last executing test programs: 21.737312334s ago: executing program 1 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x80010, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x201300) r5 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r5, &(0x7f0000000280)=""/226, 0xe2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r6, r6, 0x0, 0x1002000ff) dup(r2) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000004000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20.88550515s ago: executing program 1 (id=1173): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(0xffffffffffffffff, &(0x7f00000003c0)="76b750740a059be7000000040000cd374a11e1c183a184d137b41179e3d69b12c535a59a4982f80be4cb01000100eb537aa8594e5ba282aaf701c67801e03d3472eb2f003c87cf2d2a9559bc30a6471c6337075642c2dfc3ab727819958bbe97257808ac014a20ab25453954d79765f116616f1eceb6855e6eb1d23417c11cd230f2dfe7cf261f", 0x87) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x1}}, 0x3c) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000140)=@keyring) 18.46752612s ago: executing program 1 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xee00, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r1, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r2 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) write(r3, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) 18.395558777s ago: executing program 1 (id=1180): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x104480a, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000009000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001a00000008bd7000fbdbdf2500000000"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f2821733148934c0dbe9aaa53feb880260fd85c29271ff20b5"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000f9cdec816eb05c09090866901f4b9100f1a068b6c34c0200000000000000677f4ce4e7b2204ae1b8d029210be6d6df0cd57d4d77571b8a7b7397c8c4c29330524b8e3acccb3fe77161c21743bc6eaab71f2529ed1443d4ce2beab0370163cb9f9e9054dc781a064c4141d548ae298cd388c8d921015bd0032c25bb3f10275c1d27e47ec94ebb445dc8f00600000039299795"], 0x20}}, 0x0) 18.288136286s ago: executing program 1 (id=1183): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa6ff, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) 17.988525207s ago: executing program 1 (id=1184): mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x100004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='\x00\x00\x00\x00\x00', 0x5) close(r3) 17.894474441s ago: executing program 32 (id=1184): mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x100004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='\x00\x00\x00\x00\x00', 0x5) close(r3) 5.956785985s ago: executing program 3 (id=1233): socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x24) 5.21706179s ago: executing program 3 (id=1237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 5.148256833s ago: executing program 3 (id=1239): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) close(0x5) sendmmsg(r2, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007f40)=[{0x14, 0x1, 0x1, "45d37e4eeae38f"}], 0x14}}], 0x2, 0x1000) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x0) ioctl$NBD_CLEAR_QUE(r5, 0xab05) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x28, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x6b9, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x683d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.970633731s ago: executing program 4 (id=1240): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) 4.575020679s ago: executing program 3 (id=1242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], 0x0, 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078000000e0e0004df6bc304e2000089078ef7fa336fa6e4d3fe83378"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 3.572619999s ago: executing program 2 (id=1245): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0xf2) 3.48475856s ago: executing program 4 (id=1246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078000000e0e0004df6bc304e2000089078ef7fa336fa6e4d3fe83378"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 3.348374604s ago: executing program 2 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e0000000110001002cbd7000fbdbdf0cc97b3c3489426d1e97eda8bc94b3c97e1400a900fc007e0000000000000000000000000108004100", @ANYRES32=0x0, @ANYBLOB="d4d83f1a4700378bab03d68813aa243549b14743f8cf2dcc63f7eaca568732c4e73182c5636ed9d47eb1fce8faa174d22824756c71695f4bee39999425b51415d1f30d76f3761891d5a27eb41077ae07a91e415b3cd82c75e7a713638c5a28359c9f5f02c7eb88cc61d9a6b7c97af90bc1b2856cf05084ec2b23694fa3a8f9a4ff9978290e921497d3abe4052f2adfe4a58fccd12278f90a600a0ea8156a95ba00000000"], 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r1, r3, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfff8, r0}, 0x38) 3.347880966s ago: executing program 0 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {0x0, 0xfff3}, {0x5, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.16797412s ago: executing program 2 (id=1249): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000200025a729bd7000fddbdf250a0000cdff00000102000100080018004e234e230800060000000000050015000200000014000100fc010000000000000000000000000000080007000500000014000100ff010000000000000000000000000001080017804e"], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x92d, 0x0, 0xff, 0xc, 0x7, 0x4}, &(0x7f0000000140)=0x20) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3f, 0x400200cc1, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 2.957053412s ago: executing program 0 (id=1250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0xd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x1f, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.848324632s ago: executing program 0 (id=1251): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.556960845s ago: executing program 4 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e440ca573645e74453d302c00"]) (rerun: 64) 2.348310896s ago: executing program 4 (id=1253): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) 1.588350193s ago: executing program 0 (id=1254): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) 1.588110171s ago: executing program 2 (id=1255): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) 1.388638754s ago: executing program 3 (id=1256): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0xc02063a1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140)={0x6813cf53}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x2000008, 0xd, 0x40000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x800, 0x3742e5c81d8e3a43) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffe, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) 350.414846ms ago: executing program 2 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x18, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000336000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 248.895027ms ago: executing program 0 (id=1258): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 225.890827ms ago: executing program 4 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {0x0, 0xfff3}, {0x5, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 103.420634ms ago: executing program 3 (id=1260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078000000e0e0004df6bc304e2000089078ef7fa336fa6e4d3fe83378"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 58.659905ms ago: executing program 0 (id=1268): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x100000000000000, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 14.478083ms ago: executing program 2 (id=1261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], 0x0, 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078000000e0e0004df6bc304e2000089078ef7fa336fa6e4d3fe83378"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 0s ago: executing program 4 (id=1262): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 0s ago: executing program 0 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/loop0,0', 0xc) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.1.602'. [ 290.090746][ T5915] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 290.212302][ T8600] comedi comedi1: Minor 4 specified more than once! [ 290.598506][ T5915] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 290.909028][ T8590] ceph: No mds server is up or the cluster is laggy [ 291.358165][ T7224] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 291.523792][ T8628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 291.526448][ T8628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 291.529638][ T8628] vhci_hcd vhci_hcd.0: Device attached [ 292.114332][ T8632] vhci_hcd: connection closed [ 292.115093][ T12] vhci_hcd vhci_hcd.2: stop threads [ 292.118789][ T12] vhci_hcd vhci_hcd.2: release socket [ 292.120840][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 292.163304][ T8636] netlink: 512 bytes leftover after parsing attributes in process `syz.1.614'. [ 292.346425][ T7224] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 292.368613][ T7224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 292.374115][ T7224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 292.380304][ T7224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.383901][ T7224] usb 5-1: Product: syz [ 292.385656][ T7224] usb 5-1: Manufacturer: syz [ 292.387606][ T7224] usb 5-1: SerialNumber: syz [ 292.392852][ T7224] usb 5-1: config 0 descriptor?? [ 292.399737][ T7224] hub 5-1:0.0: bad descriptor, ignoring hub [ 292.412613][ T7224] hub 5-1:0.0: probe with driver hub failed with error -5 [ 292.425734][ T7224] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 292.438231][ T6575] usb 44-1: device descriptor read/8, error -110 [ 292.685995][ T8645] FAULT_INJECTION: forcing a failure. [ 292.685995][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.693461][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 292.693488][ T8645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.693500][ T8645] Call Trace: [ 292.693507][ T8645] [ 292.693514][ T8645] dump_stack_lvl+0x100/0x190 [ 292.693543][ T8645] should_fail_ex.cold+0x5/0xa [ 292.693565][ T8645] _copy_from_user+0x2e/0xd0 [ 292.693595][ T8645] comm_write+0xc3/0x2c0 [ 292.693623][ T8645] ? __pfx_comm_write+0x10/0x10 [ 292.693655][ T8645] vfs_write+0x2aa/0x1050 [ 292.693674][ T8645] ? __pfx_comm_write+0x10/0x10 [ 292.693701][ T8645] ? __pfx_vfs_write+0x10/0x10 [ 292.693716][ T8645] ? find_held_lock+0x2b/0x80 [ 292.693741][ T8645] ? __fget_files+0x215/0x3d0 [ 292.693762][ T8645] ? __fget_files+0x21f/0x3d0 [ 292.693787][ T8645] ksys_write+0x12a/0x250 [ 292.693804][ T8645] ? __pfx_ksys_write+0x10/0x10 [ 292.693819][ T8645] ? ksys_write+0x1ac/0x250 [ 292.693835][ T8645] ? __pfx_ksys_write+0x10/0x10 [ 292.693858][ T8645] __do_fast_syscall_32+0xe7/0x970 [ 292.693885][ T8645] ? lockdep_hardirqs_on+0x78/0x100 [ 292.693913][ T8645] do_fast_syscall_32+0x32/0x70 [ 292.693941][ T8645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.693964][ T8645] RIP: 0023:0xf7f56fec [ 292.693986][ T8645] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 292.693994][ T8645] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 292.694012][ T8645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 292.694023][ T8645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.694032][ T8645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.694042][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.694052][ T8645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.694076][ T8645] [ 292.831383][ T6575] usb usb44-port1: attempt power cycle [ 293.878740][ T6575] usb usb44-port1: unable to enumerate USB device [ 294.278239][ T5887] usb 5-1: USB disconnect, device number 7 [ 294.799841][ T8678] netlink: 512 bytes leftover after parsing attributes in process `syz.3.628'. [ 295.190378][ T8688] FAULT_INJECTION: forcing a failure. [ 295.190378][ T8688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.198379][ T8688] CPU: 2 UID: 0 PID: 8688 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 295.198397][ T8688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.198403][ T8688] Call Trace: [ 295.198408][ T8688] [ 295.198412][ T8688] dump_stack_lvl+0x100/0x190 [ 295.198429][ T8688] should_fail_ex.cold+0x5/0xa [ 295.198442][ T8688] _copy_from_user+0x2e/0xd0 [ 295.198461][ T8688] get_compat_msghdr+0xb3/0x480 [ 295.198479][ T8688] ? __pfx_get_compat_msghdr+0x10/0x10 [ 295.198501][ T8688] ___sys_sendmsg+0x1b6/0x1e0 [ 295.198514][ T8688] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.198532][ T8688] ? find_held_lock+0x2b/0x80 [ 295.198554][ T8688] __sys_sendmsg+0x160/0x210 [ 295.198569][ T8688] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.198587][ T8688] ? __pfx_ksys_write+0x10/0x10 [ 295.198601][ T8688] __do_fast_syscall_32+0xe7/0x970 [ 295.198618][ T8688] ? lockdep_hardirqs_on+0x78/0x100 [ 295.198634][ T8688] do_fast_syscall_32+0x32/0x70 [ 295.198651][ T8688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.198665][ T8688] RIP: 0023:0xf7f06fec [ 295.198679][ T8688] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 295.198684][ T8688] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 295.198695][ T8688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 295.198701][ T8688] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.198708][ T8688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.198714][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.198719][ T8688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.198731][ T8688] [ 295.372997][ T8683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 295.375552][ T8683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 295.378946][ T8683] vhci_hcd vhci_hcd.0: Device attached [ 295.798851][ T8689] vhci_hcd: connection closed [ 295.800748][ T12] vhci_hcd vhci_hcd.3: stop threads [ 295.801489][ T8692] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 295.802690][ T12] vhci_hcd vhci_hcd.3: release socket [ 295.804360][ T8692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 295.808015][ T8692] vhci_hcd vhci_hcd.0: Device attached [ 295.809758][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 295.823130][ T8696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.090442][ T6575] usb 42-1: SetAddress Request (79) to port 0 [ 296.092380][ T6575] usb 42-1: new SuperSpeed USB device number 79 using vhci_hcd [ 296.768029][ T7224] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 296.922570][ T7224] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 296.932250][ T7224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 296.939753][ T7224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 296.959540][ T7224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.964018][ T7224] usb 6-1: Product: syz [ 296.966251][ T7224] usb 6-1: Manufacturer: syz [ 296.968161][ T7224] usb 6-1: SerialNumber: syz [ 296.971784][ T7224] usb 6-1: config 0 descriptor?? [ 296.977052][ T7224] hub 6-1:0.0: bad descriptor, ignoring hub [ 296.979359][ T7224] hub 6-1:0.0: probe with driver hub failed with error -5 [ 296.986532][ T7224] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 297.163653][ T5096] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 297.166169][ T5096] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 297.171075][ T8718] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 297.184497][ T8719] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 297.208628][ T8718] input: syz0 as /devices/virtual/input/input7 [ 297.234613][ T8721] netlink: 512 bytes leftover after parsing attributes in process `syz.2.639'. [ 297.458199][ T8693] vhci_hcd: connection reset by peer [ 297.459966][ T12] vhci_hcd vhci_hcd.2: stop threads [ 297.461821][ T12] vhci_hcd vhci_hcd.2: release socket [ 297.463560][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 297.539022][ T8730] netlink: 512 bytes leftover after parsing attributes in process `syz.0.644'. [ 297.566982][ T8730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.644'. [ 298.796958][ T8750] ======================================================= [ 298.796958][ T8750] WARNING: The mand mount option has been deprecated and [ 298.796958][ T8750] and is ignored by this kernel. Remove the mand [ 298.796958][ T8750] option from the mount to silence this warning. [ 298.796958][ T8750] ======================================================= [ 298.814032][ T8750] option changes via remount are deprecated (pid=8747 comm=syz.2.651) [ 299.110495][ T1344] usb 6-1: USB disconnect, device number 8 [ 299.386821][ T8763] netlink: 512 bytes leftover after parsing attributes in process `syz.1.655'. [ 299.401555][ T8763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.655'. [ 299.980976][ T8777] input: syz1 as /devices/virtual/input/input8 [ 301.149406][ T6575] usb 42-1: device descriptor read/8, error -110 [ 301.549610][ T6575] usb usb42-port1: attempt power cycle [ 301.839541][ T8798] FAULT_INJECTION: forcing a failure. [ 301.839541][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 301.844767][ T8798] CPU: 2 UID: 0 PID: 8798 Comm: syz.2.667 Not tainted syzkaller #0 PREEMPT(full) [ 301.844783][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.844791][ T8798] Call Trace: [ 301.844797][ T8798] [ 301.844802][ T8798] dump_stack_lvl+0x100/0x190 [ 301.844821][ T8798] should_fail_ex.cold+0x5/0xa [ 301.844835][ T8798] should_failslab+0xc2/0x120 [ 301.844852][ T8798] __kvmalloc_node_noprof+0x116/0x970 [ 301.844866][ T8798] ? __lock_acquire+0x49f/0x1a40 [ 301.844879][ T8798] ? traverse.part.0.constprop.0+0x397/0x650 [ 301.844909][ T8798] traverse.part.0.constprop.0+0x397/0x650 [ 301.844931][ T8798] seq_read_iter+0x93f/0x1270 [ 301.844949][ T8798] ? aa_file_perm+0x7f3/0x14d0 [ 301.844970][ T8798] seq_read+0x344/0x4d0 [ 301.844986][ T8798] ? __pfx_seq_read+0x10/0x10 [ 301.845005][ T8798] ? get_pid_task+0xfc/0x250 [ 301.845020][ T8798] ? get_pid_task+0xfc/0x250 [ 301.845037][ T8798] ? __pfx_seq_read+0x10/0x10 [ 301.845053][ T8798] proc_reg_read+0x240/0x330 [ 301.845065][ T8798] ? __pfx_proc_reg_read+0x10/0x10 [ 301.845076][ T8798] vfs_read+0x1e4/0xb40 [ 301.845089][ T8798] ? __pfx_vfs_read+0x10/0x10 [ 301.845097][ T8798] ? find_held_lock+0x2b/0x80 [ 301.845110][ T8798] ? __fget_files+0x215/0x3d0 [ 301.845120][ T8798] ? __fget_files+0x215/0x3d0 [ 301.845132][ T8798] ? __fget_files+0x21f/0x3d0 [ 301.845145][ T8798] ksys_pread64+0x161/0x1a0 [ 301.845156][ T8798] ? __pfx_ksys_pread64+0x10/0x10 [ 301.845166][ T8798] ? ksys_write+0x1ac/0x250 [ 301.845176][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 301.845188][ T8798] __do_fast_syscall_32+0xe7/0x970 [ 301.845211][ T8798] ? lockdep_hardirqs_on+0x78/0x100 [ 301.845228][ T8798] do_fast_syscall_32+0x32/0x70 [ 301.845244][ T8798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.845258][ T8798] RIP: 0023:0xf7f57fec [ 301.845272][ T8798] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 301.845277][ T8798] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 301.845288][ T8798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 301.845295][ T8798] RDX: 000000000000fd8a RSI: 000000000000003c RDI: 0000000000000000 [ 301.845301][ T8798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.845307][ T8798] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.845313][ T8798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.845325][ T8798] [ 302.022540][ T8795] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 302.024884][ T8795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.027640][ T8795] vhci_hcd vhci_hcd.0: Device attached [ 302.402094][ T8801] vhci_hcd: connection closed [ 302.402350][ T12] vhci_hcd vhci_hcd.3: stop threads [ 302.405761][ T12] vhci_hcd vhci_hcd.3: release socket [ 302.407533][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 302.588664][ T6575] usb usb42-port1: unable to enumerate USB device [ 303.449454][ T8827] FAULT_INJECTION: forcing a failure. [ 303.449454][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 303.454719][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.3.674 Not tainted syzkaller #0 PREEMPT(full) [ 303.454736][ T8827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.454743][ T8827] Call Trace: [ 303.454747][ T8827] [ 303.454751][ T8827] dump_stack_lvl+0x100/0x190 [ 303.454774][ T8827] should_fail_ex.cold+0x5/0xa [ 303.454787][ T8827] should_failslab+0xc2/0x120 [ 303.454803][ T8827] __kmalloc_cache_noprof+0x91/0x6c0 [ 303.454815][ T8827] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 303.454832][ T8827] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 303.454846][ T8827] ? rcu_is_watching+0x12/0xc0 [ 303.454859][ T8827] ? trace_contention_end+0x126/0x160 [ 303.454883][ T8827] ? snd_pcm_oss_write+0x49a/0xa30 [ 303.454895][ T8827] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 303.454907][ T8827] ? __lock_acquire+0x49f/0x1a40 [ 303.454918][ T8827] ? __pfx___mutex_lock+0x10/0x10 [ 303.454939][ T8827] ? __pfx___might_resched+0x10/0x10 [ 303.454979][ T8827] ? find_held_lock+0x2b/0x80 [ 303.455002][ T8827] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 303.455020][ T8827] snd_pcm_oss_write+0x4bb/0xa30 [ 303.455036][ T8827] ? bpf_lsm_file_permission+0x9/0x10 [ 303.455047][ T8827] ? security_file_permission+0x76/0x210 [ 303.455066][ T8827] vfs_write+0x2aa/0x1050 [ 303.455077][ T8827] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 303.455090][ T8827] ? __pfx_vfs_write+0x10/0x10 [ 303.455099][ T8827] ? find_held_lock+0x2b/0x80 [ 303.455112][ T8827] ? __fget_files+0x215/0x3d0 [ 303.455122][ T8827] ? __fget_files+0x215/0x3d0 [ 303.455134][ T8827] ? __fget_files+0x21f/0x3d0 [ 303.455147][ T8827] ksys_write+0x12a/0x250 [ 303.455158][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 303.455167][ T8827] ? ksys_write+0x1ac/0x250 [ 303.455177][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 303.455190][ T8827] __do_fast_syscall_32+0xe7/0x970 [ 303.455206][ T8827] ? lockdep_hardirqs_on+0x78/0x100 [ 303.455222][ T8827] do_fast_syscall_32+0x32/0x70 [ 303.455239][ T8827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.455253][ T8827] RIP: 0023:0xf7f56fec [ 303.455266][ T8827] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 303.455271][ T8827] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 303.455282][ T8827] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 303.455289][ T8827] RDX: 000000000000fdbc RSI: 0000000000000000 RDI: 0000000000000000 [ 303.455295][ T8827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.455302][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.455308][ T8827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.455320][ T8827] [ 303.589990][ T8825] input: syz1 as /devices/virtual/input/input9 [ 303.622599][ T8830] fuse: Unknown parameter 'ńoup_id' [ 304.244424][ T8845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 304.246837][ T8845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 304.252498][ T8845] vhci_hcd vhci_hcd.0: Device attached [ 304.528001][ T6575] usb 44-1: SetAddress Request (74) to port 0 [ 304.535231][ T6575] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd [ 305.311358][ T8848] vhci_hcd: connection reset by peer [ 305.313463][ T12] vhci_hcd vhci_hcd.3: stop threads [ 305.315287][ T12] vhci_hcd vhci_hcd.3: release socket [ 305.317173][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 305.955433][ T8867] FAULT_INJECTION: forcing a failure. [ 305.955433][ T8867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.971223][ T8867] CPU: 0 UID: 0 PID: 8867 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT(full) [ 305.971243][ T8867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.971262][ T8867] Call Trace: [ 305.971268][ T8867] [ 305.971272][ T8867] dump_stack_lvl+0x100/0x190 [ 305.971290][ T8867] should_fail_ex.cold+0x5/0xa [ 305.971307][ T8867] _copy_from_user+0x2e/0xd0 [ 305.971325][ T8867] ucma_write+0x128/0x330 [ 305.971339][ T8867] ? __pfx_ucma_write+0x10/0x10 [ 305.971349][ T8867] ? bpf_lsm_file_permission+0x9/0x10 [ 305.971360][ T8867] ? security_file_permission+0x76/0x210 [ 305.971377][ T8867] ? rw_verify_area+0xce/0x6d0 [ 305.971394][ T8867] vfs_write+0x2aa/0x1050 [ 305.971405][ T8867] ? __pfx_ucma_write+0x10/0x10 [ 305.971416][ T8867] ? __pfx_vfs_write+0x10/0x10 [ 305.971426][ T8867] ? find_held_lock+0x2b/0x80 [ 305.971440][ T8867] ? __fget_files+0x215/0x3d0 [ 305.971450][ T8867] ? __fget_files+0x215/0x3d0 [ 305.971462][ T8867] ? __fget_files+0x21f/0x3d0 [ 305.971475][ T8867] ksys_write+0x1f8/0x250 [ 305.971485][ T8867] ? __pfx_ksys_write+0x10/0x10 [ 305.971495][ T8867] ? ksys_write+0x1ac/0x250 [ 305.971504][ T8867] ? __pfx_ksys_write+0x10/0x10 [ 305.971517][ T8867] __do_fast_syscall_32+0xe7/0x970 [ 305.971534][ T8867] ? lockdep_hardirqs_on+0x78/0x100 [ 305.971551][ T8867] do_fast_syscall_32+0x32/0x70 [ 305.971568][ T8867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.971582][ T8867] RIP: 0023:0xf7f56fec [ 305.971597][ T8867] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 305.971602][ T8867] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 305.971613][ T8867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 305.971619][ T8867] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.971626][ T8867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.971632][ T8867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.971638][ T8867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.971650][ T8867] [ 306.116432][ T8871] ucma_write: process 632 (syz.1.690) changed security contexts after opening file descriptor, this is not allowed. [ 306.182368][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 307.048056][ T50] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 307.177991][ T50] usb 6-1: device descriptor read/64, error -71 [ 307.430893][ T50] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 307.569646][ T50] usb 6-1: device descriptor read/64, error -71 [ 307.605126][ T8902] veth2: entered allmulticast mode [ 307.655544][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'. [ 307.680595][ T50] usb usb6-port1: attempt power cycle [ 307.900188][ T8911] FAULT_INJECTION: forcing a failure. [ 307.900188][ T8911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.904479][ T8911] CPU: 2 UID: 0 PID: 8911 Comm: syz.3.701 Not tainted syzkaller #0 PREEMPT(full) [ 307.904494][ T8911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.904502][ T8911] Call Trace: [ 307.904506][ T8911] [ 307.904511][ T8911] dump_stack_lvl+0x100/0x190 [ 307.904528][ T8911] should_fail_ex.cold+0x5/0xa [ 307.904540][ T8911] _copy_from_user+0x2e/0xd0 [ 307.904559][ T8911] get_compat_msghdr+0xb3/0x480 [ 307.904578][ T8911] ? __pfx_get_compat_msghdr+0x10/0x10 [ 307.904599][ T8911] ___sys_sendmsg+0x1b6/0x1e0 [ 307.904613][ T8911] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.904630][ T8911] ? find_held_lock+0x2b/0x80 [ 307.904652][ T8911] __sys_sendmsg+0x160/0x210 [ 307.904668][ T8911] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.904686][ T8911] ? __pfx_ksys_write+0x10/0x10 [ 307.904700][ T8911] __do_fast_syscall_32+0xe7/0x970 [ 307.904717][ T8911] ? lockdep_hardirqs_on+0x78/0x100 [ 307.904733][ T8911] do_fast_syscall_32+0x32/0x70 [ 307.904750][ T8911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.904764][ T8911] RIP: 0023:0xf7f56fec [ 307.904778][ T8911] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 307.904787][ T8911] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 307.904799][ T8911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 307.904805][ T8911] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.904812][ T8911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.904829][ T8911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 307.904835][ T8911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.904847][ T8911] [ 308.019355][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 308.029852][ T50] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 308.069602][ T50] usb 6-1: device descriptor read/8, error -71 [ 308.318166][ T50] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 308.350311][ T50] usb 6-1: device descriptor read/8, error -71 [ 308.458397][ T50] usb usb6-port1: unable to enumerate USB device [ 309.630602][ T6575] usb 44-1: device descriptor read/8, error -110 [ 309.744476][ T8942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.028974][ T6575] usb usb44-port1: attempt power cycle [ 310.349017][ T8952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 310.351875][ T8952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.355627][ T8952] vhci_hcd vhci_hcd.0: Device attached [ 310.449646][ T6575] usb 44-1: SetAddress Request (77) to port 0 [ 310.453909][ T6575] usb 44-1: new SuperSpeed USB device number 77 using vhci_hcd [ 310.753552][ T8961] comedi comedi0: dt2801: I/O base address or length out of range [ 310.975653][ T8953] vhci_hcd: connection reset by peer [ 310.977908][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 310.980031][ T5815] vhci_hcd vhci_hcd.3: release socket [ 310.982046][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 311.318013][ T5830] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 311.470158][ T5830] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.475244][ T5830] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 311.478301][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 311.484973][ T5830] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.495967][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 311.504584][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 311.521275][ T5830] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 311.524719][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 311.537010][ T5830] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.550356][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 311.562966][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 311.585819][ T5830] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 311.588740][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 311.592868][ T5830] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.597703][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 311.618236][ T5830] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 311.637712][ T5830] usb 5-1: string descriptor 0 read error: -22 [ 311.641438][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.669342][ T5830] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 311.932808][ T8981] warning: `syz.0.722' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 312.004377][ T8985] syzkaller0: entered promiscuous mode [ 312.006756][ T8985] syzkaller0: entered allmulticast mode [ 312.017775][ T8987] input: syz1 as /devices/virtual/input/input10 [ 312.019213][ T8985] tipc: Started in network mode [ 312.027819][ T8985] tipc: Node identity ce176b3d77c4, cluster identity 4711 [ 312.037109][ T8985] tipc: Enabled bearer , priority 0 [ 312.047415][ T8984] tipc: Resetting bearer [ 312.078023][ T8984] tipc: Disabling bearer [ 312.893865][ T8996] syzkaller0: entered promiscuous mode [ 312.896311][ T8996] syzkaller0: entered allmulticast mode [ 312.903995][ T8996] FAULT_INJECTION: forcing a failure. [ 312.903995][ T8996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.909521][ T8996] CPU: 2 UID: 0 PID: 8996 Comm: syz.1.729 Not tainted syzkaller #0 PREEMPT(full) [ 312.909542][ T8996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.909549][ T8996] Call Trace: [ 312.909554][ T8996] [ 312.909559][ T8996] dump_stack_lvl+0x100/0x190 [ 312.909576][ T8996] should_fail_ex.cold+0x5/0xa [ 312.909589][ T8996] _copy_from_user+0x2e/0xd0 [ 312.909609][ T8996] get_compat_msghdr+0xb3/0x480 [ 312.909645][ T8996] ? __pfx_get_compat_msghdr+0x10/0x10 [ 312.909668][ T8996] ___sys_sendmsg+0x1b6/0x1e0 [ 312.909683][ T8996] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.909702][ T8996] ? find_held_lock+0x2b/0x80 [ 312.909725][ T8996] __sys_sendmsg+0x160/0x210 [ 312.909741][ T8996] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.909761][ T8996] ? __pfx_ksys_write+0x10/0x10 [ 312.909775][ T8996] __do_fast_syscall_32+0xe7/0x970 [ 312.909799][ T8996] ? lockdep_hardirqs_on+0x78/0x100 [ 312.909816][ T8996] do_fast_syscall_32+0x32/0x70 [ 312.909834][ T8996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.909849][ T8996] RIP: 0023:0xf7f35fec [ 312.909864][ T8996] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 312.909869][ T8996] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 312.909881][ T8996] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 312.909888][ T8996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.909894][ T8996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.909901][ T8996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 312.909907][ T8996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.909920][ T8996] [ 313.502954][ T9010] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 313.505059][ T9010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.508103][ T9010] vhci_hcd vhci_hcd.0: Device attached [ 314.114161][ T9011] vhci_hcd: connection closed [ 314.117688][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 314.121293][ T5815] vhci_hcd vhci_hcd.3: release socket [ 314.123469][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 314.296687][ T9030] syzkaller0: entered promiscuous mode [ 314.298762][ T9030] syzkaller0: entered allmulticast mode [ 314.986584][ T9049] FAULT_INJECTION: forcing a failure. [ 314.986584][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 314.992088][ T9049] CPU: 3 UID: 0 PID: 9049 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT(full) [ 314.992105][ T9049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.992111][ T9049] Call Trace: [ 314.992116][ T9049] [ 314.992121][ T9049] dump_stack_lvl+0x100/0x190 [ 314.992137][ T9049] should_fail_ex.cold+0x5/0xa [ 314.992150][ T9049] should_failslab+0xc2/0x120 [ 314.992166][ T9049] __kmalloc_noprof+0xfc/0x820 [ 314.992179][ T9049] ? aa_file_perm+0x7f3/0x14d0 [ 314.992195][ T9049] ? mtd_kmalloc_up_to+0x152/0x190 [ 314.992212][ T9049] mtd_kmalloc_up_to+0x152/0x190 [ 314.992228][ T9049] mtdchar_write+0x195/0x5d0 [ 314.992241][ T9049] ? __pfx_mtdchar_write+0x10/0x10 [ 314.992250][ T9049] ? __pfx___might_resched+0x10/0x10 [ 314.992268][ T9049] ? import_ubuf+0x1b6/0x220 [ 314.992286][ T9049] ? apparmor_file_permission+0x13f/0x1c0 [ 314.992300][ T9049] ? bpf_lsm_file_permission+0x9/0x10 [ 314.992311][ T9049] ? security_file_permission+0x76/0x210 [ 314.992326][ T9049] ? rw_verify_area+0xce/0x6d0 [ 314.992343][ T9049] ? __pfx_mtdchar_write+0x10/0x10 [ 314.992352][ T9049] vfs_writev+0x5ed/0xdd0 [ 314.992371][ T9049] ? __pfx_vfs_writev+0x10/0x10 [ 314.992396][ T9049] ? __fget_files+0x21f/0x3d0 [ 314.992409][ T9049] ? do_writev+0x13e/0x340 [ 314.992424][ T9049] do_writev+0x13e/0x340 [ 314.992440][ T9049] ? __pfx_do_writev+0x10/0x10 [ 314.992456][ T9049] ? ksys_write+0x1ac/0x250 [ 314.992466][ T9049] ? __pfx_ksys_write+0x10/0x10 [ 314.992478][ T9049] __do_fast_syscall_32+0xe7/0x970 [ 314.992496][ T9049] ? lockdep_hardirqs_on+0x78/0x100 [ 314.992513][ T9049] do_fast_syscall_32+0x32/0x70 [ 314.992529][ T9049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.992543][ T9049] RIP: 0023:0xf7f35fec [ 314.992557][ T9049] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 314.992562][ T9049] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 314.992573][ T9049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 314.992580][ T9049] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.992586][ T9049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.992592][ T9049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.992598][ T9049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.992610][ T9049] [ 315.254506][ T9057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.474518][ T9069] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 315.476619][ T9069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 315.479844][ T9069] vhci_hcd vhci_hcd.0: Device attached [ 315.511122][ T9074] 9p: Bad value for 'rfdno' [ 315.558990][ T6575] usb 44-1: device descriptor read/8, error -110 [ 315.772771][ T6575] usb usb44-port1: unable to enumerate USB device [ 315.888757][ T9082] FAULT_INJECTION: forcing a failure. [ 315.888757][ T9082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.898311][ T5844] usb 40-1: SetAddress Request (74) to port 0 [ 315.908130][ T9082] CPU: 0 UID: 0 PID: 9082 Comm: syz.3.758 Not tainted syzkaller #0 PREEMPT(full) [ 315.908159][ T9082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.908171][ T9082] Call Trace: [ 315.908179][ T9082] [ 315.908186][ T9082] dump_stack_lvl+0x100/0x190 [ 315.908215][ T9082] should_fail_ex.cold+0x5/0xa [ 315.908238][ T9082] _copy_from_user+0x2e/0xd0 [ 315.908269][ T9082] get_compat_msghdr+0xb3/0x480 [ 315.908300][ T9082] ? __pfx_get_compat_msghdr+0x10/0x10 [ 315.908338][ T9082] ___sys_sendmsg+0x1b6/0x1e0 [ 315.908363][ T9082] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.908396][ T9082] ? find_held_lock+0x2b/0x80 [ 315.908436][ T9082] __sys_sendmsg+0x160/0x210 [ 315.908464][ T9082] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.908498][ T9082] ? __pfx_ksys_write+0x10/0x10 [ 315.908522][ T9082] __do_fast_syscall_32+0xe7/0x970 [ 315.908552][ T9082] ? lockdep_hardirqs_on+0x78/0x100 [ 315.908581][ T9082] do_fast_syscall_32+0x32/0x70 [ 315.908610][ T9082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.908634][ T9082] RIP: 0023:0xf7f56fec [ 315.908655][ T9082] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 315.908663][ T9082] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 315.908683][ T9082] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 315.908695][ T9082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.908705][ T9082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.908716][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.908728][ T9082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.908758][ T9082] [ 315.911843][ T5844] usb 40-1: new SuperSpeed USB device number 74 using vhci_hcd [ 316.003240][ T60] usb 5-1: USB disconnect, device number 8 [ 316.387576][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 316.392008][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 316.435472][ T9070] vhci_hcd: connection reset by peer [ 316.444381][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 316.446507][ T5815] vhci_hcd vhci_hcd.1: release socket [ 316.450511][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 316.464706][ T9098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 316.481110][ T9098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=833384745 (1666769490 ns) > initial count (16 ns). Using initial count to start timer. [ 316.482158][ T9100] input: syz1 as /devices/virtual/input/input11 [ 316.751778][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.773968][ T9105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 316.782115][ T9105] FAULT_INJECTION: forcing a failure. [ 316.782115][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 316.789172][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.3.768 Not tainted syzkaller #0 PREEMPT(full) [ 316.789192][ T9105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.789201][ T9105] Call Trace: [ 316.789206][ T9105] [ 316.789211][ T9105] dump_stack_lvl+0x100/0x190 [ 316.789233][ T9105] should_fail_ex.cold+0x5/0xa [ 316.789250][ T9105] should_failslab+0xc2/0x120 [ 316.789271][ T9105] __kmalloc_noprof+0xfc/0x820 [ 316.789287][ T9105] ? rcu_is_watching+0x12/0xc0 [ 316.789305][ T9105] ? tomoyo_realpath_from_path+0xb6/0x690 [ 316.789331][ T9105] tomoyo_realpath_from_path+0xb6/0x690 [ 316.789355][ T9105] tomoyo_path_number_perm+0x23c/0x580 [ 316.789373][ T9105] ? tomoyo_path_number_perm+0x22e/0x580 [ 316.789391][ T9105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.789409][ T9105] ? get_pid_task+0x106/0x250 [ 316.789444][ T9105] ? find_held_lock+0x2b/0x80 [ 316.789462][ T9105] ? __fget_files+0x215/0x3d0 [ 316.789474][ T9105] ? hook_file_ioctl_common+0x140/0x440 [ 316.789492][ T9105] ? __fget_files+0x215/0x3d0 [ 316.789508][ T9105] ? __fget_files+0x21f/0x3d0 [ 316.789524][ T9105] security_file_ioctl_compat+0xd3/0x230 [ 316.789544][ T9105] __ia32_compat_sys_ioctl+0xc2/0x360 [ 316.789567][ T9105] __do_fast_syscall_32+0xe7/0x970 [ 316.789589][ T9105] ? lockdep_hardirqs_on+0x78/0x100 [ 316.789610][ T9105] do_fast_syscall_32+0x32/0x70 [ 316.789631][ T9105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.789649][ T9105] RIP: 0023:0xf7f56fec [ 316.789667][ T9105] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 316.789673][ T9105] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 316.789688][ T9105] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004400ae8f [ 316.789697][ T9105] RDX: 0000000080000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.789705][ T9105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.789712][ T9105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 316.789721][ T9105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.789738][ T9105] [ 316.789772][ T9105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.868862][ T9105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=833384745 (1666769490 ns) > initial count (16 ns). Using initial count to start timer. [ 316.988052][ T9107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.548303][ T60] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 317.624310][ T9127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.705142][ T60] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 317.733968][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 317.740617][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.754273][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.769431][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.782477][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.803328][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 317.806517][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.821730][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.840683][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.857997][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.876908][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 317.880660][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.890998][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.905503][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.926077][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.959158][ T60] usb 8-1: string descriptor 0 read error: -22 [ 317.972330][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.007435][ T60] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 319.108274][ T9157] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 319.118201][ T9157] CIFS: Attempting to mount //127.0.0.1/share [ 319.184321][ T9157] CIFS: VFS: Error connecting to socket. Aborting operation. [ 319.187163][ T9157] CIFS: VFS: cifs_mount failed w/return code = -4 [ 319.196491][ T9149] FAULT_INJECTION: forcing a failure. [ 319.196491][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 319.200490][ T9149] CPU: 2 UID: 0 PID: 9149 Comm: syz.0.781 Not tainted syzkaller #0 PREEMPT(full) [ 319.200516][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.200523][ T9149] Call Trace: [ 319.200528][ T9149] [ 319.200532][ T9149] dump_stack_lvl+0x100/0x190 [ 319.200549][ T9149] should_fail_ex.cold+0x5/0xa [ 319.200563][ T9149] should_failslab+0xc2/0x120 [ 319.200591][ T9149] __kvmalloc_node_noprof+0x116/0x970 [ 319.200605][ T9149] ? __lock_acquire+0x49f/0x1a40 [ 319.200616][ T9149] ? traverse.part.0.constprop.0+0x397/0x650 [ 319.200636][ T9149] traverse.part.0.constprop.0+0x397/0x650 [ 319.200657][ T9149] seq_read_iter+0x93f/0x1270 [ 319.200675][ T9149] ? aa_file_perm+0x7f3/0x14d0 [ 319.200695][ T9149] seq_read+0x344/0x4d0 [ 319.200712][ T9149] ? __pfx_seq_read+0x10/0x10 [ 319.200731][ T9149] ? kvm_sched_clock_read+0x11/0x20 [ 319.200751][ T9149] ? __pfx_seq_read+0x10/0x10 [ 319.200767][ T9149] proc_reg_read+0x240/0x330 [ 319.200779][ T9149] ? __pfx_proc_reg_read+0x10/0x10 [ 319.200791][ T9149] vfs_read+0x1e4/0xb40 [ 319.200803][ T9149] ? __pfx_vfs_read+0x10/0x10 [ 319.200812][ T9149] ? find_held_lock+0x2b/0x80 [ 319.200825][ T9149] ? __fget_files+0x215/0x3d0 [ 319.200835][ T9149] ? __fget_files+0x215/0x3d0 [ 319.200847][ T9149] ? __fget_files+0x21f/0x3d0 [ 319.200860][ T9149] ksys_pread64+0x161/0x1a0 [ 319.200872][ T9149] ? __pfx_ksys_pread64+0x10/0x10 [ 319.200882][ T9149] ? rcu_is_watching+0x12/0xc0 [ 319.200899][ T9149] __do_fast_syscall_32+0xe7/0x970 [ 319.200915][ T9149] ? lockdep_hardirqs_on+0x78/0x100 [ 319.200931][ T9149] do_fast_syscall_32+0x32/0x70 [ 319.200948][ T9149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.200963][ T9149] RIP: 0023:0xf7f06fec [ 319.200976][ T9149] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 319.200981][ T9149] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 319.200993][ T9149] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 319.200999][ T9149] RDX: 00000000000000c6 RSI: 0000000000010000 RDI: 0000000000000000 [ 319.201005][ T9149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.201011][ T9149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.201017][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.201030][ T9149] [ 320.113691][ T9178] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 320.116640][ T9178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 320.134503][ T9178] vhci_hcd vhci_hcd.0: Device attached [ 320.418123][ T10] usb 38-1: SetAddress Request (66) to port 0 [ 320.422176][ T10] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 321.230128][ T5844] usb 40-1: device descriptor read/8, error -110 [ 321.506103][ T9201] nvme_fabrics: missing parameter 'nqn=%s' [ 321.570628][ T9185] vhci_hcd: connection reset by peer [ 321.572616][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 321.574927][ T5815] vhci_hcd vhci_hcd.0: release socket [ 321.576686][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 321.639056][ T5844] usb usb40-port1: attempt power cycle [ 322.011319][ T9221] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 322.013322][ T9221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.024855][ T9221] vhci_hcd vhci_hcd.0: Device attached [ 322.268417][ T5844] usb 40-1: SetAddress Request (77) to port 0 [ 322.271448][ T5844] usb 40-1: new SuperSpeed USB device number 77 using vhci_hcd [ 322.348818][ T50] usb 8-1: USB disconnect, device number 9 [ 322.670801][ T9227] vhci_hcd: connection reset by peer [ 322.673450][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 322.675292][ T5815] vhci_hcd vhci_hcd.1: release socket [ 322.677164][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 322.884710][ T9243] FAULT_INJECTION: forcing a failure. [ 322.884710][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.890288][ T9243] CPU: 3 UID: 0 PID: 9243 Comm: syz.0.810 Not tainted syzkaller #0 PREEMPT(full) [ 322.890304][ T9243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.890310][ T9243] Call Trace: [ 322.890315][ T9243] [ 322.890319][ T9243] dump_stack_lvl+0x100/0x190 [ 322.890337][ T9243] should_fail_ex.cold+0x5/0xa [ 322.890349][ T9243] _copy_from_user+0x2e/0xd0 [ 322.890367][ T9243] kvm_vm_compat_ioctl+0x275/0x3f0 [ 322.890384][ T9243] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 322.890399][ T9243] ? find_held_lock+0x2b/0x80 [ 322.890413][ T9243] ? __fget_files+0x215/0x3d0 [ 322.890426][ T9243] ? hook_file_ioctl_common+0x140/0x440 [ 322.890447][ T9243] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 322.890463][ T9243] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 322.890480][ T9243] __do_fast_syscall_32+0xe7/0x970 [ 322.890497][ T9243] ? lockdep_hardirqs_on+0x78/0x100 [ 322.890513][ T9243] do_fast_syscall_32+0x32/0x70 [ 322.890530][ T9243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.890544][ T9243] RIP: 0023:0xf7f06fec [ 322.890562][ T9243] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 322.890568][ T9243] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 322.890579][ T9243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c018aec0 [ 322.890585][ T9243] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.890592][ T9243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.890597][ T9243] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.890603][ T9243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.890616][ T9243] [ 323.730812][ T50] libceph: connect (1)[c::]:6789 error -101 [ 323.735183][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 323.747382][ T50] libceph: connect (1)[c::]:6789 error -101 [ 323.750558][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 323.787480][ T9258] ceph: No mds server is up or the cluster is laggy [ 324.317381][ T9289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 324.319493][ T9289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.323261][ T9289] vhci_hcd vhci_hcd.0: Device attached [ 324.378696][ T9296] ubi10: attaching mtd0 [ 324.380680][ T9296] ubi10 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 324.406127][ T42] audit: type=1326 audit(1786689899.105:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.417190][ T42] audit: type=1326 audit(1786689899.105:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.425855][ T42] audit: type=1326 audit(1786689899.105:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.433649][ T42] audit: type=1326 audit(1786689899.105:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.445281][ T42] audit: type=1326 audit(1786689899.105:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.453793][ T42] audit: type=1326 audit(1786689899.105:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.462421][ T42] audit: type=1326 audit(1786689899.105:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.471966][ T42] audit: type=1326 audit(1786689899.105:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.483487][ T42] audit: type=1326 audit(1786689899.105:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.497446][ T42] audit: type=1326 audit(1786689899.105:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 324.736358][ T9306] ceph: No mds server is up or the cluster is laggy [ 325.148125][ T9292] vhci_hcd: connection closed [ 325.148329][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 325.152218][ T5815] vhci_hcd vhci_hcd.1: release socket [ 325.154075][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 325.478788][ T10] usb 38-1: device descriptor read/8, error -110 [ 325.879152][ T10] usb usb38-port1: attempt power cycle [ 326.215742][ T9347] FAULT_INJECTION: forcing a failure. [ 326.215742][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 326.221591][ T9347] CPU: 3 UID: 0 PID: 9347 Comm: syz.1.839 Not tainted syzkaller #0 PREEMPT(full) [ 326.221631][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.221642][ T9347] Call Trace: [ 326.221649][ T9347] [ 326.221657][ T9347] dump_stack_lvl+0x100/0x190 [ 326.221685][ T9347] should_fail_ex.cold+0x5/0xa [ 326.221707][ T9347] should_failslab+0xc2/0x120 [ 326.221732][ T9347] kmem_cache_alloc_noprof+0x91/0x6a0 [ 326.221756][ T9347] ? trace_kmem_cache_alloc+0xdd/0x100 [ 326.221781][ T9347] ? security_file_alloc+0x34/0x2c0 [ 326.221811][ T9347] security_file_alloc+0x34/0x2c0 [ 326.221835][ T9347] init_file+0x95/0x480 [ 326.221858][ T9347] alloc_empty_file+0x79/0x1c0 [ 326.221882][ T9347] alloc_file_pseudo+0x183/0x290 [ 326.221907][ T9347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 326.221929][ T9347] ? alloc_fd+0x471/0x7a0 [ 326.221950][ T9347] sock_alloc_file+0x50/0x210 [ 326.221979][ T9347] __sys_socket+0x1c0/0x260 [ 326.222000][ T9347] ? __pfx___sys_socket+0x10/0x10 [ 326.222027][ T9347] __ia32_compat_sys_socketcall+0x65b/0x770 [ 326.222049][ T9347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.222079][ T9347] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 326.222097][ T9347] ? __fget_files+0x21f/0x3d0 [ 326.222123][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 326.222145][ T9347] __do_fast_syscall_32+0xe7/0x970 [ 326.222172][ T9347] ? lockdep_hardirqs_on+0x78/0x100 [ 326.222200][ T9347] do_fast_syscall_32+0x32/0x70 [ 326.222232][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.222255][ T9347] RIP: 0023:0xf7f35fec [ 326.222277][ T9347] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 326.222285][ T9347] RSP: 002b:00000000f53f54a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 326.222303][ T9347] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f53f54b0 [ 326.222314][ T9347] RDX: 00000000f73c7ff4 RSI: 0000000000000000 RDI: 00000000f73c7ff4 [ 326.222340][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.222350][ T9347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 326.222361][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.222383][ T9347] [ 326.294086][ T9350] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 326.332758][ T9350] kvm: pic: non byte read [ 326.337780][ T9350] kvm: pic: level sensitive irq not supported [ 326.339268][ T9350] kvm: pic: non byte read [ 326.346089][ T9350] kvm: pic: level sensitive irq not supported [ 326.346523][ T9350] kvm: pic: non byte read [ 326.358566][ T9350] kvm: pic: level sensitive irq not supported [ 326.359078][ T9350] kvm: pic: non byte read [ 326.367176][ T9350] kvm: pic: level sensitive irq not supported [ 326.367755][ T9350] kvm: pic: non byte read [ 326.375094][ T9350] kvm: pic: level sensitive irq not supported [ 326.376472][ T9350] kvm: pic: non byte read [ 326.448640][ T10] usb usb38-port1: unable to enumerate USB device [ 326.599191][ T9356] ceph: No mds server is up or the cluster is laggy [ 326.611926][ T9369] overlayfs: failed to resolve './bus/file0': -2 [ 327.309468][ T5844] usb 40-1: device descriptor read/8, error -110 [ 327.418121][ T5844] usb usb40-port1: unable to enumerate USB device [ 328.485566][ T9413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.133262][ T9434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 329.135368][ T9434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.142395][ T9434] vhci_hcd vhci_hcd.0: Device attached [ 329.452493][ T5830] usb 40-1: SetAddress Request (78) to port 0 [ 329.464747][ T5830] usb 40-1: new SuperSpeed USB device number 78 using vhci_hcd [ 330.047504][ T9435] vhci_hcd: connection reset by peer [ 330.067639][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 330.069418][ T5815] vhci_hcd vhci_hcd.1: release socket [ 330.071452][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 330.851886][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 330.872431][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 331.028773][ T9469] infiniband syz0: set active [ 331.031510][ T9469] infiniband syz0: added bond0 [ 331.069916][ T9469] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 331.076752][ T9469] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 331.082398][ T9469] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 331.107065][ T9469] RDS/IB: syz0: added [ 331.109383][ T9469] smc: adding ib device syz0 with port count 1 [ 331.111533][ T9469] smc: ib device syz0 port 1 has no pnetid [ 331.135686][ T9480] FAULT_INJECTION: forcing a failure. [ 331.135686][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 331.140549][ T9480] CPU: 3 UID: 0 PID: 9480 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 331.140565][ T9480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.140572][ T9480] Call Trace: [ 331.140577][ T9480] [ 331.140581][ T9480] dump_stack_lvl+0x100/0x190 [ 331.140598][ T9480] should_fail_ex.cold+0x5/0xa [ 331.140611][ T9480] should_failslab+0xc2/0x120 [ 331.140627][ T9480] kmem_cache_alloc_noprof+0x91/0x6a0 [ 331.140641][ T9480] ? lockdep_hardirqs_on+0x78/0x100 [ 331.140657][ T9480] ? fuse_request_alloc+0x22/0x200 [ 331.140672][ T9480] fuse_request_alloc+0x22/0x200 [ 331.140683][ T9480] fuse_get_req+0x20a/0x400 [ 331.140694][ T9480] ? __kasan_kmalloc+0xaa/0xb0 [ 331.140711][ T9480] ? __pfx_fuse_get_req+0x10/0x10 [ 331.140728][ T9480] ? from_kgid+0x8f/0xd0 [ 331.140751][ T9480] ? __pfx_from_kgid+0x10/0x10 [ 331.140779][ T9480] fuse_chan_send+0x257/0x9a0 [ 331.140804][ T9480] __fuse_simple_request+0x18e/0x1e0 [ 331.140828][ T9480] fuse_send_open+0x220/0x2d0 [ 331.140848][ T9480] ? __pfx_fuse_send_open+0x10/0x10 [ 331.140875][ T9480] ? lockdep_init_map_type+0x5c/0x250 [ 331.140893][ T9480] ? __init_waitqueue_head+0xca/0x150 [ 331.140917][ T9480] fuse_file_open+0x4d9/0x820 [ 331.140940][ T9480] fuse_open+0x229/0x9d0 [ 331.140963][ T9480] do_dentry_open+0x6ab/0x14d0 [ 331.140981][ T9480] ? __pfx_fuse_open+0x10/0x10 [ 331.141007][ T9480] vfs_open+0x82/0x3f0 [ 331.141031][ T9480] path_openat+0x2873/0x4280 [ 331.141056][ T9480] ? find_held_lock+0x2b/0x80 [ 331.141077][ T9480] ? stack_depot_save_flags+0x479/0x9d0 [ 331.141108][ T9480] ? __pfx_path_openat+0x10/0x10 [ 331.141125][ T9480] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 331.141149][ T9480] ? lockdep_hardirqs_on+0x78/0x100 [ 331.141173][ T9480] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.141197][ T9480] do_file_open+0x20e/0x430 [ 331.141217][ T9480] ? __pfx_do_file_open+0x10/0x10 [ 331.141234][ T9480] ? __kasan_slab_alloc+0x89/0x90 [ 331.141261][ T9480] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 331.141281][ T9480] ? do_getname+0x35/0x390 [ 331.141319][ T9480] ? __lock_acquire+0x49f/0x1a40 [ 331.141342][ T9480] do_open_execat+0xd1/0x360 [ 331.141368][ T9480] ? __pfx_do_open_execat+0x10/0x10 [ 331.141396][ T9480] ? __might_fault+0xc5/0x140 [ 331.141414][ T9480] ? __might_fault+0xc5/0x140 [ 331.141435][ T9480] alloc_bprm+0x2d/0x9d0 [ 331.141462][ T9480] do_execveat_common.isra.0+0x19c/0x580 [ 331.141483][ T9480] ? do_getname+0x191/0x390 [ 331.141497][ T9480] __ia32_compat_sys_execveat+0xe4/0x130 [ 331.141516][ T9480] __do_fast_syscall_32+0xe7/0x970 [ 331.141533][ T9480] ? lockdep_hardirqs_on+0x78/0x100 [ 331.141549][ T9480] do_fast_syscall_32+0x32/0x70 [ 331.141566][ T9480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.141580][ T9480] RIP: 0023:0xf7f06fec [ 331.141595][ T9480] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 331.141601][ T9480] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 331.141612][ T9480] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001400 [ 331.141619][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.141625][ T9480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.141631][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.141637][ T9480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.141650][ T9480] [ 334.519730][ T5830] usb 40-1: device descriptor read/8, error -110 [ 334.700238][ T5847] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 334.790778][ T9541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 334.857967][ T5847] usb 8-1: Using ep0 maxpacket: 8 [ 334.874408][ T5847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 334.883640][ T5847] usb 8-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 334.907685][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.912441][ T5847] usb 8-1: Product: syz [ 334.914106][ T5847] usb 8-1: Manufacturer: syz [ 334.916230][ T5847] usb 8-1: SerialNumber: syz [ 334.930201][ T5830] usb usb40-port1: attempt power cycle [ 334.962381][ T9543] md: could not open device unknown-block(1,0). [ 335.029656][ T9541] md: pers->run() failed ... [ 335.159796][ T9530] netlink: 112 bytes leftover after parsing attributes in process `syz.3.890'. [ 335.421777][ T9554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 335.423879][ T9554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.439579][ T5847] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 335.442406][ T9554] vhci_hcd vhci_hcd.0: Device attached [ 335.454025][ T5847] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 335.503938][ T5847] usb 8-1: USB disconnect, device number 10 [ 335.550467][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.568148][ T5830] usb usb40-port1: unable to enumerate USB device [ 335.738254][ T5844] usb 38-1: SetAddress Request (70) to port 0 [ 335.746172][ T5844] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 336.327522][ T9568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 336.329584][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 336.367657][ T9568] vhci_hcd vhci_hcd.0: Device attached [ 336.648567][ T60] usb 40-1: SetAddress Request (82) to port 0 [ 336.650720][ T60] usb 40-1: new SuperSpeed USB device number 82 using vhci_hcd [ 341.127449][ T9569] vhci_hcd: connection reset by peer [ 341.130171][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 341.134886][ T5815] vhci_hcd vhci_hcd.1: release socket [ 341.141436][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 341.481409][ T9624] vhci_hcd vhci_hcd.0: port 0 already used [ 341.708112][ T60] usb 40-1: device descriptor read/8, error -110 [ 342.099014][ T60] usb usb40-port1: attempt power cycle [ 342.234295][ T9555] vhci_hcd: connection reset by peer [ 342.246750][ T12] vhci_hcd vhci_hcd.0: stop threads [ 342.249149][ T12] vhci_hcd vhci_hcd.0: release socket [ 342.258607][ T5844] usb 38-1: device descriptor read/8, error -110 [ 342.258638][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 342.648641][ T5844] usb usb38-port1: attempt power cycle [ 342.658492][ T60] usb usb40-port1: unable to enumerate USB device [ 342.993096][ T9642] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 342.995104][ T9642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.022012][ T9642] vhci_hcd vhci_hcd.0: Device attached [ 343.248866][ T5844] usb usb38-port1: unable to enumerate USB device [ 343.288204][ T60] usb 44-1: SetAddress Request (78) to port 0 [ 343.295258][ T60] usb 44-1: new SuperSpeed USB device number 78 using vhci_hcd [ 343.838143][ T9646] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 343.840917][ T9646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.844939][ T9646] vhci_hcd vhci_hcd.0: Device attached [ 344.138070][ T24] usb 40-1: SetAddress Request (86) to port 0 [ 344.144273][ T24] usb 40-1: new SuperSpeed USB device number 86 using vhci_hcd [ 347.687188][ T9678] vhci_hcd vhci_hcd.0: port 0 already used [ 348.762400][ T9653] vhci_hcd: connection reset by peer [ 348.767664][ T12] vhci_hcd vhci_hcd.1: stop threads [ 348.773069][ T12] vhci_hcd vhci_hcd.1: release socket [ 348.775412][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 348.990067][ T9689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 348.992547][ T9689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 349.113337][ T9689] vhci_hcd vhci_hcd.0: Device attached [ 349.228054][ T24] usb 40-1: device descriptor read/8, error -110 [ 349.428017][ T5844] usb 38-1: SetAddress Request (74) to port 0 [ 349.430012][ T5844] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 349.639707][ T24] usb usb40-port1: attempt power cycle [ 350.218681][ T24] usb usb40-port1: unable to enumerate USB device [ 351.236583][ T9643] vhci_hcd: connection reset by peer [ 351.252884][ T12] vhci_hcd vhci_hcd.3: stop threads [ 351.254667][ T12] vhci_hcd vhci_hcd.3: release socket [ 351.256599][ T60] usb 44-1: device descriptor read/8, error -110 [ 351.256628][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 351.661348][ T60] usb usb44-port1: attempt power cycle [ 351.890864][ T5096] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 351.895475][ T5096] CPU: 2 UID: 0 PID: 5096 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 351.895496][ T5096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.895517][ T5096] Workqueue: hci0 hci_rx_work [ 351.895547][ T5096] Call Trace: [ 351.895551][ T5096] [ 351.895557][ T5096] dump_stack_lvl+0x100/0x190 [ 351.895575][ T5096] sysfs_warn_dup.cold+0x1c/0x28 [ 351.895600][ T5096] sysfs_create_dir_ns+0x24b/0x2b0 [ 351.895631][ T5096] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 351.895657][ T5096] ? find_held_lock+0x2b/0x80 [ 351.895674][ T5096] ? kobject_add_internal+0x25f/0x930 [ 351.895693][ T5096] ? kobject_add_internal+0x25f/0x930 [ 351.895709][ T5096] ? do_raw_spin_unlock+0x145/0x1e0 [ 351.895725][ T5096] kobject_add_internal+0x2c8/0x930 [ 351.895750][ T5096] kobject_add+0x16a/0x1e0 [ 351.895763][ T5096] ? __pfx_kobject_add+0x10/0x10 [ 351.895781][ T5096] ? preempt_schedule_thunk+0x16/0x40 [ 351.895806][ T5096] ? kobject_put+0xb9/0x640 [ 351.895816][ T5096] ? _raw_spin_unlock+0x3e/0x50 [ 351.895834][ T5096] device_add+0x294/0x1970 [ 351.895855][ T5096] ? __pfx_dev_set_name+0x10/0x10 [ 351.895869][ T5096] ? __pfx_device_add+0x10/0x10 [ 351.895885][ T5096] ? mgmt_send_event_skb+0x2fb/0x460 [ 351.895910][ T5096] hci_conn_add_sysfs+0x1a3/0x260 [ 351.895936][ T5096] le_conn_complete_evt+0x11eb/0x1f60 [ 351.895961][ T5096] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 351.895977][ T5096] ? hci_event_packet+0x186/0xcd0 [ 351.896002][ T5096] hci_le_conn_complete_evt+0x23c/0x3a0 [ 351.896020][ T5096] ? skb_pull_data+0x15f/0x1e0 [ 351.896040][ T5096] hci_le_meta_evt+0x34a/0x5f0 [ 351.896058][ T5096] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 351.896083][ T5096] hci_event_packet+0x51c/0xcd0 [ 351.896105][ T5096] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 351.896127][ T5096] ? __pfx_hci_event_packet+0x10/0x10 [ 351.896151][ T5096] ? kcov_remote_start+0x384/0x670 [ 351.896171][ T5096] ? lockdep_hardirqs_on+0x78/0x100 [ 351.896198][ T5096] hci_rx_work+0x451/0xfc0 [ 351.896221][ T5096] process_one_work+0xa23/0x1940 [ 351.896245][ T5096] ? __pfx_process_one_work+0x10/0x10 [ 351.896277][ T5096] ? __pfx_hci_rx_work+0x10/0x10 [ 351.896299][ T5096] worker_thread+0x5ef/0xe50 [ 351.896325][ T5096] ? kthread+0x13a/0x450 [ 351.896346][ T5096] ? __pfx_worker_thread+0x10/0x10 [ 351.896367][ T5096] kthread+0x370/0x450 [ 351.896382][ T5096] ? __pfx_kthread+0x10/0x10 [ 351.896406][ T5096] ret_from_fork+0x72b/0xd50 [ 351.896422][ T5096] ? __pfx_ret_from_fork+0x10/0x10 [ 351.896442][ T5096] ? __switch_to+0x800/0x10f0 [ 351.896452][ T5096] ? __pfx_kthread+0x10/0x10 [ 351.896482][ T5096] ret_from_fork_asm+0x1a/0x30 [ 351.896505][ T5096] [ 351.896759][ T5096] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 351.987375][ T5096] Bluetooth: hci0: failed to register connection device [ 352.256850][ T60] usb usb44-port1: unable to enumerate USB device [ 353.360168][ T9735] input: syz1 as /devices/virtual/input/input17 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x116000) [ 353.598574][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 353.605187][ T1124] ata1: failed to read log page 10h (errno=-5) [ 353.607188][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 353.613083][ T1124] ata1.00: irq_stat 0x40000000 [ 353.614645][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 353.628045][ T1124] ata1.00: cmd 60/b0:f0:be:52:01/08:00:00:00:00/40 tag 30 ncq dma 1138688 in [ 353.628045][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 353.635085][ T1124] ata1.00: status: { DRDY } [ 353.636520][ T1124] ata1.00: error: { ABRT } [ 353.650748][ T1124] ata1.00: configured for UDMA/100 [ 353.652729][ T1124] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 353.660856][ T1124] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 353.667212][ T1124] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 353.674051][ T1124] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 52 be 00 08 b0 00 [ 353.678082][ T1124] I/O error, dev sda, sector 86718 op 0x0:(READ) flags 0x80700 phys_seg 149 prio class 2 [ 353.690031][ T1124] ata1: EH complete [ 356.620709][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 356.624891][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 356.624910][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.624919][ T5742] Workqueue: hci3 hci_rx_work [ 356.624940][ T5742] Call Trace: [ 356.624945][ T5742] [ 356.624951][ T5742] dump_stack_lvl+0x100/0x190 [ 356.624966][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 356.624985][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 356.625007][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 356.625026][ T5742] ? find_held_lock+0x2b/0x80 [ 356.625040][ T5742] ? kobject_add_internal+0x25f/0x930 [ 356.625053][ T5742] ? kobject_add_internal+0x25f/0x930 [ 356.625066][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 356.625083][ T5742] kobject_add_internal+0x2c8/0x930 [ 356.625104][ T5742] kobject_add+0x16a/0x1e0 [ 356.625121][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 356.625139][ T5742] ? class_to_subsys+0x10f/0x150 [ 356.625164][ T5742] ? kobject_put+0xb9/0x640 [ 356.625179][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 356.625198][ T5742] device_add+0x294/0x1970 [ 356.625211][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 356.625225][ T5742] ? __pfx_device_add+0x10/0x10 [ 356.625237][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 356.625259][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 356.625280][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 356.625300][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 356.625315][ T5742] ? hci_event_packet+0x186/0xcd0 [ 356.625332][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 356.625348][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 356.625362][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 356.625378][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 356.625396][ T5742] hci_event_packet+0x51c/0xcd0 [ 356.625411][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 356.625427][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 356.625443][ T5742] ? kcov_remote_start+0x384/0x670 [ 356.625459][ T5742] ? lockdep_hardirqs_on+0x78/0x100 [ 356.625478][ T5742] hci_rx_work+0x451/0xfc0 [ 356.625495][ T5742] process_one_work+0xa23/0x1940 [ 356.625523][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 356.625546][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 356.625563][ T5742] worker_thread+0x5ef/0xe50 [ 356.625588][ T5742] ? kthread+0x13a/0x450 [ 356.625604][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 356.625622][ T5742] kthread+0x370/0x450 [ 356.625637][ T5742] ? __pfx_kthread+0x10/0x10 [ 356.625655][ T5742] ret_from_fork+0x72b/0xd50 [ 356.625670][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 356.625685][ T5742] ? __switch_to+0x800/0x10f0 [ 356.625695][ T5742] ? __pfx_kthread+0x10/0x10 [ 356.625710][ T5742] ret_from_fork_asm+0x1a/0x30 [ 356.625732][ T5742] [ 356.625751][ T5742] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 356.728201][ T5742] Bluetooth: hci3: failed to register connection device qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc5000) [ 357.109394][ T9764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 357.111704][ T9764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 357.139316][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 357.144262][ T1124] ata1: failed to read log page 10h (errno=-5) [ 357.152122][ T1124] ata1.00: NCQ disabled due to excessive errors [ 357.161204][ T1124] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 357.166173][ T1124] ata1.00: irq_stat 0x41000000 [ 357.172236][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 357.175071][ T1124] ata1.00: cmd 60/28:70:b6:12:08/06:00:00:00:00/40 tag 14 ncq dma 806912 in [ 357.175071][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 357.185510][ T1124] ata1.00: status: { DRDY } [ 357.187729][ T1124] ata1.00: error: { ABRT } [ 357.191179][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 357.194897][ T1124] ata1.00: cmd 60/f0:78:de:18:08/02:00:00:00:00/40 tag 15 ncq dma 385024 in [ 357.194897][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 357.198099][ T9764] vhci_hcd vhci_hcd.0: Device attached [ 357.206812][ T1124] ata1.00: status: { DRDY } [ 357.218001][ T1124] ata1.00: error: { ABRT } [ 357.227063][ T1124] ata1.00: configured for UDMA/100 [ 357.232590][ T1124] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 357.242127][ T1124] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 357.245501][ T1124] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 357.252391][ T1124] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 12 b6 00 06 28 00 [ 357.257132][ T1124] I/O error, dev sda, sector 529078 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 357.263876][ T1124] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 357.273364][ T1124] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 357.276985][ T1124] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 357.281504][ T1124] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 08 18 de 00 02 f0 00 [ 357.287136][ T1124] I/O error, dev sda, sector 530654 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 357.294686][ T1124] ata1: EH complete [ 357.428113][ T6575] usb 44-1: SetAddress Request (82) to port 0 [ 357.430850][ T6575] usb 44-1: new SuperSpeed USB device number 82 using vhci_hcd [ 358.159486][ T9783] input: syz1 as /devices/virtual/input/input18 [ 358.214077][ T9696] vhci_hcd: connection reset by peer [ 358.217062][ T12] vhci_hcd vhci_hcd.0: stop threads [ 358.221618][ T12] vhci_hcd vhci_hcd.0: release socket [ 358.224075][ T5844] usb 38-1: device descriptor read/8, error -110 [ 358.226398][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 358.608750][ T5844] usb usb38-port1: attempt power cycle [ 359.168491][ T5844] usb usb38-port1: unable to enumerate USB device [ 360.326916][ T9804] vhci_hcd vhci_hcd.0: port 0 already used [ 360.937112][ T9819] input: syz1 as /devices/virtual/input/input19 [ 361.088042][ T9820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 361.090466][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 361.097483][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 361.388157][ T5844] usb 38-1: SetAddress Request (78) to port 0 [ 361.391058][ T5844] usb 38-1: new SuperSpeed USB device number 78 using vhci_hcd [ 362.489090][ T9774] vhci_hcd: connection reset by peer [ 362.491742][ T12] vhci_hcd vhci_hcd.3: stop threads [ 362.498182][ T12] vhci_hcd vhci_hcd.3: release socket [ 362.504106][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 362.507990][ T6575] usb 44-1: device descriptor read/8, error -110 [ 362.898462][ T6575] usb usb44-port1: attempt power cycle [ 362.910021][ T9821] vhci_hcd: connection reset by peer [ 362.912140][ T12] vhci_hcd vhci_hcd.0: stop threads [ 362.916142][ T12] vhci_hcd vhci_hcd.0: release socket [ 362.922527][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 363.545802][ T6575] usb usb44-port1: unable to enumerate USB device [ 363.643187][ T9850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 363.645447][ T9850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 363.740674][ T9850] vhci_hcd vhci_hcd.0: Device attached [ 363.742988][ T9855] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 363.745265][ T9855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 363.749261][ T9855] vhci_hcd vhci_hcd.0: Device attached [ 364.028468][ T6575] usb 44-1: SetAddress Request (86) to port 0 [ 364.030579][ T6575] usb 44-1: new SuperSpeed USB device number 86 using vhci_hcd [ 365.703868][ T9870] input: syz1 as /devices/virtual/input/input20 [ 366.576461][ T9876] input: syz1 as /devices/virtual/input/input21 [ 366.739083][ T9881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 366.741200][ T9881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 366.759101][ T9881] vhci_hcd vhci_hcd.0: Device attached [ 367.028138][ T60] usb 40-1: SetAddress Request (90) to port 0 [ 367.040343][ T60] usb 40-1: new SuperSpeed USB device number 90 using vhci_hcd [ 367.207997][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 368.021912][ T5915] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 368.094133][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.098990][ T5915] usb 5-1: config 0 descriptor?? [ 368.515376][ T5915] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 368.539809][ T5915] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 368.545777][ T5915] [drm] Initialized udl on minor 2 [ 368.588634][ T9899] vhci_hcd vhci_hcd.0: port 0 already used [ 368.734659][ T9851] vhci_hcd: connection reset by peer [ 368.736600][ T12] vhci_hcd vhci_hcd.0: stop threads [ 368.737507][ T9889] loop7: detected capacity change from 0 to 16384 [ 368.738493][ T12] vhci_hcd vhci_hcd.0: release socket [ 368.742480][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 368.742625][ T5844] usb 38-1: device descriptor read/8, error -110 [ 368.963159][ T9903] loop7: detected capacity change from 16384 to 0 [ 368.967114][ C0] I/O error, dev loop7, sector 14464 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 369.083153][ T5915] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.097732][ T5915] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 369.114005][ T5915] usb 5-1: USB disconnect, device number 9 [ 369.119110][ T34] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.133656][ T34] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 369.140401][ T5844] usb usb38-port1: attempt power cycle [ 369.711451][ T9919] vhci_hcd vhci_hcd.0: port 0 already used [ 369.778561][ T5844] usb usb38-port1: unable to enumerate USB device [ 370.683655][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'. [ 371.665953][ T9950] input: syz1 as /devices/virtual/input/input22 [ 371.746746][ T9856] vhci_hcd: connection reset by peer [ 371.759541][ T12] vhci_hcd vhci_hcd.3: stop threads [ 371.771774][ T12] vhci_hcd vhci_hcd.3: release socket [ 371.787834][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 371.790501][ T6575] usb 44-1: device descriptor read/8, error -110 [ 372.189090][ T6575] usb usb44-port1: attempt power cycle [ 372.758839][ T6575] usb usb44-port1: unable to enumerate USB device [ 373.008846][ T9964] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 373.011521][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 373.052332][ T9964] vhci_hcd vhci_hcd.0: Device attached [ 373.137957][ T5915] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 373.299181][ T5915] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 373.308753][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.321259][ T5915] usb 6-1: config 0 descriptor?? [ 373.369623][ T149] usb 38-1: SetAddress Request (82) to port 0 [ 373.395311][ T149] usb 38-1: new SuperSpeed USB device number 82 using vhci_hcd [ 373.689617][ T9882] vhci_hcd: connection reset by peer [ 373.694084][ T12] vhci_hcd vhci_hcd.1: stop threads [ 373.696977][ T12] vhci_hcd vhci_hcd.1: release socket [ 373.700892][ T60] usb 40-1: device descriptor read/8, error -110 [ 373.700963][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 373.752071][ T5915] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 373.782580][ T5915] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 373.788593][ T5915] [drm] Initialized udl on minor 2 [ 374.108904][ T60] usb usb40-port1: attempt power cycle [ 374.787936][ T5915] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.794110][ T60] usb usb40-port1: unable to enumerate USB device [ 374.879547][ T5915] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 374.884066][ T34] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.886714][ T5915] usb 6-1: USB disconnect, device number 13 [ 374.889956][ T34] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 374.949089][ T9992] vhci_hcd vhci_hcd.0: port 0 already used [ 375.755587][T10008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 375.757696][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 375.828880][T10008] vhci_hcd vhci_hcd.0: Device attached [ 376.128065][ T60] usb 44-1: SetAddress Request (90) to port 0 [ 376.139427][ T60] usb 44-1: new SuperSpeed USB device number 90 using vhci_hcd [ 377.394505][T10030] input: syz1 as /devices/virtual/input/input23 [ 377.442106][ T9965] vhci_hcd: connection reset by peer [ 377.444221][ T12] vhci_hcd vhci_hcd.0: stop threads [ 377.446696][ T12] vhci_hcd vhci_hcd.0: release socket [ 377.451676][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 378.192731][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.362481][T10041] input: syz1 as /devices/virtual/input/input24 [ 378.438235][ T5915] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 378.508283][ T149] usb 38-1: device descriptor read/8, error -110 [ 378.898490][ T149] usb usb38-port1: attempt power cycle [ 379.254600][ T5915] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 379.460725][ T149] usb usb38-port1: unable to enumerate USB device [ 379.622718][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.634013][ T5915] usb 8-1: config 0 descriptor?? [ 379.774810][T10009] vhci_hcd: connection reset by peer [ 379.781535][ T12] vhci_hcd vhci_hcd.3: stop threads [ 379.790542][ T12] vhci_hcd vhci_hcd.3: release socket [ 379.794681][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 380.153615][ T5915] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 380.178976][ T5915] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 380.186665][ T5915] [drm] Initialized udl on minor 2 [ 380.255789][T10062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 380.258541][T10062] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.334949][T10062] vhci_hcd vhci_hcd.0: Device attached [ 380.523202][ T5915] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 380.529718][ T5915] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 380.553881][ T34] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 380.556670][ T5915] usb 8-1: USB disconnect, device number 11 [ 380.561176][ T34] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 380.568543][ T34] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 380.626274][ T6575] usb 40-1: SetAddress Request (94) to port 0 [ 380.664960][ T6575] usb 40-1: new SuperSpeed USB device number 94 using vhci_hcd [ 381.297727][ T60] usb 44-1: device descriptor read/8, error -110 [ 381.709401][T10081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 381.711451][T10081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.732292][T10081] vhci_hcd vhci_hcd.0: Device attached [ 381.863005][ T60] usb 44-1: SetAddress Request (91) to port 0 [ 381.886201][ T60] usb 44-1: new SuperSpeed USB device number 91 using vhci_hcd [ 385.036858][T10082] vhci_hcd: connection reset by peer [ 385.043246][ T12] vhci_hcd vhci_hcd.3: stop threads [ 385.047537][ T12] vhci_hcd vhci_hcd.3: release socket [ 385.053486][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 385.144294][T10114] vhci_hcd vhci_hcd.0: port 0 already used [ 385.811314][T10129] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 385.813458][T10129] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 385.816325][T10129] vhci_hcd vhci_hcd.0: Device attached [ 386.214811][T10063] vhci_hcd: connection reset by peer [ 386.222127][ T12] vhci_hcd vhci_hcd.1: stop threads [ 386.224444][ T12] vhci_hcd vhci_hcd.1: release socket [ 386.226835][ T6575] usb 40-1: device descriptor read/8, error -110 [ 386.226899][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 386.618613][ T6575] usb usb40-port1: attempt power cycle [ 386.813163][T10144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1044'. [ 387.041967][T10150] netlink: 'syz.2.1047': attribute type 39 has an invalid length. [ 387.130745][T10152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1046'. [ 387.136405][T10154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 387.138525][T10154] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.178790][ T6575] usb usb40-port1: unable to enumerate USB device [ 387.185249][T10154] vhci_hcd vhci_hcd.0: Device attached [ 387.448106][ T6575] usb 38-1: SetAddress Request (86) to port 0 [ 387.450241][ T6575] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 387.763017][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.781687][T10153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.828207][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.851745][T10153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.710219][T10185] program syz.3.1053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.853406][T10130] vhci_hcd: connection reset by peer [ 389.857794][ T12] vhci_hcd vhci_hcd.3: stop threads [ 389.859640][ T12] vhci_hcd vhci_hcd.3: release socket [ 389.866294][ T60] usb 44-1: device descriptor read/8, error -110 [ 389.871273][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 390.005109][T10192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1055'. [ 390.010953][ T60] usb usb44-port1: attempt power cycle [ 390.046330][T10189] vhci_hcd vhci_hcd.0: port 0 already used [ 390.796505][ T60] usb usb44-port1: unable to enumerate USB device [ 391.548131][ T5887] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 391.688963][ T5887] usb 6-1: device descriptor read/64, error -71 [ 391.927976][ T5887] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 392.068068][ T5887] usb 6-1: device descriptor read/64, error -71 [ 392.180048][ T5887] usb usb6-port1: attempt power cycle [ 392.281532][T10209] input: syz1 as /devices/virtual/input/input25 [ 392.518226][ T5887] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 392.538666][ T5887] usb 6-1: device descriptor read/8, error -71 [ 392.820969][ T5887] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 392.866302][ T5887] usb 6-1: device descriptor read/8, error -71 [ 392.980649][ T5887] usb usb6-port1: unable to enumerate USB device [ 393.863228][T10224] input: syz1 as /devices/virtual/input/input26 [ 393.875691][T10222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 393.878435][T10222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.897673][T10222] vhci_hcd vhci_hcd.0: Device attached [ 394.170984][ T60] usb 44-1: SetAddress Request (94) to port 0 [ 394.196249][ T60] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 394.349883][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 395.458852][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1075'. [ 396.099905][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1067'. [ 396.526289][T10243] netlink: 'syz.3.1069': attribute type 39 has an invalid length. [ 396.843043][T10248] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 396.845164][T10248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.873546][T10248] vhci_hcd vhci_hcd.0: Device attached [ 397.079480][T10253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1068'. [ 397.178285][ T149] usb 40-1: SetAddress Request (98) to port 0 [ 397.195927][ T149] usb 40-1: new SuperSpeed USB device number 98 using vhci_hcd [ 397.247237][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.252362][T10246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.298357][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.301760][T10246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.395105][T10258] input: syz1 as /devices/virtual/input/input27 [ 398.013568][T10155] vhci_hcd: connection reset by peer [ 398.016150][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 398.022096][ T5815] vhci_hcd vhci_hcd.0: release socket [ 398.029351][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 398.029459][ T6575] usb 38-1: device descriptor read/8, error -110 [ 398.046147][T10225] vhci_hcd: connection reset by peer [ 398.057966][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 398.062832][ T5815] vhci_hcd vhci_hcd.3: release socket [ 398.077198][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 398.436776][ T6575] usb usb38-port1: attempt power cycle [ 399.162951][ T6575] usb usb38-port1: unable to enumerate USB device [ 399.336447][ T60] usb 44-1: device descriptor read/8, error -110 [ 399.355619][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 399.370897][T10282] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1079'. [ 399.657589][T10291] vhci_hcd vhci_hcd.0: port 0 already used [ 399.740232][ T60] usb usb44-port1: attempt power cycle [ 400.330667][ T60] usb usb44-port1: unable to enumerate USB device [ 400.382376][T10295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 400.385010][T10295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 400.400162][T10295] vhci_hcd vhci_hcd.0: Device attached [ 400.656150][T10309] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 400.688246][ T5915] usb 38-1: SetAddress Request (90) to port 0 [ 400.709463][ T5915] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 400.942843][T10313] 9pnet_virtio: no channels available for device 127.0.0.1 [ 401.485269][T10249] vhci_hcd: connection reset by peer [ 401.488932][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 401.491639][ T5815] vhci_hcd vhci_hcd.1: release socket [ 401.494158][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 401.801059][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1089'. [ 402.276486][ T149] usb 40-1: device descriptor read/8, error -110 [ 402.289722][T10305] vhci_hcd: connection reset by peer [ 402.298801][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 402.302358][ T5815] vhci_hcd vhci_hcd.0: release socket [ 402.312088][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 402.973442][ T149] usb usb40-port1: attempt power cycle [ 403.593856][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'. [ 403.609833][T10345] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1096'. [ 403.650923][T10345] autofs4:pid:10345:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 403.768907][ T149] usb usb40-port1: unable to enumerate USB device [ 404.177184][T10364] syz.2.1102 uses obsolete (PF_INET,SOCK_PACKET) [ 404.440642][T10367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 404.443326][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 404.449609][T10367] vhci_hcd vhci_hcd.0: Device attached [ 404.529643][T10372] wg2 speed is unknown, defaulting to 1000 [ 404.545520][T10372] wg2 speed is unknown, defaulting to 1000 [ 404.596637][T10372] wg2 speed is unknown, defaulting to 1000 [ 404.718072][ T851] usb 40-1: SetAddress Request (102) to port 0 [ 404.722853][ T851] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 404.793256][T10372] infiniband syz2: set active [ 404.796429][T10372] infiniband syz2: added wg2 [ 404.818360][T10372] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 404.823282][T10372] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 404.829291][T10372] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 404.853374][ T149] wg2 speed is unknown, defaulting to 1000 [ 404.864727][T10372] RDS/IB: syz2: added [ 404.866165][T10372] smc: adding ib device syz2 with port count 1 [ 404.868450][T10372] smc: ib device syz2 port 1 has no pnetid [ 404.870524][ T149] wg2 speed is unknown, defaulting to 1000 [ 404.876688][T10372] wg2 speed is unknown, defaulting to 1000 [ 404.901210][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1105'. [ 405.066422][T10372] wg2 speed is unknown, defaulting to 1000 [ 405.069212][T10370] vhci_hcd: connection reset by peer [ 405.071274][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 405.073143][ T5815] vhci_hcd vhci_hcd.1: release socket [ 405.081500][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 405.318578][T10372] wg2 speed is unknown, defaulting to 1000 [ 405.476870][T10372] wg2 speed is unknown, defaulting to 1000 [ 405.789662][ T5915] usb 38-1: device descriptor read/8, error -110 [ 406.047777][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 406.051452][T10404] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1106'. [ 406.056105][T10404] autofs4:pid:10404:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.2), cmd(0xc0189371) [ 406.060883][T10404] autofs4:pid:10404:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 406.190672][ T5915] usb usb38-port1: attempt power cycle [ 406.748723][T10408] FAULT_INJECTION: forcing a failure. [ 406.748723][T10408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.772108][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.3.1108 Not tainted syzkaller #0 PREEMPT(full) [ 406.772137][T10408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.772147][T10408] Call Trace: [ 406.772155][T10408] [ 406.772162][T10408] dump_stack_lvl+0x100/0x190 [ 406.772198][T10408] should_fail_ex.cold+0x5/0xa [ 406.772220][T10408] _copy_to_user+0x32/0xd0 [ 406.772252][T10408] simple_read_from_buffer+0xcb/0x170 [ 406.772283][T10408] proc_fail_nth_read+0x1af/0x230 [ 406.772310][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.772334][T10408] ? rw_verify_area+0xce/0x6d0 [ 406.772356][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.772379][T10408] vfs_read+0x1e4/0xb40 [ 406.772398][T10408] ? __pfx_vfs_read+0x10/0x10 [ 406.772412][T10408] ? find_held_lock+0x2b/0x80 [ 406.772436][T10408] ? __fget_files+0x215/0x3d0 [ 406.772456][T10408] ? __fget_files+0x21f/0x3d0 [ 406.772478][T10408] ksys_read+0x12a/0x250 [ 406.772492][T10408] ? __pfx_ksys_read+0x10/0x10 [ 406.772515][T10408] do_int80_emulation+0x14b/0x720 [ 406.772546][T10408] asm_int80_emulation+0x1a/0x20 [ 406.772564][T10408] RIP: 0023:0xf71574eb [ 406.772579][T10408] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 406.772596][T10408] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 406.772614][T10408] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54165d0 [ 406.772626][T10408] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 406.772636][T10408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.772645][T10408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 406.772656][T10408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.772678][T10408] [ 406.794840][ T5915] usb usb38-port1: unable to enumerate USB device [ 406.804784][T10417] input: syz1 as /devices/virtual/input/input28 [ 408.139161][ T149] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 408.288810][ T149] usb 6-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 408.292618][ T149] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 408.295483][ T149] usb 6-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 408.299903][ T149] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 408.304963][ T149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.308543][ T149] usb 6-1: Product: syz [ 408.310449][ T149] usb 6-1: Manufacturer: syz [ 408.312494][ T149] usb 6-1: SerialNumber: syz [ 408.430950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 408.470922][T10438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'. [ 408.532269][T10443] input: syz0 as /devices/virtual/input/input29 [ 408.564445][T10436] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 408.575657][T10436] qnx6: wrong signature (magic) in superblock #1. [ 408.579060][T10436] qnx6: unable to read the first superblock [ 409.045167][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 409.045181][ T42] audit: type=1804 audit(1786689983.735:13): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1121" name="/newroot/269/file0" dev="tmpfs" ino=1547 res=1 errno=0 [ 409.223837][T10436] 9p: p9: multiple sources not supported [ 409.802596][ T149] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.802597][ T851] usb 40-1: device descriptor read/8, error -110 [ 409.808889][ T149] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 409.869835][ T149] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.873055][ T149] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 409.884879][ T149] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.914934][ T149] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 409.919454][ T149] usb 6-1: USB disconnect, device number 18 [ 409.945999][T10464] input: syz1 as /devices/virtual/input/input30 [ 409.986453][ T9822] udevd[9822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.188860][ T851] usb usb40-port1: attempt power cycle [ 410.199758][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 410.760726][ T851] usb usb40-port1: unable to enumerate USB device [ 411.065915][T10484] raw_sendmsg: syz.3.1130 forgot to set AF_INET. Fix it! [ 411.134171][T10484] ceph: No mds server is up or the cluster is laggy [ 411.276737][ T5742] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 412.305883][T10511] input: syz1 as /devices/virtual/input/input31 [ 412.313522][T10475] FAULT_INJECTION: forcing a failure. [ 412.313522][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 412.318597][T10475] CPU: 3 UID: 0 PID: 10475 Comm: syz.1.1129 Not tainted syzkaller #0 PREEMPT(full) [ 412.318624][T10475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.318631][T10475] Call Trace: [ 412.318635][T10475] [ 412.318640][T10475] dump_stack_lvl+0x100/0x190 [ 412.318656][T10475] should_fail_ex.cold+0x5/0xa [ 412.318670][T10475] should_failslab+0xc2/0x120 [ 412.318687][T10475] __kmalloc_cache_noprof+0x91/0x6c0 [ 412.318698][T10475] ? __pfx_vma_policy_mof+0x10/0x10 [ 412.318716][T10475] ? task_numa_work+0xfcf/0x1980 [ 412.318733][T10475] task_numa_work+0xfcf/0x1980 [ 412.318759][T10475] ? __pfx_task_numa_work+0x10/0x10 [ 412.318774][T10475] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 412.318785][T10475] ? lockdep_hardirqs_on+0x78/0x100 [ 412.318809][T10475] ? __pfx___might_resched+0x10/0x10 [ 412.318828][T10475] task_work_run+0x150/0x240 [ 412.318845][T10475] ? __pfx_task_work_run+0x10/0x10 [ 412.318865][T10475] get_signal+0x1bd/0x21e0 [ 412.318878][T10475] ? __pfx_task_work_add+0x10/0x10 [ 412.318897][T10475] ? __pfx_get_signal+0x10/0x10 [ 412.318908][T10475] ? __fput_deferred+0x217/0x4a0 [ 412.318922][T10475] ? __pfx___fput_deferred+0x10/0x10 [ 412.318935][T10475] ? __pfx___file_ref_put+0x10/0x10 [ 412.318947][T10475] arch_do_signal_or_restart+0x91/0x7a0 [ 412.318960][T10475] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.318978][T10475] exit_to_user_mode_loop+0x139/0x6f0 [ 412.318990][T10475] ? rcu_is_watching+0x12/0xc0 [ 412.319004][T10475] __do_fast_syscall_32+0x701/0x970 [ 412.319020][T10475] ? lockdep_hardirqs_on+0x78/0x100 [ 412.319036][T10475] do_fast_syscall_32+0x32/0x70 [ 412.319053][T10475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.319067][T10475] RIP: 0023:0xf7f35fec [ 412.319081][T10475] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 412.319085][T10475] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 412.319096][T10475] RAX: 000000000000001c RBX: 0000000000000003 RCX: 0000000080000280 [ 412.319103][T10475] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.319109][T10475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.319115][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.319121][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.319134][T10475] [ 412.414284][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1140'. [ 412.553916][T10513] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1140'. [ 412.615956][T10520] bond1: option lacp_rate: invalid value (2) [ 412.621202][T10520] bond1 (unregistering): Released all slaves [ 412.712963][T10526] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 412.715565][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.719076][T10526] vhci_hcd vhci_hcd.0: Device attached [ 412.834656][T10531] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1145'. [ 412.841743][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.858092][T10531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.068031][ T149] usb 38-1: SetAddress Request (94) to port 0 [ 413.070705][ T149] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 413.110980][T10537] FAULT_INJECTION: forcing a failure. [ 413.110980][T10537] name failslab, interval 1, probability 0, space 0, times 0 [ 413.116803][T10537] CPU: 2 UID: 0 PID: 10537 Comm: syz.1.1148 Not tainted syzkaller #0 PREEMPT(full) [ 413.116819][T10537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.116826][T10537] Call Trace: [ 413.116830][T10537] [ 413.116835][T10537] dump_stack_lvl+0x100/0x190 [ 413.116858][T10537] should_fail_ex.cold+0x5/0xa [ 413.116872][T10537] should_failslab+0xc2/0x120 [ 413.116888][T10537] __kmalloc_noprof+0xfc/0x820 [ 413.116902][T10537] ? __memcg_list_lru_alloc+0x418/0x680 [ 413.116917][T10537] __memcg_list_lru_alloc+0x418/0x680 [ 413.116928][T10537] ? xa_load+0x149/0x2c0 [ 413.116942][T10537] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 413.116957][T10537] ? rcu_read_unlock+0x17/0x60 [ 413.116976][T10537] memcg_list_lru_alloc+0xd3/0x100 [ 413.116990][T10537] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 413.117011][T10537] ? kasan_save_track+0x14/0x30 [ 413.117026][T10537] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 413.117040][T10537] ? aio_alloc_inode+0x25/0x70 [ 413.117052][T10537] ? __pfx_aio_alloc_inode+0x10/0x10 [ 413.117063][T10537] aio_alloc_inode+0x25/0x70 [ 413.117073][T10537] alloc_inode+0x68/0x250 [ 413.117088][T10537] alloc_anon_inode+0x2a/0x3e0 [ 413.117102][T10537] ioctx_alloc+0x4dc/0x21a0 [ 413.117115][T10537] ? irqentry_exit+0x24d/0xa00 [ 413.117134][T10537] ? __pfx_ioctx_alloc+0x10/0x10 [ 413.117147][T10537] ? __might_fault+0x111/0x140 [ 413.117160][T10537] __ia32_compat_sys_io_setup+0xc8/0x220 [ 413.117175][T10537] __do_fast_syscall_32+0xe7/0x970 [ 413.117191][T10537] ? lockdep_hardirqs_on+0x78/0x100 [ 413.117207][T10537] do_fast_syscall_32+0x32/0x70 [ 413.117224][T10537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.117238][T10537] RIP: 0023:0xf7f35fec [ 413.117251][T10537] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 413.117256][T10537] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 413.117267][T10537] RAX: ffffffffffffffda RBX: 00000000000006b9 RCX: 0000000080000140 [ 413.117274][T10537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.117280][T10537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.117286][T10537] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 413.117292][T10537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.117305][T10537] [ 413.499071][T10527] vhci_hcd: connection reset by peer [ 413.502382][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 413.504609][ T5815] vhci_hcd vhci_hcd.0: release socket [ 413.506933][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 414.502551][T10555] rdma_rxe: rxe_newlink: failed to add wg2 [ 414.973533][T10574] NILFS (nbd3): device size too small [ 414.995387][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 415.106155][T10581] process 'syz.1.1154' launched '/dev/fd/16' with NULL argv: empty string added [ 415.288669][T10586] input: syz1 as /devices/virtual/input/input32 [ 417.644686][T10634] netlink: 'syz.0.1167': attribute type 12 has an invalid length. [ 417.647409][T10634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1167'. [ 417.661305][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 417.980557][T10645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 417.982750][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 417.985845][T10645] vhci_hcd vhci_hcd.0: Device attached [ 418.108110][ T149] usb 38-1: device descriptor read/8, error -110 [ 418.248226][ T60] usb 44-1: SetAddress Request (98) to port 0 [ 418.251716][ T60] usb 44-1: new SuperSpeed USB device number 98 using vhci_hcd [ 418.298058][ T24] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 418.469792][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.477712][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.481262][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.486353][ T24] usb 6-1: config 0 has no interface number 0 [ 418.489399][ T24] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.494520][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.498665][ T149] usb usb38-port1: attempt power cycle [ 418.519023][ T24] usb 6-1: config 0 descriptor?? [ 418.559152][ T24] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 418.837749][T10647] vhci_hcd: connection reset by peer [ 418.839808][ T5815] vhci_hcd vhci_hcd.3: stop threads [ 418.841535][ T5815] vhci_hcd vhci_hcd.3: release socket [ 418.843711][ T5815] vhci_hcd vhci_hcd.3: disconnect device [ 419.070455][ T149] usb usb38-port1: unable to enumerate USB device [ 419.329560][ T5847] usb 6-1: USB disconnect, device number 19 [ 420.011183][ T5742] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 420.013874][T10671] ceph: No mds server is up or the cluster is laggy [ 420.298872][T10676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 420.301445][T10676] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 420.305178][T10676] vhci_hcd vhci_hcd.0: Device attached [ 420.377660][T10681] gadgetfs: bound to dummy_udc driver [ 420.484078][T10685] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.794037][ T5815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.858063][ T5915] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 420.905779][ T5815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.000313][ T5815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.014217][ T5915] usb 5-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 421.020036][ T5915] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 421.023852][ T5915] usb 5-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 421.028219][ T5915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 421.034895][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.038354][ T5915] usb 5-1: Product: syz [ 421.040139][ T5915] usb 5-1: Manufacturer: syz [ 421.042162][ T5915] usb 5-1: SerialNumber: syz [ 421.108874][ T5815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.120453][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.125432][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.130775][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.135295][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.141370][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.341215][ T5815] bridge_slave_1: left allmulticast mode [ 421.344639][ T5815] bridge_slave_1: left promiscuous mode [ 421.349383][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.362934][T10705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1187'. [ 421.363535][ T5815] bridge_slave_0: left allmulticast mode [ 421.367810][ T5815] bridge_slave_0: left promiscuous mode [ 421.371551][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.416225][T10707] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 421.454393][T10707] fuse: Bad value for 'fd' [ 421.460077][T10708] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 421.467469][T10708] qnx6: wrong signature (magic) in superblock #1. [ 421.470341][T10708] qnx6: unable to read the first superblock [ 421.636130][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.643362][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.648036][ T5815] bond0 (unregistering): Released all slaves [ 421.669533][T10708] 9p: p9: multiple sources not supported [ 421.674350][ T24] wg2 speed is unknown, defaulting to 1000 [ 421.676300][ T24] syz2: Port: 1 Link DOWN [ 421.683761][ T24] wg2 speed is unknown, defaulting to 1000 [ 421.742146][ T5815] : left promiscuous mode [ 421.797982][T10373] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 421.956081][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 421.969380][T10690] wg2 speed is unknown, defaulting to 1000 [ 421.974554][T10373] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 421.975554][T10373] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.975576][T10373] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.975593][T10373] usb 8-1: config 0 has no interface number 0 [ 421.975625][T10373] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.975666][T10373] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.977796][T10373] usb 8-1: config 0 descriptor?? [ 422.033303][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.036527][T10373] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 422.038674][ T5915] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 422.065758][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.077453][ T5915] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 422.087735][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.201639][ T5915] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 422.211204][ T5915] usb 5-1: USB disconnect, device number 10 [ 422.253369][ T9822] udevd[9822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.623804][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 422.635868][T10723] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 422.919425][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 422.945120][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 423.120470][T10677] vhci_hcd: connection closed [ 423.131384][ T12] vhci_hcd vhci_hcd.3: stop threads [ 423.136587][ T12] vhci_hcd vhci_hcd.3: release socket [ 423.139340][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 423.154891][T10690] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.165712][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.170677][T10690] bridge_slave_0: entered allmulticast mode [ 423.173952][T10690] bridge_slave_0: entered promiscuous mode [ 423.185870][T10690] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.192312][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.237971][ T5742] Bluetooth: hci1: command tx timeout [ 423.252168][T10690] bridge_slave_1: entered allmulticast mode [ 423.276163][T10690] bridge_slave_1: entered promiscuous mode [ 423.309786][ T60] usb 44-1: device descriptor read/8, error -110 [ 423.748879][ T60] usb usb44-port1: attempt power cycle [ 424.074726][T10690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.375507][T10690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.395246][ T60] usb usb44-port1: unable to enumerate USB device [ 424.642137][ T5815] hsr_slave_0: left promiscuous mode [ 424.645602][ T5815] hsr_slave_1: left promiscuous mode [ 424.647653][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.650019][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.955914][ T5815] veth1_macvtap: left promiscuous mode [ 424.962222][ T5815] veth0_macvtap: left promiscuous mode [ 424.962766][ T5847] usb 8-1: USB disconnect, device number 12 [ 424.965196][ T5815] veth1_vlan: left promiscuous mode [ 424.990106][ T5815] veth0_vlan: left promiscuous mode [ 424.996271][T10763] ceph: No mds server is up or the cluster is laggy [ 424.996422][ T5742] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 425.254693][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 425.265647][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 425.293352][ T1155] smc: removing ib device syz2 [ 425.308060][ T5742] Bluetooth: hci1: command tx timeout [ 425.336519][ T1155] smbdirect: ib_dev[syz2] removed [ 425.421141][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 425.467113][T10690] team0: Port device team_slave_0 added [ 425.487190][T10690] team0: Port device team_slave_1 added [ 425.534181][T10690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.537098][T10690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.547406][T10690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.553434][T10690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.556108][T10690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.566169][T10690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.822865][T10690] hsr_slave_0: entered promiscuous mode [ 425.825349][T10690] hsr_slave_1: entered promiscuous mode [ 425.832635][T10690] debugfs: 'hsr0' already exists in 'hsr' [ 425.834421][T10690] Cannot create hsr debugfs directory [ 426.269884][T10690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.277036][T10690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.280867][T10690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.287665][T10690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.291562][T10690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.300641][T10690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.304498][T10690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.310476][T10690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.377000][T10690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.408539][T10690] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.423327][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.425819][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.431212][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.433641][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.724395][T10690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.876279][T10690] veth0_vlan: entered promiscuous mode [ 426.881584][T10690] veth1_vlan: entered promiscuous mode [ 426.901214][T10690] veth0_macvtap: entered promiscuous mode [ 426.905334][T10690] veth1_macvtap: entered promiscuous mode [ 426.919983][T10690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.927059][T10690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.995832][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.999154][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.033062][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.036085][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.058388][ T9954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.063651][ T9954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.068502][ T9954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.074786][ T9954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.388243][ T5742] Bluetooth: hci1: command tx timeout [ 428.248193][ T60] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 428.420163][ T60] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.425533][ T60] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.430162][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.434632][ T60] usb 5-1: config 0 has no interface number 0 [ 428.437266][ T60] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.448003][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.453909][ T60] usb 5-1: config 0 descriptor?? [ 428.463434][ T60] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 428.688249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 429.052306][T10860] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 429.054414][T10860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 429.057073][T10860] vhci_hcd vhci_hcd.0: Device attached [ 429.204435][ T5915] usb 5-1: USB disconnect, device number 11 [ 429.358013][ T60] usb 46-1: SetAddress Request (2) to port 0 [ 429.359963][ T60] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 429.478020][ T5742] Bluetooth: hci1: command tx timeout [ 429.738022][T10861] vhci_hcd: connection reset by peer [ 429.740410][ T9954] vhci_hcd vhci_hcd.4: stop threads [ 429.742771][ T9954] vhci_hcd vhci_hcd.4: release socket [ 429.745032][ T9954] vhci_hcd vhci_hcd.4: disconnect device [ 429.842821][T10889] syzkaller0: entered promiscuous mode [ 429.845253][T10889] syzkaller0: entered allmulticast mode [ 429.852204][T10889] tipc: Started in network mode [ 429.854434][T10889] tipc: Node identity 96c287a39601, cluster identity 4711 [ 429.857722][T10889] tipc: Enabled bearer , priority 0 [ 429.861992][T10888] tipc: Resetting bearer [ 429.881661][T10888] tipc: Disabling bearer [ 430.728545][T10910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 430.730500][T10910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 430.777981][T10910] vhci_hcd vhci_hcd.0: Device attached [ 431.068308][ T5830] usb 44-1: SetAddress Request (102) to port 0 [ 431.070900][ T5830] usb 44-1: new SuperSpeed USB device number 102 using vhci_hcd [ 431.166768][T10930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 431.168898][T10930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.171754][T10930] vhci_hcd vhci_hcd.0: Device attached [ 431.191713][T10937] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1226'. [ 431.204704][T10934] netlink: 'syz.4.1229': attribute type 15 has an invalid length. [ 431.207288][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 431.468220][ T6575] usb 38-1: SetAddress Request (98) to port 0 [ 431.470242][ T6575] usb 38-1: new SuperSpeed USB device number 98 using vhci_hcd [ 432.111618][T10932] vhci_hcd: connection reset by peer [ 432.117566][ T9954] vhci_hcd vhci_hcd.0: stop threads [ 432.124524][ T9954] vhci_hcd vhci_hcd.0: release socket [ 432.130005][ T9954] vhci_hcd vhci_hcd.0: disconnect device [ 433.690071][T10912] vhci_hcd: connection reset by peer [ 433.693633][ T9954] vhci_hcd vhci_hcd.3: stop threads [ 433.696038][ T9954] vhci_hcd vhci_hcd.3: release socket [ 433.698777][ T9954] vhci_hcd vhci_hcd.3: disconnect device [ 433.745470][T10973] syz.2.1238 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 434.428255][ T60] usb 46-1: device descriptor read/8, error -110 [ 434.468819][T10992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 434.470981][T10992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 434.475236][T10992] vhci_hcd vhci_hcd.0: Device attached [ 434.835371][ T60] usb usb46-port1: attempt power cycle [ 435.545622][T11013] zonefs (nullb0) ERROR: Not a zoned block device [ 435.572453][ T60] usb usb46-port1: unable to enumerate USB device [ 435.656474][T11013] syzkaller0: entered promiscuous mode [ 435.659080][T11013] syzkaller0: entered allmulticast mode [ 435.669741][T11013] tipc: Enabled bearer , priority 0 [ 435.678452][T11012] tipc: Resetting bearer [ 435.723575][T11012] tipc: Disabling bearer [ 436.271816][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.274115][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.275926][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.277816][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.282005][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.284636][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.286744][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.289314][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.291395][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.293143][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.294965][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.296782][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.299515][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.301894][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.303815][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.305680][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.307500][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.310046][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.312182][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.314000][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.315842][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.317659][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.321556][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.323873][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.325705][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.327558][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.329429][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.331605][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.334394][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.336340][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.339029][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.340981][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.343113][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.345549][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.347361][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.349757][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.351656][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.353577][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.355855][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.357774][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.359847][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.361980][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.363913][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.366143][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.368147][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.370186][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.371996][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.374051][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.376205][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.378809][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.380604][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.384983][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.387110][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.389265][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.391141][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.392949][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.394764][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.397146][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.402408][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.404148][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.408166][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.415063][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.416972][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.420744][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.424837][T11041] tmpfs: Unknown parameter 'nD „sd^tE' [ 436.518277][ T6575] usb 38-1: device descriptor read/8, error -110 [ 436.919102][ T6575] usb usb38-port1: attempt power cycle [ 437.511985][ T6575] usb usb38-port1: unable to enumerate USB device [ 438.518182][T10995] vhci_hcd: connection reset by peer [ 438.520351][ T9954] vhci_hcd vhci_hcd.3: stop threads [ 438.522017][ T9954] vhci_hcd vhci_hcd.3: release socket [ 438.523986][ T9954] vhci_hcd vhci_hcd.3: disconnect device [ 438.524004][ T5830] usb 44-1: device descriptor read/8, error -110 [ 438.660092][T11072] zonefs (nullb0) ERROR: Not a zoned block device [ 438.688118][T11072] syzkaller0: entered promiscuous mode [ 438.690309][T11072] syzkaller0: entered allmulticast mode [ 438.696248][T11072] tipc: Started in network mode [ 438.698419][T11072] tipc: Node identity be47a56b84eb, cluster identity 4711 [ 438.701336][T11072] tipc: Enabled bearer , priority 0 [ 438.707805][T11070] tipc: Resetting bearer [ 438.714781][T11073] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 438.736621][T11070] tipc: Disabling bearer [ 438.958965][ T5830] usb usb44-port1: attempt power cycle [ 439.518993][ T5830] usb usb44-port1: unable to enumerate USB device [ 439.630632][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.643716][T11092] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 439.645808][T11092] CPU: 2 UID: 0 PID: 11092 Comm: syz.0.1263 Not tainted syzkaller #0 PREEMPT(full) [ 439.648961][T11092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.652303][T11092] RIP: 0010:block2mtd_setup2.isra.0+0x3c8/0xc70 [ 439.654442][T11092] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 08 00 00 48 8b 6d 08 31 ff 48 89 e8 48 c1 e0 09 48 99 <49> f7 ff 48 89 d6 48 89 54 24 10 e8 08 98 4f fb 48 8b 54 24 10 48 [ 439.660766][T11092] RSP: 0000:ffffc900046ff9d8 EFLAGS: 00010246 [ 439.662813][T11092] RAX: 0000000000000000 RBX: 1ffff920008dff3e RCX: ffffc9000c402000 [ 439.665572][T11092] RDX: 0000000000000000 RSI: ffffffff86ba31fa RDI: 0000000000000000 [ 439.668162][T11092] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000001f [ 439.670819][T11092] R10: 0000000000000007 R11: 0000000000000000 R12: ffffc900046ffa90 [ 439.673554][T11092] R13: 0000000000000000 R14: ffff888024728000 R15: 0000000000000000 [ 439.676212][T11092] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f53c6b40 [ 439.679187][T11092] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.681390][T11092] CR2: 00000000f73843f4 CR3: 000000004c53a000 CR4: 0000000000352ef0 [ 439.684012][T11092] Call Trace: [ 439.685157][T11092] [ 439.686103][T11092] ? __pfx_block2mtd_setup2.isra.0+0x10/0x10 [ 439.688153][T11092] ? rcu_is_watching+0x12/0xc0 [ 439.689779][T11092] ? trace_contention_end+0x126/0x160 [ 439.691520][T11092] ? __mutex_lock+0x26d/0x1bd0 [ 439.693014][T11092] ? param_attr_store+0xec/0x300 [ 439.694568][T11092] block2mtd_setup+0xbd/0xd0 [ 439.696088][T11092] param_attr_store+0x199/0x300 [ 439.697668][T11092] ? __pfx_param_attr_store+0x10/0x10 [ 439.699382][T11092] module_attr_store+0x58/0x80 [ 439.701004][T11092] ? __pfx_module_attr_store+0x10/0x10 [ 439.702739][T11092] sysfs_kf_write+0xf2/0x150 [ 439.704200][T11092] kernfs_fop_write_iter+0x3e0/0x5f0 [ 439.705898][T11092] ? __pfx_sysfs_kf_write+0x10/0x10 [ 439.707531][T11092] vfs_write+0x6ac/0x1050 [ 439.708933][T11092] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 439.710748][T11092] ? __pfx_vfs_write+0x10/0x10 [ 439.712226][T11092] ? find_held_lock+0x2b/0x80 [ 439.713685][T11092] ksys_write+0x12a/0x250 [ 439.715050][T11092] ? __pfx_ksys_write+0x10/0x10 [ 439.716549][T11092] __do_fast_syscall_32+0xe7/0x970 [ 439.718158][T11092] do_fast_syscall_32+0x32/0x70 [ 439.719821][T11092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.721748][T11092] RIP: 0023:0xf7f06fec [ 439.723057][T11092] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 439.725077][T11092] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 439.727666][T11092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 439.730145][T11092] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 439.732651][T11092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.735055][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.737388][T11092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.740026][T11092] [ 439.741061][T11092] Modules linked in: [ 439.742879][T11092] ---[ end trace 0000000000000000 ]--- [ 439.747373][T11092] RIP: 0010:block2mtd_setup2.isra.0+0x3c8/0xc70 [ 439.749628][T11092] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 08 00 00 48 8b 6d 08 31 ff 48 89 e8 48 c1 e0 09 48 99 <49> f7 ff 48 89 d6 48 89 54 24 10 e8 08 98 4f fb 48 8b 54 24 10 48 [ 439.756146][T11092] RSP: 0000:ffffc900046ff9d8 EFLAGS: 00010246 [ 439.759263][T11092] RAX: 0000000000000000 RBX: 1ffff920008dff3e RCX: ffffc9000c402000 [ 439.761859][T11092] RDX: 0000000000000000 RSI: ffffffff86ba31fa RDI: 0000000000000000 [ 439.764358][T11092] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000001f [ 439.766770][T11092] R10: 0000000000000007 R11: 0000000000000000 R12: ffffc900046ffa90 [ 439.769719][T11092] R13: 0000000000000000 R14: ffff888024728000 R15: 0000000000000000 [ 439.772343][T11092] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f53c6b40 [ 439.775280][T11092] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.777317][T11092] CR2: 00000000f7188b50 CR3: 000000004c53a000 CR4: 0000000000352ef0 [ 439.780468][T11092] Kernel panic - not syncing: Fatal exception [ 439.783117][T11092] Kernel Offset: disabled [ 439.784505][T11092] Rebooting in 86400 seconds..