ff ff 90 <0f> 0b 90 e9 c1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1516.108023][ T2698] RSP: 0000:ffffc9000651e128 EFLAGS: 00010202 [ 1516.111788][ T2698] RAX: ffff888024ee0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1516.116301][ T2698] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1516.120536][ T2698] RBP: ffff888024ee002c R08: 0000000000008000 R09: 0000000000000001 [ 1516.123854][ T2698] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1516.127199][ T2698] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000ca3c3f [ 1516.131467][ T2698] FS: 0000000000000000(0000) GS:ffff8880955c4000(0063) knlGS:00000000f53e6b40 [ 1516.135158][ T2698] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1516.138005][ T2698] CR2: 00005570aa4ca00e CR3: 00000000522b7000 CR4: 0000000000352ef0 [ 1516.143840][ T2698] Call Trace: [ 1516.145265][ T2698] [ 1516.146537][ T2698] ? __pfx___css_rstat_updated+0x10/0x10 [ 1516.151132][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.154182][ T2698] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1516.157156][ T2698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1516.160148][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.162688][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.164698][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.166745][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.168818][ T2698] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1516.171375][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.173435][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.175538][ T2698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1516.178219][ T2698] ? policy_nodemask+0xed/0x4f0 [ 1516.181307][ T2698] alloc_pages_mpol+0x201/0x550 [ 1516.183459][ T2698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1516.185734][ T2698] ? filemap_get_entry+0x22d/0x450 [ 1516.188919][ T2698] ? filemap_get_entry+0x22d/0x450 [ 1516.193143][ T2698] folio_alloc_noprof+0x22/0x250 [ 1516.195471][ T2698] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1516.198706][ T2698] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1516.201590][ T2698] ? __filemap_get_folio_mpol+0x364/0x1280 [ 1516.203917][ T2698] __filemap_get_folio_mpol+0x64e/0x1280 [ 1516.207812][ T2698] bdev_getblk+0x246/0x6a0 [ 1516.210102][ T2698] ? ext4_get_group_desc+0x2b9/0x570 [ 1516.213862][ T2698] ext4_read_block_bitmap_nowait+0x2dd/0x1780 [ 1516.217717][ T2698] ? ext4_get_group_info+0x271/0x480 [ 1516.221659][ T2698] ext4_mb_init_cache+0x413/0x1920 [ 1516.223909][ T2698] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 1516.226678][ T2698] ext4_mb_load_buddy_gfp+0x11c6/0x1b20 [ 1516.229454][ T2698] ext4_discard_preallocations+0x584/0x10c0 [ 1516.231971][ T2698] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1516.234659][ T2698] ? __pfx_xa_destroy+0x10/0x10 [ 1516.236808][ T2698] ? inode_wait_for_writeback+0x171/0x390 [ 1516.239845][ T2698] ? inode_lru_isolate+0x37/0xf00 [ 1516.244136][ T2698] ext4_clear_inode+0x6e/0x280 [ 1516.248340][ T2698] ext4_evict_inode+0x1de/0x17d0 [ 1516.253873][ T2698] ? evict+0x37e/0xad0 [ 1516.256479][ T2698] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1516.259250][ T2698] evict+0x3c2/0xad0 [ 1516.261809][ T2698] ? _raw_spin_unlock+0x28/0x50 [ 1516.264921][ T2698] ? __list_lru_walk_one+0x26d/0x550 [ 1516.267795][ T2698] ? __pfx_evict+0x10/0x10 [ 1516.269698][ T2698] ? _raw_spin_unlock+0x28/0x50 [ 1516.272312][ T2698] ? dentry_kill+0x5d7/0xca0 [ 1516.274775][ T2698] dispose_list+0x117/0x1e0 [ 1516.276786][ T2698] prune_icache_sb+0xea/0x150 [ 1516.278994][ T2698] ? list_lru_count_one+0x147/0x320 [ 1516.282038][ T2698] ? __pfx_prune_icache_sb+0x10/0x10 [ 1516.284303][ T2698] super_cache_scan+0x376/0x550 [ 1516.286384][ T2698] do_shrink_slab+0x411/0x1200 [ 1516.289264][ T2698] shrink_slab+0xa7d/0x12e0 [ 1516.291308][ T2698] ? shrink_slab+0x672/0x12e0 [ 1516.292824][ T2698] ? __pfx_shrink_slab+0x10/0x10 [ 1516.294394][ T2698] ? __pfx_get_random_u8+0x10/0x10 [ 1516.296325][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.298340][ T2698] shrink_one+0x398/0x850 [ 1516.300160][ T2698] ? shrink_node+0x2afb/0x4310 [ 1516.302088][ T2698] shrink_node+0x2b1b/0x4310 [ 1516.304525][ T2698] ? shrink_node+0x2869/0x4310 [ 1516.306026][ T2698] ? __pfx_shrink_node+0x10/0x10 [ 1516.308242][ T2698] ? queue_work_on+0x141/0x1e0 [ 1516.309768][ T2698] ? do_try_to_free_pages+0x33e/0x16d0 [ 1516.311984][ T2698] do_try_to_free_pages+0x33e/0x16d0 [ 1516.313685][ T2698] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1516.315472][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.317462][ T2698] try_to_free_pages+0x2a0/0x740 [ 1516.319043][ T2698] ? __pfx_try_to_free_pages+0x10/0x10 [ 1516.320761][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.322278][ T2698] ? fs_reclaim_acquire+0x70/0x100 [ 1516.324234][ T2698] ? fs_reclaim_acquire+0x70/0x100 [ 1516.325865][ T2698] __alloc_frozen_pages_noprof+0xe7f/0x32e0 [ 1516.327880][ T2698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1516.329925][ T2698] ? __css_rstat_updated+0x1ce/0x590 [ 1516.332027][ T2698] ? __pfx___css_rstat_updated+0x10/0x10 [ 1516.334545][ T2698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1516.336428][ T2698] ? policy_nodemask+0xed/0x4f0 [ 1516.338017][ T2698] alloc_pages_mpol+0x201/0x550 [ 1516.339559][ T2698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1516.341234][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.342762][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.345144][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.346696][ T2698] alloc_pages_noprof+0x1a/0x160 [ 1516.349106][ T2698] __vmalloc_node_range_noprof+0xc1b/0x1420 [ 1516.350956][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.352497][ T2698] ? get_random_u32+0x3fc/0x7d0 [ 1516.354069][ T2698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1516.356058][ T2698] ? get_random_u32+0x581/0x7d0 [ 1516.357688][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.359247][ T2698] __bpf_map_area_alloc+0x12e/0x200 [ 1516.361489][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.363789][ T2698] htab_map_alloc+0xa13/0x14d0 [ 1516.366869][ T2698] map_create+0x874/0x30d0 [ 1516.368769][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.371609][ T2698] ? __pfx_map_create+0x10/0x10 [ 1516.373816][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.375290][ T2698] ? __might_fault+0xc5/0x140 [ 1516.376856][ T2698] ? __might_fault+0xc5/0x140 [ 1516.378637][ T2698] __sys_bpf+0x12a0/0x4a30 [ 1516.380065][ T2698] ? __pfx___sys_bpf+0x10/0x10 [ 1516.381913][ T2698] ? kasan_quarantine_put+0x104/0x240 [ 1516.383917][ T2698] ? lockdep_hardirqs_on+0x7d/0x110 [ 1516.386670][ T2698] ? audit_log_end+0x1f/0x30 [ 1516.390707][ T2698] ? kmem_cache_free+0x127/0x6c0 [ 1516.393263][ T2698] ? audit_log_end.part.0+0x1fa/0x280 [ 1516.395070][ T2698] ? audit_log_end+0x24/0x30 [ 1516.396689][ T2698] ? audit_seccomp+0x13a/0x190 [ 1516.398502][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.400057][ T2698] ? __ia32_sys_bpf+0xcc/0x170 [ 1516.402351][ T2698] __ia32_sys_bpf+0xcc/0x170 [ 1516.404251][ T2698] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 1516.406537][ T2698] __do_fast_syscall_32+0x14b/0x8c0 [ 1516.408312][ T2698] ? lockdep_hardirqs_on+0x7d/0x110 [ 1516.410067][ T2698] do_fast_syscall_32+0x32/0x70 [ 1516.412101][ T2698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1516.414633][ T2698] RIP: 0023:0xf7f34fbc [ 1516.416675][ T2698] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1516.423368][ T2698] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1516.426972][ T2698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080004880 [ 1516.429999][ T2698] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.432470][ T2698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1516.434950][ T2698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1516.437888][ T2698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.440307][ T2698] [ 1516.441342][ T2698] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1516.443646][ T2698] CPU: 3 UID: 0 PID: 2698 Comm: syz.2.8144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.446990][ T2698] Tainted: [L]=SOFTLOCKUP [ 1516.448332][ T2698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1516.451429][ T2698] Call Trace: [ 1516.452487][ T2698] [ 1516.453442][ T2698] dump_stack_lvl+0x100/0x190 [ 1516.454925][ T2698] vpanic+0x553/0x970 [ 1516.456174][ T2698] ? __pfx_vpanic+0x10/0x10 [ 1516.457631][ T2698] panic+0xd1/0xe0 [ 1516.458815][ T2698] ? __pfx_panic+0x10/0x10 [ 1516.460217][ T2698] check_panic_on_warn.cold+0x19/0x34 [ 1516.461902][ T2698] ? __alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.463814][ T2698] __warn.cold+0x191/0x318 [ 1516.465210][ T2698] __report_bug+0x30f/0x440 [ 1516.466642][ T2698] ? __alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.468541][ T2698] ? __pfx___report_bug+0x10/0x10 [ 1516.470118][ T2698] ? get_page_from_freelist+0x344/0x35d0 [ 1516.471865][ T2698] ? __lock_acquire+0xe8b/0x1f40 [ 1516.473434][ T2698] ? __alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.475335][ T2698] report_bug+0xb3/0x220 [ 1516.476680][ T2698] ? __alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.478604][ T2698] handle_bug+0x16a/0x2a0 [ 1516.479952][ T2698] exc_invalid_op+0x17/0x50 [ 1516.481377][ T2698] asm_exc_invalid_op+0x1a/0x20 [ 1516.482891][ T2698] RIP: 0010:__alloc_frozen_pages_noprof+0x1e92/0x32e0 [ 1516.484961][ T2698] Code: 38 d0 7c 08 84 d2 0f 85 59 12 00 00 65 48 8b 05 9c 4e 43 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ca e7 ff ff 90 <0f> 0b 90 e9 c1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1516.490879][ T2698] RSP: 0000:ffffc9000651e128 EFLAGS: 00010202 [ 1516.492783][ T2698] RAX: ffff888024ee0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1516.495632][ T2698] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1516.498735][ T2698] RBP: ffff888024ee002c R08: 0000000000008000 R09: 0000000000000001 [ 1516.501787][ T2698] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1516.504872][ T2698] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000ca3c3f [ 1516.507950][ T2698] ? __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 1516.510013][ T2698] ? __pfx___css_rstat_updated+0x10/0x10 [ 1516.511613][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.513177][ T2698] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1516.515091][ T2698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1516.517110][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.518602][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.520114][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.521630][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.523108][ T2698] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 1516.524949][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.526455][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.528001][ T2698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1516.529856][ T2698] ? policy_nodemask+0xed/0x4f0 [ 1516.531381][ T2698] alloc_pages_mpol+0x201/0x550 [ 1516.532924][ T2698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1516.534613][ T2698] ? filemap_get_entry+0x22d/0x450 [ 1516.536206][ T2698] ? filemap_get_entry+0x22d/0x450 [ 1516.537841][ T2698] folio_alloc_noprof+0x22/0x250 [ 1516.539397][ T2698] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1516.541367][ T2698] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1516.543485][ T2698] ? __filemap_get_folio_mpol+0x364/0x1280 [ 1516.545302][ T2698] __filemap_get_folio_mpol+0x64e/0x1280 [ 1516.547060][ T2698] bdev_getblk+0x246/0x6a0 [ 1516.548516][ T2698] ? ext4_get_group_desc+0x2b9/0x570 [ 1516.550201][ T2698] ext4_read_block_bitmap_nowait+0x2dd/0x1780 [ 1516.552124][ T2698] ? ext4_get_group_info+0x271/0x480 [ 1516.553805][ T2698] ext4_mb_init_cache+0x413/0x1920 [ 1516.555458][ T2698] ? __pfx_ext4_mb_init_cache+0x10/0x10 [ 1516.557229][ T2698] ext4_mb_load_buddy_gfp+0x11c6/0x1b20 [ 1516.558962][ T2698] ext4_discard_preallocations+0x584/0x10c0 [ 1516.560803][ T2698] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1516.562746][ T2698] ? __pfx_xa_destroy+0x10/0x10 [ 1516.564278][ T2698] ? inode_wait_for_writeback+0x171/0x390 [ 1516.566082][ T2698] ? inode_lru_isolate+0x37/0xf00 [ 1516.567681][ T2698] ext4_clear_inode+0x6e/0x280 [ 1516.569239][ T2698] ext4_evict_inode+0x1de/0x17d0 [ 1516.571196][ T2698] ? evict+0x37e/0xad0 [ 1516.572845][ T2698] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1516.574961][ T2698] evict+0x3c2/0xad0 [ 1516.576533][ T2698] ? _raw_spin_unlock+0x28/0x50 [ 1516.578473][ T2698] ? __list_lru_walk_one+0x26d/0x550 [ 1516.580419][ T2698] ? __pfx_evict+0x10/0x10 [ 1516.581845][ T2698] ? _raw_spin_unlock+0x28/0x50 [ 1516.583380][ T2698] ? dentry_kill+0x5d7/0xca0 [ 1516.584861][ T2698] dispose_list+0x117/0x1e0 [ 1516.586325][ T2698] prune_icache_sb+0xea/0x150 [ 1516.587809][ T2698] ? list_lru_count_one+0x147/0x320 [ 1516.589452][ T2698] ? __pfx_prune_icache_sb+0x10/0x10 [ 1516.591102][ T2698] super_cache_scan+0x376/0x550 [ 1516.592655][ T2698] do_shrink_slab+0x411/0x1200 [ 1516.594190][ T2698] shrink_slab+0xa7d/0x12e0 [ 1516.595623][ T2698] ? shrink_slab+0x672/0x12e0 [ 1516.597127][ T2698] ? __pfx_shrink_slab+0x10/0x10 [ 1516.598679][ T2698] ? __pfx_get_random_u8+0x10/0x10 [ 1516.600277][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.601774][ T2698] shrink_one+0x398/0x850 [ 1516.603135][ T2698] ? shrink_node+0x2afb/0x4310 [ 1516.604652][ T2698] shrink_node+0x2b1b/0x4310 [ 1516.606224][ T2698] ? shrink_node+0x2869/0x4310 [ 1516.607837][ T2698] ? __pfx_shrink_node+0x10/0x10 [ 1516.609456][ T2698] ? queue_work_on+0x141/0x1e0 [ 1516.610977][ T2698] ? do_try_to_free_pages+0x33e/0x16d0 [ 1516.612702][ T2698] do_try_to_free_pages+0x33e/0x16d0 [ 1516.614378][ T2698] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1516.616153][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.617728][ T2698] try_to_free_pages+0x2a0/0x740 [ 1516.619282][ T2698] ? __pfx_try_to_free_pages+0x10/0x10 [ 1516.620981][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.622469][ T2698] ? fs_reclaim_acquire+0x70/0x100 [ 1516.624084][ T2698] ? fs_reclaim_acquire+0x70/0x100 [ 1516.625971][ T2698] __alloc_frozen_pages_noprof+0xe7f/0x32e0 [ 1516.628330][ T2698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1516.630833][ T2698] ? __css_rstat_updated+0x1ce/0x590 [ 1516.632909][ T2698] ? __pfx___css_rstat_updated+0x10/0x10 [ 1516.635127][ T2698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1516.637085][ T2698] ? policy_nodemask+0xed/0x4f0 [ 1516.638625][ T2698] alloc_pages_mpol+0x201/0x550 [ 1516.640147][ T2698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1516.641854][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.643332][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.644833][ T2698] ? rcu_read_unlock+0x17/0x60 [ 1516.646345][ T2698] alloc_pages_noprof+0x1a/0x160 [ 1516.647864][ T2698] __vmalloc_node_range_noprof+0xc1b/0x1420 [ 1516.649730][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.651284][ T2698] ? get_random_u32+0x3fc/0x7d0 [ 1516.652827][ T2698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1516.654803][ T2698] ? get_random_u32+0x581/0x7d0 [ 1516.656335][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.657911][ T2698] __bpf_map_area_alloc+0x12e/0x200 [ 1516.659525][ T2698] ? htab_map_alloc+0xa13/0x14d0 [ 1516.661068][ T2698] htab_map_alloc+0xa13/0x14d0 [ 1516.662546][ T2698] map_create+0x874/0x30d0 [ 1516.663953][ T2698] ? __lock_acquire+0x5c0/0x1f40 [ 1516.665523][ T2698] ? __pfx_map_create+0x10/0x10 [ 1516.667082][ T2698] ? lock_acquire+0x1d1/0x380 [ 1516.668563][ T2698] ? __might_fault+0xc5/0x140 [ 1516.670047][ T2698] ? __might_fault+0xc5/0x140 [ 1516.671533][ T2698] __sys_bpf+0x12a0/0x4a30 [ 1516.672958][ T2698] ? __pfx___sys_bpf+0x10/0x10 [ 1516.674495][ T2698] ? kasan_quarantine_put+0x104/0x240 [ 1516.676174][ T2698] ? lockdep_hardirqs_on+0x7d/0x110 [ 1516.677828][ T2698] ? audit_log_end+0x1f/0x30 [ 1516.679280][ T2698] ? kmem_cache_free+0x127/0x6c0 [ 1516.680828][ T2698] ? audit_log_end.part.0+0x1fa/0x280 [ 1516.682494][ T2698] ? audit_log_end+0x24/0x30 [ 1516.683950][ T2698] ? audit_seccomp+0x13a/0x190 [ 1516.685483][ T2698] ? find_held_lock+0x2b/0x80 [ 1516.686970][ T2698] ? __ia32_sys_bpf+0xcc/0x170 [ 1516.688475][ T2698] __ia32_sys_bpf+0xcc/0x170 [ 1516.689937][ T2698] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 1516.691717][ T2698] __do_fast_syscall_32+0x14b/0x8c0 [ 1516.693369][ T2698] ? lockdep_hardirqs_on+0x7d/0x110 [ 1516.694997][ T2698] do_fast_syscall_32+0x32/0x70 [ 1516.696571][ T2698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1516.698547][ T2698] RIP: 0023:0xf7f34fbc [ 1516.699830][ T2698] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1516.705867][ T2698] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1516.708467][ T2698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080004880 [ 1516.710952][ T2698] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.713434][ T2698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1516.716014][ T2698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1516.718382][ T2698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.720827][ T2698] [ 1516.722383][ T2698] Kernel Offset: disabled [ 1516.723721][ T2698] Rebooting in 86400 seconds..