last executing test programs: 4.532367689s ago: executing program 1 (id=1004): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) r8 = dup3(r0, r7, 0x80000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r10}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r10, 0x0, 0xfffffffffffffffc, 0x68}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.172972501s ago: executing program 0 (id=1015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(0x3) lseek(r3, 0x0, 0x3) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sequencer2(0xffffff9c, 0x0, 0xb0001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r5 = socket(0x10, 0x3, 0x0) dup2(r4, r5) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3, 0xffffffffffffffff}, 0x4) dup3(r8, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.71589799s ago: executing program 1 (id=1018): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r5, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x66, 0x6, 0x7, 0x4c, @loopback, @remote, 0x7800, 0x700, 0x799a, 0x3}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}}, 0x20}}, 0x4008000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9004", 0x0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2.662873604s ago: executing program 1 (id=1019): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x2000)=nil) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000001000/0x4000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0xf567, 0x63, 0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000008085000000040000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) futimesat(r6, 0x0, &(0x7f0000000040)={{0x77359400}}) pivot_root(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.270166266s ago: executing program 0 (id=1021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x3, 0x2, 0x2, 0x4000020}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000841}, 0x4000001) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0), 0xf) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1a4c) (async, rerun: 64) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) (async) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) (async) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) 2.26993294s ago: executing program 0 (id=1022): openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom0\x00', 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x492, &(0x7f0000000500)={0x0, 0x56db, 0x3180, 0x8003, 0x400248}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x2000)=nil) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000001000/0x4000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0xf567, 0x63, 0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000008085000000040000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) futimesat(r6, 0x0, &(0x7f0000000040)={{0x77359400}}) pivot_root(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 2.05835991s ago: executing program 0 (id=1023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8000009d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1}, 0x0, &(0x7f0000000900)='%pS \x00'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0xbc4, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x3c8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r3, 0x47fb, 0x0, 0x0, 0x0, 0x0) 1.74611865s ago: executing program 1 (id=1024): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xfffffffc, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0xd, 0x7fff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x5c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000000000210000400000006cbb4bec0000000000"]) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000550000005500000006000000090000000500000f010000000100000000020000000900000002000000c2000000080000000500000007000000010000000000000000000000ff00000050030000000000000904000000000000003061304df99ba400000000000000000056788558d49fcb025a571d5c28637526b12f2a2ca10a1648815ba93e408b398f16"], &(0x7f0000000dc0)=""/4096, 0x76, 0x1000, 0x0, 0x3ff}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="420e000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000400"/28], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x2, 0x2, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) syz_io_uring_submit(r10, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) 1.532957231s ago: executing program 2 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000008429a3d3fd28a14b825c9d89e397aaad569f9a182f8b0ec39e0acb2771041254f82fec4279faf6e659bd451410591418d773c8844d341cbedc969f57c7d58fa8e8abdfde44242419d7ab9f753922fc2b8c376ace36ab280ad6579ddeb993e1cf1e44db87ee48f4af0d6d1cf3ba838ee391bea022faf4cf0800be63a386fd9dd1750799"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000040), 0x121800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 1.531952936s ago: executing program 2 (id=1026): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf5) openat$audio(0xffffff9c, &(0x7f0000000500), 0xa0400, 0x0) 1.469621291s ago: executing program 2 (id=1027): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r5, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x66, 0x6, 0x7, 0x4c, @loopback, @remote, 0x7800, 0x700, 0x799a, 0x3}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}}, 0x20}}, 0x4008000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9004", 0x0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.468667045s ago: executing program 2 (id=1028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000028005000100000000000600034000010000080007400000000100"/96], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x2000800) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr, 0x1c0000}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e200800000000000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17bd191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x3f, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.183146661s ago: executing program 0 (id=1032): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00003be000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x7, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) lseek(r1, 0xfffffffffffffff9, 0x2) read(r1, &(0x7f00000000c0)=""/27, 0x1b) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x6, 0xb, 0x5, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r12, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000000000020000010102"], 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {0xfff1, 0xd}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x799}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x6cb90d2f88eb7287) 1.132107564s ago: executing program 1 (id=1034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(r5, 0x0, 0x0, 0x4) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x305, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @multicast2, @empty, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 299.335503ms ago: executing program 2 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0xe, 0x8, 0xc, 0x1, 0x58}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x200, 0x400000, 0x7, r1}, &(0x7f0000000100)=0x10) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r2, 0x180000000) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x1000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r6 = getpgid(r3) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}]}, 0x29) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rxrpc_call\x00'}, 0x18) r8 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x2, 0x200) r9 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x300) ppoll(&(0x7f0000000400)=[{r8, 0x15c2}, {r7, 0x9212}, {r9, 0x80}, {r0, 0x1102}, {r0, 0x240}], 0x5, &(0x7f0000000440), &(0x7f0000000480)={[0x6, 0xff]}, 0x8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3e) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000004c0), &(0x7f0000000500)=0x4) fsopen(&(0x7f0000000540)='selinuxfs\x00', 0x1) ioctl$TCSBRK(r2, 0x5409, 0x10) setregid(r5, r5) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000580)) r10 = fsopen(&(0x7f00000005c0)='cifs\x00', 0x1) copy_file_range(r10, &(0x7f0000000600)=0xad, r7, &(0x7f0000000640)=0x9, 0xffffffff, 0x0) lstat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, &(0x7f0000002c00)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0186405, &(0x7f0000002c40)={0x1ff, 0x200, {r3}, {r4}, 0xfffffff9, 0xf9}) syz_fuse_handle_req(r2, &(0x7f0000000680)="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", 0x2000, &(0x7f0000003700)={&(0x7f0000002680)={0x50, 0x0, 0x380e, {0x7, 0x2b, 0x8, 0x42008000, 0x4e6c, 0x9, 0xa0eb, 0x0, 0x0, 0x0, 0x1, 0x200}}, &(0x7f0000002700)={0x18, 0xfffffffffffffffe, 0x28e, {0x4}}, &(0x7f0000002740)={0x18, 0xfffffffffffffffe, 0x5, {0x2}}, &(0x7f0000002780)={0x18, 0xfffffffffffffff5, 0x3, {0x5}}, &(0x7f00000027c0)={0x18, 0x0, 0x8, {0x5}}, &(0x7f0000002800)={0x28, 0xfffffffffffffffe, 0x10000, {{0x21, 0x9, 0x1, r6}}}, &(0x7f0000002840)={0x60, 0x0, 0x0, {{0x8, 0x8000, 0x1, 0x8, 0x5, 0x1ff, 0x4265, 0x1}}}, &(0x7f00000028c0)={0x18, 0x0, 0x10001, {0xfba5}}, &(0x7f0000002900)={0x22, 0x0, 0x5, {'/dev/snd/pcmC#D#c\x00'}}, &(0x7f0000002940)={0x20, 0x0, 0xfffffffffffffff9, {0x0, 0x1b}}, &(0x7f0000002980)={0x78, 0x0, 0x7, {0x0, 0x1, 0x0, {0x1, 0x101, 0x1b, 0x6b, 0x9, 0x100, 0xe85, 0x2, 0xef, 0xc000, 0x3, r4, r5, 0x8, 0xb8}}}, &(0x7f0000002a00)={0x90, 0x0, 0x200, {0x6, 0x0, 0x82, 0xfff, 0x40, 0xfffffffc, {0x6, 0xfffffffffffffffe, 0x8, 0xff, 0x2, 0x5, 0x7f, 0x1, 0x0, 0x6000, 0xe, r4, r5, 0xbc2}}}, &(0x7f0000002ac0)={0x30, 0x0, 0x3, [{0x6, 0x1, 0x4, 0xffff336a, '-[,^'}]}, &(0x7f0000002d80)={0x5c8, 0x0, 0x8000000000000000, [{{0x5, 0x2, 0x9, 0x7, 0x0, 0x2, {0x2, 0xfffffffffffffffd, 0x4, 0x2, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0xc000, 0x3, r4, r5, 0x0, 0x7}}, {0x4, 0x1, 0x12, 0x4, '/dev/snd/pcmC#D#c\x00'}}, {{0x1, 0x2, 0x100000001, 0x0, 0x10, 0x1, {0x3, 0x3, 0x0, 0xfffffffffffffffa, 0x4, 0xde, 0x1ff, 0x4, 0x8, 0x4000, 0x6, r4, r5, 0x401}}, {0x6, 0x10001, 0x3, 0x7c, 'cpu'}}, {{0x6, 0x2, 0x7, 0x80000001, 0xac, 0x3, {0x0, 0x8000000000000001, 0x4, 0x88, 0x9, 0xe5, 0xd5ae, 0x0, 0x8, 0xc000, 0x6, r4, r5, 0xff, 0x2}}, {0x3, 0x3, 0x7, 0x9, 'freezer'}}, {{0x0, 0x1, 0xea9, 0x5c4, 0x4, 0x80, {0x3, 0x2, 0x100000000, 0x80000000, 0xb, 0x100, 0x9, 0x6, 0x6, 0x6000, 0x5, r11, r12, 0xd032, 0x8}}, {0x0, 0x100000001, 0x0, 0x5}}, {{0x1, 0x0, 0xa, 0xf598, 0x1000, 0xfff, {0x0, 0x7, 0x40, 0x0, 0x8, 0x4, 0xe510, 0x68f, 0x2, 0xc000, 0x0, r13, r5, 0x3, 0x6}}, {0x6, 0x8000000000000000, 0x7, 0x4, 'freezer'}}, {{0x1, 0x1, 0x7fffffff, 0x5, 0x8, 0x1ff, {0x6, 0x40, 0x6b0f6367, 0x1, 0x1, 0x5, 0x2000000, 0x6, 0x2, 0x2000, 0x3, r4, r5, 0x3a, 0x25c}}, {0x5, 0x6, 0x7, 0x2, 'freezer'}}, {{0x5, 0x0, 0xe0a6, 0x5, 0x6, 0x3, {0x3, 0x2, 0x5, 0xb14, 0x9, 0xfffffffffffffff7, 0xd, 0x57, 0x3, 0x8000, 0x3ff, 0x0, 0x0, 0x1ff, 0x8}}, {0x5, 0x8001, 0x12, 0x5, '/dev/snd/pcmC#D#c\x00'}}, {{0x0, 0x0, 0xc9000000000, 0x484, 0xfffeffff, 0x0, {0x2, 0x5, 0xa9c4, 0xb3, 0x6, 0x10001, 0x100, 0x9, 0x6, 0x8000, 0x1000, r4, r5, 0x2, 0x9d3}}, {0x0, 0x0, 0x3, 0x7, 'cpu'}}, {{0x3, 0x3, 0x2, 0x7, 0x8, 0x6, {0x2, 0x3, 0x7ff, 0x8, 0x7, 0x19, 0x33, 0x2, 0x2, 0x4000, 0x3ff, r4, 0x0, 0x0, 0xcb6b}}, {0x4, 0x4, 0x4, 0xffffff0e, 'rdma'}}]}, &(0x7f00000034c0)={0xa0, 0x0, 0x3, {{0x6, 0x2, 0x0, 0x1000000000000000, 0x27, 0x5, {0x3, 0x0, 0x0, 0xf9, 0x9a4, 0x0, 0x6, 0x8, 0x9, 0x4000, 0x7fffffff, 0x0, r5, 0x4, 0x3}}, {0x0, 0x8}}}, &(0x7f0000003580)={0x20, 0xfffffffffffffff5, 0x5, {0x3ff, 0x4, 0x3, 0x400}}, &(0x7f00000035c0)={0x130, 0x0, 0x8000, {0x4e04, 0x80, 0x0, '\x00', {0x0, 0x6, 0x0, 0x2, 0x0, r5, 0x6000, '\x00', 0xfffffffffffffff7, 0x9, 0xc, 0x4205, {0x5, 0x2}, {0x4, 0x5}, {0x100000000, 0x2}, {0x2, 0x34d}, 0x0, 0x2, 0xffffff98, 0x9}}}}) 297.725886ms ago: executing program 2 (id=1041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8000009d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1}, 0x0, &(0x7f0000000900)='%pS \x00'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0xbc4, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x3c8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r3, 0x47fb, 0x0, 0x0, 0x0, 0x0) 259.044908ms ago: executing program 0 (id=1042): socket(0x29, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000190000007b8af8ff00000000bfa200000000000007020000f8ffff000085000000030000009500000000000000001c0566856f84c4e43768d2f3b224f0dd4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESOCT, @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r2}, 0x38) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000171006f850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x16, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x4, 'fo\x00', 0x4b, 0x4, 0x55}, 0x2c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800d700ba329d9cca45f9f10a910000b703000000000000850000007b0000009500140000000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) dup(r7) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0e, 0x7a0b6e680053fae7, 0x0, 0x85}, &(0x7f0000000280), &(0x7f00000001c0)) 152.662395ms ago: executing program 3 (id=1043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000300)={0x0, 0xf36b, 0x80, 0x0, 0x316}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001c00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001bc0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000001c40)={0x1, 0x10, 0xfa00, {&(0x7f0000001b80), r6}}, 0x18) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001b40)={r5, r0}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x4, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000001ac0)=[{0x4, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000440)=""/143, 0x8f}], &(0x7f0000000540)=[0xc98]}, {0x3, 0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/143, 0x8f}, {&(0x7f0000001640)=""/14, 0xe}], &(0x7f00000016c0)=[0x8001, 0xfffffffffffffffd, 0x5, 0x100000000, 0x4, 0x6]}, {0x3, 0x1, 0x0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000001800)=""/45, 0x2d}, {&(0x7f0000001840)=""/188, 0xbc}], &(0x7f0000001940)=[0x7de, 0x2, 0x4]}, {0x1, 0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/144, 0x90}], &(0x7f0000001a80)=[0x4, 0xe, 0x4]}], 0x4) 152.150008ms ago: executing program 3 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, 0x0, 0x5, 0x100000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40c, {0x80, 0x3, 0x0, 0x8000}}}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xfffffe75, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x7, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0xc, 0x29, 0x2000004}], 0xc}}], 0x1, 0x2000c841) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='rpm_return_int\x00', r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 151.908224ms ago: executing program 1 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000008429a3d3fd28a14b825c9d89e397aaad569f9a182f8b0ec39e0acb2771041254f82fec4279faf6e659bd451410591418d773c8844d341cbedc969f57c7d58fa8e8abdfde44242419d7ab9f753922fc2b8c376ace36ab280ad6579ddeb993e1cf1e44db87ee48f4af0d6d1cf3ba838ee391bea022faf4cf0800be63a386fd9dd1750799"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000040), 0x121800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 85.392332ms ago: executing program 3 (id=1046): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) (fail_nth: 10) 85.197056ms ago: executing program 3 (id=1047): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000580)="324b23a7", 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 84.887073ms ago: executing program 3 (id=1048): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0xe1d1}, 0x8) (async) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040087}, 0x0) (async) r6 = dup(r3) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) (async) getsockname$ax25(r6, &(0x7f0000000080)={{0x3, @default}, [@rose, @bcast, @bcast, @remote, @remote, @remote, @rose, @netrom]}, &(0x7f0000000000)=0x48) 0s ago: executing program 3 (id=1049): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000280)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x80, 0x20, 0x34f}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) rmdir(&(0x7f0000000080)='./file0\x00') io_uring_enter(r4, 0x2dec, 0x0, 0x4, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffff9c, &(0x7f0000000040), 0x628002, 0x0) sendmmsg$unix(r7, &(0x7f0000000d00), 0x0, 0x24004080) close(r1) kernel console output (not intermixed with test programs): 166.977413][ T12] vhci_hcd: release socket [ 166.988023][ T12] vhci_hcd: disconnect device [ 167.798769][ T7975] netlink: 92 bytes leftover after parsing attributes in process `syz.2.454'. [ 167.801638][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 168.088281][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 168.088292][ T40] audit: type=1326 audit(1756747806.407:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.098244][ T40] audit: type=1326 audit(1756747806.417:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.107431][ T40] audit: type=1326 audit(1756747806.417:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.118020][ T40] audit: type=1326 audit(1756747806.417:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.240704][ T7981] netlink: 180 bytes leftover after parsing attributes in process `syz.0.456'. [ 168.265292][ T61] usb 40-1: device descriptor read/8, error -110 [ 168.352099][ T7984] netlink: 92 bytes leftover after parsing attributes in process `syz.1.455'. [ 168.354936][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 168.593209][ T40] audit: type=1326 audit(1756747806.417:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.602362][ T40] audit: type=1326 audit(1756747806.417:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.610278][ T40] audit: type=1326 audit(1756747806.417:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.622850][ T40] audit: type=1326 audit(1756747806.417:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.637350][ T40] audit: type=1326 audit(1756747806.417:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.652534][ T40] audit: type=1326 audit(1756747806.417:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.456" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 168.662963][ T61] usb usb40-port1: attempt power cycle [ 169.002525][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 169.006145][ T7991] netlink: 'syz.3.459': attribute type 18 has an invalid length. [ 169.270192][ T61] usb usb40-port1: unable to enumerate USB device [ 170.748773][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 170.763420][ T8012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 171.105058][ T8023] netlink: 180 bytes leftover after parsing attributes in process `syz.3.465'. [ 171.192337][ T4207] usb 38-1: device descriptor read/8, error -110 [ 171.194842][ T6110] usb 42-1: device descriptor read/8, error -110 [ 171.501944][ T8025] netlink: 180 bytes leftover after parsing attributes in process `syz.1.466'. [ 171.839431][ T4207] usb usb38-port1: attempt power cycle [ 171.942519][ T6110] usb usb42-port1: unable to enumerate USB device [ 172.067832][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 172.139355][ T8039] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 172.412952][ T4207] usb usb38-port1: unable to enumerate USB device [ 172.480027][ T8041] tipc: Started in network mode [ 172.481795][ T8041] tipc: Node identity c, cluster identity 4711 [ 172.483795][ T8041] tipc: Node number set to 12 [ 172.718143][ T8060] No source specified [ 172.953070][ T8062] __nla_validate_parse: 1 callbacks suppressed [ 172.953082][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 172.989579][ T8062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 173.262616][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 173.591728][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 173.591742][ T40] audit: type=1326 audit(1756747811.787:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.600235][ T40] audit: type=1326 audit(1756747811.787:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.607555][ T40] audit: type=1326 audit(1756747811.787:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.614422][ T40] audit: type=1326 audit(1756747811.787:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.621017][ T40] audit: type=1326 audit(1756747811.787:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.627672][ T40] audit: type=1326 audit(1756747811.787:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.631794][ T8080] netlink: 180 bytes leftover after parsing attributes in process `syz.2.481'. [ 173.635365][ T40] audit: type=1326 audit(1756747811.787:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.643936][ T40] audit: type=1326 audit(1756747811.787:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.650550][ T40] audit: type=1326 audit(1756747811.787:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.657411][ T40] audit: type=1326 audit(1756747811.787:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.481" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 173.894668][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 173.964606][ T8084] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 175.093688][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 175.419340][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 175.485207][ T8111] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 175.560852][ T8124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.806485][ T8133] netlink: 180 bytes leftover after parsing attributes in process `syz.2.496'. [ 176.712604][ T8144] netlink: 92 bytes leftover after parsing attributes in process `syz.0.498'. [ 176.722326][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 177.446858][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 177.464632][ T8158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 177.656795][ T5980] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 178.692602][ T5980] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 180.102315][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.252249][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 180.255097][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.258940][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 180.262764][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 180.266176][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 180.269576][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 180.272636][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.278598][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 180.280684][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 180.283386][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 180.285057][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 180.288393][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 180.290313][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 181.193774][ T8199] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 181.663840][ T5980] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.666524][ T5980] Bluetooth: hci3: Injecting HCI hardware error event [ 181.669283][ T5976] Bluetooth: hci3: hardware error 0x00 [ 182.702855][ T5980] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.705496][ T5980] Bluetooth: hci1: Injecting HCI hardware error event [ 182.710421][ T5980] Bluetooth: hci1: hardware error 0x00 [ 182.882489][ T6110] usb 5-1: USB disconnect, device number 9 [ 183.202241][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.362311][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 183.366342][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.369522][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.372709][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 183.376241][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 183.379682][ T34] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.382699][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.396574][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 183.399017][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 183.402587][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 183.405739][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 183.409993][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 183.417410][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 183.742392][ T5976] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 183.759215][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 183.759226][ T40] audit: type=1326 audit(1756747822.077:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.768226][ T40] audit: type=1326 audit(1756747822.077:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.774827][ T40] audit: type=1326 audit(1756747822.077:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.781364][ T40] audit: type=1326 audit(1756747822.077:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.788017][ T40] audit: type=1326 audit(1756747822.077:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.795733][ T40] audit: type=1326 audit(1756747822.077:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.802272][ T40] audit: type=1326 audit(1756747822.077:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.808921][ T40] audit: type=1326 audit(1756747822.077:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.815548][ T40] audit: type=1326 audit(1756747822.087:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 183.821959][ T40] audit: type=1326 audit(1756747822.087:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.0.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 184.313015][ T8220] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 184.783328][ T5980] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 184.982921][ T8250] netlink: 92 bytes leftover after parsing attributes in process `syz.3.527'. [ 184.986035][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 185.809742][ T8257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 185.811753][ T8257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.816732][ T8257] vhci_hcd vhci_hcd.0: Device attached [ 185.842246][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.902505][ T10] usb 6-1: USB disconnect, device number 5 [ 185.916071][ T8260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'. [ 185.992300][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 185.995902][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.999502][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.002747][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 186.007134][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 186.011449][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.015241][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.024304][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 186.026205][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 186.028576][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 186.030300][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 186.033646][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 186.035537][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 186.102778][ T6110] usb 42-1: SetAddress Request (26) to port 0 [ 186.104746][ T6110] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 186.385077][ T8258] vhci_hcd: connection reset by peer [ 186.387447][ T60] vhci_hcd: stop threads [ 186.389056][ T60] vhci_hcd: release socket [ 186.390868][ T60] vhci_hcd: disconnect device [ 186.922609][ T8255] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 188.171144][ T8280] netlink: 180 bytes leftover after parsing attributes in process `syz.1.536'. [ 188.623676][ T4207] usb 5-1: USB disconnect, device number 10 [ 189.107673][ T8298] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 189.109971][ T8298] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.114203][ T8298] vhci_hcd vhci_hcd.0: Device attached [ 189.196923][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.540'. [ 189.698906][ T8299] vhci_hcd: connection closed [ 189.699141][ T60] vhci_hcd: stop threads [ 189.702809][ T60] vhci_hcd: release socket [ 189.704268][ T60] vhci_hcd: disconnect device [ 189.709083][ T8310] netlink: 'syz.1.543': attribute type 12 has an invalid length. [ 189.711464][ T8310] netlink: 'syz.1.543': attribute type 29 has an invalid length. [ 189.713920][ T8310] netlink: 148 bytes leftover after parsing attributes in process `syz.1.543'. [ 190.643362][ T8320] netlink: 92 bytes leftover after parsing attributes in process `syz.3.545'. [ 190.646304][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 191.193445][ T6110] usb 42-1: device descriptor read/8, error -110 [ 191.412231][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 191.572252][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 191.575189][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.578225][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.581066][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 191.585113][ T6110] usb usb42-port1: attempt power cycle [ 191.586783][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 191.590117][ T61] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 191.593264][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.601447][ T61] hub 7-1:1.0: bad descriptor, ignoring hub [ 191.603419][ T61] hub 7-1:1.0: probe with driver hub failed with error -5 [ 191.605984][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 191.607608][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 191.611163][ T61] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 191.613063][ T61] cdc_wdm 7-1:1.0: Unknown control protocol [ 191.651535][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 191.651547][ T40] audit: type=1326 audit(1756747829.967:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.660364][ T40] audit: type=1326 audit(1756747829.967:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.667708][ T40] audit: type=1326 audit(1756747829.967:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.675655][ T40] audit: type=1326 audit(1756747829.967:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.682661][ T40] audit: type=1326 audit(1756747829.967:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.689469][ T40] audit: type=1326 audit(1756747829.977:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.697771][ T40] audit: type=1326 audit(1756747829.977:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.707481][ T40] audit: type=1326 audit(1756747829.977:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.716329][ T40] audit: type=1326 audit(1756747829.977:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.723468][ T40] audit: type=1326 audit(1756747829.977:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.0.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 191.774165][ T8328] netlink: 180 bytes leftover after parsing attributes in process `syz.0.548'. [ 192.167298][ T6110] usb usb42-port1: unable to enumerate USB device [ 192.493444][ T8324] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 192.541365][ T8331] netfs: Couldn't get user pages (rc=-14) [ 192.711225][ T8333] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 193.744546][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.746624][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.919956][ T8346] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 193.922689][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.926688][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 194.050053][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.552'. [ 194.105418][ T8350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 194.172432][ T34] usb 7-1: USB disconnect, device number 4 [ 194.214585][ T61] usb 38-1: SetAddress Request (30) to port 0 [ 194.216652][ T61] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 194.503979][ T8347] vhci_hcd: connection reset by peer [ 194.506696][ T13] vhci_hcd: stop threads [ 194.508131][ T13] vhci_hcd: release socket [ 194.509708][ T13] vhci_hcd: disconnect device [ 195.201377][ T8377] FAULT_INJECTION: forcing a failure. [ 195.201377][ T8377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.212236][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT(full) [ 195.212252][ T8377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.212258][ T8377] Call Trace: [ 195.212262][ T8377] [ 195.212266][ T8377] dump_stack_lvl+0x16c/0x1f0 [ 195.212287][ T8377] should_fail_ex+0x512/0x640 [ 195.212304][ T8377] _copy_from_user+0x2e/0xd0 [ 195.212321][ T8377] __sys_bpf+0x21d/0x4de0 [ 195.212336][ T8377] ? rcu_is_watching+0x12/0xc0 [ 195.212348][ T8377] ? trace_sched_exit_tp+0x60/0x120 [ 195.212364][ T8377] ? __pfx___sys_bpf+0x10/0x10 [ 195.212380][ T8377] ? __pfx___schedule+0x10/0x10 [ 195.212407][ T8377] __ia32_sys_bpf+0x76/0xe0 [ 195.212423][ T8377] __do_fast_syscall_32+0x7c/0x3a0 [ 195.212439][ T8377] do_fast_syscall_32+0x32/0x80 [ 195.212452][ T8377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.212465][ T8377] RIP: 0023:0xf7f26579 [ 195.212474][ T8377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 195.212484][ T8377] RSP: 002b:00000000f53f455c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 195.212494][ T8377] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000900 [ 195.212501][ T8377] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.212506][ T8377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.212512][ T8377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 195.212522][ T8377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.212534][ T8377] [ 195.527391][ T8387] netlink: 92 bytes leftover after parsing attributes in process `syz.0.561'. [ 195.530495][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 195.632463][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.802276][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 195.805243][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.808546][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.811466][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 195.815406][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 195.819002][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 195.821975][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.838355][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 195.840475][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 195.843331][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 195.845908][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 195.852375][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 195.854409][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 196.732832][ T8383] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 196.833455][ T8407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 196.835528][ T8407] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.838203][ T8407] vhci_hcd vhci_hcd.0: Device attached [ 196.861466][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'. [ 197.262292][ T4207] usb 40-1: SetAddress Request (22) to port 0 [ 197.264428][ T4207] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 197.386506][ T8408] vhci_hcd: connection reset by peer [ 197.388433][ T13] vhci_hcd: stop threads [ 197.390448][ T13] vhci_hcd: release socket [ 197.392751][ T13] vhci_hcd: disconnect device [ 198.206246][ T8416] netlink: 'syz.3.571': attribute type 12 has an invalid length. [ 198.209525][ T8416] netlink: 'syz.3.571': attribute type 29 has an invalid length. [ 198.213121][ T8416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.571'. [ 198.223008][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 198.223017][ T40] audit: type=1326 audit(1756747836.547:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.235881][ T40] audit: type=1326 audit(1756747836.547:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.243679][ T40] audit: type=1326 audit(1756747836.547:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.250334][ T40] audit: type=1326 audit(1756747836.547:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.256820][ T40] audit: type=1326 audit(1756747836.547:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.263602][ T40] audit: type=1326 audit(1756747836.547:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.270227][ T40] audit: type=1326 audit(1756747836.547:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.277076][ T40] audit: type=1326 audit(1756747836.547:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.284216][ T40] audit: type=1326 audit(1756747836.547:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.290841][ T40] audit: type=1326 audit(1756747836.547:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 198.393552][ T8423] netlink: 180 bytes leftover after parsing attributes in process `syz.1.572'. [ 198.442367][ T842] usb 7-1: USB disconnect, device number 5 [ 199.137709][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 199.262361][ T61] usb 38-1: device descriptor read/8, error -110 [ 199.545562][ T8452] FAULT_INJECTION: forcing a failure. [ 199.545562][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 199.549942][ T8452] CPU: 2 UID: 0 PID: 8452 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT(full) [ 199.549957][ T8452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.549964][ T8452] Call Trace: [ 199.549968][ T8452] [ 199.549973][ T8452] dump_stack_lvl+0x16c/0x1f0 [ 199.549990][ T8452] should_fail_ex+0x512/0x640 [ 199.550006][ T8452] ? __kmalloc_noprof+0xbf/0x510 [ 199.550019][ T8452] ? sock_kmalloc+0x111/0x170 [ 199.550034][ T8452] should_failslab+0xc2/0x120 [ 199.550048][ T8452] __kmalloc_noprof+0xd2/0x510 [ 199.550060][ T8452] ? do_raw_spin_lock+0x12c/0x2b0 [ 199.550076][ T8452] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.550092][ T8452] sock_kmalloc+0x111/0x170 [ 199.550109][ T8452] af_alg_alloc_areq+0xbc/0x2e0 [ 199.550123][ T8452] skcipher_recvmsg+0x32b/0x1030 [ 199.550143][ T8452] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 199.550158][ T8452] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.550171][ T8452] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 199.550185][ T8452] ? __local_bh_enable_ip+0xa4/0x120 [ 199.550199][ T8452] skcipher_recvmsg_nokey+0x66/0x90 [ 199.550215][ T8452] sock_recvmsg+0x1f9/0x250 [ 199.550225][ T8452] __sys_recvfrom+0x203/0x310 [ 199.550239][ T8452] ? __pfx___sys_recvfrom+0x10/0x10 [ 199.550263][ T8452] ? ksys_write+0x1ac/0x250 [ 199.550275][ T8452] ? __pfx_ksys_write+0x10/0x10 [ 199.550288][ T8452] __ia32_compat_sys_recvfrom+0xe4/0x1c0 [ 199.550302][ T8452] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.550315][ T8452] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 199.550329][ T8452] __do_fast_syscall_32+0x7c/0x3a0 [ 199.550345][ T8452] do_fast_syscall_32+0x32/0x80 [ 199.550359][ T8452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.550372][ T8452] RIP: 0023:0xf701e579 [ 199.550380][ T8452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.550391][ T8452] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000173 [ 199.550401][ T8452] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800030c0 [ 199.550408][ T8452] RDX: 00000000ffffffbf RSI: 0000000000000001 RDI: 0000000000000000 [ 199.550414][ T8452] RBP: 00000000ffffffb5 R08: 0000000000000000 R09: 0000000000000000 [ 199.550420][ T8452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 199.550426][ T8452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.550439][ T8452] [ 199.666624][ T61] usb usb38-port1: attempt power cycle [ 199.945583][ T8459] netlink: 'syz.3.583': attribute type 12 has an invalid length. [ 199.948105][ T8459] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 199.951247][ T8459] netlink: 148 bytes leftover after parsing attributes in process `syz.3.583'. [ 199.993981][ T8462] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 199.996057][ T8462] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.998783][ T8462] vhci_hcd vhci_hcd.0: Device attached [ 200.078133][ T8469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.581'. [ 200.152400][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.206279][ T8472] netlink: 92 bytes leftover after parsing attributes in process `syz.3.586'. [ 200.209419][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 200.307034][ T61] usb usb38-port1: unable to enumerate USB device [ 200.332279][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 200.335149][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.338313][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.341034][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 200.349125][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 200.353640][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 200.357083][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.364639][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 200.366955][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 200.369928][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 200.371917][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 200.376228][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 200.378706][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 200.571899][ T8463] vhci_hcd: connection closed [ 200.575809][ T13] vhci_hcd: stop threads [ 200.578835][ T13] vhci_hcd: release socket [ 200.580327][ T13] vhci_hcd: disconnect device [ 200.653102][ T8481] netlink: 180 bytes leftover after parsing attributes in process `syz.2.588'. [ 201.273015][ T8457] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 202.382328][ T4207] usb 40-1: device descriptor read/8, error -110 [ 202.842709][ T4207] usb usb40-port1: attempt power cycle [ 202.917674][ T34] usb 5-1: USB disconnect, device number 11 [ 202.960509][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 203.114096][ T8510] netlink: 'syz.1.594': attribute type 12 has an invalid length. [ 203.116532][ T8510] netlink: 'syz.1.594': attribute type 29 has an invalid length. [ 203.118769][ T8510] netlink: 148 bytes leftover after parsing attributes in process `syz.1.594'. [ 203.431082][ T4207] usb usb40-port1: unable to enumerate USB device [ 205.153643][ T8545] netlink: 92 bytes leftover after parsing attributes in process `syz.3.604'. [ 205.156286][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.604'. [ 205.496265][ T8557] netlink: 'syz.0.609': attribute type 5 has an invalid length. [ 205.498781][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.609'. [ 205.597101][ T8557] netfs: Couldn't get user pages (rc=-14) [ 205.734843][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 206.144181][ T8564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 206.408225][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 206.408236][ T40] audit: type=1326 audit(1756747844.727:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.422325][ T40] audit: type=1326 audit(1756747844.737:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.429897][ T40] audit: type=1326 audit(1756747844.737:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.436735][ T40] audit: type=1326 audit(1756747844.737:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.443063][ T40] audit: type=1326 audit(1756747844.737:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.450034][ T40] audit: type=1326 audit(1756747844.737:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.456959][ T40] audit: type=1326 audit(1756747844.737:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.466789][ T40] audit: type=1326 audit(1756747844.737:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.473878][ T40] audit: type=1326 audit(1756747844.737:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.480564][ T40] audit: type=1326 audit(1756747844.737:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.2.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 206.488791][ T8570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 206.541435][ T8575] netlink: 180 bytes leftover after parsing attributes in process `syz.2.613'. [ 207.707724][ T8594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 207.709760][ T8594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.712585][ T8594] vhci_hcd vhci_hcd.0: Device attached [ 207.982550][ T4207] usb 42-1: SetAddress Request (30) to port 0 [ 207.985219][ T4207] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 208.371842][ T8595] vhci_hcd: connection reset by peer [ 208.377249][ T46] vhci_hcd: stop threads [ 208.382110][ T46] vhci_hcd: release socket [ 208.387465][ T46] vhci_hcd: disconnect device [ 209.560826][ T8632] random: crng reseeded on system resumption [ 209.561930][ T8631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.628'. [ 209.565950][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 209.945526][ T8634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 210.502221][ T8630] comedi comedi2: reset error (fatal) [ 210.593410][ T8643] netlink: 180 bytes leftover after parsing attributes in process `syz.0.632'. [ 211.469447][ T8660] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 211.471474][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.482283][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 211.852421][ T61] usb 40-1: SetAddress Request (26) to port 0 [ 211.857827][ T61] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 212.079758][ T8661] vhci_hcd: connection reset by peer [ 212.082305][ T1170] vhci_hcd: stop threads [ 212.084202][ T1170] vhci_hcd: release socket [ 212.086244][ T1170] vhci_hcd: disconnect device [ 212.809477][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 212.809488][ T40] audit: type=1326 audit(1756747851.127:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.819602][ T40] audit: type=1326 audit(1756747851.137:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.830501][ T8685] netlink: 180 bytes leftover after parsing attributes in process `syz.3.647'. [ 212.843149][ T40] audit: type=1326 audit(1756747851.137:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.853186][ T40] audit: type=1326 audit(1756747851.137:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.861809][ T40] audit: type=1326 audit(1756747851.137:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.870744][ T40] audit: type=1326 audit(1756747851.137:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.878902][ T40] audit: type=1326 audit(1756747851.137:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.887263][ T40] audit: type=1326 audit(1756747851.137:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.896244][ T40] audit: type=1326 audit(1756747851.137:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 212.908868][ T40] audit: type=1326 audit(1756747851.137:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.3.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 213.055205][ T4207] usb 42-1: device descriptor read/8, error -110 [ 213.463287][ T4207] usb usb42-port1: attempt power cycle [ 213.887966][ T8764] netlink: 180 bytes leftover after parsing attributes in process `syz.3.656'. [ 213.927508][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 214.050724][ T4207] usb usb42-port1: unable to enumerate USB device [ 214.169283][ T8778] netlink: 92 bytes leftover after parsing attributes in process `syz.3.659'. [ 214.173361][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 215.399915][ T8795] netlink: 180 bytes leftover after parsing attributes in process `syz.0.665'. [ 215.815131][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 215.914760][ T8799] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 216.452333][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.602360][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 216.606721][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.609976][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.613300][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.616365][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 216.619208][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.628593][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 216.630452][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 216.633861][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 216.635498][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 216.637172][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.938036][ T34] usb 5-1: USB disconnect, device number 12 [ 217.022425][ T61] usb 40-1: device descriptor read/8, error -110 [ 217.177808][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 217.218484][ T8823] 9pnet_fd: Insufficient options for proto=fd [ 217.302293][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.422782][ T61] usb usb40-port1: attempt power cycle [ 217.473254][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 217.476152][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.479251][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.482150][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.485261][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.488015][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.498383][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 217.500306][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 217.503203][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 217.504952][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 217.506636][ T34] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 217.802550][ T34] usb 5-1: USB disconnect, device number 13 [ 217.875967][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 217.875980][ T40] audit: type=1326 audit(1756747856.197:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.884795][ T40] audit: type=1326 audit(1756747856.197:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.891024][ T40] audit: type=1326 audit(1756747856.197:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.897475][ T40] audit: type=1326 audit(1756747856.197:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.904414][ T40] audit: type=1326 audit(1756747856.197:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.911536][ T40] audit: type=1326 audit(1756747856.197:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.920447][ T40] audit: type=1326 audit(1756747856.197:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.928918][ T40] audit: type=1326 audit(1756747856.197:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.937117][ T40] audit: type=1326 audit(1756747856.197:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 217.938312][ T8836] netlink: 180 bytes leftover after parsing attributes in process `syz.1.677'. [ 217.945270][ T40] audit: type=1326 audit(1756747856.197:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.1.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 218.012734][ T61] usb usb40-port1: unable to enumerate USB device [ 218.234337][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 218.240468][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 218.607651][ T8849] netlink: 92 bytes leftover after parsing attributes in process `syz.1.680'. [ 218.611656][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 218.619812][ T8851] warning: `syz.2.681' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.705763][ T8855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.683'. [ 219.380464][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 219.383785][ T8861] bridge_slave_1: left allmulticast mode [ 219.386135][ T8861] bridge_slave_1: left promiscuous mode [ 219.389269][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.414611][ T8861] bridge_slave_0: left allmulticast mode [ 219.416358][ T8861] bridge_slave_0: left promiscuous mode [ 219.418181][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.892316][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 219.903824][ T8869] [U] : [ 219.905306][ T8869] [U] [ 219.906527][ T8869] [U] [ 219.907726][ T8869] [U] [ 219.908657][ T8869] [U] [ 219.909557][ T8869] [U] [ 219.910439][ T8869] [U] [ 219.911464][ T8869] [U] [ 219.912850][ T8869] [U] [ 219.914048][ T8869] [U] [ 219.915021][ T8869] [U] [ 219.915907][ T8869] [U] [ 219.916821][ T8869] [U] [ 219.917944][ T8869] [U] [ 219.918993][ T8869] [U] [ 219.920006][ T8869] [U] [ 219.921197][ T8869] [U] [ 219.922238][ T8869] [U] [ 219.923117][ T8869] [U] [ 219.924004][ T8869] [U] [ 219.924913][ T8869] [U] [ 219.925805][ T8869] [U] [ 219.926693][ T8869] [U] [ 219.927728][ T8869] [U] [ 219.929072][ T8869] [U] [ 219.929974][ T8869] [U] [ 219.930877][ T8869] [U] [ 219.931770][ T8869] [U] [ 219.932673][ T8869] [U] [ 219.933582][ T8869] [U] [ 219.934486][ T8869] [U] [ 219.935378][ T8869] [U] [ 219.936613][ T8869] [U] [ 219.938070][ T8869] [U] [ 219.939261][ T8869] [U] [ 219.940447][ T8869] [U] [ 219.941651][ T8869] [U] [ 219.942840][ T8869] [U] [ 219.944031][ T8869] [U] [ 219.945240][ T8869] [U] [ 219.946615][ T8869] [U] [ 219.947740][ T8869] [U] [ 219.948968][ T8869] [U] [ 219.950178][ T8869] [U] [ 219.951366][ T8869] [U] [ 219.952546][ T8869] [U] [ 219.953732][ T8869] [U] [ 219.954915][ T8869] [U] [ 219.956263][ T8869] [U] [ 219.957480][ T8869] [U] [ 219.958695][ T8869] [U] [ 219.959871][ T8869] [U] [ 219.961081][ T8869] [U] [ 219.962256][ T8869] [U] [ 219.963422][ T8869] [U] [ 219.964597][ T8869] [U] [ 219.966092][ T8869] [U] [ 219.967293][ T8869] [U] [ 219.968414][ T8869] [U] [ 219.969605][ T8869] [U] [ 219.970791][ T8869] [U] [ 219.971980][ T8869] [U] [ 219.973179][ T8869] [U] [ 219.974279][ T8869] [U] [ 219.975336][ T8869] [U] [ 219.976214][ T8869] [U] [ 219.977105][ T8869] [U] [ 219.977947][ T8869] [U] [ 219.978871][ T8869] [U] [ 219.979752][ T8869] [U] [ 219.980648][ T8869] [U] [ 219.981547][ T8869] [U] [ 219.982920][ T8869] [U] [ 219.984148][ T8869] [U] [ 219.985191][ T8869] [U] [ 219.986145][ T8869] [U] [ 219.987067][ T8869] [U] [ 219.988077][ T8869] [U] [ 219.989206][ T8869] [U] [ 219.990362][ T8869] [U] [ 219.991587][ T8869] [U] [ 219.992751][ T8869] [U] [ 219.993905][ T8869] [U] [ 219.995048][ T8869] [U] [ 219.996189][ T8869] [U] [ 219.997346][ T8869] [U] [ 219.998481][ T8869] [U] [ 219.999496][ T8869] [U] [ 220.000583][ T8869] [U] [ 220.001526][ T8869] [U] [ 220.002452][ T8869] [U] [ 220.003606][ T8869] [U] [ 220.004798][ T8869] [U] [ 220.005999][ T8869] [U] [ 220.006944][ T8869] [U] [ 220.007853][ T8869] [U] [ 220.008963][ T8869] [U] [ 220.009925][ T8869] [U] [ 220.010846][ T8869] [U] [ 220.011756][ T8869] [U] [ 220.012678][ T8869] [U] [ 220.013623][ T8869] [U] [ 220.014537][ T8869] [U] [ 220.015447][ T8869] [U] [ 220.016491][ T8869] [U] [ 220.017431][ T8869] [U] [ 220.018329][ T8869] [U] [ 220.019301][ T8869] [U] [ 220.020210][ T8869] [U] [ 220.021162][ T8869] [U] [ 220.022074][ T8869] [U] [ 220.023093][ T8869] [U] [ 220.024620][ T8869] [U] [ 220.025561][ T8869] [U] [ 220.026449][ T8869] [U] [ 220.027376][ T8869] [U] [ 220.028497][ T8869] [U] [ 220.029565][ T8869] [U] [ 220.030461][ T8869] [U] [ 220.031342][ T8869] [U] [ 220.032345][ T8869] [U] [ 220.033221][ T8869] [U] [ 220.034083][ T8869] [U] [ 220.034935][ T8869] [U] [ 220.035873][ T8869] [U] [ 220.037002][ T8869] [U] [ 220.038117][ T8869] [U] [ 220.044490][ T8868] [U] [ 220.052247][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 220.057169][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.060791][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.064693][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.068671][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.072656][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.083044][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 220.085440][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 220.088721][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 220.090860][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 220.093324][ T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 220.394655][ T24] usb 7-1: USB disconnect, device number 6 [ 220.722822][ T5980] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 220.723642][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 220.723716][ T5980] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 220.872350][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 220.881181][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.887004][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.890900][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.906432][ T24] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.910796][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.938971][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 220.941514][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 220.978620][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 220.986732][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 221.011287][ T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 221.263279][ T24] usb 7-1: USB disconnect, device number 7 [ 223.194387][ T8913] __nla_validate_parse: 1 callbacks suppressed [ 223.194402][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 223.444370][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 223.624887][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 223.683587][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.687995][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.691860][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 223.712281][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 223.722318][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.725872][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.779159][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 223.781658][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 223.787034][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 223.789226][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 223.818674][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 223.821210][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 223.899726][ T8928] netlink: 92 bytes leftover after parsing attributes in process `syz.0.703'. [ 223.903393][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'. [ 223.944710][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 224.064558][ T8939] syz.1.708: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.070396][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.1.708 Not tainted syzkaller #0 PREEMPT(full) [ 224.070413][ T8939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.070419][ T8939] Call Trace: [ 224.070424][ T8939] [ 224.070429][ T8939] dump_stack_lvl+0x16c/0x1f0 [ 224.070448][ T8939] warn_alloc+0x248/0x3a0 [ 224.070467][ T8939] ? __pfx_warn_alloc+0x10/0x10 [ 224.070479][ T8939] ? __pfx_stack_trace_save+0x10/0x10 [ 224.070495][ T8939] ? kasan_save_stack+0x42/0x60 [ 224.070506][ T8939] ? kasan_save_stack+0x33/0x60 [ 224.070518][ T8939] ? kasan_save_track+0x14/0x30 [ 224.070529][ T8939] ? xskq_create+0x52/0x1d0 [ 224.070539][ T8939] ? xsk_setsockopt+0x74e/0x9a0 [ 224.070548][ T8939] ? do_sock_setsockopt+0xf0/0x1d0 [ 224.070565][ T8939] ? xskq_create+0xfb/0x1d0 [ 224.070576][ T8939] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 224.070591][ T8939] ? xskq_create+0xfb/0x1d0 [ 224.070605][ T8939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.070619][ T8939] ? xskq_create+0xfb/0x1d0 [ 224.070631][ T8939] vmalloc_user_noprof+0x9e/0xe0 [ 224.070640][ T8939] ? xskq_create+0xfb/0x1d0 [ 224.070651][ T8939] xskq_create+0xfb/0x1d0 [ 224.070663][ T8939] xsk_setsockopt+0x74e/0x9a0 [ 224.070673][ T8939] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.070686][ T8939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 224.070696][ T8939] ? find_held_lock+0x2b/0x80 [ 224.070708][ T8939] ? aa_sock_opt_perm+0xfd/0x1c0 [ 224.070719][ T8939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 224.070730][ T8939] do_sock_setsockopt+0xf0/0x1d0 [ 224.070747][ T8939] __sys_setsockopt+0x120/0x1a0 [ 224.070762][ T8939] __ia32_sys_setsockopt+0xbc/0x160 [ 224.070774][ T8939] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.070787][ T8939] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 224.070801][ T8939] __do_fast_syscall_32+0x7c/0x3a0 [ 224.070817][ T8939] do_fast_syscall_32+0x32/0x80 [ 224.070831][ T8939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.070843][ T8939] RIP: 0023:0xf7f26579 [ 224.070852][ T8939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.070862][ T8939] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 224.070872][ T8939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 224.070878][ T8939] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 224.070884][ T8939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.070889][ T8939] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 224.070895][ T8939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.070907][ T8939] [ 224.070911][ T8939] Mem-Info: [ 224.176515][ T8939] active_anon:27233 inactive_anon:14625 isolated_anon:0 [ 224.176515][ T8939] active_file:3369 inactive_file:1918 isolated_file:0 [ 224.176515][ T8939] unevictable:1769 dirty:1833 writeback:0 [ 224.176515][ T8939] slab_reclaimable:6326 slab_unreclaimable:52588 [ 224.176515][ T8939] mapped:25998 shmem:41582 pagetables:2270 [ 224.176515][ T8939] sec_pagetables:319 bounce:0 [ 224.176515][ T8939] kernel_misc_reclaimable:0 [ 224.176515][ T8939] free:46911 free_pcp:20543 free_cma:0 [ 224.193650][ T8939] Node 0 active_anon:8436kB inactive_anon:56kB active_file:240kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:11780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8580kB pagetables:2092kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 224.207572][ T8939] Node 1 active_anon:101696kB inactive_anon:58444kB active_file:13748kB inactive_file:7672kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:105676kB dirty:7972kB writeback:0kB shmem:155748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7536kB pagetables:6988kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB [ 224.220851][ T8939] Node 0 DMA free:3072kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 224.232583][ T8939] lowmem_reserve[]: 0 288 288 288 288 [ 224.234410][ T8939] Node 0 DMA32 free:32132kB boost:14336kB min:27556kB low:30860kB high:34164kB reserved_highatomic:2048KB free_highatomic:1532KB active_anon:8436kB inactive_anon:48kB active_file:240kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:295132kB mlocked:0kB bounce:0kB free_pcp:7184kB local_pcp:2888kB free_cma:0kB [ 224.244940][ T8939] lowmem_reserve[]: 0 0 0 0 0 [ 224.256506][ T8939] Node 1 DMA32 free:151596kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:103972kB inactive_anon:58444kB active_file:15028kB inactive_file:7672kB unevictable:3540kB writepending:9124kB present:1048432kB managed:948220kB mlocked:4kB bounce:0kB free_pcp:70880kB local_pcp:22376kB free_cma:0kB [ 224.271506][ T8939] lowmem_reserve[]: 0 0 0 0 0 [ 224.276538][ T8939] Node 0 DMA: 72*4kB (UM) 28*8kB (UM) 16*16kB (UM) 18*32kB (UM) 1*64kB (U) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 3072kB [ 224.287494][ T8939] Node 0 DMA32: 795*4kB (UMEH) 261*8kB (UMEH) 153*16kB (UEH) 281*32kB (UMEH) 125*64kB (UMEH) 36*128kB (UMH) 9*256kB (UMH) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 32132kB [ 224.297297][ T8939] Node 1 DMA32: 4*4kB (UME) 20*8kB (UME) 30*16kB (UME) 100*32kB (UME) 267*64kB (UME) 162*128kB (UME) 149*256kB (UME) 76*512kB (UME) 12*1024kB (UM) 9*2048kB (UMH) 0*4096kB = 149456kB [ 224.304755][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 224.305584][ T8939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.311294][ T8939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.314904][ T8939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.317948][ T8939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.320927][ T8939] 50335 total pagecache pages [ 224.322520][ T8939] 597 pages in swap cache [ 224.323929][ T8939] Free swap = 51340kB [ 224.326486][ T8939] Total swap = 124996kB [ 224.327897][ T8939] 524155 pages RAM [ 224.329223][ T8939] 0 pages HighMem/MovableOnly [ 224.330785][ T8939] 209477 pages reserved [ 224.336629][ T8939] 0 pages cma reserved [ 224.562823][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 224.562835][ T40] audit: type=1326 audit(1756747862.887:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.575317][ T40] audit: type=1326 audit(1756747862.887:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.585700][ T40] audit: type=1326 audit(1756747862.887:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.589648][ T8948] netlink: 180 bytes leftover after parsing attributes in process `syz.1.709'. [ 224.597743][ T40] audit: type=1326 audit(1756747862.887:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.606587][ T40] audit: type=1326 audit(1756747862.887:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.615543][ T40] audit: type=1326 audit(1756747862.887:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.627264][ T40] audit: type=1326 audit(1756747862.887:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.637211][ T40] audit: type=1326 audit(1756747862.887:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.648226][ T40] audit: type=1326 audit(1756747862.887:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.657454][ T40] audit: type=1326 audit(1756747862.887:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.1.709" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 224.686333][ T8915] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 225.434380][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 225.571401][ T8963] FAULT_INJECTION: forcing a failure. [ 225.571401][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 225.575546][ T8963] CPU: 2 UID: 0 PID: 8963 Comm: syz.1.713 Not tainted syzkaller #0 PREEMPT(full) [ 225.575561][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.575568][ T8963] Call Trace: [ 225.575572][ T8963] [ 225.575577][ T8963] dump_stack_lvl+0x16c/0x1f0 [ 225.575595][ T8963] should_fail_ex+0x512/0x640 [ 225.575612][ T8963] ? io_alloc_ocqe+0x7e/0x610 [ 225.575621][ T8963] should_failslab+0xc2/0x120 [ 225.575635][ T8963] __kmalloc_noprof+0xd2/0x510 [ 225.575651][ T8963] io_alloc_ocqe+0x7e/0x610 [ 225.575660][ T8963] ? io_cqe_cache_refill+0x221/0x2c0 [ 225.575671][ T8963] __io_submit_flush_completions+0x9b3/0x1690 [ 225.575687][ T8963] io_submit_sqes+0xa09/0x25c0 [ 225.575706][ T8963] __do_sys_io_uring_enter+0xd6a/0x1630 [ 225.575721][ T8963] ? __fget_files+0x20e/0x3c0 [ 225.575732][ T8963] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 225.575747][ T8963] ? fput+0x9b/0xd0 [ 225.575761][ T8963] ? ksys_write+0x1ac/0x250 [ 225.575772][ T8963] ? __pfx_ksys_write+0x10/0x10 [ 225.575785][ T8963] ? rcu_is_watching+0x12/0xc0 [ 225.575799][ T8963] __do_fast_syscall_32+0x7c/0x3a0 [ 225.575815][ T8963] do_fast_syscall_32+0x32/0x80 [ 225.575829][ T8963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.575842][ T8963] RIP: 0023:0xf7f26579 [ 225.575851][ T8963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.575861][ T8963] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 225.575871][ T8963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002def [ 225.575878][ T8963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.575883][ T8963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.575889][ T8963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.575895][ T8963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.575907][ T8963] [ 226.089308][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 226.372445][ T842] usb 7-1: USB disconnect, device number 8 [ 227.223035][ T8994] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.675473][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 227.750647][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 228.022386][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.272450][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 228.276182][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.279355][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.295894][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 228.299393][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 228.309341][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 228.315973][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.327663][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 228.330712][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 228.339405][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 228.341099][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 228.346857][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 228.350019][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 229.213087][ T9008] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 230.416138][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.419336][ T9037] batadv_slave_0: entered promiscuous mode [ 230.792478][ T6057] usb 6-1: USB disconnect, device number 6 [ 230.827124][ T9041] __nla_validate_parse: 3 callbacks suppressed [ 230.827139][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 230.886301][ T9041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 231.245621][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 231.412354][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.532353][ T6057] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 231.572247][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 231.574752][ T54] usb 5-1: no configurations [ 231.576734][ T54] usb 5-1: can't read configurations, error -22 [ 231.682411][ T6057] usb 7-1: Using ep0 maxpacket: 8 [ 231.686251][ T6057] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.689489][ T6057] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.692336][ T6057] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 231.695767][ T6057] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 231.699231][ T6057] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 231.702102][ T6057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.708060][ T6057] hub 7-1:1.0: bad descriptor, ignoring hub [ 231.709985][ T6057] hub 7-1:1.0: probe with driver hub failed with error -5 [ 231.712339][ T54] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.713169][ T6057] cdc_wdm 7-1:1.0: skipping garbage [ 231.716438][ T6057] cdc_wdm 7-1:1.0: skipping garbage [ 231.719576][ T6057] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 231.721455][ T6057] cdc_wdm 7-1:1.0: Unknown control protocol [ 231.872361][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 231.874849][ T54] usb 5-1: no configurations [ 231.876699][ T54] usb 5-1: can't read configurations, error -22 [ 231.879625][ T54] usb usb5-port1: attempt power cycle [ 232.242250][ T54] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.263407][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 232.265625][ T54] usb 5-1: no configurations [ 232.267168][ T54] usb 5-1: can't read configurations, error -22 [ 232.392272][ T54] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 232.412881][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 232.416570][ T54] usb 5-1: no configurations [ 232.424117][ T54] usb 5-1: can't read configurations, error -22 [ 232.427804][ T54] usb usb5-port1: unable to enumerate USB device [ 232.592614][ T9063] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 232.939741][ T9082] netlink: 92 bytes leftover after parsing attributes in process `syz.1.747'. [ 232.942706][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 234.302600][ T24] usb 7-1: USB disconnect, device number 9 [ 234.678066][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 235.296541][ T9118] FAULT_INJECTION: forcing a failure. [ 235.296541][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 235.301005][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.0.755 Not tainted syzkaller #0 PREEMPT(full) [ 235.301020][ T9118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.301040][ T9118] Call Trace: [ 235.301044][ T9118] [ 235.301049][ T9118] dump_stack_lvl+0x16c/0x1f0 [ 235.301068][ T9118] should_fail_ex+0x512/0x640 [ 235.301082][ T9118] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 235.301095][ T9118] should_failslab+0xc2/0x120 [ 235.301109][ T9118] __kmalloc_cache_noprof+0x6a/0x3e0 [ 235.301119][ T9118] ? madvise_collapse+0x1a6/0xaa0 [ 235.301141][ T9118] madvise_collapse+0x1a6/0xaa0 [ 235.301158][ T9118] ? __pfx_madvise_collapse+0x10/0x10 [ 235.301177][ T9118] madvise_vma_behavior+0x10a4/0x2d60 [ 235.301194][ T9118] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 235.301208][ T9118] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 235.301224][ T9118] ? __pfx_mas_prev+0x10/0x10 [ 235.301241][ T9118] ? find_vma_prev+0xda/0x160 [ 235.301255][ T9118] ? __pfx_find_vma_prev+0x10/0x10 [ 235.301274][ T9118] ? __lock_acquire+0x62e/0x1ce0 [ 235.301290][ T9118] madvise_walk_vmas+0x31f/0x9c0 [ 235.301307][ T9118] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 235.301325][ T9118] madvise_do_behavior+0x1e2/0x530 [ 235.301341][ T9118] ? __pfx_madvise_do_behavior+0x10/0x10 [ 235.301356][ T9118] ? down_read+0x13d/0x480 [ 235.301380][ T9118] do_madvise+0x176/0x240 [ 235.301394][ T9118] ? __pfx_do_madvise+0x10/0x10 [ 235.301407][ T9118] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 235.301425][ T9118] ? __fget_files+0x20e/0x3c0 [ 235.301441][ T9118] ? __pfx_ksys_write+0x10/0x10 [ 235.301457][ T9118] __ia32_sys_madvise+0xa7/0x110 [ 235.301472][ T9118] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 235.301487][ T9118] __do_fast_syscall_32+0x7c/0x3a0 [ 235.301503][ T9118] do_fast_syscall_32+0x32/0x80 [ 235.301517][ T9118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.301530][ T9118] RIP: 0023:0xf7f92579 [ 235.301539][ T9118] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.301549][ T9118] RSP: 002b:00000000f548555c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 235.301559][ T9118] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000400000 [ 235.301566][ T9118] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.301572][ T9118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.301578][ T9118] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.301584][ T9118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.301596][ T9118] [ 236.162321][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 236.334417][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 236.338820][ T24] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 236.341751][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.344803][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.700621][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 238.270937][ T9165] netlink: 92 bytes leftover after parsing attributes in process `syz.1.769'. [ 238.274846][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.769'. [ 238.917310][ T6057] usb 5-1: USB disconnect, device number 18 [ 239.705612][ T9189] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.715765][ T9189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.722384][ T9189] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 239.739517][ T9189] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 239.742931][ T9192] veth0_to_hsr: entered promiscuous mode [ 239.748581][ T9188] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 239.787651][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 239.793591][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 239.814724][ T9198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 239.845194][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 239.867372][ T9191] veth0_to_hsr: left promiscuous mode [ 240.126512][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 240.126529][ T40] audit: type=1326 audit(1756747878.447:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.136850][ T40] audit: type=1326 audit(1756747878.447:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.144409][ T40] audit: type=1326 audit(1756747878.447:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.151890][ T40] audit: type=1326 audit(1756747878.447:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.159555][ T40] audit: type=1326 audit(1756747878.447:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.166185][ T40] audit: type=1326 audit(1756747878.447:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.173866][ T40] audit: type=1326 audit(1756747878.447:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.181769][ T40] audit: type=1326 audit(1756747878.447:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.188375][ T40] audit: type=1326 audit(1756747878.447:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.194896][ T40] audit: type=1326 audit(1756747878.447:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.0.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 240.263262][ T9213] netlink: 180 bytes leftover after parsing attributes in process `syz.0.783'. [ 241.477580][ T9227] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.759585][ T9246] syz.2.794: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.764503][ T9246] CPU: 2 UID: 0 PID: 9246 Comm: syz.2.794 Not tainted syzkaller #0 PREEMPT(full) [ 241.764543][ T9246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.764555][ T9246] Call Trace: [ 241.764562][ T9246] [ 241.764569][ T9246] dump_stack_lvl+0x16c/0x1f0 [ 241.764618][ T9246] warn_alloc+0x248/0x3a0 [ 241.764644][ T9246] ? __pfx_warn_alloc+0x10/0x10 [ 241.764685][ T9246] ? __pfx_stack_trace_save+0x10/0x10 [ 241.764713][ T9246] ? kasan_save_stack+0x42/0x60 [ 241.764731][ T9246] ? kasan_save_stack+0x33/0x60 [ 241.764748][ T9246] ? kasan_save_track+0x14/0x30 [ 241.764767][ T9246] ? xskq_create+0x52/0x1d0 [ 241.764785][ T9246] ? xsk_setsockopt+0x74e/0x9a0 [ 241.764800][ T9246] ? do_sock_setsockopt+0xf0/0x1d0 [ 241.764828][ T9246] ? xskq_create+0xfb/0x1d0 [ 241.764848][ T9246] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 241.764875][ T9246] ? xskq_create+0xfb/0x1d0 [ 241.764902][ T9246] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.764929][ T9246] ? xskq_create+0xfb/0x1d0 [ 241.764948][ T9246] vmalloc_user_noprof+0x9e/0xe0 [ 241.764966][ T9246] ? xskq_create+0xfb/0x1d0 [ 241.764986][ T9246] xskq_create+0xfb/0x1d0 [ 241.765009][ T9246] xsk_setsockopt+0x74e/0x9a0 [ 241.765026][ T9246] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.765050][ T9246] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.765068][ T9246] ? find_held_lock+0x2b/0x80 [ 241.765096][ T9246] ? aa_sock_opt_perm+0xfd/0x1c0 [ 241.765116][ T9246] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.765138][ T9246] do_sock_setsockopt+0xf0/0x1d0 [ 241.765172][ T9246] __sys_setsockopt+0x120/0x1a0 [ 241.765201][ T9246] __ia32_sys_setsockopt+0xbc/0x160 [ 241.765223][ T9246] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.765246][ T9246] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 241.765273][ T9246] __do_fast_syscall_32+0x7c/0x3a0 [ 241.765300][ T9246] do_fast_syscall_32+0x32/0x80 [ 241.765325][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.765347][ T9246] RIP: 0023:0xf701e579 [ 241.765362][ T9246] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 241.765380][ T9246] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 241.765397][ T9246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 241.765408][ T9246] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 241.765419][ T9246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.765429][ T9246] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 241.765439][ T9246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.765463][ T9246] [ 241.765562][ T9246] Mem-Info: [ 241.876757][ T9248] netlink: 180 bytes leftover after parsing attributes in process `syz.0.793'. [ 241.885524][ T9246] active_anon:41141 inactive_anon:11873 isolated_anon:0 [ 241.885524][ T9246] active_file:1578 inactive_file:1879 isolated_file:0 [ 241.885524][ T9246] unevictable:1767 dirty:239 writeback:0 [ 241.885524][ T9246] slab_reclaimable:6354 slab_unreclaimable:52801 [ 241.885524][ T9246] mapped:25461 shmem:52615 pagetables:2368 [ 241.885524][ T9246] sec_pagetables:319 bounce:0 [ 241.885524][ T9246] kernel_misc_reclaimable:0 [ 241.885524][ T9246] free:50421 free_pcp:7097 free_cma:0 [ 241.902512][ T9246] Node 0 active_anon:8496kB inactive_anon:56kB active_file:240kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:11784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8580kB pagetables:2108kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 241.916834][ T9246] Node 1 active_anon:156068kB inactive_anon:47436kB active_file:6072kB inactive_file:7516kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:101788kB dirty:956kB writeback:0kB shmem:198676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7692kB pagetables:7364kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB [ 241.930857][ T9246] Node 0 DMA free:3104kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.941085][ T9246] lowmem_reserve[]: 0 288 288 288 288 [ 241.943839][ T9246] Node 0 DMA32 free:32332kB boost:14336kB min:27556kB low:30860kB high:34164kB reserved_highatomic:4096KB free_highatomic:1588KB active_anon:8496kB inactive_anon:48kB active_file:240kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:295132kB mlocked:0kB bounce:0kB free_pcp:3904kB local_pcp:476kB free_cma:0kB [ 241.957426][ T9246] lowmem_reserve[]: 0 0 0 0 0 [ 241.960873][ T9246] Node 1 DMA32 free:166152kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:158184kB inactive_anon:47436kB active_file:6072kB inactive_file:7516kB unevictable:3532kB writepending:956kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:22264kB local_pcp:3852kB free_cma:0kB [ 241.964975][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 241.982246][ T9246] lowmem_reserve[]: 0 0 0 0 0 [ 241.984154][ T9246] Node 0 DMA: 72*4kB (UM) 28*8kB (UM) 16*16kB (UM) 19*32kB (UM) 1*64kB (U) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 3104kB [ 241.990744][ T9246] Node 0 DMA32: 809*4kB (UMEH) 163*8kB (UEH) 159*16kB (UMEH) 267*32kB (UMEH) 135*64kB (UMEH) 39*128kB (UMH) 10*256kB (UMH) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 32332kB [ 241.997950][ T9246] Node 1 DMA32: 722*4kB (UME) 320*8kB (UM) 468*16kB (UM) 272*32kB (UME) 345*64kB (UME) 273*128kB (UME) 166*256kB (UME) 68*512kB (UME) 4*1024kB (UM) 3*2048kB (MH) 0*4096kB = 166216kB [ 242.005483][ T9246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.009263][ T9246] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.012364][ T9246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.016144][ T9246] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.020249][ T9246] 58018 total pagecache pages [ 242.021822][ T9246] 640 pages in swap cache [ 242.023219][ T9246] Free swap = 49532kB [ 242.024480][ T9246] Total swap = 124996kB [ 242.025871][ T9246] 524155 pages RAM [ 242.027047][ T9246] 0 pages HighMem/MovableOnly [ 242.028510][ T9246] 209477 pages reserved [ 242.030033][ T9246] 0 pages cma reserved [ 242.384284][ T9268] netlink: 92 bytes leftover after parsing attributes in process `syz.3.799'. [ 242.387037][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'. [ 242.992029][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 243.732360][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 243.845038][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 243.882485][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 243.886005][ T24] usb 6-1: no configurations [ 243.887688][ T24] usb 6-1: can't read configurations, error -22 [ 244.012320][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 244.162382][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 244.167387][ T24] usb 6-1: no configurations [ 244.169420][ T24] usb 6-1: can't read configurations, error -22 [ 244.172017][ T24] usb usb6-port1: attempt power cycle [ 244.512321][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 244.533004][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 244.535688][ T24] usb 6-1: no configurations [ 244.537546][ T24] usb 6-1: can't read configurations, error -22 [ 244.662335][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 244.682977][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 244.685636][ T24] usb 6-1: no configurations [ 244.687502][ T24] usb 6-1: can't read configurations, error -22 [ 244.690121][ T9298] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 244.690344][ T24] usb usb6-port1: unable to enumerate USB device [ 244.711809][ T9298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.319678][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 246.854708][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 247.026491][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 247.026508][ T40] audit: type=1326 audit(1756747885.347:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.036164][ T40] audit: type=1326 audit(1756747885.347:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.037373][ T9336] netlink: 180 bytes leftover after parsing attributes in process `syz.3.816'. [ 247.043262][ T40] audit: type=1326 audit(1756747885.347:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043288][ T40] audit: type=1326 audit(1756747885.347:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043313][ T40] audit: type=1326 audit(1756747885.347:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043334][ T40] audit: type=1326 audit(1756747885.347:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043354][ T40] audit: type=1326 audit(1756747885.347:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043373][ T40] audit: type=1326 audit(1756747885.347:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043392][ T40] audit: type=1326 audit(1756747885.347:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.043411][ T40] audit: type=1326 audit(1756747885.347:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.3.816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 247.332875][ T61] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 247.607741][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 247.613549][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.616615][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.619324][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 247.629958][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 247.633615][ T61] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 247.636375][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.664679][ T61] hub 7-1:1.0: bad descriptor, ignoring hub [ 247.666889][ T61] hub 7-1:1.0: probe with driver hub failed with error -5 [ 247.673792][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 247.675503][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 247.846975][ T61] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 247.849007][ T61] cdc_wdm 7-1:1.0: Unknown control protocol [ 248.114473][ T9358] netlink: 'syz.1.822': attribute type 12 has an invalid length. [ 248.117260][ T9358] netlink: 'syz.1.822': attribute type 29 has an invalid length. [ 248.119657][ T9358] netlink: 148 bytes leftover after parsing attributes in process `syz.1.822'. [ 248.411056][ T9362] netlink: 180 bytes leftover after parsing attributes in process `syz.3.823'. [ 248.675326][ T9338] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 248.905805][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 249.483087][ T9379] netlink: 'syz.3.829': attribute type 12 has an invalid length. [ 249.485515][ T9379] netlink: 'syz.3.829': attribute type 29 has an invalid length. [ 249.487915][ T9379] netlink: 148 bytes leftover after parsing attributes in process `syz.3.829'. [ 249.524731][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 249.532330][ T842] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 249.683983][ T842] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 249.688975][ T842] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 249.695450][ T842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.698311][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.132490][ T6480] usb 7-1: USB disconnect, device number 10 [ 250.279833][ T9393] netlink: 180 bytes leftover after parsing attributes in process `syz.2.835'. [ 250.312500][ T9395] netlink: 92 bytes leftover after parsing attributes in process `syz.3.834'. [ 250.315965][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.834'. [ 251.412332][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 251.572277][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 251.576367][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.580598][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.584614][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 251.589131][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 251.593829][ T53] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.597492][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.607467][ T53] hub 6-1:1.0: bad descriptor, ignoring hub [ 251.610068][ T53] hub 6-1:1.0: probe with driver hub failed with error -5 [ 251.613682][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 251.615907][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 251.618490][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 251.620372][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 252.282009][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 252.300030][ T842] usb 5-1: USB disconnect, device number 19 [ 252.377696][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 252.377708][ T40] audit: type=1326 audit(1756747890.697:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.386586][ T40] audit: type=1326 audit(1756747890.697:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.393547][ T40] audit: type=1326 audit(1756747890.697:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.400207][ T40] audit: type=1326 audit(1756747890.697:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.406888][ T40] audit: type=1326 audit(1756747890.697:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.413591][ T40] audit: type=1326 audit(1756747890.697:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.420170][ T40] audit: type=1326 audit(1756747890.697:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.426956][ T40] audit: type=1326 audit(1756747890.697:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.433923][ T40] audit: type=1326 audit(1756747890.697:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.440511][ T40] audit: type=1326 audit(1756747890.697:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 252.503127][ T9400] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 253.270688][ T9420] netlink: 180 bytes leftover after parsing attributes in process `syz.3.843'. [ 254.084980][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 254.162551][ T6480] usb 6-1: USB disconnect, device number 11 [ 254.174696][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 254.202501][ T9438] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 254.564121][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.851'. [ 254.842332][ T6480] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 255.012267][ T6480] usb 6-1: Using ep0 maxpacket: 16 [ 255.016152][ T6480] usb 6-1: config 0 has no interfaces? [ 255.069997][ T6480] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.100242][ T6480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.102821][ T6480] usb 6-1: Product: syz [ 255.104172][ T6480] usb 6-1: Manufacturer: syz [ 255.105649][ T6480] usb 6-1: SerialNumber: syz [ 255.108913][ T6480] usb 6-1: config 0 descriptor?? [ 255.183840][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.185828][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.235527][ T9458] netlink: 180 bytes leftover after parsing attributes in process `syz.3.853'. [ 256.280424][ T9460] netlink: 180 bytes leftover after parsing attributes in process `syz.3.856'. [ 256.850269][ T9450] Set syz1 is full, maxelem 65536 reached [ 256.851871][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 256.982830][ T9484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.864'. [ 257.105169][ T9490] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.866'. [ 257.153681][ T9492] netlink: 'syz.2.867': attribute type 12 has an invalid length. [ 257.156201][ T9492] netlink: 'syz.2.867': attribute type 29 has an invalid length. [ 257.378464][ T9503] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 257.442831][ T9508] __nla_validate_parse: 1 callbacks suppressed [ 257.442848][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 257.450203][ T9509] tipc: Started in network mode [ 257.452761][ T9509] tipc: Node identity 080211000001, cluster identity 4711 [ 257.455143][ T9509] tipc: Enabled bearer , priority 0 [ 257.464658][ T6110] usb 6-1: USB disconnect, device number 12 [ 257.515614][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 258.453401][ T24] tipc: Node number set to 134418688 [ 259.040460][ T9549] syz.0.883 (9549): attempted to duplicate a private mapping with mremap. This is not supported. [ 259.860779][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 260.329018][ T9581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.332283][ T9581] batadv_slave_0: entered promiscuous mode [ 260.403837][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 260.534510][ T10] usb 6-1: device descriptor read/64, error -71 [ 260.782265][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 260.912242][ T10] usb 6-1: device descriptor read/64, error -71 [ 261.023211][ T10] usb usb6-port1: attempt power cycle [ 261.305304][ T9595] FAULT_INJECTION: forcing a failure. [ 261.305304][ T9595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.310717][ T9595] CPU: 3 UID: 0 PID: 9595 Comm: syz.0.898 Not tainted syzkaller #0 PREEMPT(full) [ 261.310732][ T9595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.310739][ T9595] Call Trace: [ 261.310743][ T9595] [ 261.310747][ T9595] dump_stack_lvl+0x16c/0x1f0 [ 261.310765][ T9595] should_fail_ex+0x512/0x640 [ 261.310782][ T9595] _copy_from_user+0x2e/0xd0 [ 261.310799][ T9595] sg_io+0x2d7/0xda0 [ 261.310813][ T9595] scsi_ioctl+0x111b/0x1830 [ 261.310825][ T9595] ? rpm_resume+0x811/0x1310 [ 261.310840][ T9595] ? __pfx_scsi_ioctl+0x10/0x10 [ 261.310853][ T9595] ? __pfx_rpm_resume+0x10/0x10 [ 261.310865][ T9595] ? do_raw_spin_lock+0x12c/0x2b0 [ 261.310886][ T9595] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.310899][ T9595] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 261.310919][ T9595] ? __pm_runtime_resume+0xc3/0x170 [ 261.310936][ T9595] sr_block_ioctl+0x202/0x250 [ 261.310954][ T9595] ? __pfx_sr_block_ioctl+0x10/0x10 [ 261.310968][ T9595] blkdev_compat_ptr_ioctl+0x9f/0xe0 [ 261.310981][ T9595] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 261.310992][ T9595] compat_blkdev_ioctl+0x2eb/0x7a0 [ 261.311005][ T9595] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 261.311019][ T9595] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 261.311031][ T9595] __ia32_compat_sys_ioctl+0x23f/0x370 [ 261.311050][ T9595] __do_fast_syscall_32+0x7c/0x3a0 [ 261.311065][ T9595] do_fast_syscall_32+0x32/0x80 [ 261.311079][ T9595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.311093][ T9595] RIP: 0023:0xf7f92579 [ 261.311101][ T9595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 261.311113][ T9595] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 261.311123][ T9595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 261.311129][ T9595] RDX: 0000000080002740 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.311135][ T9595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.311141][ T9595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 261.311147][ T9595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.311159][ T9595] [ 261.393465][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 261.412907][ T10] usb 6-1: device descriptor read/8, error -71 [ 261.439526][ T9599] netlink: 512 bytes leftover after parsing attributes in process `syz.0.900'. [ 261.615818][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 261.682253][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 261.685844][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 261.702682][ T10] usb 6-1: device descriptor read/8, error -71 [ 261.785974][ T9626] netlink: 92 bytes leftover after parsing attributes in process `syz.0.904'. [ 261.789008][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 261.814560][ T10] usb usb6-port1: unable to enumerate USB device [ 263.378088][ T9645] capability: warning: `syz.2.915' uses 32-bit capabilities (legacy support in use) [ 263.382363][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.915'. [ 263.409396][ T9647] netlink: 'syz.2.916': attribute type 11 has an invalid length. [ 263.440431][ T9649] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 263.625437][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 263.698071][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.701282][ T9655] batadv_slave_0: entered promiscuous mode [ 264.635691][ T9697] fuse: Unknown parameter 'Ôöfd' [ 264.657803][ T9699] netlink: 'syz.2.926': attribute type 12 has an invalid length. [ 264.660280][ T9699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.926'. [ 265.385657][ T9717] fuse: Unknown parameter 'o}ou0_ióåcÄ—»Lñ@è' [ 265.627678][ T9729] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 265.829135][ T9735] batadv_slave_0: entered promiscuous mode [ 266.796597][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 267.452362][ T4207] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 267.612274][ T4207] usb 6-1: Using ep0 maxpacket: 8 [ 267.615207][ T4207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.618320][ T4207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.621071][ T4207] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 267.624552][ T4207] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 267.628122][ T4207] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 267.630915][ T4207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.640133][ T4207] hub 6-1:1.0: bad descriptor, ignoring hub [ 267.642038][ T4207] hub 6-1:1.0: probe with driver hub failed with error -5 [ 267.645029][ T4207] cdc_wdm 6-1:1.0: skipping garbage [ 267.646933][ T4207] cdc_wdm 6-1:1.0: skipping garbage [ 267.651337][ T4207] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 267.653439][ T4207] cdc_wdm 6-1:1.0: Unknown control protocol [ 268.172248][ T4207] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 268.322244][ T4207] usb 5-1: Using ep0 maxpacket: 8 [ 268.334057][ T4207] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.337206][ T4207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.339994][ T4207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 268.346649][ T4207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 268.350248][ T4207] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 268.354025][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.361336][ T4207] hub 5-1:1.0: bad descriptor, ignoring hub [ 268.363380][ T4207] hub 5-1:1.0: probe with driver hub failed with error -5 [ 268.365789][ T4207] cdc_wdm 5-1:1.0: skipping garbage [ 268.367408][ T4207] cdc_wdm 5-1:1.0: skipping garbage [ 268.396589][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'. [ 268.544775][ T9763] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 268.698634][ T4207] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 268.700534][ T4207] cdc_wdm 5-1:1.0: Unknown control protocol [ 268.722470][ T4207] usb 5-1: USB disconnect, device number 20 [ 269.152275][ T4207] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.259513][ T40] kauditd_printk_skb: 266 callbacks suppressed [ 269.259526][ T40] audit: type=1326 audit(1756747907.577:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.270144][ T40] audit: type=1326 audit(1756747907.577:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.278751][ T40] audit: type=1326 audit(1756747907.577:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.287814][ T40] audit: type=1326 audit(1756747907.577:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.294700][ T40] audit: type=1326 audit(1756747907.577:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.301232][ T40] audit: type=1326 audit(1756747907.577:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.307755][ T40] audit: type=1326 audit(1756747907.577:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.312295][ T4207] usb 5-1: Using ep0 maxpacket: 8 [ 269.315085][ T40] audit: type=1326 audit(1756747907.577:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.318127][ T4207] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.321197][ T9788] netlink: 'syz.2.954': attribute type 12 has an invalid length. [ 269.321235][ T9788] netlink: 'syz.2.954': attribute type 29 has an invalid length. [ 269.321286][ T9788] netlink: 148 bytes leftover after parsing attributes in process `syz.2.954'. [ 269.325366][ T40] audit: type=1326 audit(1756747907.577:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.328963][ T4207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.332087][ T40] audit: type=1326 audit(1756747907.577:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.2.953" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 269.335805][ T4207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 269.363822][ T4207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 269.368347][ T4207] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 269.371945][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.394097][ T4207] hub 5-1:1.0: bad descriptor, ignoring hub [ 269.396512][ T4207] hub 5-1:1.0: probe with driver hub failed with error -5 [ 269.399739][ T4207] cdc_wdm 5-1:1.0: skipping garbage [ 269.401929][ T4207] cdc_wdm 5-1:1.0: skipping garbage [ 269.408614][ T4207] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 269.410983][ T4207] cdc_wdm 5-1:1.0: Unknown control protocol [ 269.565892][ T9795] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 270.510696][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 270.515764][ T9805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.523214][ T9805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.937220][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 270.938162][ T24] usb 6-1: USB disconnect, device number 17 [ 270.939333][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 270.943114][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 270.946157][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 271.095290][ T9815] netlink: 'syz.1.963': attribute type 12 has an invalid length. [ 271.097614][ T9815] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 271.100062][ T9815] netlink: 148 bytes leftover after parsing attributes in process `syz.1.963'. [ 271.445837][ T4207] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 271.450865][ T4207] usb 5-1: device reset changed ep0 maxpacket size! [ 271.456270][ T4207] usb 5-1: USB disconnect, device number 21 [ 271.772245][ T4207] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.942390][ T4207] usb 5-1: Using ep0 maxpacket: 16 [ 271.949117][ T4207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.953155][ T4207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.956213][ T4207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 271.960194][ T4207] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 271.964238][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.967860][ T4207] usb 5-1: config 0 descriptor?? [ 272.378941][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.382836][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.387527][ T9814] fuse: Unknown parameter '' [ 273.204750][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 274.010205][ T4207] usbhid 5-1:0.0: can't add hid device: -71 [ 274.013763][ T4207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.017816][ T4207] usb 5-1: USB disconnect, device number 22 [ 274.221004][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 274.697998][ T9872] comedi comedi3: comedi_config --init_data is deprecated [ 274.702321][ T9872] netlink: 3 bytes leftover after parsing attributes in process `syz.1.978'. [ 274.714298][ T9872] batadv1: entered allmulticast mode [ 274.718163][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 274.800283][ T9879] netlink: 'syz.3.983': attribute type 12 has an invalid length. [ 274.802959][ T9879] netlink: 'syz.3.983': attribute type 29 has an invalid length. [ 274.805424][ T9879] netlink: 148 bytes leftover after parsing attributes in process `syz.3.983'. [ 275.373798][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 275.373809][ T40] audit: type=1326 audit(1756747913.687:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.387258][ T40] audit: type=1326 audit(1756747913.687:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.395792][ T40] audit: type=1326 audit(1756747913.687:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.402953][ T40] audit: type=1326 audit(1756747913.697:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.410129][ T40] audit: type=1326 audit(1756747913.697:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.418163][ T40] audit: type=1326 audit(1756747913.697:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.425208][ T40] audit: type=1326 audit(1756747913.697:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.433673][ T40] audit: type=1326 audit(1756747913.697:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.440784][ T40] audit: type=1326 audit(1756747913.697:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.447866][ T40] audit: type=1326 audit(1756747913.697:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.1.986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 275.490308][ T9892] netlink: 180 bytes leftover after parsing attributes in process `syz.1.986'. [ 275.788306][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 275.940195][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 275.944119][ T9898] bridge_slave_1: left allmulticast mode [ 275.946474][ T9898] bridge_slave_1: left promiscuous mode [ 275.948976][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.957509][ T9898] bridge_slave_0: left allmulticast mode [ 275.959952][ T9898] bridge_slave_0: left promiscuous mode [ 275.962614][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.280857][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 276.522977][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 276.650161][ T9919] netlink: 180 bytes leftover after parsing attributes in process `syz.0.995'. [ 277.735850][ T9946] netlink: 'syz.1.1004': attribute type 29 has an invalid length. [ 277.775462][ T9943] bridge_slave_1: left allmulticast mode [ 277.777253][ T9943] bridge_slave_1: left promiscuous mode [ 277.779105][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.784234][ T9943] bridge_slave_0: left allmulticast mode [ 277.786016][ T9943] bridge_slave_0: left promiscuous mode [ 277.787854][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.337728][ T5980] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 279.429142][ T9985] __nla_validate_parse: 9 callbacks suppressed [ 279.429154][ T9985] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1016'. [ 280.674006][T10015] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1025'. [ 280.757642][T10023] netlink: 'syz.3.1029': attribute type 2 has an invalid length. [ 280.761986][T10022] netlink: 'syz.2.1028': attribute type 10 has an invalid length. [ 280.772280][T10022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.776785][T10022] team0: Port device bond0 added [ 280.784059][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 280.807883][T10022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.811580][T10022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.871704][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 280.919475][T10022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.922750][T10022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.934809][T10031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.937164][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 280.939352][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 280.941575][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 281.037169][T10022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.040428][T10022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.041903][T10033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.062715][T10033] netlink: 'syz.3.1033': attribute type 4 has an invalid length. [ 281.065299][T10033] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1033'. [ 281.082481][T10033] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 281.114457][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 281.114467][ T40] audit: type=1326 audit(1756747919.437:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.124092][ T40] audit: type=1326 audit(1756747919.437:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.130594][ T40] audit: type=1326 audit(1756747919.437:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.137596][ T40] audit: type=1326 audit(1756747919.437:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.144619][ T40] audit: type=1326 audit(1756747919.437:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.151327][ T40] audit: type=1326 audit(1756747919.437:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.158115][ T40] audit: type=1326 audit(1756747919.437:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.159103][T10022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.164814][ T40] audit: type=1326 audit(1756747919.447:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.174644][T10022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.175263][ T40] audit: type=1326 audit(1756747919.447:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.192243][ T40] audit: type=1326 audit(1756747919.447:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 281.199967][T10037] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1035'. [ 281.270637][T10046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.281326][T10046] netlink: 'syz.3.1037': attribute type 4 has an invalid length. [ 281.288448][T10046] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1037'. [ 281.291901][T10046] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 281.322052][ T8716] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.325956][ T8716] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.340464][ T8716] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.343429][ T8716] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.353010][ T8716] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.356461][ T8716] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.363236][ T8716] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.366285][ T8716] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.087160][T10059] IPVS: set_ctl: invalid protocol: 22 172.20.20.58:20003 [ 282.338159][ T5375] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 282.340853][ T5375] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5375, name: klogd [ 282.344439][ T5375] preempt_count: 1, expected: 0 [ 282.346812][ T5375] RCU nest depth: 0, expected: 0 [ 282.348405][ T5375] no locks held by klogd/5375. [ 282.349892][ T5375] Preemption disabled at: [ 282.349897][ T5375] [] schedule+0xe0/0x3a0 [ 282.353726][ T5375] CPU: 2 UID: 0 PID: 5375 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 282.353741][ T5375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.353748][ T5375] Call Trace: [ 282.353751][ T5375] [ 282.353755][ T5375] dump_stack_lvl+0x16c/0x1f0 [ 282.353772][ T5375] __might_resched+0x3c0/0x5e0 [ 282.353784][ T5375] ? __pfx___might_resched+0x10/0x10 [ 282.353794][ T5375] ? pcpu_block_update+0x562/0x660 [ 282.353809][ T5375] ? find_held_lock+0x2b/0x80 [ 282.353821][ T5375] vfree+0x75/0xb50 [ 282.353836][ T5375] ? rcu_is_watching+0x12/0xc0 [ 282.353847][ T5375] ? kfree+0x24f/0x4d0 [ 282.353856][ T5375] ? free_percpu+0x6db/0x13c0 [ 282.353869][ T5375] futex_hash_free+0x98/0xc0 [ 282.353882][ T5375] __mmdrop+0x33f/0x580 [ 282.353893][ T5375] ? rcu_is_watching+0x12/0xc0 [ 282.353904][ T5375] finish_task_switch.isra.0+0x7a4/0xc10 [ 282.353915][ T5375] ? __switch_to+0x7a5/0x11a0 [ 282.353928][ T5375] __schedule+0x1198/0x5de0 [ 282.353940][ T5375] ? _prb_read_valid+0x73c/0x890 [ 282.353957][ T5375] ? __lock_acquire+0x62e/0x1ce0 [ 282.353972][ T5375] ? __pfx___schedule+0x10/0x10 [ 282.353986][ T5375] ? find_held_lock+0x2b/0x80 [ 282.354002][ T5375] ? schedule+0x2d7/0x3a0 [ 282.354015][ T5375] schedule+0xe7/0x3a0 [ 282.354027][ T5375] syslog_print+0x216/0x620 [ 282.354042][ T5375] ? __pfx_syslog_print+0x10/0x10 [ 282.354058][ T5375] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.354074][ T5375] ? rcu_is_watching+0x12/0xc0 [ 282.354096][ T5375] ? bpf_lsm_capable+0x9/0x10 [ 282.354113][ T5375] ? security_capable+0x7e/0x260 [ 282.354132][ T5375] do_syslog+0x3dc/0x6c0 [ 282.354157][ T5375] ? __pfx_do_syslog+0x10/0x10 [ 282.354189][ T5375] ? xfd_validate_state+0x61/0x180 [ 282.354212][ T5375] __x64_sys_syslog+0x74/0xb0 [ 282.354227][ T5375] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.354239][ T5375] do_syscall_64+0xcd/0x490 [ 282.354254][ T5375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.354265][ T5375] RIP: 0033:0x7faf663b1a37 [ 282.354274][ T5375] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 282.354284][ T5375] RSP: 002b:00007fff2ccdc938 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 282.354294][ T5375] RAX: ffffffffffffffda RBX: 00007faf66551490 RCX: 00007faf663b1a37 [ 282.354301][ T5375] RDX: 00000000000003ff RSI: 00007faf66551490 RDI: 0000000000000002 [ 282.354307][ T5375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.354312][ T5375] R10: 0000000000004000 R11: 0000000000000206 R12: 00007faf66551490 [ 282.354318][ T5375] R13: 00007faf6652edfe R14: 00007faf6655154c R15: 00007faf6655154c [ 282.354331][ T5375] [ 282.479681][T10078] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1045'. VM DIAGNOSIS: 17:32:00 Registers: info registers vcpu 0 CPU#0 RAX=d4566f9791a10a00 RBX=ffff888027cbf3b8 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888027cbf3b8 RBP=0000000000000000 RSP=ffffc900021d7aa8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90ab8897 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff819762cb RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000002a203000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b5f3db RBX=0000000000000001 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032222ff8 CR3=00000000673be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856170b5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900034973c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b0fc6c0 R15=ffffffff85617050 RIP=ffffffff856170df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faf661e7c80 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3f0a7f CR3=0000000024a90000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff822c2152 RDX=ffff888027e34880 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88803fffa580 RSP=ffffc90003237548 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000008 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bb0ad0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f855c0 CR3=0000000066b1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000