last executing test programs: 7.816053346s ago: executing program 1 (id=3069): r0 = openat$ppp(0xffffff9c, 0x0, 0x303400, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000100)=0x45) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000180)=0x5, 0x4) fcntl$setstatus(r1, 0x4, 0x84c00) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000240)='0', 0x1) r3 = openat$fb0(0xffffff9c, &(0x7f0000001340), 0x80000, 0x0) dup2(r1, r3) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000001380)=@random={'osx.', '!\x00'}) epoll_create1(0x80000) openat$ubi_ctrl(0xffffff9c, &(0x7f0000004e80), 0x600000, 0x0) 7.711318146s ago: executing program 1 (id=3070): r0 = openat$ppp(0xffffff9c, 0x0, 0x303400, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000100)=0x45) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000180)=0x5, 0x4) fcntl$setstatus(r1, 0x4, 0x84c00) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000240)='0', 0x1) (fail_nth: 3) r3 = openat$fb0(0xffffff9c, &(0x7f0000001340), 0x80000, 0x0) dup2(r1, r3) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000001380)=@random={'osx.', '!\x00'}) epoll_create1(0x80000) openat$ubi_ctrl(0xffffff9c, &(0x7f0000004e80), 0x600000, 0x0) 7.544776815s ago: executing program 1 (id=3071): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="3e0f01b86860e4e10f01f166f3adbaf80c66b8bc7c678666efbafc0c66eddf48b70f01746466b96c0900000f32ba4000ed0f01c9"}], 0x1, 0x3f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.289876292s ago: executing program 3 (id=3074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0xe, 0x0, &(0x7f0000000980)="00000000000000000000ef2c0e88", 0x0, 0x2b7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000000)=""/10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x94) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xd0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000040)=0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r8, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x100, &(0x7f0000000100)=0x3, 0x0, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 5.876859623s ago: executing program 1 (id=3078): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x5}]}}}]}, 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x8678, 0x8, 0x5, 0x9c}) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 5.156057732s ago: executing program 3 (id=3080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0xc8d, 0x5, 0x3, 0x8, 0x2, 0x856e], 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}]}, 0x50) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x6}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x206, 0x0, 0x30, 0x1, 0xd}, 0x10) 4.606076678s ago: executing program 2 (id=3082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r8, @ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r8, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r9, 0x11a, 0x2, 0x0, 0x0) 4.376119812s ago: executing program 0 (id=3083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0xe, 0x0, &(0x7f0000000980)="00000000000000000000ef2c0e88", 0x0, 0x2b7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000000)=""/10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x94) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xd0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000040)=0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r8, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x100, &(0x7f0000000100)=0x3, 0x0, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 4.266145132s ago: executing program 3 (id=3084): syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x60080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c"]) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x1a) fanotify_init(0x200, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 4.264414532s ago: executing program 2 (id=3085): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x101, 0xd]}, 0x8, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800fffd00000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffff9c, &(0x7f0000000040), 0x4c0c0, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10100000ed03080026bd7000ffdbdf25faa9bbd3e742506bbf019d43c0da3d27ed0786f1223dbfc376a1edb3dda079ef4f895c9491b14903b74ff82634bccfb2f279197942ddaf3d5ab5149722940eefefa712c68a52f5ad9f4b255d908f395ee676c13d8c5c7177493d66c38b17f014a94ee57c9463b18ca995b55f235b879395b33008ba48a2d05eb7f738aea8b0f9f52a8b3535f65559be683edf7ae43feb9774c2fdca142f4698a6926ff171ff752455e5ca908f27f1515ec90012c20a4e24aa8c3e1e2ac760a94a1c35d09b7fb2c204c17ef32819f78213c67d019beb09bd023e1a5e1b7e18aaf8c88be16cde08f0b720f259f870ad63e957b204833bc4ebfbbfd953142605fe85f7d5973381f48838030d4969aedec4265a766b2088ed2abc6960a0e76a5bbb405e17aab5dd725afaf253218c3ff0f1bf7d57a7c2d019beb09ae28a68e3baa0b868af6d3a6052d35add4e60ffeaa2b5432ccb17ffc51be10c6a1d534fa39c31f9f8a0259db2686608b272ae2cd8a87c6bc5282fb3247f8377c72cd701d00121deeb3a4241ff85dcc447a11493e08e4fdc2eb19095d724d83270c279eb5725f1a6b3f636bb122b0da84c948f7b5350fc9e72e4e5e57db4498a414f1e87cc33bbfe7af7cacebd4bae554f63b5b390c456203ca469204f696ee2954d69585910a6aff02fe6342abd1bc0b06f4c0a148288164297923c96e7077b5aa0009de5c403c7a8c3d8a58c1bc721ce2a8bcb58c295639311c602418a4431948f3d6158b4119500d7b310a68d73f943bdd3243da52481cb84657f9c6a876c10e885f8d0198d31b2d5ca05ca101b8bc54f0a09060c0285cb0783141e2f29832894144493bfb6b4f8aba73c298e7722c5f2bfc59ce05260a3ba629ecf3cb97b62c5a06fecf9d4af6def4f4a6a1ea3c9a8a27408e00c59de210587501a051ff612f3f1fff13d897fc3d03b43647350459f84c7cbeaf9fa156e99f771160343856f19f8a2cfe5d8f001f29d8e6261fefbd6fa26022f06d6b3cf1476c8705e9d53516252fede5d09ac5883ef7c4e59ea4c1a194493f917cb43beb11879e58f6a142620c232ddbe7b837b51ac281a85340992b2ba3cec46eb30288e3722cdc7ba86e2f3b1c55360ec55532c010cb29963ac45b5038f05af88b85658dac8d81301729e1a638fb114a2d9513de79ded0dadf143888c22a75e69e0f5a53303e5e4b75805cab60cdb641963300e0591fa5b623b05091d4d47a0091f63d670ce969ff998aab31c7b2ffd803acbff76a2fce6e66e58d41f9a61401b61ef5de10ec7c1c66599c16124a3c297c1c1dba540b9c9725a5764c74cdd439e886a65857e702f8b4f0aba65d336074c49b80acbf069b729e138d87f0155419404c9aa6f08538b90b120557d9eca5cded783d03554b4aba1de52d73f174680719c8de6d3cbaaffe980233ef27703bc91b79be4a2bf2ddcc52527522e6a7f714ef6d6cc4d4a9bfe6a198647fc457d3c6472fc5b49369cc59189432ea20615b7169fe517832149560283fcae24e6245219e01266ff8ab908f9369d5c3523402061adedd3c5fedf84a0e9882a8f087c475f07c6b9a9fbaba9bd5ce52091d7da06efe4bbf3a468250c21657c904d4ee1d7dd6a7817e805ce6d530a3e382616bfecd0a5777023f86e814b650ac35c8caa4ac5133209eb13c19c8bcb30aaddeceaf2cca0c8cdde2a0bc04c87ef6ca95a0b93f8963411a2ae0de7525141ca8002b38967f0041aa89a2c22328ba7d9476cfb2af101f418f5d943f6543954945e5eab233bffdc0b215059d4a1b3d244d63555d0ff356dc82a383ffb458804eb0adc70fdd1ff509355b9c37062353e1ff5fd5057624fe9745bb0ac99fa4113ad4a2c4b53f033877324ba943919e3ec962d81631e646e23d594d17b34a31d9d41411efef096d8922ae0e519231c20575f8f13e2bba3dcff9afce083138e329c43667c4e67788795fedb77c2662f9f4f96e5e538c65b4211bc00560188b8661b801f53fe6a9034c352e0c018d0e0f224a2c8d72b62c521e25f0e10051c728fed97e503ea142bbab9660dd0f778f59095e6b6b9500356fdafcd5fd8856efb52900cb9f0fa14b35b6ca4df394e0680fd045e46afff34c433ef7abda58113908a60c773a9ac168be15fd527bc9bed5ceefbb5b9012042e5fddb824bda19cc2ef9179a90b378f359699bf2479a68ca4a50436abe41e4bd4789091b83bf70ec529a0ebe214a3fe45c2cfa587caf3b3d4b1b96914c1488292b7304bcc8d86536176cba2bad7301d5bbf255f7a03fd164b4075b90b845da8fa732bd35ea0dc1df49447285c90e8530b27aa94ce597dfee2d15799888e4b9b2da74e2df31773d53f072cef29cfa9d4e66415a94de49ad040cb514406644a6174ba29bc3dc99c812077e4f5ac608f88c0fb2f5a75dee95a505fbba7d9f624b491bf1746361b879b4d4dab027be90bf40e812f0543584e4a7d378e2de5a9bc8d87f2b7354a9aea7a210be352b75059bcfd93ba313722c26cc799b4ebc531ef4722abdea4ae8e85926b98c99d8a1a4f4ece2adcbb9ad569b66531e65c0f49b47718a8d7b3da15482ba1b8c1bc46d72cb4cad4ba4b2b5b0e2a278fa74552a1c7430e55044efbdda9a9261966c32a3a690769faff5eff738c429087e260d22ac07e9eab090600243010a28bb7f2fdf3a17edb8b2666c2943ac8ef7c613efad7e2415886467821966e8809bee05fd9231d92f41c3c3c4d438a9e661e80799cab15637dc09fb73ff1902bc8a16ef66597d5021aaf6565e65343df0ddcd7ba8f6bde5335eddde6ea8c49b690e4df187e10124d8a23e21f9eecac3d0b1f050db231fa9542470960df6571a83facef0ab370d9d0deff801315905580c437e5415c27e87943561fd02a06860f1bb9bb1247848995c663334c03e331f2de324f71be0604eb64f724f91f2a74ae9927a2a9233c597b8e42a1fb1efb0facdf6315b76f05b02b720eb61736ca68f7f9dc6625736c3732dd8c1e7ffd733001145266caccd91027e715569f60f391dc1048aca0026eedb0000844044d9f69c6ba51b021997a98567312370a851e68a36981349d25f99d0be234685b2c1fec3147af46bb439cf7cf4c6d20fd74dfe631ceb1eb0e0ff00c9c3f107b76e75d5d5f41281b62e37be31177d3aae9c38f4db70ad13b7886ad60729a5e4a7edf3d87716125b328866cf2f39513ac705b3a0a538b39025c818770f1c22160c90aa44be5bde8fad39583c1952222f5f46d77050fba7065beeddd58605e38f2706fb2c7713e663f99fb91e4e9416e4d3970b874f11a14785b095953528677730e05133905cd9e7b0af76da980f9bc285ba79c72f26414bdb091e926cc1ed4b60670f3c7fcb23b0398e7e033c0e7c951406f3495dbefc900f5405f34a8e174af70debfc1ccb8cbd37209c8d42fa66c179dc8b4b802ae6e3bd579c52c51182f590e3739d93d6db4ac8f9b40211cb327971a126f2e4145869270e5ac9451ca4bbc2071011276b9b112bd28d06e9b3738268bab276dffeaf91b196684faceacae4a6d8dfe583d336c00265068eec8f8d0d67c153db5812041859c4ba40ff70fc14ff9b3d5c870720bb2af0796fafec251e890ca9ac014871cdf507b6a95dc449788dc47a15612ec922af52abc208e4e3c2fecfcb96958660d7eadaa1def6f0d337dec161cf580102f122a9cf3ee95999fd8426386bb68b2bca92e8bd14e788089df3dfc0d2d372a495609e88a626a122ea4e00cf6f2d3b66d4d5b1d71760a342b055533a137641e2f4abefb554aa990167dce9b536e6af46b7506ae6334626258573688c8518775b425aadb29e0ae5fde468fd89021d319d3da2ffbc2730ea8c1a7949d42703293ac515f4a05c48b7720db2d1402ed22bf5651252c16907ea38b4c741b04fe28519b2ab4940edb6dd0e3a8cf8be6a1b1be67f9261fed74d10d612bf29bf16efd3076fcc92933735c5430cec4c9aa1787226d19b29f04232a1f4dc8cfee17fa113ca28fb2dc6e8c1dbfef814c6b855850e4181ab1a28b2ecaec88aaff2a842ada8e2936051aad017482b9a3d916107070c9127b93a21df5a0c6fa58d2f6bf6c6951ad903eb24d66709b767e3cb5011ce7a79ff833e730eac0a314af0492d4783149e60748fd025ac7687154861da8a25188868a44185ea7d11113a482d1c4593c096f767c7447e42e1e8ab40ed2fbbac5ac3374b783f1e60f7305d4b783a09cd40e1d6cc2003f936ac7fa1216c9332e500b94a1a1be8ebeb6001691a9dce5df95fe92d86aedf04636dacb190528d3179c969d709479b05ff39d39f1d00955241f666af79476410a2808948b4e61ba42a483d2e7e265cd953d9810513fd5dc10c148352a4292fdaf5a6245c963f75c17d51a57bbe647c72d28bbfa5d0f4ac3b28bbcf43e6b1a8154279bc2f4c27f7dbaab1c03b571a92aa41145d2a367bede80e28c8bb1732aad0cb7f2af9b237dc6c3e386210e1ba95829ab082452c5de0b13f989d28512f017cf38fcc2f19bbe0c2cee4eb893b156dc7157fae65d6a930338b2709aa11747f6e44160f95598198d3d0bf8a29df24db2c074b7fdc8a01bf022e50ef24d5d31f66bf83e27f5e1be768453415b688a338639c785dd5f45c800973c7f4653acf709385edc8de53cfd4b40c401639976ce1262a88f31f191cd8a5a8d50bc384bce6a6ebfd1d3c9da703b383de3308ae366e94fb2f9b0291890d1fcd650e53231f83a491c6e733d7542b30ed027995a4669236c42e5aeb9e478e5747960351c4fe523350e1c64c9d8e5ec7570f3b61a5e588f625188c7b580b19bdd55c218dceeb51c77084214976d01c655a34fa64e50875dc71bf5cb7f894b67d8008615e3da7a2565d99a8970ce5b365bf811948427ae2ed2bbb1a7b21c2fe8d6bb0774cdbe6e6840f411aebf637b138401d4ec3e53254da7bb4bc9cc5c4775f69eb988e1404fb4236bfb263a7da128e7da74f736249e2cb70f1cdd3c88b626b7ce394894558c9e4da238da537cfe6a522fb3098a6bfbaeea59620100b70156775a3377d00dceb24081333330c48d884006c0c563cc4da479e1c5a69b4d7b1d1f364b50029b22fa4407bd0bc6f24bbf31f87b0286f0c0a6f05922f02d1a5b1258fd72fff43846af5a470dfea3e2b780720b06d0d986004526d2380e44c32e09fbdbdbeb4a909f52b76ae61406274af4406128ba0b32ac5a5a1f1893547d4922879de869e8d15e26b83951cf3f66e5633cf258420c3ba1a75e11c3e798bb821dc218fc5fffaeb8f2466e7eb667eefc4533f2ceccf666d9028996c6b5067e320bf6109d966f68f03205aa6ad6fd4a131b698ccfb7a48a98696f3b904dec1888b52261bd0a1a263c6d55a3d20e78fa84e304f686dcf9fb31fde638889634f670371cc2ca6410d262efe04b42b7991a443e626ffcc17a2dc09f26f87efbd34cc4b06d5ef90e22a5b2a9aca809bb9849c40f605081b3da36116cc1d9e50c518f02e2ebb13eceaf7dfa08f5ccd7182d2a55abe65a511c76c24aa947d978ff80717d120dc2b74f2c97f06ef4f8b5f1d8b4fe6637ef1c56deb179ef05a12b1f2c970937daa1465afbf37cf566b8924608972047f2bf3732b041f4ca699dd81ba3a85c59dcad276481f15ee6a56a769db07ea8078eb5df06ae583e1b43df363447298ad99af60b9babbb73500acbab6e12183497bf45c6dbe6f6b6c75dfb65da5048b1fb1bffa2a3921eb00e42f9c5011c474ee4bd34063131b8551f19075b942a98d35bae1c7b448b686372f207d747f9b00a0448e1bef8c746100a9b2c151f03e09"], 0x1010}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) r6 = syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) dup3(r5, r6, 0x0) 2.825418748s ago: executing program 0 (id=3086): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x101, 0xd]}, 0x8, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800fffd00000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffff9c, &(0x7f0000000040), 0x4c0c0, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) r6 = syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) dup3(r5, r6, 0x0) 2.823685613s ago: executing program 2 (id=3087): socket$inet6(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000000a80)=""/212, 0x26, 0xd4, 0x1, 0x2, 0x10000}, 0x28) cachestat(r1, &(0x7f0000000540)={0x0, 0x1fc}, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x8000000000000003, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb}, 0x1c) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x40, 0x216a}, {0x74, 0x2002}, @ramp={0x401, 0x3, {0x1, 0x26, 0x8001, 0x6}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b80)={0x0, 0x3, 0xffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x17f, 0x4, 0x80a8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/138, 0x8a) 1.883039722s ago: executing program 3 (id=3088): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000500000008020000d900000000", @ANYRES32], 0x50) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x400, {0x410000006, 0x50, 0x0, {0x0, 0x4000000, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, r3, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e440)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x8, {'t\xbf\x10,(DB\xd1l\xbf\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.824068159s ago: executing program 1 (id=3089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f6f311838c53ed3d650175712599e7d9"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f25be3eba11c51a4ae44b35046900af3"}]}, 0x60}}, 0x20000890) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000300)={0x1, @vbi={0x0, 0x0, 0x48524742, 0x0, [0x1]}}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000280)=0x8001) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0f0200989078b197b9eb149e0000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x13) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 1.696744234s ago: executing program 2 (id=3090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdir(0x0, 0x32) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000001001000001000000fec2fcb2e6840959c40f15c85a288a46307210e97de6a74d2818ec0c2ffc8c3b36a516fc10cc00434411c25c4b44da04524b0004b7211bcdd869fe0ef98fa0a7753dc3d90f684657ae4661027e732e0c83f79bc1ecbaa70c342e45aa2a"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) 1.669552855s ago: executing program 0 (id=3091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005200)}}], 0x1, 0x10040) 1.601917277s ago: executing program 0 (id=3092): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000400)={0xc0980915, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e5a0100000000000207a3c83e58e128", 0x2000000000d5a, 0x100000000, 0xfffffffffdfff003, 0x200000, 0x9, 0x5, 0x1000002, 0xdd, [0x6, 0x2, 0xc41, 0x1ff]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r2, 0x540b, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x1, &(0x7f00000000c0)) 1.506140173s ago: executing program 0 (id=3093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0xe0, 0x0, 0x0, 0x8000}, 0x28) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.505843522s ago: executing program 0 (id=3094): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x5) fsopen(&(0x7f0000000040)='overlay\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2009089, &(0x7f0000000200)={'trans=virtio,', {[{@privport}, {@aname={'aname', 0x3d, 'overlay\x00'}}, {@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, r11}}], [{@subj_user={'subj_user', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x39, 0x67, 0x37, 0x33, 0x61, 0x37], 0x2d, [0x37, 0x62, 0x61, 0x33], 0x2d, [0x35, 0x33, 0x62, 0x66], 0x2d, [0x37, 0x39], 0x2d, [0x32, 0x37, 0x65, 0x31, 0x64, 0x65, 0x0, 0x30]}}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60040, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7010fcdbdf252500000005002a00190000000a0001007770616e34040000"], 0x28}, 0x1, 0x0, 0x0, 0x4049}, 0x4c080) 1.161786677s ago: executing program 2 (id=3095): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x800) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000080)={[0x101, 0xd]}, 0x8, 0x80000) read$usbmon(r3, &(0x7f00000000c0)=""/55, 0x37) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800fffd00000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r7 = openat$null(0xffffff9c, &(0x7f0000000040), 0x4c0c0, 0x0) sendmsg$AUDIT_USER(r7, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000001ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 925.386746ms ago: executing program 3 (id=3096): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x1f919) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x3}}}, 0x90) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0xc31, &(0x7f0000000300)={0x0, 0x8c40, 0x10100, 0x0, 0x1cf, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c07aaaaaaaaaa1005074f078eaf317af3cd0fce4a812a104e8799d96bd57be0e1992a"], 0xa) setuid(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000020605000a0000000000000000000000100003006269746d47703a706f7274000d0003006861d24214c861630000f9ff0800020073797a300000000089861eb18f96c7e70500010006000000"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x3) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) 917.098644ms ago: executing program 1 (id=3097): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x3a00, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 720.972334ms ago: executing program 2 (id=3098): socket$inet6(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000000a80)=""/212, 0x26, 0xd4, 0x1, 0x2, 0x10000}, 0x28) cachestat(r1, &(0x7f0000000540)={0x0, 0x1fc}, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x8000000000000003, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb}, 0x1c) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x40, 0x216a}, {0x74, 0x2002}, @ramp={0x401, 0x3, {0x1, 0x26, 0x8001, 0x6}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b80)={0x0, 0x3, 0xffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x17f, 0x4, 0x80a8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/138, 0x8a) 0s ago: executing program 3 (id=3099): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) recvfrom(r0, &(0x7f0000000140)=""/4, 0x4, 0x40000001, &(0x7f0000000200)=@sco, 0x80) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001c00000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203010400000000000000000000001008000100019e3ed73289adc485e883350000000000000000000a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ][ T6699] vhci_hcd: release socket [ 347.371972][ T6699] vhci_hcd: disconnect device [ 348.286708][ T40] audit: type=1800 audit(2000000247.809:194): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2490" name="nullb0" dev="tmpfs" ino=1758 res=0 errno=0 [ 348.367230][ T59] usb 40-1: device descriptor read/8, error -110 [ 348.758823][ T59] usb usb40-port1: attempt power cycle [ 349.164147][T13754] random: crng reseeded on system resumption [ 349.259225][T13756] __nla_validate_parse: 8 callbacks suppressed [ 349.259242][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 349.265735][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 349.307363][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 349.322876][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 349.528035][ T59] usb usb40-port1: unable to enumerate USB device [ 349.580546][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 349.584645][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2495'. [ 350.402586][T13785] rdma_rxe: rxe_newlink: failed to add syz_tun [ 351.858334][T13812] rdma_rxe: rxe_newlink: failed to add syz_tun [ 354.609259][T13851] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2517'. [ 355.147260][ T8032] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 355.307269][ T8032] usb 7-1: Using ep0 maxpacket: 8 [ 355.310461][ T8032] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.313528][ T8032] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.316778][ T8032] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.320090][ T8032] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.324188][ T8032] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.327484][ T8032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.535888][ T8032] usb 7-1: usb_control_msg returned -71 [ 355.538434][ T8032] usbtmc 7-1:16.0: can't read capabilities [ 355.544423][ T8032] usb 7-1: USB disconnect, device number 8 [ 356.334091][T13882] rdma_rxe: rxe_newlink: failed to add syz_tun [ 356.955610][T13898] syz1: rxe_newlink: already configured on syz_tun [ 357.057169][ T4282] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 357.210510][ T4282] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 357.213535][ T4282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.216022][ T4282] usb 8-1: Product: syz [ 357.217473][ T4282] usb 8-1: Manufacturer: syz [ 357.218933][ T4282] usb 8-1: SerialNumber: syz [ 357.223473][ T4282] usb 8-1: config 0 descriptor?? [ 357.272232][T13908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 357.274674][T13908] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 357.278307][T13908] vhci_hcd vhci_hcd.0: Device attached [ 357.551318][ T6022] usb 40-1: SetAddress Request (18) to port 0 [ 357.553466][ T6022] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 357.556037][T13909] vhci_hcd: connection closed [ 357.556315][ T6718] vhci_hcd: stop threads [ 357.557000][T13916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.558217][ T6718] vhci_hcd: release socket [ 357.558257][ T6718] vhci_hcd: disconnect device [ 357.561021][T13916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.568131][ T6022] usb 40-1: enqueue for inactive port 0 [ 357.978308][ T6022] usb usb40-port1: attempt power cycle [ 359.297288][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 359.447862][ T6022] usb usb40-port1: unable to enumerate USB device [ 359.457187][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 359.461214][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.464947][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.468002][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.471081][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.475116][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.478102][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.688566][ T34] usb 6-1: usb_control_msg returned -71 [ 359.692116][ T34] usbtmc 6-1:16.0: can't read capabilities [ 359.726559][ T34] usb 6-1: USB disconnect, device number 10 [ 359.862518][ T4282] usb-storage 8-1:0.0: USB Mass Storage device detected [ 359.944000][ T4282] usb 8-1: USB disconnect, device number 26 [ 360.994911][T13954] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 360.997660][T13954] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.002320][T13954] vhci_hcd vhci_hcd.0: Device attached [ 361.277199][ T53] usb 42-1: SetAddress Request (10) to port 0 [ 361.280406][ T53] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 361.755129][T13955] vhci_hcd: connection reset by peer [ 361.758113][ T6721] vhci_hcd: stop threads [ 361.759947][ T6721] vhci_hcd: release socket [ 361.763032][ T6721] vhci_hcd: disconnect device [ 362.337157][ T24] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 362.507127][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 362.514187][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.518181][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.521273][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.524454][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.529773][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.530092][T13984] Bluetooth: MGMT ver 1.23 [ 362.533301][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.586703][T13988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 362.589315][T13988] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 362.592721][T13988] vhci_hcd vhci_hcd.0: Device attached [ 362.878852][T13989] vhci_hcd: connection closed [ 362.879086][ T6721] vhci_hcd: stop threads [ 362.882784][ T6721] vhci_hcd: release socket [ 362.884502][ T6721] vhci_hcd: disconnect device [ 363.617424][T14012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 363.619591][T14012] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 363.622809][T14012] vhci_hcd vhci_hcd.0: Device attached [ 363.836831][T14007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2564'. [ 363.897214][ T4282] usb 40-1: SetAddress Request (22) to port 0 [ 363.901325][ T4282] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 364.440724][T14013] vhci_hcd: connection reset by peer [ 364.443113][ T6741] vhci_hcd: stop threads [ 364.444991][ T6741] vhci_hcd: release socket [ 364.448538][ T6741] vhci_hcd: disconnect device [ 365.033260][ T24] usb 8-1: usb_control_msg returned -71 [ 365.035323][ T24] usbtmc 8-1:16.0: can't read capabilities [ 365.039492][ T24] usb 8-1: USB disconnect, device number 27 [ 365.395977][T14037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 365.399955][T14037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 365.540884][T14040] syzkaller0: entered promiscuous mode [ 365.542642][T14040] syzkaller0: entered allmulticast mode [ 365.554806][T14041] random: crng reseeded on system resumption [ 365.615602][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 365.645096][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 365.707672][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 365.730507][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 365.808256][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 365.866197][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2563'. [ 366.367234][ T53] usb 42-1: device descriptor read/8, error -110 [ 366.507266][ T24] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 366.604443][T14056] warning: `syz.2.2570' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 366.667156][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 366.672851][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.676458][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.681131][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 366.685332][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 366.690288][ T24] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 366.701507][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.771848][ T53] usb usb42-port1: attempt power cycle [ 366.798419][ T24] hub 8-1:1.0: bad descriptor, ignoring hub [ 366.800855][ T24] hub 8-1:1.0: probe with driver hub failed with error -5 [ 366.831178][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 366.865693][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 366.900147][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 366.904078][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 367.027766][T14068] ALSA: mixer_oss: invalid OSS volume '' [ 367.107323][ T24] usb 8-1: USB disconnect, device number 28 [ 367.360057][ T53] usb usb42-port1: unable to enumerate USB device [ 367.457148][ T24] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 367.484621][T14074] syzkaller0: entered promiscuous mode [ 367.486958][T14074] syzkaller0: entered allmulticast mode [ 367.617727][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 367.620682][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.624419][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.627273][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 367.630861][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 367.634327][ T24] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 367.637230][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.642847][ T24] hub 8-1:1.0: bad descriptor, ignoring hub [ 367.644734][ T24] hub 8-1:1.0: probe with driver hub failed with error -5 [ 367.651494][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 367.653623][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 367.662091][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 367.664045][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 367.755434][T14080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2576'. [ 367.759741][T14080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2576'. [ 367.790821][T14080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2576'. [ 367.947260][ T24] usb 8-1: USB disconnect, device number 29 [ 368.868610][T14097] __nla_validate_parse: 3 callbacks suppressed [ 368.868622][T14097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2579'. [ 368.875708][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 368.879910][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 368.937239][ T4282] usb 40-1: device descriptor read/8, error -110 [ 369.034199][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 369.048841][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 369.172773][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 369.176849][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2587'. [ 369.267301][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 369.376427][T14106] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.380003][T14106] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 369.398596][ T4282] usb usb40-port1: attempt power cycle [ 369.420747][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 369.423537][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.426677][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.429486][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 369.432465][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.438236][ T24] usb 6-1: config 0 descriptor?? [ 369.460438][T14110] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 369.463143][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 369.466889][T14110] vhci_hcd vhci_hcd.0: Device attached [ 369.727442][T14111] vhci_hcd: connection closed [ 369.727759][ T6723] vhci_hcd: stop threads [ 369.731623][ T6723] vhci_hcd: release socket [ 369.733671][ T6723] vhci_hcd: disconnect device [ 369.737152][ T24] usb 44-1: enqueue for inactive port 0 [ 370.020952][ T4282] usb usb40-port1: unable to enumerate USB device [ 370.060316][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.063413][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.155524][T14125] syzkaller0: entered promiscuous mode [ 370.159929][T14125] syzkaller0: entered allmulticast mode [ 370.239594][ T24] usb usb44-port1: attempt power cycle [ 370.543793][T14127] random: crng reseeded on system resumption [ 370.552743][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2586'. [ 370.556617][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2586'. [ 370.581625][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2586'. [ 370.820159][ T24] usb usb44-port1: unable to enumerate USB device [ 371.024822][T14139] rdma_rxe: rxe_newlink: failed to add syz_tun [ 371.261027][T14143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.265036][T14143] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.653845][ T24] usb 6-1: USB disconnect, device number 11 [ 371.800717][T14147] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.803756][T14147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.854148][T14156] syzkaller0: entered promiscuous mode [ 371.855979][T14156] syzkaller0: entered allmulticast mode [ 371.906570][T14158] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 371.909335][T14158] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 371.912927][T14158] vhci_hcd vhci_hcd.0: Device attached [ 372.082167][T14159] vhci_hcd: connection closed [ 372.082367][ T6700] vhci_hcd: stop threads [ 372.090651][ T6700] vhci_hcd: release socket [ 372.093023][ T6700] vhci_hcd: disconnect device [ 372.594964][T14173] random: crng reseeded on system resumption [ 372.658652][T14175] ALSA: mixer_oss: invalid OSS volume '' [ 372.661700][T14175] FAULT_INJECTION: forcing a failure. [ 372.661700][T14175] name failslab, interval 1, probability 0, space 0, times 0 [ 372.665929][T14175] CPU: 1 UID: 0 PID: 14175 Comm: syz.2.2600 Not tainted syzkaller #0 PREEMPT(full) [ 372.665943][T14175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.665950][T14175] Call Trace: [ 372.665954][T14175] [ 372.665959][T14175] dump_stack_lvl+0x16c/0x1f0 [ 372.665976][T14175] should_fail_ex+0x512/0x640 [ 372.665992][T14175] ? __kmalloc_cache_noprof+0x5f/0x780 [ 372.666004][T14175] should_failslab+0xc2/0x120 [ 372.666019][T14175] __kmalloc_cache_noprof+0x72/0x780 [ 372.666029][T14175] ? dev_ethtool+0x1a2/0x5bc0 [ 372.666050][T14175] ? dev_ethtool+0x1a2/0x5bc0 [ 372.666063][T14175] dev_ethtool+0x1a2/0x5bc0 [ 372.666076][T14175] ? stack_depot_save_flags+0x29/0x9c0 [ 372.666093][T14175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 372.666112][T14175] ? kasan_save_stack+0x42/0x60 [ 372.666123][T14175] ? kasan_save_stack+0x33/0x60 [ 372.666134][T14175] ? kasan_save_track+0x14/0x30 [ 372.666145][T14175] ? __kasan_save_free_info+0x3b/0x60 [ 372.666155][T14175] ? tomoyo_path_number_perm+0x470/0x580 [ 372.666172][T14175] ? __pfx_dev_ethtool+0x10/0x10 [ 372.666189][T14175] ? do_fast_syscall_32+0x32/0x80 [ 372.666202][T14175] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.666232][T14175] ? kasan_quarantine_put+0x10a/0x240 [ 372.666243][T14175] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.666257][T14175] ? find_held_lock+0x2b/0x80 [ 372.666271][T14175] ? __lock_acquire+0x622/0x1c90 [ 372.666296][T14175] ? find_held_lock+0x2b/0x80 [ 372.666307][T14175] ? dev_load+0x8e/0x240 [ 372.666326][T14175] dev_ioctl+0x290/0x1060 [ 372.666337][T14175] compat_sock_ioctl+0x42e/0x730 [ 372.666353][T14175] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 372.666366][T14175] ? hook_file_ioctl_common+0x145/0x410 [ 372.666380][T14175] ? __fget_files+0x20e/0x3c0 [ 372.666394][T14175] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 372.666408][T14175] __ia32_compat_sys_ioctl+0x242/0x370 [ 372.666425][T14175] __do_fast_syscall_32+0x7c/0x300 [ 372.666440][T14175] do_fast_syscall_32+0x32/0x80 [ 372.666453][T14175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.666465][T14175] RIP: 0023:0xf708d579 [ 372.666474][T14175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 372.666483][T14175] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 372.666494][T14175] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008946 [ 372.666500][T14175] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.666506][T14175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.666512][T14175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 372.666518][T14175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.666531][T14175] [ 373.327490][ T4282] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 374.137424][ T4282] usb 8-1: Using ep0 maxpacket: 32 [ 374.247850][ T4282] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.252129][ T4282] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.255837][ T4282] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 374.259707][ T4282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.265561][ T4282] usb 8-1: config 0 descriptor?? [ 374.442801][T14197] rdma_rxe: rxe_newlink: failed to add syz_tun [ 374.745794][T14199] syzkaller0: entered promiscuous mode [ 374.749010][T14199] syzkaller0: entered allmulticast mode [ 375.502407][T14215] __nla_validate_parse: 11 callbacks suppressed [ 375.502425][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2609'. [ 375.573558][T14216] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 375.576147][T14216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.579572][T14216] vhci_hcd vhci_hcd.0: Device attached [ 375.837182][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 375.841039][ T5944] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 375.863043][ T34] usb 8-1: USB disconnect, device number 30 [ 375.997365][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 376.001914][ T24] usb 7-1: config 0 has no interfaces? [ 376.004474][ T24] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 376.008783][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.015507][ T24] usb 7-1: config 0 descriptor?? [ 376.547403][T14217] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 376.584913][ T6699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.601719][ T6699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.611724][ T29] usb 7-1: USB disconnect, device number 9 [ 376.612169][ T6700] vhci_hcd: stop threads [ 376.619715][ T6700] vhci_hcd: release socket [ 376.622212][ T6700] vhci_hcd: disconnect device [ 377.739889][T14238] rdma_rxe: rxe_newlink: failed to add syz_tun [ 377.828839][T14245] random: crng reseeded on system resumption [ 377.861005][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 377.865283][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 378.357385][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 378.361062][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 378.533646][T14256] syz1: rxe_newlink: already configured on syz_tun [ 378.847326][ T29] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 378.938288][T14261] random: crng reseeded on system resumption [ 378.971953][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 378.976131][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 379.007219][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 379.018505][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.023565][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 379.027519][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.031823][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.036303][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.065707][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 379.070228][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.074330][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.207438][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2619'. [ 380.431534][T14278] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 380.435407][T14278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 381.606190][ T29] usb 8-1: usb_control_msg returned -71 [ 381.608620][ T29] usbtmc 8-1:16.0: can't read capabilities [ 381.613609][ T29] usb 8-1: USB disconnect, device number 31 [ 381.627344][T14290] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 381.630349][T14290] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 381.646289][T14290] vhci_hcd vhci_hcd.0: Device attached [ 381.782400][ T5944] vhci_hcd: vhci_device speed not set [ 381.907554][ T9] usb 44-1: SetAddress Request (39) to port 0 [ 381.909719][ T9] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 382.327026][ T40] audit: type=1800 audit(2000000281.849:195): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2629" name="nullb0" dev="tmpfs" ino=1758 res=0 errno=0 [ 382.387366][T14304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.390919][T14304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 382.528585][T14291] vhci_hcd: connection reset by peer [ 382.537740][ T6741] vhci_hcd: stop threads [ 382.539181][ T6741] vhci_hcd: release socket [ 382.540365][T14307] __nla_validate_parse: 1 callbacks suppressed [ 382.540380][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 382.545598][ T6741] vhci_hcd: disconnect device [ 382.589622][ T6024] syz1: Port: 1 Link DOWN [ 382.592214][ T6741] smc: removing ib device syz1 [ 382.638798][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.643242][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.646019][ T5300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.654049][ T5300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.657749][ T5300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.692121][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.694937][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.072647][T14312] chnl_net:caif_netlink_parms(): no params data found [ 383.264770][T14312] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.271092][T14312] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.273996][T14312] bridge_slave_0: entered allmulticast mode [ 383.281095][T14312] bridge_slave_0: entered promiscuous mode [ 383.285965][T14312] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.290610][T14312] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.293172][T14312] bridge_slave_1: entered allmulticast mode [ 383.295875][T14312] bridge_slave_1: entered promiscuous mode [ 383.342993][T14312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.348462][T14312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.384383][T14312] team0: Port device team_slave_0 added [ 383.389100][T14312] team0: Port device team_slave_1 added [ 383.457596][T14312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.460506][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.472220][T14312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.479234][T14312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.482674][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.498857][T14312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.554856][T14312] hsr_slave_0: entered promiscuous mode [ 383.563002][T14312] hsr_slave_1: entered promiscuous mode [ 383.565927][T14312] debugfs: 'hsr0' already exists in 'hsr' [ 383.579263][T14312] Cannot create hsr debugfs directory [ 384.065003][T14312] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.138876][T14312] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.150944][T14345] bridge0: port 3(syz_tun) entered blocking state [ 384.153363][T14345] bridge0: port 3(syz_tun) entered disabled state [ 384.156953][T14345] syz_tun: entered allmulticast mode [ 384.168485][T14345] syz_tun: entered promiscuous mode [ 384.173625][T14345] bridge0: port 3(syz_tun) entered blocking state [ 384.176470][T14345] bridge0: port 3(syz_tun) entered forwarding state [ 384.296901][T14312] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.304970][T14351] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 384.307761][T14351] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 384.311894][T14351] vhci_hcd vhci_hcd.0: Device attached [ 384.320963][T14355] FAULT_INJECTION: forcing a failure. [ 384.320963][T14355] name failslab, interval 1, probability 0, space 0, times 0 [ 384.325166][T14355] CPU: 0 UID: 0 PID: 14355 Comm: syz.1.2643 Not tainted syzkaller #0 PREEMPT(full) [ 384.325181][T14355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.325188][T14355] Call Trace: [ 384.325192][T14355] [ 384.325196][T14355] dump_stack_lvl+0x16c/0x1f0 [ 384.325213][T14355] should_fail_ex+0x512/0x640 [ 384.325230][T14355] ? __kmalloc_noprof+0xca/0x880 [ 384.325248][T14355] should_failslab+0xc2/0x120 [ 384.325262][T14355] __kmalloc_noprof+0xdd/0x880 [ 384.325279][T14355] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 384.325293][T14355] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 384.325304][T14355] apply_wqattrs_prepare+0xf8/0xbd0 [ 384.325321][T14355] apply_workqueue_attrs_locked+0x64/0xe0 [ 384.325333][T14355] __alloc_workqueue+0x1005/0x1810 [ 384.325351][T14355] alloc_workqueue_noprof+0xd2/0x200 [ 384.325365][T14355] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 384.325379][T14355] ? __fget_files+0x204/0x3c0 [ 384.325396][T14355] loop_configure+0xf7a/0x15f0 [ 384.325417][T14355] ? __lock_acquire+0xb8a/0x1c90 [ 384.325432][T14355] ? __pfx_loop_configure+0x10/0x10 [ 384.325457][T14355] lo_ioctl+0x266/0x1cb0 [ 384.325471][T14355] ? __pfx_lo_ioctl+0x10/0x10 [ 384.325486][T14355] ? kasan_quarantine_put+0x10a/0x240 [ 384.325497][T14355] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.325511][T14355] ? blk_get_meta_cap+0xbc/0x700 [ 384.325522][T14355] ? find_held_lock+0x2b/0x80 [ 384.325533][T14355] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 384.325564][T14355] lo_compat_ioctl+0xb9/0x170 [ 384.325576][T14355] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 384.325587][T14355] compat_blkdev_ioctl+0x2ee/0x7a0 [ 384.325601][T14355] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 384.325615][T14355] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 384.325626][T14355] __ia32_compat_sys_ioctl+0x242/0x370 [ 384.325645][T14355] __do_fast_syscall_32+0x7c/0x300 [ 384.325660][T14355] do_fast_syscall_32+0x32/0x80 [ 384.325673][T14355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.325687][T14355] RIP: 0023:0xf705d579 [ 384.325696][T14355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 384.325705][T14355] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 384.325716][T14355] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004c0a [ 384.325722][T14355] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.325728][T14355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.325734][T14355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 384.325740][T14355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.325753][T14355] [ 384.444083][T14312] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.654155][T14312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.663210][T14312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.687172][ T5946] Bluetooth: hci0: command tx timeout [ 384.703171][ T5944] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 384.710873][T14312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.778504][T14312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.872444][T14352] vhci_hcd: connection closed [ 384.872702][ T6699] vhci_hcd: stop threads [ 384.875714][ T6699] vhci_hcd: release socket [ 384.877532][ T6699] vhci_hcd: disconnect device [ 384.889725][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 384.918084][ T5944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.931776][ T5944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.937029][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 384.942108][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 384.946896][ T5944] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.959465][T14312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.964648][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.970777][T14312] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.977030][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.979317][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.986981][ T5944] hub 6-1:1.0: bad descriptor, ignoring hub [ 384.989793][ T5944] hub 6-1:1.0: probe with driver hub failed with error -5 [ 384.990131][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.993044][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 384.994920][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.997828][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 385.002657][ T5944] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 385.005094][ T5944] cdc_wdm 6-1:1.0: Unknown control protocol [ 385.154203][T14312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.190019][T14312] veth0_vlan: entered promiscuous mode [ 385.197026][T14312] veth1_vlan: entered promiscuous mode [ 385.216292][T14312] veth0_macvtap: entered promiscuous mode [ 385.222597][T14312] veth1_macvtap: entered promiscuous mode [ 385.232687][T14312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.242350][T14312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.251129][ T6741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.253951][ T6741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.258653][ T6741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.261504][ T6741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.298473][ T5944] usb 6-1: USB disconnect, device number 12 [ 385.306298][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.310651][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.323873][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.327428][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.667305][ T5944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 385.797250][ T5944] usb 6-1: device descriptor read/64, error -71 [ 386.057364][ T5944] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 386.187202][ T5944] usb 6-1: device descriptor read/64, error -71 [ 386.299636][ T5944] usb usb6-port1: attempt power cycle [ 386.465879][T14391] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 386.608829][T14404] syzkaller0: entered promiscuous mode [ 386.610792][T14404] syzkaller0: entered allmulticast mode [ 386.648547][ T5944] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 386.669572][ T5944] usb 6-1: device descriptor read/8, error -71 [ 386.917149][ T5944] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 386.943949][ T5944] usb 6-1: device descriptor read/8, error -71 [ 387.007623][ T9] usb 44-1: device descriptor read/8, error -110 [ 387.025783][T14410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 387.027832][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.030509][T14410] vhci_hcd vhci_hcd.0: Device attached [ 387.057506][ T5944] usb usb6-port1: unable to enumerate USB device [ 387.247653][ T9] usb 44-1: SetAddress Request (40) to port 0 [ 387.249659][ T9] usb 44-1: new SuperSpeed USB device number 40 using vhci_hcd [ 387.559190][T14433] FAULT_INJECTION: forcing a failure. [ 387.559190][T14433] name failslab, interval 1, probability 0, space 0, times 0 [ 387.565417][T14433] CPU: 3 UID: 0 PID: 14433 Comm: syz.1.2660 Not tainted syzkaller #0 PREEMPT(full) [ 387.565456][T14433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 387.565468][T14433] Call Trace: [ 387.565476][T14433] [ 387.565483][T14433] dump_stack_lvl+0x16c/0x1f0 [ 387.565508][T14433] should_fail_ex+0x512/0x640 [ 387.565533][T14433] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 387.565557][T14433] should_failslab+0xc2/0x120 [ 387.565582][T14433] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 387.565603][T14433] ? __d_alloc+0x32/0xae0 [ 387.565628][T14433] ? __d_alloc+0x32/0xae0 [ 387.565645][T14433] __d_alloc+0x32/0xae0 [ 387.565668][T14433] d_alloc_parallel+0x111/0x1510 [ 387.565703][T14433] ? __pfx_d_alloc_parallel+0x10/0x10 [ 387.565729][T14433] ? lockdep_init_map_type+0x5c/0x280 [ 387.565755][T14433] ? lockdep_init_map_type+0x5c/0x280 [ 387.565782][T14433] __lookup_slow+0x193/0x460 [ 387.565807][T14433] ? __pfx___lookup_slow+0x10/0x10 [ 387.565836][T14433] ? __mod_node_page_state+0xa0/0x1d0 [ 387.565867][T14433] ? __mod_node_page_state+0xa0/0x1d0 [ 387.565890][T14433] ? d_lookup+0xe7/0x190 [ 387.565920][T14433] lookup_noperm+0xe1/0x110 [ 387.565943][T14433] simple_start_creating+0xd1/0x1b0 [ 387.565982][T14433] debugfs_start_creating.part.0+0x82/0x190 [ 387.566003][T14433] __debugfs_create_file+0xa7/0x6b0 [ 387.566022][T14433] debugfs_create_file_full+0x41/0x60 [ 387.566044][T14433] ? __pfx_macvlan_setup+0x10/0x10 [ 387.566059][T14433] ref_tracker_dir_debugfs+0x19d/0x290 [ 387.566078][T14433] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 387.566117][T14433] ? alloc_netdev_mqs+0xd7/0x1550 [ 387.566133][T14433] ? lockdep_init_map_type+0x5c/0x280 [ 387.566162][T14433] alloc_netdev_mqs+0x314/0x1550 [ 387.566184][T14433] rtnl_create_link+0xc08/0xf90 [ 387.566206][T14433] rtnl_newlink+0xb69/0x2000 [ 387.566233][T14433] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.566249][T14433] ? rcu_is_watching+0x12/0xc0 [ 387.566267][T14433] ? finish_task_switch.isra.0+0x221/0xc10 [ 387.566284][T14433] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.566309][T14433] ? rcu_is_watching+0x12/0xc0 [ 387.566328][T14433] ? kfree_skbmem+0x1a4/0x1f0 [ 387.566358][T14433] ? rcu_is_watching+0x12/0xc0 [ 387.566383][T14433] ? find_held_lock+0x2b/0x80 [ 387.566411][T14433] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.566426][T14433] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.566440][T14433] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 387.566457][T14433] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.566473][T14433] rtnetlink_rcv_msg+0x95e/0xe90 [ 387.566495][T14433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.566523][T14433] ? netlink_rcv_skb+0xb5/0x420 [ 387.566545][T14433] netlink_rcv_skb+0x158/0x420 [ 387.566564][T14433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.566584][T14433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.566613][T14433] ? netlink_deliver_tap+0x1ae/0xd30 [ 387.566636][T14433] netlink_unicast+0x5aa/0x870 [ 387.566660][T14433] ? __pfx_netlink_unicast+0x10/0x10 [ 387.566681][T14433] ? skb_put+0x17/0x1b0 [ 387.566706][T14433] netlink_sendmsg+0x8c8/0xdd0 [ 387.566731][T14433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.566753][T14433] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 387.566783][T14433] ____sys_sendmsg+0xa98/0xc70 [ 387.566808][T14433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.566829][T14433] ? get_compat_msghdr+0x11a/0x170 [ 387.566858][T14433] ___sys_sendmsg+0x134/0x1d0 [ 387.566877][T14433] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.566909][T14433] ? find_held_lock+0x2b/0x80 [ 387.566945][T14433] __sys_sendmsg+0x16d/0x220 [ 387.566964][T14433] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.567003][T14433] ? rcu_is_watching+0x12/0xc0 [ 387.567026][T14433] __do_fast_syscall_32+0x7c/0x300 [ 387.567052][T14433] do_fast_syscall_32+0x32/0x80 [ 387.567075][T14433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.567096][T14433] RIP: 0023:0xf705d579 [ 387.567110][T14433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 387.567126][T14433] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 387.567144][T14433] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 387.567154][T14433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.567163][T14433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.567173][T14433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 387.567183][T14433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.567208][T14433] [ 388.173459][T14413] vhci_hcd: connection reset by peer [ 388.179388][ T6723] vhci_hcd: stop threads [ 388.181158][ T6723] vhci_hcd: release socket [ 388.183012][ T6723] vhci_hcd: disconnect device [ 388.791233][T14452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 388.791276][T14452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 388.950922][T14462] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.137237][ T5300] Bluetooth: hci2: command 0x0406 tx timeout [ 390.511613][ T5300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.515265][ T5300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.518699][ T5300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.523766][ T5300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.527611][ T5300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.779835][ T6699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.799684][T14481] chnl_net:caif_netlink_parms(): no params data found [ 390.989009][ T6699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.415242][ T6699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.611880][ T6699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.665917][T14481] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.670671][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.673738][T14481] bridge_slave_0: entered allmulticast mode [ 391.678879][T14481] bridge_slave_0: entered promiscuous mode [ 391.683869][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.687580][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.690774][T14481] bridge_slave_1: entered allmulticast mode [ 391.694658][T14481] bridge_slave_1: entered promiscuous mode [ 391.762183][T14481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.780228][T14481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.828049][T14481] team0: Port device team_slave_0 added [ 391.832368][ T6699] bridge_slave_1: left allmulticast mode [ 391.834400][ T6699] bridge_slave_1: left promiscuous mode [ 391.836322][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.842456][ T6699] bridge_slave_0: left allmulticast mode [ 391.844553][ T6699] bridge_slave_0: left promiscuous mode [ 391.846973][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.979416][T14508] random: crng reseeded on system resumption [ 392.061331][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.064482][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.138188][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.141901][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.225180][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.229303][T14508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.295653][ T9] usb 44-1: device descriptor read/8, error -110 [ 392.351169][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.362374][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.368012][ T6699] bond0 (unregistering): Released all slaves [ 392.407443][ T9] usb usb44-port1: attempt power cycle [ 392.411145][T14481] team0: Port device team_slave_1 added [ 392.607218][ T5946] Bluetooth: hci4: command tx timeout [ 392.631071][ T6699] tipc: Disabling bearer [ 392.633825][ T6699] tipc: Left network mode [ 392.634348][T14481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.640896][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.649472][T14481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.677966][T14481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.680545][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.692095][T14481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.763076][T14481] hsr_slave_0: entered promiscuous mode [ 392.765605][T14481] hsr_slave_1: entered promiscuous mode [ 392.767872][T14481] debugfs: 'hsr0' already exists in 'hsr' [ 392.769718][T14481] Cannot create hsr debugfs directory [ 393.041743][ T6699] hsr_slave_0: left promiscuous mode [ 393.045767][ T6699] hsr_slave_1: left promiscuous mode [ 393.052854][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.060076][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.753862][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 393.806721][ T9] usb usb44-port1: unable to enumerate USB device [ 393.822528][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 394.297226][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2685'. [ 394.681284][T14539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 394.683393][T14539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.687640][ T5946] Bluetooth: hci4: command tx timeout [ 394.690186][T14539] vhci_hcd vhci_hcd.0: Device attached [ 394.887257][ T6022] vhci_hcd: vhci_device speed not set [ 394.957386][ T6022] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 395.056844][T14481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.064898][T14481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.070058][T14481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.076257][T14481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.124153][T14481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.138481][T14481] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.143693][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.146712][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.156654][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.159030][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.273920][T14541] vhci_hcd: connection reset by peer [ 395.276272][ T6741] vhci_hcd: stop threads [ 395.278295][ T6741] vhci_hcd: release socket [ 395.280267][ T6741] vhci_hcd: disconnect device [ 395.326434][T14481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.352118][T14481] veth0_vlan: entered promiscuous mode [ 395.358050][T14481] veth1_vlan: entered promiscuous mode [ 395.382362][T14481] veth0_macvtap: entered promiscuous mode [ 395.386467][T14481] veth1_macvtap: entered promiscuous mode [ 395.396331][T14481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.403767][T14481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.412008][ T6699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.414871][ T6699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.422452][ T6699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.426163][ T6699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.466493][ T6699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.470366][ T6699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.484784][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.488206][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.778991][ T5946] Bluetooth: hci4: command tx timeout [ 397.908824][T14583] infiniband syz1: set active [ 397.910358][T14583] infiniband syz1: added syz_tun [ 397.944132][T14583] RDS/IB: syz1: added [ 397.945900][T14583] smc: adding ib device syz1 with port count 1 [ 397.948611][T14583] smc: ib device syz1 port 1 has no pnetid [ 398.811380][T14608] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 398.814213][T14608] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 398.817639][T14608] vhci_hcd vhci_hcd.0: Device attached [ 398.857605][ T5946] Bluetooth: hci4: command tx timeout [ 399.050059][T14518] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 399.087283][ T60] usb 42-1: SetAddress Request (14) to port 0 [ 399.090269][ T60] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 399.208996][T14518] usb 6-1: config index 0 descriptor too short (expected 116, got 72) [ 399.214029][T14518] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.217825][T14518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.221113][T14518] usb 6-1: Product: syz [ 399.222863][T14518] usb 6-1: Manufacturer: syz [ 399.224706][T14518] usb 6-1: SerialNumber: syz [ 399.231606][T14518] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.255341][ T34] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.384818][ T40] audit: type=1326 audit(2000000298.909:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14618 comm="syz.0.2702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7fc00000 [ 399.656879][T14610] vhci_hcd: connection reset by peer [ 399.661935][ T6718] vhci_hcd: stop threads [ 399.663404][ T6718] vhci_hcd: release socket [ 399.664977][ T6718] vhci_hcd: disconnect device [ 399.973716][ T40] audit: type=1326 audit(2000000299.499:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14618 comm="syz.0.2702" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7fc00000 [ 399.982577][ T40] audit: type=1326 audit(2000000299.499:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14618 comm="syz.0.2702" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ad5a7 code=0x7fc00000 [ 399.995928][ T40] audit: type=1326 audit(2000000299.499:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14618 comm="syz.0.2702" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x7fc00000 [ 400.037458][ T6022] vhci_hcd: vhci_device speed not set [ 400.287471][ T34] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 400.290027][ T34] ath9k_htc: Failed to initialize the device [ 400.309700][ T34] usb 6-1: ath9k_htc: USB layer deinitialized [ 402.413016][T14663] random: crng reseeded on system resumption [ 402.993685][T14561] usb 6-1: USB disconnect, device number 17 [ 404.069487][T14682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.069534][T14682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 404.137364][ T60] usb 42-1: device descriptor read/8, error -110 [ 404.538152][ T60] usb usb42-port1: attempt power cycle [ 405.152479][ T60] usb usb42-port1: unable to enumerate USB device [ 405.282142][ T5300] Bluetooth: hci3: command 0x0406 tx timeout [ 405.696349][T14713] netlink: 'syz.1.2725': attribute type 8 has an invalid length. [ 405.790310][T14719] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 405.790892][T14719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.375093][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 406.488512][T14731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.582699][T14731] vlan2: entered allmulticast mode [ 406.585120][T14731] bond1: entered allmulticast mode [ 407.113019][T14742] rdma_rxe: rxe_newlink: failed to add syz_tun [ 408.059288][T14755] fuse: Bad value for 'rootmode' [ 408.364253][T14748] FAULT_INJECTION: forcing a failure. [ 408.364253][T14748] name failslab, interval 1, probability 0, space 0, times 0 [ 408.395993][T14748] CPU: 1 UID: 0 PID: 14748 Comm: syz.2.2735 Not tainted syzkaller #0 PREEMPT(full) [ 408.396032][T14748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 408.396042][T14748] Call Trace: [ 408.396049][T14748] [ 408.396056][T14748] dump_stack_lvl+0x16c/0x1f0 [ 408.396082][T14748] should_fail_ex+0x512/0x640 [ 408.396108][T14748] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 408.396130][T14748] should_failslab+0xc2/0x120 [ 408.396153][T14748] kmem_cache_alloc_node_noprof+0x78/0x770 [ 408.396170][T14748] ? __alloc_skb+0x2b2/0x380 [ 408.396203][T14748] ? __alloc_skb+0x2b2/0x380 [ 408.396228][T14748] ? __pfx_netlink_insert+0x10/0x10 [ 408.396244][T14748] __alloc_skb+0x2b2/0x380 [ 408.396270][T14748] ? __pfx___alloc_skb+0x10/0x10 [ 408.396297][T14748] ? netlink_autobind.isra.0+0x158/0x370 [ 408.396323][T14748] netlink_alloc_large_skb+0x69/0x140 [ 408.396345][T14748] netlink_sendmsg+0x698/0xdd0 [ 408.396369][T14748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.396391][T14748] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 408.396420][T14748] ____sys_sendmsg+0xa98/0xc70 [ 408.396445][T14748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.396480][T14748] ? get_compat_msghdr+0x11a/0x170 [ 408.396509][T14748] ___sys_sendmsg+0x134/0x1d0 [ 408.396527][T14748] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.396557][T14748] ? find_held_lock+0x2b/0x80 [ 408.396592][T14748] __sys_sendmsg+0x16d/0x220 [ 408.396609][T14748] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.396637][T14748] ? rcu_is_watching+0x12/0xc0 [ 408.396670][T14748] __do_fast_syscall_32+0x7c/0x300 [ 408.396693][T14748] do_fast_syscall_32+0x32/0x80 [ 408.396713][T14748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.396733][T14748] RIP: 0023:0xf708d579 [ 408.396747][T14748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 408.396763][T14748] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 408.396778][T14748] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 408.396788][T14748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.396798][T14748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.396807][T14748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 408.396816][T14748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.396840][T14748] [ 408.479756][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.217860][T14769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2741'. [ 410.073462][T14789] FAULT_INJECTION: forcing a failure. [ 410.073462][T14789] name failslab, interval 1, probability 0, space 0, times 0 [ 410.078963][T14789] CPU: 3 UID: 0 PID: 14789 Comm: syz.0.2746 Not tainted syzkaller #0 PREEMPT(full) [ 410.078988][T14789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.078999][T14789] Call Trace: [ 410.079025][T14789] [ 410.079034][T14789] dump_stack_lvl+0x16c/0x1f0 [ 410.079060][T14789] should_fail_ex+0x512/0x640 [ 410.079085][T14789] ? __kmalloc_cache_noprof+0x5f/0x780 [ 410.079106][T14789] should_failslab+0xc2/0x120 [ 410.079129][T14789] __kmalloc_cache_noprof+0x72/0x780 [ 410.079146][T14789] ? drm_atomic_state_alloc+0xb8/0x120 [ 410.079166][T14789] ? kasan_save_stack+0x33/0x60 [ 410.079184][T14789] ? drm_atomic_state_alloc+0xb8/0x120 [ 410.079207][T14789] drm_atomic_state_alloc+0xb8/0x120 [ 410.079233][T14789] drm_mode_atomic_ioctl+0x393/0x2600 [ 410.079275][T14789] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 410.079302][T14789] ? __lock_acquire+0xb8a/0x1c90 [ 410.079348][T14789] ? drm_is_current_master+0x2c/0x40 [ 410.079377][T14789] ? do_raw_spin_unlock+0x172/0x230 [ 410.079399][T14789] drm_ioctl_kernel+0x1f4/0x3e0 [ 410.079421][T14789] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 410.079451][T14789] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 410.079483][T14789] drm_ioctl+0x5c9/0xc30 [ 410.079510][T14789] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 410.079539][T14789] ? __pfx_drm_ioctl+0x10/0x10 [ 410.079587][T14789] drm_compat_ioctl+0x327/0x460 [ 410.079615][T14789] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 410.079641][T14789] __ia32_compat_sys_ioctl+0x242/0x370 [ 410.079673][T14789] __do_fast_syscall_32+0x7c/0x300 [ 410.079699][T14789] do_fast_syscall_32+0x32/0x80 [ 410.079723][T14789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.079745][T14789] RIP: 0023:0xf70ad579 [ 410.079759][T14789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 410.079799][T14789] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 410.079817][T14789] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00000000c03864bc [ 410.079829][T14789] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.079839][T14789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.079849][T14789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 410.079860][T14789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.079886][T14789] [ 410.263056][T14793] random: crng reseeded on system resumption [ 410.306966][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.310705][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.355686][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.373058][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.583212][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.586159][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 410.597156][ T8032] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 410.757144][ T8032] usb 8-1: Using ep0 maxpacket: 8 [ 410.760717][ T8032] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.764727][ T8032] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.770713][ T8032] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.774630][ T8032] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.779895][ T8032] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.782783][ T8032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.790885][T14812] syz1: rxe_newlink: already configured on syz_tun [ 410.831704][T14804] random: crng reseeded on system resumption [ 410.838070][T14804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2749'. [ 410.841028][T14804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2749'. [ 410.992791][ T8032] usb 8-1: usb_control_msg returned -71 [ 410.994741][ T8032] usbtmc 8-1:16.0: can't read capabilities [ 410.999016][ T8032] usb 8-1: USB disconnect, device number 32 [ 411.801056][T14829] syz1: rxe_newlink: already configured on syz_tun [ 412.893196][T14842] random: crng reseeded on system resumption [ 413.138390][T14842] __nla_validate_parse: 4 callbacks suppressed [ 413.138426][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.158904][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.252185][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.257261][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.494702][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.545258][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2757'. [ 413.825295][T14857] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 413.827937][T14857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 413.831248][T14857] vhci_hcd vhci_hcd.0: Device attached [ 414.097210][ T5944] usb 44-1: SetAddress Request (43) to port 0 [ 414.099724][ T5944] usb 44-1: new SuperSpeed USB device number 43 using vhci_hcd [ 414.637596][ T6025] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 414.937392][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 414.945145][ T6025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.949091][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.952801][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.956019][ T6025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.968459][ T6025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.066390][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.719966][T14858] vhci_hcd: connection reset by peer [ 415.732100][ T6721] vhci_hcd: stop threads [ 415.733561][ T6721] vhci_hcd: release socket [ 415.735216][ T6721] vhci_hcd: disconnect device [ 416.119914][ T6025] usb 6-1: usb_control_msg returned -71 [ 416.122248][ T6025] usbtmc 6-1:16.0: can't read capabilities [ 416.136689][ T6025] usb 6-1: USB disconnect, device number 18 [ 416.291775][T14882] syzkaller0: entered promiscuous mode [ 416.294112][T14882] syzkaller0: entered allmulticast mode [ 416.409240][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 416.847402][ T6025] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 417.017473][ T6025] usb 7-1: Using ep0 maxpacket: 8 [ 417.081533][ T6025] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 417.091639][ T6025] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.103336][ T6025] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.113138][ T6025] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.124127][ T6025] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.132005][ T6025] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.136155][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.365935][T14900] rdma_rxe: rxe_newlink: failed to add syz_tun [ 417.423632][ T6025] usb 7-1: GET_CAPABILITIES returned 0 [ 417.428558][ T6025] usbtmc 7-1:16.0: can't read capabilities [ 417.719108][T14896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.815847][ T6025] usb 7-1: USB disconnect, device number 10 [ 418.545169][T14916] syzkaller0: entered promiscuous mode [ 418.547628][T14916] syzkaller0: entered allmulticast mode [ 418.734541][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2781'. [ 418.777350][ T60] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 418.797500][T14928] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 418.800342][T14928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.804962][T14928] vhci_hcd vhci_hcd.0: Device attached [ 418.947160][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 418.951259][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.955549][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.960283][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.964677][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.970965][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.974908][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.067178][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 419.167146][ T5944] usb 44-1: device descriptor read/8, error -110 [ 419.190253][ T60] usb 6-1: usb_control_msg returned -71 [ 419.193163][ T60] usbtmc 6-1:16.0: can't read capabilities [ 419.200883][ T60] usb 6-1: USB disconnect, device number 19 [ 419.227226][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 419.231322][ T34] usb 8-1: config 0 has no interfaces? [ 419.234240][ T34] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 419.240110][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.245246][ T34] usb 8-1: config 0 descriptor?? [ 419.454892][T14929] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 419.460207][ T6718] vhci_hcd: stop threads [ 419.462463][ T6718] vhci_hcd: release socket [ 419.465017][ T6718] vhci_hcd: disconnect device [ 419.511879][T14935] random: crng reseeded on system resumption [ 419.525974][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 419.530537][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 419.577687][ T5944] usb usb44-port1: attempt power cycle [ 419.618824][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 419.636488][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 419.647173][ T6070] vhci_hcd: vhci_device speed not set [ 419.745051][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 419.751891][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 420.697561][ T6025] usb 8-1: USB disconnect, device number 33 [ 420.724567][T14950] syz1: rxe_newlink: already configured on syz_tun [ 421.488988][ T5944] usb usb44-port1: unable to enumerate USB device [ 421.616962][T14963] syzkaller0: entered promiscuous mode [ 421.619300][T14963] syzkaller0: entered allmulticast mode [ 421.740450][T14967] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 421.742551][T14967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 421.745382][T14967] vhci_hcd vhci_hcd.0: Device attached [ 422.017169][T14377] usb 38-1: SetAddress Request (2) to port 0 [ 422.047194][T14377] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 422.407158][ T6025] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 422.577178][ T6025] usb 8-1: Using ep0 maxpacket: 8 [ 422.579978][ T6025] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.582863][ T6025] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.585958][ T6025] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.589292][ T6025] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.593477][ T6025] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.596308][ T6025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.604226][T14968] vhci_hcd: connection reset by peer [ 422.606562][ T6721] vhci_hcd: stop threads [ 422.608051][ T6721] vhci_hcd: release socket [ 422.610108][ T6721] vhci_hcd: disconnect device [ 422.809508][ T6025] usb 8-1: usb_control_msg returned -71 [ 422.811564][ T6025] usbtmc 8-1:16.0: can't read capabilities [ 422.816322][ T6025] usb 8-1: USB disconnect, device number 34 [ 423.692528][T14993] FAULT_INJECTION: forcing a failure. [ 423.692528][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 423.696330][T14993] CPU: 3 UID: 0 PID: 14993 Comm: syz.3.2796 Not tainted syzkaller #0 PREEMPT(full) [ 423.696368][T14993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.696378][T14993] Call Trace: [ 423.696385][T14993] [ 423.696394][T14993] dump_stack_lvl+0x16c/0x1f0 [ 423.696426][T14993] should_fail_ex+0x512/0x640 [ 423.696454][T14993] _copy_from_user+0x2e/0xd0 [ 423.696490][T14993] drm_ioctl+0x4fb/0xc30 [ 423.696516][T14993] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 423.696540][T14993] ? __pfx_drm_ioctl+0x10/0x10 [ 423.696578][T14993] drm_compat_ioctl+0x327/0x460 [ 423.696617][T14993] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 423.696645][T14993] __ia32_compat_sys_ioctl+0x242/0x370 [ 423.696676][T14993] __do_fast_syscall_32+0x7c/0x300 [ 423.696704][T14993] do_fast_syscall_32+0x32/0x80 [ 423.696727][T14993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.696750][T14993] RIP: 0023:0xf7fc6579 [ 423.696766][T14993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 423.696783][T14993] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 423.696801][T14993] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c05064a7 [ 423.696814][T14993] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.696824][T14993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.696833][T14993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 423.696842][T14993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.696870][T14993] [ 423.785443][T14992] random: crng reseeded on system resumption [ 423.799025][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 423.803037][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 423.865657][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 423.877456][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 423.954952][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 423.969298][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 424.191871][T15004] syzkaller0: entered promiscuous mode [ 424.193752][T15004] syzkaller0: entered allmulticast mode [ 424.409965][T15008] rdma_rxe: rxe_newlink: failed to add syz_tun [ 426.187159][ T6025] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 426.357265][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 426.385945][ T6025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.390737][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.396549][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.403918][ T6025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.409999][ T6025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.413833][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.636919][ T6025] usb 6-1: usb_control_msg returned -71 [ 426.642516][ T6025] usbtmc 6-1:16.0: can't read capabilities [ 426.668140][ T6025] usb 6-1: USB disconnect, device number 20 [ 426.710752][T15036] FAULT_INJECTION: forcing a failure. [ 426.710752][T15036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.716806][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.3.2806 Not tainted syzkaller #0 PREEMPT(full) [ 426.716831][T15036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 426.716842][T15036] Call Trace: [ 426.716849][T15036] [ 426.716856][T15036] dump_stack_lvl+0x16c/0x1f0 [ 426.716883][T15036] should_fail_ex+0x512/0x640 [ 426.716912][T15036] should_fail_alloc_page+0xe7/0x130 [ 426.716938][T15036] prepare_alloc_pages+0x3c2/0x610 [ 426.716965][T15036] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 426.716992][T15036] ? __pfx___schedule+0x10/0x10 [ 426.717014][T15036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 426.717035][T15036] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 426.717076][T15036] ? __lock_acquire+0x622/0x1c90 [ 426.717102][T15036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.717131][T15036] ? policy_nodemask+0xea/0x4e0 [ 426.717157][T15036] alloc_pages_mpol+0x1fb/0x550 [ 426.717181][T15036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 426.717213][T15036] folio_alloc_noprof+0x20/0x2d0 [ 426.717239][T15036] filemap_alloc_folio_noprof+0x3a1/0x470 [ 426.717266][T15036] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 426.717290][T15036] ? page_cache_sync_ra+0x20c/0xbf0 [ 426.717313][T15036] filemap_get_pages+0x8d4/0x1d30 [ 426.717343][T15036] ? __pfx_filemap_get_pages+0x10/0x10 [ 426.717367][T15036] ? __pfx___might_resched+0x10/0x10 [ 426.717393][T15036] filemap_splice_read+0x5cb/0xd60 [ 426.717413][T15036] ? do_fast_syscall_32+0x32/0x80 [ 426.717434][T15036] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.717463][T15036] ? __pfx_filemap_splice_read+0x10/0x10 [ 426.717516][T15036] ? lockdep_init_map_type+0x5c/0x280 [ 426.717540][T15036] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 426.717562][T15036] ? __pfx_filemap_splice_read+0x10/0x10 [ 426.717580][T15036] do_splice_read+0x285/0x370 [ 426.717600][T15036] splice_direct_to_actor+0x2a1/0xa30 [ 426.717617][T15036] ? __pfx_direct_splice_actor+0x10/0x10 [ 426.717637][T15036] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 426.717652][T15036] ? get_pid_task+0xfc/0x250 [ 426.717684][T15036] do_splice_direct+0x174/0x240 [ 426.717701][T15036] ? __pfx_do_splice_direct+0x10/0x10 [ 426.717719][T15036] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 426.717747][T15036] ? bpf_lsm_file_permission+0x9/0x10 [ 426.717768][T15036] ? security_file_permission+0x71/0x210 [ 426.717793][T15036] ? rw_verify_area+0xcf/0x6c0 [ 426.717812][T15036] do_sendfile+0xb06/0xe50 [ 426.717833][T15036] ? __pfx_do_sendfile+0x10/0x10 [ 426.717851][T15036] ? __fget_files+0x20e/0x3c0 [ 426.717876][T15036] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 426.717897][T15036] ? ksys_write+0x1ac/0x250 [ 426.717915][T15036] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 426.717940][T15036] ? rcu_is_watching+0x12/0xc0 [ 426.717962][T15036] __do_fast_syscall_32+0x7c/0x300 [ 426.717986][T15036] do_fast_syscall_32+0x32/0x80 [ 426.718007][T15036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.718027][T15036] RIP: 0023:0xf7fc6579 [ 426.718042][T15036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 426.718058][T15036] RSP: 002b:00000000f547455c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 426.718074][T15036] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000006 [ 426.718085][T15036] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 426.718095][T15036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.718104][T15036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 426.718114][T15036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.718137][T15036] [ 427.088358][T14377] usb 38-1: device descriptor read/8, error -110 [ 427.271470][T15047] netlink: 'syz.1.2809': attribute type 2 has an invalid length. [ 427.297311][ T6070] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 427.461627][ T6070] usb 5-1: config index 0 descriptor too short (expected 116, got 72) [ 427.466981][ T6070] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.471011][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.474352][ T6070] usb 5-1: Product: syz [ 427.476143][ T6070] usb 5-1: Manufacturer: syz [ 427.478557][ T6070] usb 5-1: SerialNumber: syz [ 427.485071][ T6070] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.498838][ T60] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.498999][T14377] usb usb38-port1: attempt power cycle [ 428.078065][T14377] usb usb38-port1: unable to enumerate USB device [ 428.527293][ T60] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 428.530594][ T60] ath9k_htc: Failed to initialize the device [ 428.554893][ T60] usb 5-1: ath9k_htc: USB layer deinitialized [ 429.339996][T15058] random: crng reseeded on system resumption [ 429.561607][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 429.565601][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 429.592789][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 429.596700][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 429.675610][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 429.680923][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2811'. [ 430.158969][ T6025] usb 5-1: USB disconnect, device number 6 [ 430.282683][ T40] audit: type=1326 audit(2000000329.809:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.291228][ T40] audit: type=1326 audit(2000000329.809:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.317201][ T40] audit: type=1326 audit(2000000329.809:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.327187][ T40] audit: type=1326 audit(2000000329.809:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.337602][ T40] audit: type=1326 audit(2000000329.809:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.347350][ T40] audit: type=1326 audit(2000000329.809:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.357336][ T40] audit: type=1326 audit(2000000329.809:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.385682][ T40] audit: type=1326 audit(2000000329.909:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.401316][ T40] audit: type=1326 audit(2000000329.919:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.411776][ T40] audit: type=1326 audit(2000000329.929:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.3.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 430.551962][T15067] random: crng reseeded on system resumption [ 430.556821][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'. [ 430.559737][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'. [ 430.581679][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'. [ 430.584567][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2812'. [ 430.766400][T15081] syz1: rxe_newlink: already configured on syz_tun [ 431.587528][T15091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 431.589649][T15091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.618296][T15091] vhci_hcd vhci_hcd.0: Device attached [ 431.857149][ T6022] usb 43-1: new low-speed USB device number 10 using vhci_hcd [ 432.527163][ T6070] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 432.867136][ T6070] usb 8-1: Using ep0 maxpacket: 16 [ 433.119006][ T6070] usb 8-1: config 0 has no interfaces? [ 433.121408][ T6070] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 433.127216][ T6070] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.142666][ T6070] usb 8-1: config 0 descriptor?? [ 433.356230][T15093] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 433.360417][ T6699] vhci_hcd: stop threads [ 433.362259][ T6699] vhci_hcd: release socket [ 433.364145][ T6699] vhci_hcd: disconnect device [ 434.079657][T15123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 434.079682][T15123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 434.192134][T15128] Bluetooth: MGMT ver 1.23 [ 434.209535][ T53] usb 8-1: USB disconnect, device number 35 [ 435.132051][T15143] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 435.134735][T15143] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.138294][T15143] vhci_hcd vhci_hcd.0: Device attached [ 435.689607][T15150] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 435.692384][T15150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.697562][T15150] vhci_hcd vhci_hcd.0: Device attached [ 435.794087][ T8032] usb 38-1: SetAddress Request (6) to port 0 [ 435.797015][ T8032] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 435.967164][ T34] usb 42-1: SetAddress Request (18) to port 0 [ 435.970045][ T34] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 436.178439][T15144] vhci_hcd: connection reset by peer [ 436.185249][ T6699] vhci_hcd: stop threads [ 436.193702][ T6699] vhci_hcd: release socket [ 436.193849][ T6699] vhci_hcd: disconnect device [ 436.249240][T15165] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 436.249264][T15165] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 436.474810][T15151] vhci_hcd: connection reset by peer [ 436.476801][ T6721] vhci_hcd: stop threads [ 436.478492][ T6721] vhci_hcd: release socket [ 436.480299][ T6721] vhci_hcd: disconnect device [ 437.137184][T15176] __nla_validate_parse: 3 callbacks suppressed [ 437.137243][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2840'. [ 437.141454][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2839'. [ 437.217629][T15178] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 437.220559][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.225886][T15178] vhci_hcd vhci_hcd.0: Device attached [ 437.271470][T15176] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 437.274192][T15176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.280279][T15176] vhci_hcd vhci_hcd.0: Device attached [ 437.487272][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 437.527175][T15181] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 437.637139][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 437.640648][ T10] usb 5-1: config 0 has no interfaces? [ 437.642951][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 437.646803][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.652438][ T10] usb 5-1: config 0 descriptor?? [ 437.677194][T15181] usb 8-1: Using ep0 maxpacket: 16 [ 437.681134][T15181] usb 8-1: config 0 has no interfaces? [ 437.683364][T15181] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 437.687498][T15181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.692602][T15181] usb 8-1: config 0 descriptor?? [ 437.857194][T15179] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 437.860361][ T6721] vhci_hcd: stop threads [ 437.862166][ T6721] vhci_hcd: release socket [ 437.864602][ T6721] vhci_hcd: disconnect device [ 437.901879][T15183] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 437.905085][T15181] usb 8-1: USB disconnect, device number 36 [ 437.908896][ T6723] vhci_hcd: stop threads [ 437.910671][ T6723] vhci_hcd: release socket [ 437.917664][ T6723] vhci_hcd: disconnect device [ 437.977282][ T6022] vhci_hcd: vhci_device speed not set [ 438.027830][T15188] FAULT_INJECTION: forcing a failure. [ 438.027830][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.033883][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.2.2842 Not tainted syzkaller #0 PREEMPT(full) [ 438.033908][T15188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.033919][T15188] Call Trace: [ 438.033925][T15188] [ 438.033932][T15188] dump_stack_lvl+0x16c/0x1f0 [ 438.033957][T15188] should_fail_ex+0x512/0x640 [ 438.033987][T15188] _copy_from_user+0x2e/0xd0 [ 438.034015][T15188] kstrtouint_from_user+0xd6/0x1d0 [ 438.034036][T15188] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 438.034056][T15188] ? __lock_acquire+0xb8a/0x1c90 [ 438.034091][T15188] proc_fail_nth_write+0x83/0x220 [ 438.034111][T15188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.034135][T15188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.034153][T15188] vfs_write+0x2a0/0x11d0 [ 438.034177][T15188] ? __pfx_vfs_write+0x10/0x10 [ 438.034193][T15188] ? find_held_lock+0x2b/0x80 [ 438.034217][T15188] ? __fget_files+0x20e/0x3c0 [ 438.034232][T15188] ? do_raw_spin_unlock+0xe0/0x230 [ 438.034254][T15188] ksys_write+0x12a/0x250 [ 438.034272][T15188] ? __pfx_ksys_write+0x10/0x10 [ 438.034290][T15188] ? __do_sys_mincore+0x4f1/0x620 [ 438.034317][T15188] ? rcu_is_watching+0x12/0xc0 [ 438.034339][T15188] __do_fast_syscall_32+0x7c/0x300 [ 438.034370][T15188] do_fast_syscall_32+0x32/0x80 [ 438.034396][T15188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.034417][T15188] RIP: 0023:0xf708d579 [ 438.034430][T15188] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.034446][T15188] RSP: 002b:00000000f547d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 438.034462][T15188] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f547d620 [ 438.034472][T15188] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 438.034482][T15188] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 438.034491][T15188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.034501][T15188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.034524][T15188] [ 438.193502][T15192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 438.197191][T15192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 438.873704][ T59] usb 5-1: USB disconnect, device number 7 [ 439.536679][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 440.848830][ T8032] usb 38-1: device descriptor read/8, error -110 [ 441.007265][ T34] usb 42-1: device descriptor read/8, error -110 [ 441.247737][ T8032] usb usb38-port1: attempt power cycle [ 441.317163][ T6024] vhci_hcd: vhci_device speed not set [ 441.396426][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 441.396443][ T40] audit: type=1326 audit(2000000340.919:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 441.427995][ T34] usb usb42-port1: attempt power cycle [ 441.453573][ T40] audit: type=1326 audit(2000000340.979:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.468279][ T40] audit: type=1326 audit(2000000340.979:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.475678][ T40] audit: type=1326 audit(2000000340.979:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.488730][ T40] audit: type=1326 audit(2000000340.979:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.497620][ T40] audit: type=1326 audit(2000000340.999:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.506619][ T40] audit: type=1326 audit(2000000340.999:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.515427][ T40] audit: type=1326 audit(2000000340.999:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.524231][ T40] audit: type=1326 audit(2000000340.999:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.533192][ T40] audit: type=1326 audit(2000000340.999:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.1.2854" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 441.995965][ T34] usb usb42-port1: unable to enumerate USB device [ 442.195551][T15235] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 443.857994][ T8032] usb usb38-port1: unable to enumerate USB device [ 444.130032][T15264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 444.132616][T15264] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 444.135831][T15264] vhci_hcd vhci_hcd.0: Device attached [ 444.141394][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.143885][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.398070][T15276] ubi31: attaching mtd0 [ 444.402033][T15276] ubi31: scanning is finished [ 444.403937][T15276] ubi31: empty MTD device detected [ 444.427191][ T6025] usb 40-1: SetAddress Request (26) to port 0 [ 444.429368][ T6025] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 444.709570][T15276] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 444.714651][T15276] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 444.722039][T15276] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 444.726303][T15276] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 444.730916][T15276] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 444.735099][T15276] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 444.740144][T15276] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1506748363 [ 444.754801][T15276] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 444.760656][T15280] ubi31: background thread "ubi_bgt31d" started, PID 15280 [ 445.007234][T15265] vhci_hcd: connection reset by peer [ 445.009674][ T6699] vhci_hcd: stop threads [ 445.011482][ T6699] vhci_hcd: release socket [ 445.014007][ T6699] vhci_hcd: disconnect device [ 445.945028][T15307] fuse: Bad value for 'fd' [ 446.288838][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2881'. [ 446.360335][T15323] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 446.363143][T15323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.374107][T15323] vhci_hcd vhci_hcd.0: Device attached [ 446.607198][ T6022] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 446.627260][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 446.705242][T15330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 446.708998][T15330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 446.797123][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 446.800035][ T34] usb 5-1: config 0 has no interfaces? [ 446.801935][ T34] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 446.804764][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.810142][ T34] usb 5-1: config 0 descriptor?? [ 447.467139][ T6022] usb 37-1: device descriptor read/64, error -71 [ 447.625323][ T34] usb 5-1: USB disconnect, device number 8 [ 447.628954][T15324] vhci_hcd: connection closed [ 447.629039][ T6700] vhci_hcd: stop threads [ 447.632046][ T6700] vhci_hcd: release socket [ 447.633824][ T6700] vhci_hcd: disconnect device [ 447.657211][ T6022] vhci_hcd: vhci_device speed not set [ 447.666494][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 447.718105][T15351] autofs: Unknown parameter '' [ 447.739202][T15350] hsr_slave_1 (unregistering): left promiscuous mode [ 448.274453][T15356] netlink: 'syz.0.2890': attribute type 7 has an invalid length. [ 448.278563][T15356] netlink: 'syz.0.2890': attribute type 8 has an invalid length. [ 448.281665][T15356] netlink: 'syz.0.2890': attribute type 9 has an invalid length. [ 448.288651][ T40] kauditd_printk_skb: 184 callbacks suppressed [ 448.288661][ T40] audit: type=1326 audit(2000000347.819:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15355 comm="syz.0.2890" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 448.422461][T15364] FAULT_INJECTION: forcing a failure. [ 448.422461][T15364] name failslab, interval 1, probability 0, space 0, times 0 [ 448.426772][T15364] CPU: 1 UID: 0 PID: 15364 Comm: syz.2.2889 Not tainted syzkaller #0 PREEMPT(full) [ 448.426787][T15364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 448.426805][T15364] Call Trace: [ 448.426810][T15364] [ 448.426814][T15364] dump_stack_lvl+0x16c/0x1f0 [ 448.426831][T15364] should_fail_ex+0x512/0x640 [ 448.426847][T15364] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 448.426861][T15364] should_failslab+0xc2/0x120 [ 448.426875][T15364] kmem_cache_alloc_node_noprof+0x78/0x770 [ 448.426886][T15364] ? __alloc_skb+0x2b2/0x380 [ 448.426906][T15364] ? __alloc_skb+0x2b2/0x380 [ 448.426924][T15364] ? __pfx_netlink_insert+0x10/0x10 [ 448.426939][T15364] __alloc_skb+0x2b2/0x380 [ 448.426965][T15364] ? __pfx___alloc_skb+0x10/0x10 [ 448.426990][T15364] ? netlink_autobind.isra.0+0x158/0x370 [ 448.427016][T15364] netlink_alloc_large_skb+0x69/0x140 [ 448.427037][T15364] netlink_sendmsg+0x698/0xdd0 [ 448.427067][T15364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.427079][T15364] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 448.427097][T15364] ____sys_sendmsg+0xa98/0xc70 [ 448.427112][T15364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.427125][T15364] ? get_compat_msghdr+0x11a/0x170 [ 448.427141][T15364] ___sys_sendmsg+0x134/0x1d0 [ 448.427153][T15364] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.427169][T15364] ? find_held_lock+0x2b/0x80 [ 448.427190][T15364] __sys_sendmsg+0x16d/0x220 [ 448.427200][T15364] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.427216][T15364] ? rcu_is_watching+0x12/0xc0 [ 448.427230][T15364] __do_fast_syscall_32+0x7c/0x300 [ 448.427245][T15364] do_fast_syscall_32+0x32/0x80 [ 448.427258][T15364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.427272][T15364] RIP: 0023:0xf708d579 [ 448.427280][T15364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 448.427290][T15364] RSP: 002b:00000000f543b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 448.427300][T15364] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 448.427310][T15364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.427316][T15364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.427322][T15364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 448.427327][T15364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.427341][T15364] [ 448.511234][T15367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 448.529920][T15367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 449.425604][T15380] rdma_rxe: rxe_newlink: failed to add syz_tun [ 450.026797][ T6025] usb 40-1: device descriptor read/8, error -110 [ 450.096124][T15390] random: crng reseeded on system resumption [ 450.121949][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.125676][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.230245][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.234656][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.512683][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.515710][T15390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 450.568209][ T6025] usb usb40-port1: attempt power cycle [ 450.804454][T15415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 450.807369][T15415] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 450.811478][T15415] vhci_hcd vhci_hcd.0: Device attached [ 451.077446][ T34] usb 38-1: SetAddress Request (10) to port 0 [ 451.080110][ T34] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 451.137989][ T6025] usb usb40-port1: unable to enumerate USB device [ 452.347992][T15416] vhci_hcd: connection reset by peer [ 452.349991][T15017] vhci_hcd: stop threads [ 452.351348][T15017] vhci_hcd: release socket [ 452.357125][T15017] vhci_hcd: disconnect device [ 452.362413][T15444] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.193967][T15465] bridge0: port 3(erspan0) entered blocking state [ 454.196515][T15465] bridge0: port 3(erspan0) entered disabled state [ 454.199053][T15465] erspan0: entered allmulticast mode [ 454.205539][T15465] erspan0: entered promiscuous mode [ 454.208406][T15465] bridge0: port 3(erspan0) entered blocking state [ 454.210395][T15465] bridge0: port 3(erspan0) entered forwarding state [ 454.238205][T15465] erspan0: left allmulticast mode [ 454.239927][T15465] erspan0: left promiscuous mode [ 454.243040][T15465] bridge0: port 3(erspan0) entered disabled state [ 455.910514][T15495] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 455.913658][T15495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 456.127377][ T34] usb 38-1: device descriptor read/8, error -110 [ 456.198711][ T40] audit: type=1400 audit(2000000355.729:449): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb usb38-port1: attempt power cycle [ 457.172206][ T34] usb usb38-port1: unable to enumerate USB device [ 457.206782][T15527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 457.211646][T15527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.212533][T15527] vhci_hcd vhci_hcd.0: Device attached [ 457.235048][T15532] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 457.238814][T15532] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 457.250325][T15532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 457.255792][T15533] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 457.497175][T14561] usb 38-1: SetAddress Request (14) to port 0 [ 457.499186][T14561] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 458.513969][T15561] FAULT_INJECTION: forcing a failure. [ 458.513969][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 458.519196][T15561] CPU: 2 UID: 0 PID: 15561 Comm: syz.2.2937 Not tainted syzkaller #0 PREEMPT(full) [ 458.519233][T15561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.519245][T15561] Call Trace: [ 458.519251][T15561] [ 458.519257][T15561] dump_stack_lvl+0x16c/0x1f0 [ 458.519284][T15561] should_fail_ex+0x512/0x640 [ 458.519330][T15561] ? __kmalloc_cache_noprof+0x5f/0x780 [ 458.519353][T15561] should_failslab+0xc2/0x120 [ 458.519375][T15561] __kmalloc_cache_noprof+0x72/0x780 [ 458.519391][T15561] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 458.519414][T15561] ? bpf_prog_alloc_no_stats+0x118/0x600 [ 458.519441][T15561] ? bpf_prog_alloc_no_stats+0x118/0x600 [ 458.519464][T15561] bpf_prog_alloc_no_stats+0x118/0x600 [ 458.519490][T15561] bpf_prog_alloc+0x3b/0x230 [ 458.519512][T15561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.519539][T15561] bpf_prog_load+0x1c28/0x2850 [ 458.519561][T15561] ? __pfx_bpf_prog_load+0x10/0x10 [ 458.519577][T15561] ? __lock_acquire+0xb8a/0x1c90 [ 458.519629][T15561] __sys_bpf+0x3e72/0x4980 [ 458.519648][T15561] ? __pfx___sys_bpf+0x10/0x10 [ 458.519668][T15561] ? __pfx___schedule+0x10/0x10 [ 458.519697][T15561] ? rcu_is_watching+0x12/0xc0 [ 458.519713][T15561] ? irqentry_exit+0x3b/0x90 [ 458.519747][T15561] ? fput+0x9b/0xd0 [ 458.519771][T15561] ? ksys_write+0x1ac/0x250 [ 458.519790][T15561] ? __pfx_ksys_write+0x10/0x10 [ 458.519814][T15561] __ia32_sys_bpf+0x76/0xe0 [ 458.519833][T15561] __do_fast_syscall_32+0x7c/0x300 [ 458.519858][T15561] do_fast_syscall_32+0x32/0x80 [ 458.519878][T15561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.519898][T15561] RIP: 0023:0xf708d579 [ 458.519911][T15561] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.519927][T15561] RSP: 002b:00000000f545c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 458.519944][T15561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 458.519954][T15561] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.519965][T15561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.519975][T15561] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.519985][T15561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.520008][T15561] [ 458.613174][ C2] hpet: Lost 5 RTC interrupts [ 459.303257][T15528] vhci_hcd: connection reset by peer [ 459.305430][ T6699] vhci_hcd: stop threads [ 459.307363][ T6699] vhci_hcd: release socket [ 459.309360][ T6699] vhci_hcd: disconnect device [ 459.371727][ T5946] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 459.371762][ T5946] Bluetooth: hci4: Dropping invalid advertising data [ 459.376592][ T5946] Bluetooth: hci4: unknown advertising packet type: 0x80 [ 459.376608][ T5946] Bluetooth: hci4: Malformed LE Event: 0x02 [ 459.432860][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 461.690497][ T40] audit: type=1326 audit(2000000361.219:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15626 comm="syz.0.2959" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 462.323012][T15624] random: crng reseeded on system resumption [ 462.331580][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.335343][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.530126][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.534291][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.670952][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.674563][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'. [ 462.767594][T14561] usb 38-1: device descriptor read/8, error -110 [ 462.799314][ T40] audit: type=1800 audit(2000000362.319:451): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2965" name="bus" dev="overlay" ino=1176 res=0 errno=0 [ 462.845474][ T40] audit: type=1800 audit(2000000362.329:452): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2966" name="bus" dev="overlay" ino=454 res=0 errno=0 [ 462.885187][T15655] bridge1: entered promiscuous mode [ 463.717754][ T40] audit: type=1326 audit(2000000363.249:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.2.2971" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x0 [ 463.718042][T14561] usb usb38-port1: attempt power cycle [ 463.776856][T15675] netlink: 'syz.0.2973': attribute type 1 has an invalid length. [ 463.779524][T15675] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2973'. [ 463.963865][T15675] netlink: 'syz.0.2973': attribute type 8 has an invalid length. [ 464.025925][T15689] xt_l2tp: wrong L2TP version: 0 [ 464.059695][ T40] audit: type=1326 audit(2000000363.589:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.063758][ T40] audit: type=1326 audit(2000000363.589:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.063788][ T40] audit: type=1326 audit(2000000363.589:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.063808][ T40] audit: type=1326 audit(2000000363.589:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.063827][ T40] audit: type=1326 audit(2000000363.589:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.063846][ T40] audit: type=1326 audit(2000000363.589:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15686 comm="syz.1.2976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 464.297553][T14561] usb usb38-port1: unable to enumerate USB device [ 465.901749][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 467.380797][T15758] rdma_rxe: rxe_newlink: failed to add syz_tun [ 468.662805][T15797] tipc: Started in network mode [ 468.664920][T15797] tipc: Node identity 9a50d4bfafcc, cluster identity 4711 [ 468.668074][T15797] tipc: Enabled bearer , priority 0 [ 468.671765][T15797] syzkaller0: entered promiscuous mode [ 468.674167][T15797] syzkaller0: entered allmulticast mode [ 469.436256][T15797] tipc: Resetting bearer [ 469.452749][T15797] tipc: Disabling bearer [ 469.758230][T15823] Bluetooth: MGMT ver 1.23 [ 471.629999][T15837] sp0: Synchronizing with TNC [ 471.640969][T15837] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 471.810455][T15836] [U] è` [ 471.819351][ T5946] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 471.821938][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 473.387589][ T40] kauditd_printk_skb: 189 callbacks suppressed [ 473.387605][ T40] audit: type=1326 audit(2000000372.919:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x0 [ 473.438095][ T40] audit: type=1326 audit(2000000372.969:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 473.467252][ T40] audit: type=1326 audit(2000000372.979:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 473.496767][ T40] audit: type=1326 audit(2000000372.989:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 473.514646][ T40] audit: type=1326 audit(2000000372.989:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 473.521622][ T40] audit: type=1326 audit(2000000372.989:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 473.530556][ T40] audit: type=1326 audit(2000000372.989:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 474.144773][ T40] audit: type=1326 audit(2000000372.989:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 474.152094][ T40] audit: type=1326 audit(2000000372.989:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 474.162297][ T40] audit: type=1326 audit(2000000372.989:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.2.3026" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 474.957199][ T34] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 475.117199][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 475.291763][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.296005][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.807725][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.811827][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.817584][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.821467][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.036520][ T34] usb 8-1: usb_control_msg returned -71 [ 476.039216][ T34] usbtmc 8-1:16.0: can't read capabilities [ 476.045037][ T34] usb 8-1: USB disconnect, device number 37 [ 476.136065][T15888] ALSA: mixer_oss: invalid OSS volume '' [ 476.151858][T15888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 476.154080][T15888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.161215][T15888] vhci_hcd vhci_hcd.0: Device attached [ 476.347539][ T1327] vhci_hcd: vhci_device speed not set [ 476.417732][ T1327] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 476.697443][T15889] vhci_hcd: connection reset by peer [ 476.700437][ T6699] vhci_hcd: stop threads [ 476.702332][ T6699] vhci_hcd: release socket [ 476.704594][ T6699] vhci_hcd: disconnect device [ 477.596848][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3039'. [ 477.657819][T15915] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 477.660346][T15915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.663350][T15915] vhci_hcd vhci_hcd.0: Device attached [ 477.796123][T15922] rdma_rxe: rxe_newlink: failed to add syz_tun [ 477.917161][T14561] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 477.920176][ T59] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 478.077999][T14561] usb 6-1: Using ep0 maxpacket: 16 [ 478.083852][T14561] usb 6-1: config 0 has no interfaces? [ 478.089114][T14561] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 478.093868][T14561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.102645][T14561] usb 6-1: config 0 descriptor?? [ 478.397766][ T40] kauditd_printk_skb: 345 callbacks suppressed [ 478.397782][ T40] audit: type=1326 audit(2000000377.879:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.416381][ T40] audit: type=1326 audit(2000000377.889:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.465151][ T40] audit: type=1326 audit(2000000377.889:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.487571][ T40] audit: type=1326 audit(2000000377.889:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.531446][ T40] audit: type=1326 audit(2000000377.889:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.546571][ T40] audit: type=1326 audit(2000000377.889:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.555423][ T40] audit: type=1326 audit(2000000377.889:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.619538][ T40] audit: type=1326 audit(2000000377.889:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.681642][ T40] audit: type=1326 audit(2000000377.889:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.695226][ T40] audit: type=1326 audit(2000000377.899:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15911 comm="syz.2.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 478.867851][T15916] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 478.871516][ T6718] vhci_hcd: stop threads [ 478.873433][ T6718] vhci_hcd: release socket [ 478.875557][ T6718] vhci_hcd: disconnect device [ 480.585336][T14561] usb 6-1: USB disconnect, device number 21 [ 480.594982][T15951] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 480.597367][T15951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 480.601109][T15951] vhci_hcd vhci_hcd.0: Device attached [ 481.258253][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 481.303576][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 481.307321][ T29] usb 44-1: SetAddress Request (47) to port 0 [ 481.309279][ T29] usb 44-1: new SuperSpeed USB device number 47 using vhci_hcd [ 481.325325][T15951] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 481.339499][T15951] UDF-fs: Scanning with blocksize 512 failed [ 481.351969][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 481.356387][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 481.362804][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3045'. [ 481.369590][T15951] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 481.373165][T15951] UDF-fs: Scanning with blocksize 1024 failed [ 481.380316][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 481.390922][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 481.400603][T15951] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 481.402963][T15951] UDF-fs: Scanning with blocksize 2048 failed [ 481.434972][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 481.449537][T15951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 481.467367][T15951] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 481.470524][T15951] UDF-fs: Scanning with blocksize 4096 failed [ 481.473486][T15951] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 481.567997][ T1327] vhci_hcd: vhci_device speed not set [ 481.940364][T15954] vhci_hcd: connection reset by peer [ 482.010536][ T6700] vhci_hcd: stop threads [ 482.012939][ T6700] vhci_hcd: release socket [ 482.015565][ T6700] vhci_hcd: disconnect device [ 482.759963][T15972] random: crng reseeded on system resumption [ 482.806958][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 482.826972][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 482.843760][T15977] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3054'. [ 482.860753][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 482.864374][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 482.986005][T15981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 482.986048][T15981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 482.997853][ T59] vhci_hcd: vhci_device speed not set [ 483.179981][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 483.183217][T15972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 484.914872][T15999] random: crng reseeded on system resumption [ 484.964588][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3059'. [ 484.967752][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3059'. [ 485.010449][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3059'. [ 485.122116][ T34] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 485.286386][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.292784][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 485.332298][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.337236][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 485.341814][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 485.357926][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.361693][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.365024][ T34] usb 8-1: Product: syz [ 485.366778][ T34] usb 8-1: Manufacturer: syz [ 485.378023][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 485.380657][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 485.391518][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 485.394040][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 485.651291][ T59] usb 8-1: USB disconnect, device number 38 [ 485.699274][T16020] random: crng reseeded on system resumption [ 485.793305][T16023] netlink: 'syz.2.3064': attribute type 4 has an invalid length. [ 485.849518][T16025] netlink: 'syz.2.3064': attribute type 4 has an invalid length. [ 486.388529][ T29] usb 44-1: device descriptor read/8, error -110 [ 486.701749][T16044] FAULT_INJECTION: forcing a failure. [ 486.701749][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.706723][T16044] CPU: 2 UID: 0 PID: 16044 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) [ 486.706738][T16044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.706745][T16044] Call Trace: [ 486.706749][T16044] [ 486.706754][T16044] dump_stack_lvl+0x16c/0x1f0 [ 486.706772][T16044] should_fail_ex+0x512/0x640 [ 486.706791][T16044] _copy_to_user+0x32/0xd0 [ 486.706809][T16044] simple_read_from_buffer+0xcb/0x170 [ 486.706827][T16044] proc_fail_nth_read+0x197/0x240 [ 486.706839][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.706851][T16044] ? rw_verify_area+0xcf/0x6c0 [ 486.706861][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.706872][T16044] vfs_read+0x1e4/0xcf0 [ 486.706899][T16044] ? __pfx_vfs_read+0x10/0x10 [ 486.706910][T16044] ? find_held_lock+0x2b/0x80 [ 486.706932][T16044] ? __fget_files+0x20e/0x3c0 [ 486.706954][T16044] ksys_read+0x12a/0x250 [ 486.706974][T16044] ? __pfx_ksys_read+0x10/0x10 [ 486.706994][T16044] ? rcu_is_watching+0x12/0xc0 [ 486.707016][T16044] __do_fast_syscall_32+0x7c/0x300 [ 486.707035][T16044] do_fast_syscall_32+0x32/0x80 [ 486.707074][T16044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.707091][T16044] RIP: 0023:0xf705d579 [ 486.707100][T16044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.707111][T16044] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 486.707120][T16044] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f544d620 [ 486.707127][T16044] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 486.707134][T16044] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 486.707142][T16044] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 486.707151][T16044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.707173][T16044] [ 486.801283][ T29] usb usb44-port1: attempt power cycle [ 487.905838][ T29] usb usb44-port1: unable to enumerate USB device [ 489.489864][T16087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 489.491989][T16087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 489.495132][T16087] vhci_hcd vhci_hcd.0: Device attached [ 489.757226][ T59] usb 40-1: SetAddress Request (30) to port 0 [ 489.759388][ T59] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 489.797559][T16088] vhci_hcd: connection reset by peer [ 489.799564][T15017] vhci_hcd: stop threads [ 489.800997][T15017] vhci_hcd: release socket [ 489.804515][T15017] vhci_hcd: disconnect device [ 492.655603][T16121] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 492.741019][ T5300] Bluetooth: hci4: link tx timeout [ 492.743921][ T5300] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 492.894416][T16136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 492.896985][T16136] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 492.900281][T16136] vhci_hcd vhci_hcd.0: Device attached [ 493.177712][ T53] usb 38-1: SetAddress Request (18) to port 0 [ 493.180398][ T53] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 493.391082][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 493.391100][ T40] audit: type=1800 audit(2000000392.919:1074): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3088" name="/" dev="fuse" ino=0 res=0 errno=0 [ 494.008072][T16160] __nla_validate_parse: 9 callbacks suppressed [ 494.008091][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 494.021182][T16137] vhci_hcd: connection reset by peer [ 494.023939][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 494.028213][ T6718] vhci_hcd: stop threads [ 494.030016][ T6718] vhci_hcd: release socket [ 494.032334][ T6718] vhci_hcd: disconnect device [ 494.485502][T16163] [ 494.486607][T16163] ===================================================== [ 494.489582][T16163] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 494.492768][T16163] syzkaller #0 Not tainted [ 494.495678][T16163] ----------------------------------------------------- [ 494.499656][T16163] syz.3.3099/16163 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 494.502873][T16163] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0xb8/0x3e0 [ 494.506474][T16163] [ 494.506474][T16163] and this task is already holding: [ 494.509610][T16163] ffff88806816c220 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 494.513305][T16163] which would create a new lock dependency: [ 494.515821][T16163] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 494.519076][T16163] [ 494.519076][T16163] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 494.523089][T16163] (&dev->event_lock#2){..-.}-{3:3} [ 494.523122][T16163] [ 494.523122][T16163] ... which became SOFTIRQ-irq-safe at: [ 494.528687][T16163] lock_acquire+0x179/0x350 [ 494.530704][T16163] _raw_spin_lock_irqsave+0x3a/0x60 [ 494.533059][T16163] input_inject_event+0x9f/0x3b0 [ 494.535220][T16163] led_set_brightness+0x217/0x290 [ 494.537490][T16163] led_trigger_event+0xda/0x270 [ 494.539630][T16163] kbd_bh+0x21b/0x300 [ 494.541392][T16163] tasklet_action_common+0x284/0x400 [ 494.543706][T16163] handle_softirqs+0x219/0x8e0 [ 494.545781][T16163] run_ksoftirqd+0x3a/0x60 [ 494.547738][T16163] smpboot_thread_fn+0x3f7/0xae0 [ 494.549866][T16163] kthread+0x3c5/0x780 [ 494.551671][T16163] ret_from_fork+0x675/0x7d0 [ 494.553757][T16163] ret_from_fork_asm+0x1a/0x30 [ 494.555849][T16163] [ 494.555849][T16163] to a SOFTIRQ-irq-unsafe lock: [ 494.558783][T16163] (tasklist_lock){.+.+}-{3:3} [ 494.558810][T16163] [ 494.558810][T16163] ... which became SOFTIRQ-irq-unsafe at: [ 494.564124][T16163] ... [ 494.564133][T16163] lock_acquire+0x179/0x350 [ 494.567256][T16163] _raw_read_lock+0x5f/0x70 [ 494.569247][T16163] __do_wait+0x105/0x890 [ 494.571117][T16163] do_wait+0x21d/0x590 [ 494.572980][T16163] kernel_wait+0x9f/0x160 [ 494.574912][T16163] call_usermodehelper_exec_work+0xf1/0x170 [ 494.577469][T16163] process_one_work+0x9cf/0x1b70 [ 494.579651][T16163] worker_thread+0x6c8/0xf10 [ 494.581676][T16163] kthread+0x3c5/0x780 [ 494.583511][T16163] ret_from_fork+0x675/0x7d0 [ 494.585550][T16163] ret_from_fork_asm+0x1a/0x30 [ 494.587750][T16163] [ 494.587750][T16163] other info that might help us debug this: [ 494.587750][T16163] [ 494.591969][T16163] Chain exists of: [ 494.591969][T16163] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 494.591969][T16163] [ 494.597540][T16163] Possible interrupt unsafe locking scenario: [ 494.597540][T16163] [ 494.601023][T16163] CPU0 CPU1 [ 494.603312][T16163] ---- ---- [ 494.605544][T16163] lock(tasklist_lock); [ 494.607386][T16163] local_irq_disable(); [ 494.610220][T16163] lock(&dev->event_lock#2); [ 494.613335][T16163] lock(&f_owner->lock); [ 494.616164][T16163] [ 494.617671][T16163] lock(&dev->event_lock#2); [ 494.619722][T16163] [ 494.619722][T16163] *** DEADLOCK *** [ 494.619722][T16163] [ 494.623145][T16163] 6 locks held by syz.3.3099/16163: [ 494.625373][T16163] #0: ffff888070892420 (sb_writers#5){.+.+}-{0:0}, at: vfs_truncate+0x336/0x6e0 [ 494.629295][T16163] #1: ffffffff8e60ce50 (file_rwsem){++++}-{0:0}, at: vfs_truncate+0x4d3/0x6e0 [ 494.633139][T16163] #2: ffff88802837df38 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x495/0x1810 [ 494.637166][T16163] #3: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 494.640967][T16163] #4: ffff88804fbcb210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 494.644781][T16163] #5: ffff88806816c220 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 494.648589][T16163] [ 494.648589][T16163] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 494.652999][T16163] -> (&dev->event_lock#2){..-.}-{3:3} { [ 494.655496][T16163] IN-SOFTIRQ-W at: [ 494.657322][T16163] lock_acquire+0x179/0x350 [ 494.660254][T16163] _raw_spin_lock_irqsave+0x3a/0x60 [ 494.663440][T16163] input_inject_event+0x9f/0x3b0 [ 494.666464][T16163] led_set_brightness+0x217/0x290 [ 494.669476][T16163] led_trigger_event+0xda/0x270 [ 494.672367][T16163] kbd_bh+0x21b/0x300 [ 494.675032][T16163] tasklet_action_common+0x284/0x400 [ 494.678191][T16163] handle_softirqs+0x219/0x8e0 [ 494.681121][T16163] run_ksoftirqd+0x3a/0x60 [ 494.683770][T16163] smpboot_thread_fn+0x3f7/0xae0 [ 494.686714][T16163] kthread+0x3c5/0x780 [ 494.689343][T16163] ret_from_fork+0x675/0x7d0 [ 494.692265][T16163] ret_from_fork_asm+0x1a/0x30 [ 494.695282][T16163] INITIAL USE at: [ 494.697071][T16163] lock_acquire+0x179/0x350 [ 494.699903][T16163] _raw_spin_lock_irqsave+0x3a/0x60 [ 494.703013][T16163] input_inject_event+0x9f/0x3b0 [ 494.705977][T16163] led_set_brightness+0x217/0x290 [ 494.709004][T16163] kbd_led_trigger_activate+0xcb/0x110 [ 494.712278][T16163] led_trigger_set+0x59a/0xc50 [ 494.715256][T16163] led_trigger_set_default+0x1e0/0x2e0 [ 494.718418][T16163] led_classdev_register_ext+0x7b8/0xa10 [ 494.721723][T16163] input_leds_connect+0x552/0x8e0 [ 494.724821][T16163] input_attach_handler.isra.0+0x176/0x250 [ 494.728232][T16163] input_register_device+0xab9/0x1180 [ 494.731589][T16163] atkbd_connect+0x5f8/0xa40 [ 494.734496][T16163] serio_driver_probe+0x7f/0xd0 [ 494.737368][T16163] really_probe+0x241/0xa90 [ 494.740214][T16163] __driver_probe_device+0x1de/0x440 [ 494.743538][T16163] driver_probe_device+0x4c/0x1b0 [ 494.746571][T16163] __driver_attach+0x283/0x580 [ 494.749462][T16163] bus_for_each_dev+0x13e/0x1d0 [ 494.752378][T16163] serio_handle_event+0x335/0xc30 [ 494.755439][T16163] process_one_work+0x9cf/0x1b70 [ 494.758395][T16163] worker_thread+0x6c8/0xf10 [ 494.761207][T16163] kthread+0x3c5/0x780 [ 494.763931][T16163] ret_from_fork+0x675/0x7d0 [ 494.766828][T16163] ret_from_fork_asm+0x1a/0x30 [ 494.769779][T16163] } [ 494.771030][T16163] ... key at: [] __key.7+0x0/0x40 [ 494.774205][T16163] -> (&client->buffer_lock){....}-{3:3} { [ 494.776792][T16163] INITIAL USE at: [ 494.778629][T16163] lock_acquire+0x179/0x350 [ 494.781414][T16163] _raw_spin_lock+0x2e/0x40 [ 494.783985][T16163] evdev_pass_values+0x10e/0x9b0 [ 494.786157][T16163] evdev_events+0x1bb/0x390 [ 494.788184][T16163] input_pass_values+0x74e/0x880 [ 494.790313][T16163] input_handle_event+0xf00/0x14d0 [ 494.792827][T16163] input_inject_event+0x1e8/0x3b0 [ 494.795552][T16163] evdev_write+0x2e1/0x440 [ 494.797844][T16163] vfs_write+0x2a0/0x11d0 [ 494.800202][T16163] ksys_write+0x1f8/0x250 [ 494.802553][T16163] __do_fast_syscall_32+0x7c/0x300 [ 494.804833][T16163] do_fast_syscall_32+0x32/0x80 [ 494.807212][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.809800][T16163] } [ 494.810697][T16163] ... key at: [] __key.83+0x0/0x40 [ 494.813201][T16163] ... acquired at: [ 494.814482][T16163] _raw_spin_lock+0x2e/0x40 [ 494.816053][T16163] evdev_pass_values+0x10e/0x9b0 [ 494.817657][T16163] evdev_events+0x1bb/0x390 [ 494.819137][T16163] input_pass_values+0x74e/0x880 [ 494.820733][T16163] input_handle_event+0xf00/0x14d0 [ 494.822380][T16163] input_inject_event+0x1e8/0x3b0 [ 494.824067][T16163] evdev_write+0x2e1/0x440 [ 494.825573][T16163] vfs_write+0x2a0/0x11d0 [ 494.827013][T16163] ksys_write+0x1f8/0x250 [ 494.828483][T16163] __do_fast_syscall_32+0x7c/0x300 [ 494.830632][T16163] do_fast_syscall_32+0x32/0x80 [ 494.832655][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.835245][T16163] [ 494.836134][T16163] -> (&new->fa_lock){....}-{3:3} { [ 494.837849][T16163] INITIAL USE at: [ 494.839257][T16163] lock_acquire+0x179/0x350 [ 494.841378][T16163] _raw_write_lock_irq+0x36/0x50 [ 494.843753][T16163] fasync_remove_entry+0xb2/0x1e0 [ 494.845942][T16163] fasync_helper+0xaf/0xd0 [ 494.848142][T16163] lease_modify+0x232/0x500 [ 494.850072][T16163] locks_remove_file+0x29e/0x5c0 [ 494.852510][T16163] __fput+0x351/0xb70 [ 494.854366][T16163] task_work_run+0x150/0x240 [ 494.856751][T16163] exit_to_user_mode_loop+0xec/0x130 [ 494.859189][T16163] __do_fast_syscall_32+0x240/0x300 [ 494.861330][T16163] do_fast_syscall_32+0x32/0x80 [ 494.863373][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.866052][T16163] INITIAL READ USE at: [ 494.867454][T16163] lock_acquire+0x179/0x350 [ 494.869513][T16163] _raw_read_lock_irqsave+0x74/0x90 [ 494.872008][T16163] kill_fasync+0x138/0x510 [ 494.874013][T16163] lease_break_callback+0x23/0x30 [ 494.876551][T16163] __break_lease+0x674/0x1810 [ 494.878710][T16163] do_dentry_open+0x91f/0x1530 [ 494.880963][T16163] vfs_open+0x82/0x3f0 [ 494.883091][T16163] path_openat+0x1de4/0x2cb0 [ 494.885425][T16163] do_filp_open+0x20b/0x470 [ 494.887693][T16163] do_open_execat+0xf9/0x3a0 [ 494.889989][T16163] open_exec+0x45/0x80 [ 494.892008][T16163] load_script+0x51d/0x790 [ 494.894077][T16163] bprm_execve+0x8be/0x1640 [ 494.896113][T16163] do_execveat_common.isra.0+0x4a5/0x610 [ 494.898463][T16163] __ia32_compat_sys_execveat+0xe0/0x120 [ 494.900946][T16163] __do_fast_syscall_32+0x7c/0x300 [ 494.903245][T16163] do_fast_syscall_32+0x32/0x80 [ 494.905403][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.908025][T16163] } [ 494.908902][T16163] ... key at: [] __key.0+0x0/0x40 [ 494.911142][T16163] ... acquired at: [ 494.912382][T16163] _raw_read_lock_irqsave+0x74/0x90 [ 494.914179][T16163] kill_fasync+0x138/0x510 [ 494.915773][T16163] evdev_pass_values+0x619/0x9b0 [ 494.917436][T16163] evdev_events+0x1bb/0x390 [ 494.919016][T16163] input_pass_values+0x74e/0x880 [ 494.920627][T16163] input_handle_event+0xf00/0x14d0 [ 494.922273][T16163] input_inject_event+0x1e8/0x3b0 [ 494.924029][T16163] evdev_write+0x2e1/0x440 [ 494.925549][T16163] vfs_write+0x2a0/0x11d0 [ 494.927051][T16163] ksys_write+0x1f8/0x250 [ 494.928532][T16163] __do_fast_syscall_32+0x7c/0x300 [ 494.930352][T16163] do_fast_syscall_32+0x32/0x80 [ 494.932207][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.934405][T16163] [ 494.935437][T16163] -> (&f_owner->lock){....}-{3:3} { [ 494.937672][T16163] INITIAL USE at: [ 494.939299][T16163] lock_acquire+0x179/0x350 [ 494.941478][T16163] _raw_write_lock_irq+0x36/0x50 [ 494.944124][T16163] __f_setown+0x61/0x3c0 [ 494.946508][T16163] generic_setlease+0xef2/0x1300 [ 494.949201][T16163] kernel_setlease+0x106/0x140 [ 494.951795][T16163] vfs_setlease+0x258/0x2d0 [ 494.954275][T16163] fcntl_setlease+0x3ed/0x5a0 [ 494.956831][T16163] do_fcntl+0x751/0x15a0 [ 494.959367][T16163] do_compat_fcntl64+0x367/0x710 [ 494.962111][T16163] __do_fast_syscall_32+0x7c/0x300 [ 494.964833][T16163] do_fast_syscall_32+0x32/0x80 [ 494.967434][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.970590][T16163] INITIAL READ USE at: [ 494.972478][T16163] lock_acquire+0x179/0x350 [ 494.975504][T16163] _raw_read_lock_irqsave+0x74/0x90 [ 494.978715][T16163] send_sigio+0x31/0x3e0 [ 494.981314][T16163] kill_fasync+0x214/0x510 [ 494.983891][T16163] lease_break_callback+0x23/0x30 [ 494.986433][T16163] __break_lease+0x674/0x1810 [ 494.988571][T16163] do_dentry_open+0x91f/0x1530 [ 494.991125][T16163] vfs_open+0x82/0x3f0 [ 494.993681][T16163] path_openat+0x1de4/0x2cb0 [ 494.996310][T16163] do_filp_open+0x20b/0x470 [ 494.999013][T16163] do_open_execat+0xf9/0x3a0 [ 495.001662][T16163] open_exec+0x45/0x80 [ 495.004173][T16163] load_script+0x51d/0x790 [ 495.006721][T16163] bprm_execve+0x8be/0x1640 [ 495.009301][T16163] do_execveat_common.isra.0+0x4a5/0x610 [ 495.012156][T16163] __ia32_compat_sys_execveat+0xe0/0x120 [ 495.014614][T16163] __do_fast_syscall_32+0x7c/0x300 [ 495.017530][T16163] do_fast_syscall_32+0x32/0x80 [ 495.020412][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.023920][T16163] } [ 495.025052][T16163] ... key at: [] __key.1+0x0/0x40 [ 495.028121][T16163] ... acquired at: [ 495.029907][T16163] _raw_read_lock_irqsave+0x74/0x90 [ 495.032358][T16163] send_sigio+0x31/0x3e0 [ 495.034266][T16163] kill_fasync+0x214/0x510 [ 495.036183][T16163] lease_break_callback+0x23/0x30 [ 495.038310][T16163] __break_lease+0x674/0x1810 [ 495.040264][T16163] do_dentry_open+0x91f/0x1530 [ 495.042283][T16163] vfs_open+0x82/0x3f0 [ 495.044107][T16163] path_openat+0x1de4/0x2cb0 [ 495.046110][T16163] do_filp_open+0x20b/0x470 [ 495.048043][T16163] do_open_execat+0xf9/0x3a0 [ 495.050116][T16163] open_exec+0x45/0x80 [ 495.052081][T16163] load_script+0x51d/0x790 [ 495.054296][T16163] bprm_execve+0x8be/0x1640 [ 495.056278][T16163] do_execveat_common.isra.0+0x4a5/0x610 [ 495.058129][T16163] __ia32_compat_sys_execveat+0xe0/0x120 [ 495.059931][T16163] __do_fast_syscall_32+0x7c/0x300 [ 495.061873][T16163] do_fast_syscall_32+0x32/0x80 [ 495.063968][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.066489][T16163] [ 495.067494][T16163] [ 495.067494][T16163] the dependencies between the lock to be acquired [ 495.067502][T16163] and SOFTIRQ-irq-unsafe lock: [ 495.073012][T16163] -> (tasklist_lock){.+.+}-{3:3} { [ 495.075128][T16163] HARDIRQ-ON-R at: [ 495.076706][T16163] lock_acquire+0x179/0x350 [ 495.079139][T16163] _raw_read_lock+0x5f/0x70 [ 495.081679][T16163] __do_wait+0x105/0x890 [ 495.084120][T16163] do_wait+0x21d/0x590 [ 495.086590][T16163] kernel_wait+0x9f/0x160 [ 495.089136][T16163] call_usermodehelper_exec_work+0xf1/0x170 [ 495.092236][T16163] process_one_work+0x9cf/0x1b70 [ 495.094863][T16163] worker_thread+0x6c8/0xf10 [ 495.097433][T16163] kthread+0x3c5/0x780 [ 495.099745][T16163] ret_from_fork+0x675/0x7d0 [ 495.102327][T16163] ret_from_fork_asm+0x1a/0x30 [ 495.104940][T16163] SOFTIRQ-ON-R at: [ 495.106650][T16163] lock_acquire+0x179/0x350 [ 495.109214][T16163] _raw_read_lock+0x5f/0x70 [ 495.111842][T16163] __do_wait+0x105/0x890 [ 495.114335][T16163] do_wait+0x21d/0x590 [ 495.116633][T16163] kernel_wait+0x9f/0x160 [ 495.118517][T16163] call_usermodehelper_exec_work+0xf1/0x170 [ 495.121062][T16163] process_one_work+0x9cf/0x1b70 [ 495.123790][T16163] worker_thread+0x6c8/0xf10 [ 495.126370][T16163] kthread+0x3c5/0x780 [ 495.128768][T16163] ret_from_fork+0x675/0x7d0 [ 495.131199][T16163] ret_from_fork_asm+0x1a/0x30 [ 495.133230][T16163] INITIAL USE at: [ 495.134457][T16163] lock_acquire+0x179/0x350 [ 495.136344][T16163] _raw_write_lock_irq+0x36/0x50 [ 495.138315][T16163] copy_process+0x4fe3/0x76a0 [ 495.140283][T16163] kernel_clone+0xfc/0x930 [ 495.142850][T16163] user_mode_thread+0xc8/0x110 [ 495.145432][T16163] rest_init+0x23/0x2b0 [ 495.147847][T16163] start_kernel+0x3f6/0x4e0 [ 495.150346][T16163] x86_64_start_reservations+0x18/0x30 [ 495.153244][T16163] x86_64_start_kernel+0x130/0x190 [ 495.156063][T16163] common_startup_64+0x13e/0x148 [ 495.158727][T16163] INITIAL READ USE at: [ 495.160527][T16163] lock_acquire+0x179/0x350 [ 495.163220][T16163] _raw_read_lock+0x5f/0x70 [ 495.165842][T16163] __do_wait+0x105/0x890 [ 495.168404][T16163] do_wait+0x21d/0x590 [ 495.170840][T16163] kernel_wait+0x9f/0x160 [ 495.173442][T16163] call_usermodehelper_exec_work+0xf1/0x170 [ 495.176515][T16163] process_one_work+0x9cf/0x1b70 [ 495.179229][T16163] worker_thread+0x6c8/0xf10 [ 495.181295][T16163] kthread+0x3c5/0x780 [ 495.183205][T16163] ret_from_fork+0x675/0x7d0 [ 495.185203][T16163] ret_from_fork_asm+0x1a/0x30 [ 495.187793][T16163] } [ 495.188946][T16163] ... key at: [] tasklist_lock+0x18/0x40 [ 495.192167][T16163] ... acquired at: [ 495.193722][T16163] lock_acquire+0x179/0x350 [ 495.195643][T16163] _raw_read_lock+0x5f/0x70 [ 495.197574][T16163] send_sigio+0xb8/0x3e0 [ 495.199468][T16163] kill_fasync+0x214/0x510 [ 495.201432][T16163] lease_break_callback+0x23/0x30 [ 495.203633][T16163] __break_lease+0x674/0x1810 [ 495.205667][T16163] vfs_truncate+0x4d3/0x6e0 [ 495.207517][T16163] __ia32_compat_sys_truncate+0x171/0x1e0 [ 495.210015][T16163] __do_fast_syscall_32+0x7c/0x300 [ 495.212402][T16163] do_fast_syscall_32+0x32/0x80 [ 495.214728][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.217455][T16163] [ 495.218477][T16163] [ 495.218477][T16163] stack backtrace: [ 495.220945][T16163] CPU: 3 UID: 0 PID: 16163 Comm: syz.3.3099 Not tainted syzkaller #0 PREEMPT(full) [ 495.220968][T16163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.220979][T16163] Call Trace: [ 495.220986][T16163] [ 495.220992][T16163] dump_stack_lvl+0x116/0x1f0 [ 495.221016][T16163] check_irq_usage+0x7dc/0x920 [ 495.221044][T16163] ? check_path.constprop.0+0x24/0x50 [ 495.221069][T16163] ? __lock_acquire+0x1285/0x1c90 [ 495.221089][T16163] __lock_acquire+0x1285/0x1c90 [ 495.221114][T16163] ? __lock_acquire+0xb8a/0x1c90 [ 495.221138][T16163] lock_acquire+0x179/0x350 [ 495.221161][T16163] ? send_sigio+0xb8/0x3e0 [ 495.221182][T16163] ? lock_acquire+0x179/0x350 [ 495.221201][T16163] _raw_read_lock+0x5f/0x70 [ 495.221219][T16163] ? send_sigio+0xb8/0x3e0 [ 495.221240][T16163] send_sigio+0xb8/0x3e0 [ 495.221263][T16163] kill_fasync+0x214/0x510 [ 495.221286][T16163] lease_break_callback+0x23/0x30 [ 495.221309][T16163] __break_lease+0x674/0x1810 [ 495.221326][T16163] ? lock_acquire+0x179/0x350 [ 495.221349][T16163] ? __pfx___break_lease+0x10/0x10 [ 495.221367][T16163] ? mnt_get_write_access+0x52/0x2f0 [ 495.221389][T16163] ? mnt_get_write_access+0x1e9/0x2f0 [ 495.221414][T16163] vfs_truncate+0x4d3/0x6e0 [ 495.221435][T16163] ? __pfx_vfs_truncate+0x10/0x10 [ 495.221455][T16163] ? putname+0x154/0x1a0 [ 495.221475][T16163] ? putname+0x154/0x1a0 [ 495.221498][T16163] __ia32_compat_sys_truncate+0x171/0x1e0 [ 495.221520][T16163] ? __pfx___ia32_compat_sys_truncate+0x10/0x10 [ 495.221541][T16163] ? syscall_trace_enter+0x1cb/0x240 [ 495.221570][T16163] ? rcu_is_watching+0x12/0xc0 [ 495.221590][T16163] __do_fast_syscall_32+0x7c/0x300 [ 495.221614][T16163] do_fast_syscall_32+0x32/0x80 [ 495.221636][T16163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.221658][T16163] RIP: 0023:0xf7fc6579 [ 495.221671][T16163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 495.221688][T16163] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 000000000000005c [ 495.221704][T16163] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 495.221715][T16163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.221725][T16163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.221735][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.221745][T16163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.221761][T16163] [ 495.225581][ T59] usb 40-1: device descriptor read/8, error -110 [ 495.237333][ T5946] Bluetooth: hci4: command 0x0406 tx timeout [ 495.647909][ T59] usb usb40-port1: attempt power cycle [ 496.217873][ T59] usb usb40-port1: unable to enumerate USB device [ 498.217134][ T53] usb 38-1: device descriptor read/8, error -110 [ 498.607956][ T53] usb usb38-port1: attempt power cycle [ 499.177825][ T53] usb usb38-port1: unable to enumerate USB device VM DIAGNOSIS: 22:22:00 Registers: info registers vcpu 0 CPU#0 RAX=00000000005f3054 RBX=0000000000000000 RCX=ffffffff8b5d92a9 RDX=ffffed1005646656 RSI=ffffffff8bf07540 RDI=ffffffff8191bf0d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000809e1000 CR3=000000006fe0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8194e84a RDX=1ffff110045d0266 RSI=0000000000000010 RDI=ffff888022e80000 RBP=0000000000000001 RSP=ffffc9000736f880 R8 =0000000000000014 R9 =ffffed10095ee01e R10=ffff88804af700f7 R11=0000000000000001 R12=ffff888022e80000 R13=ffff888022e81330 R14=0000000000000000 R15=ffff88802b3240c0 RIP=ffffffff81942890 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000a000 CR3=000000006fe0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000023 RCX=ffffffff8ae090ab RDX=ffff88806ab38000 RSI=00000000000000c4 RDI=0000000000000001 RBP=ffffffff8ce38b00 RSP=ffffc90025e4edc0 R8 =0000000000000001 R9 =00000000000000c4 R10=0000000000000000 R11=ffff88806940f000 R12=0000000000000000 R13=0000000000000001 R14=000000000000002b R15=dffffc0000000000 RIP=ffffffff81bc51a1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005561e8511f40 CR3=0000000028add000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1a8b5e1e84f219a4 f98332986a01827b 1a8b5e1e84f219a4 f98332986a01827b 1a8b5e1e84f219a4 f98332986a01827b 1a8b5e1e84f219a4 f98332986a01827b ZMM18=4a12ccef16e9c190 d7f4e3d47a089134 4a12ccef16e9c190 d7f4e3d47a089134 4a12ccef16e9c190 d7f4e3d47a089134 4a12ccef16e9c190 d7f4e3d47a089134 ZMM19=b813000000000000 0000000000000004 b813000000000000 0000000000000003 b813000000000000 0000000000000002 b813000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304080021b00300 72656c6c616b7a79 7301ffffffffffff ffffeb0804800304 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800421a0030e8004 2190030608002188 0330080021800330 8280080000080003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002060175de0023 7665646275732d6c 34762f7665642f01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0155de0002010800 040c75e400332f6f 666e69646601ffff ffffffffffffed08 ZMM25=d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 d7f4e3d4d7f4e3d4 ZMM26=16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 16e9c19016e9c190 ZMM27=4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef 4a12ccef4a12ccef ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b7130000b7130000 b7130000b7130000 b7130000b7130000 b7130000b7130000 b7130000b7130000 b7130000b7130000 b7130000b7130000 b7130000b7130000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269255 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc9000644f4a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000031 R14=ffffffff9adc5da0 R15=ffffffff852691f0 RIP=ffffffff8526927f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000100 CR3=000000004a1d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000