last executing test programs: 5.73937266s ago: executing program 0 (id=376): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_io_uring_setup(0x35d8, &(0x7f0000000140)={0x0, 0xaee3, 0x8000, 0x2, 0xbfdffbfc}, &(0x7f0000000000), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 4.736202004s ago: executing program 1 (id=381): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="fc") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa0, r5, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x18}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x4}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {}, {0x0, 0x6}, {0x1, 0x17}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0xe}, {0x5, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x8}, {0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x2}, {0x4}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x8}, {0x1}, {0x7, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x5, 0x8, 0x7, 0x11, 0xfffc, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x74, 0x5, 0x9, 0x48]}]}]}]}, 0xa0}}, 0x4000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x7fffffffffffd8c, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) 3.783438813s ago: executing program 1 (id=383): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x8, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x2404c0c8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) 3.761404591s ago: executing program 3 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0109000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000240)={0xe}) r5 = syz_io_uring_setup(0x23a, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x1, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x0, 0x2}) 2.872604595s ago: executing program 0 (id=385): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000002640)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xcd, &(0x7f0000000480)=""/205, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x59}, 0x94) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc4, 0x4100, 0xb, 0x2d8aa1a0, 0x1, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x4, 0x7, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x1, 0x9, 0x7fff, 0x7, 0x6, 0x3, 0x0, 0x4e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r2}, 0x18) socket$inet6(0xa, 0x80002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x2, 0xffffffff, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000003140)={0x5, 0x1000000}) r9 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x4e27, 0x5, 0x0, 0x40300000, 0x6, 0x8, 0x8, 0xa82, 0xff46, 0x4, 0x2, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x5, 0x10087, 0x3, 0x40000003, 0x2, 0x180002, 0xf23, 0x2000007, 0x9, 0xfff, 0x3c, 0x18, 0xf, 0x0, 0xec]}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000002780)=ANY=[@ANYBLOB="7472616e733d66642c7266666e6f3dfb28c8c998f00f727b6c9e5898d03db949dcfeec5dd887630ff4dcfddf28f002261b165ee204bdea533fb440817e8224bf3d9c8739d486ac3b54d8d0fdc7736c5e971fe2bd38db1a3f04b8f6c7e49412f173e69ac2cc70a788668a88d27489b7211fa8a26f8a85443aca", @ANYBLOB="0af7c569f47a2306", @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',smackfsdef=/dev/dri/card#\x00,subj_type=\'+\'!{\',euid>', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) r11 = signalfd4(r9, &(0x7f0000000080), 0x8, 0x800) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r11, 0x400caed0, &(0x7f0000002680)={0x1, r9, 0xfffffffe}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) 2.80621173s ago: executing program 3 (id=386): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000012e04e68000080000000007b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d0000001811000081d70e34e4bb1dab34bbe2856161e39649c6946f887d260f47acdb50", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000000800e22a97e02eb00b269da5fd000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x2400c844) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @ioapic={0x6000, 0x2, 0xaf, 0x7, 0x0, [{0x6, 0x4, 0xfd, '\x00', 0x48}, {0x7, 0xe, 0xa2, '\x00', 0x4}, {0x6, 0x3, 0x8, '\x00', 0x1}, {0xeb, 0x8a, 0x62, '\x00', 0x2}, {0x2, 0x5, 0x2, '\x00', 0x8}, {0x80, 0x9, 0x2, '\x00', 0xd}, {0x5, 0x2, 0x3}, {0x1, 0xff, 0xf}, {0x5, 0x0, 0xb, '\x00', 0x9}, {0x3c, 0x0, 0xa, '\x00', 0x7}, {0x0, 0x7, 0xff, '\x00', 0x48}, {0xc, 0x9, 0x8a, '\x00', 0x40}, {0x34, 0x1, 0x8, '\x00', 0x4}, {0x7, 0x18, 0x6, '\x00', 0x8}, {0xac, 0x6, 0x2, '\x00', 0x9}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0xb7, 0x4, 0x1}, {0xc, 0x5, 0x6, '\x00', 0x2}, {0xd5, 0x9, 0x9, '\x00', 0x4}, {0x1d, 0x15, 0x3}, {0xc8, 0x3, 0xa, '\x00', 0x8}, {0x6e, 0xf, 0x8, '\x00', 0x8}, {0x6, 0xa, 0x9, '\x00', 0x5}, {0x7, 0x4, 0x7, '\x00', 0x51}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xbc, 0xe1, 0x0, 0x6, 0x1, 0x41, 0x0, 0xf3, 0x7, 0xc, 0x3, 0x0, 0x40, 0x1, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fff, 0x2}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 2.711436682s ago: executing program 0 (id=387): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 2.693307667s ago: executing program 2 (id=388): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000240)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000340)="93"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4088}, 0x0) r6 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='iocharset', &(0x7f0000000180)='iocharset', 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, 0x0, 0x24040808) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socketpair(0x2a, 0x6, 0x1000, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000002380)=0x81, &(0x7f00000023c0)=0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.629117115s ago: executing program 3 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000001f00ab41000000000010000001000001008a42e95eca8eda2e4c57597b6c7239c29bc9940026e36dc83435e8c44d34c95e4a22ea94954a173abf0176e3ea0c6c01c3a9d7314e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14635, 0x101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x44040000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) futex_waitv(0x0, 0x0, 0xf2, 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x161483) ioctl$NBD_CLEAR_SOCK(r4, 0x125f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.500580944s ago: executing program 3 (id=390): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_io_uring_setup(0x35d8, &(0x7f0000000140)={0x0, 0xaee3, 0x8000, 0x2, 0xbfdffbfc}, &(0x7f0000000000), &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket$netlink(0x10, 0x3, 0x8000000004) 1.203344005s ago: executing program 1 (id=391): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.191459854s ago: executing program 2 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x30, r1, 0x1, 0x0, 0x9eff, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.135769273s ago: executing program 2 (id=393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[], 0x24}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1b, 0x0, 0x1}, 0x28) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69"], 0x50}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x380000c6}, 0x40010) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xf, @empty, 0x9}}, 0x0, 0x7, 0xc, 0x100, 0x8, 0x8, 0x6c}, &(0x7f0000000180)=0x9c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x4, 0x0, 0xc, 0x8, 0x4, 0x0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$sock(r9, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x10, 0x1, 0x24, 0xf}}], 0x10}}, {{&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffe}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@txtime={{0x14}}, @timestamping={{0x10, 0x1, 0x25, 0xfff}}, @mark={{0x10, 0x1, 0x24, 0x7d0}}], 0x34}}], 0x2, 0x4014) 1.053453831s ago: executing program 2 (id=394): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000600)={&(0x7f00000005c0)=[r1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1], 0x9}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', &(0x7f0000000080)={0x100, 0x0, 0x31}, 0x18) r4 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x20000800) syz_clone(0x1001a000, &(0x7f0000000180)="8fbc45e5a1572f61e3f6ac3b52bb0d888141d81831d09b44ff01231b8999f5e168d7beffefa5db6435e2c7b1938835d7781e97409b", 0x35, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340)="61a259b72d2a1870152f195421bbcc06e17c3be6083a7d3355e65bd69cf8f3d184f71f0364eb") syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) 888.877379ms ago: executing program 2 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000002c0), 0x4) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) read$char_usb(r2, &(0x7f0000000340)=""/72, 0x48) finit_module(r2, 0x0, 0x3) 771.968496ms ago: executing program 0 (id=396): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fcffffff0000000000001400850004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000600)) pipe(0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket(0x2, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r4, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) sendmsg$nl_route_sched(r1, 0x0, 0x24000080) io_setup(0x222, &(0x7f0000000180)) syz_io_uring_setup(0x24fe, &(0x7f0000000580)={0x0, 0xf36e, 0x10100, 0x4, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140)) 709.18656ms ago: executing program 3 (id=397): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xff, 0x80801) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000580)="4c222614b7908631ec695de8739c42c9fbefc168d215d60d44611ca18e504e8c4ecc0a4a56d3bef276a32159e98505493ddcc10ada2786c6f7e7a4337976fc5ae3a9266553bb0bffaca65f29c9afad93840e5a46de7aac1130b10ae9c68921066bfd1209c04a710f78ca022d354956be57a2ed74b4b2d11cafd475aed4f440fa3800cf40aa9032bfb2f3aebe2b15f56a651d08553125dd4dd1f25ae5d8079f507d77623c3c7d4fe686f97abb39704d2ccfaf2cc25e5afef09aacae", 0xbb}], 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) epoll_create1(0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) 670.412875ms ago: executing program 0 (id=398): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000012e04e68000080000000007b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d0000001811000081d70e34e4bb1dab34bbe2856161e39649c6946f887d260f47acdb50", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000000800e22a97e02eb00b269da5fd000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x2400c844) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000000c0), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @ioapic={0x6000, 0x2, 0xaf, 0x7, 0x0, [{0x6, 0x4, 0xfd, '\x00', 0x48}, {0x7, 0xe, 0xa2, '\x00', 0x4}, {0x6, 0x3, 0x8, '\x00', 0x1}, {0xeb, 0x8a, 0x62, '\x00', 0x2}, {0x2, 0x5, 0x2, '\x00', 0x8}, {0x80, 0x9, 0x2, '\x00', 0xd}, {0x5, 0x2, 0x3}, {0x1, 0xff, 0xf}, {0x5, 0x0, 0xb, '\x00', 0x9}, {0x3c, 0x0, 0xa, '\x00', 0x7}, {0x0, 0x7, 0xff, '\x00', 0x48}, {0xc, 0x9, 0x8a, '\x00', 0x40}, {0x34, 0x1, 0x8, '\x00', 0x4}, {0x7, 0x18, 0x6, '\x00', 0x8}, {0xac, 0x6, 0x2, '\x00', 0x9}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0xb7, 0x4, 0x1}, {0xc, 0x5, 0x6, '\x00', 0x2}, {0xd5, 0x9, 0x9, '\x00', 0x4}, {0x1d, 0x15, 0x3}, {0xc8, 0x3, 0xa, '\x00', 0x8}, {0x6e, 0xf, 0x8, '\x00', 0x8}, {0x6, 0xa, 0x9, '\x00', 0x5}, {0x7, 0x4, 0x7, '\x00', 0x51}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xbc, 0xe1, 0x0, 0x6, 0x1, 0x41, 0x0, 0xf3, 0x7, 0xc, 0x3, 0x0, 0x40, 0x1, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fff, 0x2}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 669.59318ms ago: executing program 1 (id=399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmmsg$alg(r2, &(0x7f0000002100)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)="12a4476b2d24a1ef1c3165972d1ac745917a6552488a95d5f00abe1a119ccc7e8ea2f663ded228cc009b6bd6bd6f10e5fddc5ed0be29232337147f9ae4d4ba00202cdcc9c505601df9cad49d3e18c4ca9249b48a023d0cd53037eb107d8f3423259d135ab06470c5758ab45ccbd5016143fdabb13d682b4637f3bb87d055714a4f4a9be46caf937b9d7986745b0a317bb8c4a1476ca3c74c5e066f85d435714cc194b84501ca2d59cdc240f893ddb31a517ce00f7bf2f51b17c61a432d5967ad1ffcc2dadf215274e47c2a71e6cc0b44bcb888e5568006c1b537ed992995125c934602bc2e55fbc7cb", 0xe9}, {&(0x7f00000001c0)="a9ad6cdf64f1454c6d2e08d88b91f0441598c084cda08547b045f7b60686aaeb7b25095cb35fe6625c91aafb03570c10935096f4d19c62ab3583f9e5376e7102e6320450e8d945e405e0e622c27f868f87f574a179d078a063334bc2b2bc6331feb49e0cabdecd3da18d7b5d41e6e821296c9ccfad0957e9dab33d01721332b3b4bfd4dc1b023defacf0257c1091588c356ca669aeefb8f7297e127b224d273d26715efb38d392245002bd6a2b54a8dda16ad4e9670dd9f5e96813f8c38e88ba61c4434c8479d97fff9e", 0xca}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000002c0)="054a95e768e998d38ae36f64a909b432f0729b760f7b940ed5c8700a442090ecd0191f173838a7d042c6f0cad4c6159ddf8bb946eeaf1ea2637576b5784fa3f6167731db5256570b003e4d74105b8454b452d6cd82f1dcd33de4c91c4a252e45edf1fae31ae21ba2d358b9dbf7b53bd9101bf7d973bbed6f319d45710316d220bc19d276bcc1a00fb54c7c741d64e3accb9dc9a78d4a6c325014a66a3a9773", 0x9f}, {&(0x7f00000004c0)="23c10ceaae351bad3b998eb3e14e1df5bff750109755a78c0d3e80ef9bb71165d2e583caabbd91236c55c19c7d32147654d2263dc4f66afca8f780a59e0bef0b70e7cb74bead23aa6c0e5406f3d3e6c0b1ec1c5df5523ee5a50d619d1c211b539235e2708a04718f70f7af57636253c41f72026a2687807a09eb743a6140675d180424ff348c3753daeb2d9248ce1242771b4f0bcacb2045835af5286ff23f495fa2aefb89138ccb886f7906d75e57daba7d5fcc30d70a9f71cc73e68021eec91f53b6df883c1902f1f6f1af25f2f3badae8ef06b832ff218e06692038bc61db50e257cdb2bf", 0xe6}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000040)="4efec06ee621153f514e2fa4083e5b202bff08dafe8261fd3cf8938f8c4b1ae3755921c405b8223bb5b54f8c", 0x2c}, {&(0x7f00000015c0)="bd9117f6068b2b2b77047401a66a12db41ba7c51194364a577784eb7ddeab640430f0f4b9c09dc6a2fefe2664f1306b6e5915471cf017cc63ae8f86c2fc32521318d4f9c073876058479a53f0313b064b2e8b8ba651fbd8bb0ecfa38b89d4e4631c9e6accf469d2c1ab500e2db1266b7181b8acb968d", 0x76}], 0x8, &(0x7f0000001680)=[@assoc={0x10, 0x117, 0x4, 0x5}], 0x10, 0x4001}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="a191265aef1383579607254ecb55542c7566ded154dd21bb3bbadf0ee76f795751ff26f700cc74127246c51caa1a8ee6102ae9f35af6", 0x36}, {&(0x7f0000001700)="d4f5c124de75230c0a83796240472114d07deba5c3d73d29c91848f782d4350d4fce3f3f0972bb83501ba7f0d4d7fd00013f9523c06a4911acdd3aa7e593fb7c9acfbd3ed8a3ed2cd83036b63c04e1c05d07f3c81408ac4447ed84137d9575754a008cd46c1d20ea5549c9dd736352296d48df4a3327e62f050dbb5b8220de4c6aff2dc6984758cacc4003c09ec4f08c1eb4aea69f706a91f1047b38bb0d", 0x9e}], 0x2, 0x0, 0x0, 0x4048011}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)="9c1b134b2c531d121190f419e5c9652157ae3034ebb454e20bbb3b936769f4de9f373cab0d5bad0a778f6c058aaf556ef43aeb0fbdf952089d41162da6101d7981846e539f5def2b1d244ca38587f1e01438ccd872aa86b2594c2085e8a073de4f53fe80c29e9df829217718d9ed8df06c61864615e9c4c962c7047ec3538042d0ccf8466b6caf70b3c273bdf79cf5dab5f3a0dd7dcc7c75329c2d33e93e9047a9ed2fe6b11df50d1ad2123e035b965f3fdd239cc12828b169f5dd7b3d50acce451b42", 0xc3}, {&(0x7f0000001900)="7b1ff030b4a3e5e4048d3ae27ce8d4e62f43fe95d894cb7bb84a2cb21ba017d5a3cd4635b50d2700d38142dcc62c3b0a66bbc036784fac54577b69d427c9d294069837edea7b7f53eee2fd8413807bef783e449fe091211d3f6aa5d0536f38fe64b994f373f6f98727808f8c317464aaaaf43c", 0x73}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="8289a93bcdebd05f0a21b9cbe2c433aa21a8efa202c9919cfb4e22c44a07cf944b1c62da037903d1e0a26dcf771bf0c6c2a9a5a82bf5297c6f4c0743325394cc9bd7dcdadd971410bcca2f3c", 0x4c}], 0x4, &(0x7f0000001a80)=[@assoc={0x10, 0x117, 0x4, 0x6}, @assoc={0x10, 0x117, 0x4, 0x9}, @assoc={0x10, 0x117, 0x4, 0x8}, @iv={0xc8, 0x117, 0x2, 0xb6, "ff9368c4ea884ff6d772e44e47babb7cec6cc56c0f7a353e059ca7484b522ad59e4950de201243d0a13dccda7c3e9041f205868cd86351b6c7d5c3b01f80b3c2cb13856914ac1765fa3a9ab9552882ab1340bbc8e45ec228e0c4cb2a8271005f56aff9e716905430983499cb791a9c36c69dfb0ef9d8a1c2f3b90ec9c8ea521ca896cc6c4a48307cfee264d01e40d2ee114441be012903dff150012f65d5528bf804e95224de27d15c4052c194e50b31c7ec2cbccdcd"}, @iv={0xb0, 0x117, 0x2, 0xa0, "2b6a1d54dff7463cbc3bce56e6a4ad8c433ca9136cf1ebf94c97c5b7cee6dc9bdd0137e010ce65f9e550b587a334f3feb90ccee1a802c0d5c3ec97d7e91daefee05de3280f839a215b3efa3c45c173c7174e81024caca7efcc6bdb6f703aa843f7f7cdefbb980ad0ebed870bad725f607cb48035d8429737258f65c8e5dca698a6bc902dfd81600dea4bf1f987d405783b93ba4d155a68b56cf1033591224902"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x800}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}], 0x1f8, 0x4008050}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="772f4bd68afea02de55893a4f74915a75d282f38579567be30245c8b9ae808d490fe16ec607505eeb5fe51d46559a88ba7ea7042c2f5cb503db7bdcf24e94d6cd55dc753d796bc4dbcd0c41b877bcf0fd3fabe08905ef12b5ab55f3197703574d2e19f2e2b8c691091d76837f33e67cac22117d2302c8ac45e078bd84110968c6255509698c90ac9cfe5df4051dc16126e13bdb57d41b07817e3b1871dbe66a4ae071502741a731102277ad8a1a6d6d4bead9a479a6e4b67c8a2874f2b9eaf74b6ee86dfcb59fc1e31db8b8488f9bbe676b63db3625c98", 0xd7}, {&(0x7f0000001d80)="e71a197179a23c4e21b0ee6f898e586ccd540fe3fbf2502c15ac67dce7d7953b16d22abf67b5597d73618e43a0848e934e69e08569ab90", 0x37}, {&(0x7f0000001dc0)="829e3f5cf5cab756cdd80de0d1e0993098ad4461a646b4b0bc331ca19f0919b322261201fdafd6f2975913b6546fd4c25e6b8b98bc88ffee4b23ccb13cf39e9942e9dbfe0cbdf9c8fa79ccd13e38cf10938862db7e7f938703f4b0873667c6aa60f27895cd5fa48af2946ad2e716010e196ce9c692b4ed2f86cd54d23676c241829216a18f86b4c61decba184a4f238c1b7727012d9e86e57a1b77727290b018c249de60a9da119886a08633b8e6bc1ee1bcca896205e849c3f3b6fdf6b83b3387bb2568faa04bc62dcbf1b3b366", 0xce}], 0x3, &(0x7f0000001f00)=[@iv={0x98, 0x117, 0x2, 0x86, "e5bae5597979ed2e2371266447259418f42051a9fba789b8837e29960d75c633c98fc3ead7a3fbfa70a692cdca44af9188c42570b2e3add72f88b2c8fa1be066c9daa42433c8cb10ae58f96a70d627901cb685f66ee2a8cc78bb2f0295742f76b47e23cf85890171a9023c4b505d9009390e028b1d5dfb43e088ca2998e216c1579f62f0110f"}, @assoc={0x10, 0x117, 0x4, 0x8}, @iv={0x10c, 0x117, 0x2, 0xfb, "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"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x1e4, 0x884}], 0x4, 0x40) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 615.075411ms ago: executing program 3 (id=400): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x8, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x2404c0c8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) 421.337783ms ago: executing program 1 (id=401): r0 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) connect$inet6(r1, &(0x7f0000002000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4) landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) connect$inet6(r1, &(0x7f0000002000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4) (async) 409.166216ms ago: executing program 0 (id=402): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x4100}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = gettid() r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r3, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@cred={{0x18, 0x1, 0x2, {r2}}}], 0x18, 0x40088d0}, 0x4004000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000040)=0x43b, 0x4) r5 = msgget$private(0x0, 0x3ac) msgrcv(r5, 0x0, 0x0, 0x1, 0x2000) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="03e300"], 0x8, 0x0) msgctl$IPC_RMID(r5, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r7 = socket$kcm(0x21, 0x0, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x4, 0x0, 0x4) syz_usb_control_io(r6, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) unshare(0x6a040000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000005c0)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 304.594515ms ago: executing program 1 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x80000000000003f4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, &(0x7f0000000100)="dfffff76", 0x4) 0s ago: executing program 2 (id=404): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newtaction={0x31c, 0x30, 0x106, 0x70bd26, 0x0, {}, [{0x308, 0x1, [@m_pedit={0x2bc, 0x1f, 0x0, 0x0, {{0xa}, {0x250, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x138, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x41, 0x6, "00271509203cbd1d8339cecc3131157053b5b1bc57062bdb9ed88ba08ad9b196978a83d7b6d5e904183cf71ca727b836ad8671cc34e20fece0025b9752"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000300)}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="410325bd7000fd3f14dc42fd8b7503287d19dedbdf25070000000c0002800800020008000000"], 0x20}, 0x1, 0x0, 0x0, 0x2400c090}, 0x14) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62699' (ED25519) to the list of known hosts. [ 47.302281][ T5899] cgroup: Unknown subsys name 'net' [ 47.458227][ T5899] cgroup: Unknown subsys name 'cpuset' [ 47.463962][ T5899] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.542959][ T5899] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.995515][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.998414][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.001533][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.004648][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.007174][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.010166][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.021030][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.024168][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.024756][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.026851][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.029836][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.033127][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.036265][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.038193][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.038236][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.045434][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.046855][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.048063][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.051263][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.053208][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.351325][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 53.403672][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.452016][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 53.569631][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.572930][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.575318][ T5946] bridge_slave_0: entered allmulticast mode [ 53.577867][ T5946] bridge_slave_0: entered promiscuous mode [ 53.600726][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.608551][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.611636][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.613914][ T5946] bridge_slave_1: entered allmulticast mode [ 53.616535][ T5946] bridge_slave_1: entered promiscuous mode [ 53.698117][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.754537][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.759865][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.762886][ T5951] bridge_slave_0: entered allmulticast mode [ 53.766160][ T5951] bridge_slave_0: entered promiscuous mode [ 53.771541][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.809283][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.812022][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.814331][ T5951] bridge_slave_1: entered allmulticast mode [ 53.817235][ T5951] bridge_slave_1: entered promiscuous mode [ 53.911547][ T5946] team0: Port device team_slave_0 added [ 53.930898][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.933176][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.935372][ T5939] bridge_slave_0: entered allmulticast mode [ 53.938016][ T5939] bridge_slave_0: entered promiscuous mode [ 53.940783][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.943096][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.945342][ T5943] bridge_slave_0: entered allmulticast mode [ 53.947903][ T5943] bridge_slave_0: entered promiscuous mode [ 53.952251][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.956306][ T5946] team0: Port device team_slave_1 added [ 53.958392][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.962174][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.965225][ T5939] bridge_slave_1: entered allmulticast mode [ 53.968248][ T5939] bridge_slave_1: entered promiscuous mode [ 53.971059][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.973329][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.975718][ T5943] bridge_slave_1: entered allmulticast mode [ 53.979385][ T5943] bridge_slave_1: entered promiscuous mode [ 53.984889][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.107790][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.110231][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.118687][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.158569][ T5951] team0: Port device team_slave_0 added [ 54.162252][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.164451][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.172602][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.177819][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.183357][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.188037][ T5951] team0: Port device team_slave_1 added [ 54.210611][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.215462][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.297721][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.300177][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.309163][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.327515][ T5939] team0: Port device team_slave_0 added [ 54.330388][ T5943] team0: Port device team_slave_0 added [ 54.339488][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.341807][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.349702][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.369701][ T5939] team0: Port device team_slave_1 added [ 54.373385][ T5943] team0: Port device team_slave_1 added [ 54.381838][ T5946] hsr_slave_0: entered promiscuous mode [ 54.384620][ T5946] hsr_slave_1: entered promiscuous mode [ 54.478965][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.482724][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.490733][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.495734][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.497966][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.506933][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.538740][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.541718][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.552264][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.557399][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.559637][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.568664][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.577824][ T5951] hsr_slave_0: entered promiscuous mode [ 54.580617][ T5951] hsr_slave_1: entered promiscuous mode [ 54.582767][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 54.584509][ T5951] Cannot create hsr debugfs directory [ 54.720257][ T5943] hsr_slave_0: entered promiscuous mode [ 54.722443][ T5943] hsr_slave_1: entered promiscuous mode [ 54.724858][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 54.726539][ T5943] Cannot create hsr debugfs directory [ 54.754578][ T5939] hsr_slave_0: entered promiscuous mode [ 54.756776][ T5939] hsr_slave_1: entered promiscuous mode [ 54.759053][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.760911][ T5939] Cannot create hsr debugfs directory [ 55.101240][ T5944] Bluetooth: hci2: command tx timeout [ 55.101248][ T5303] Bluetooth: hci3: command tx timeout [ 55.101392][ T5948] Bluetooth: hci1: command tx timeout [ 55.104204][ T5955] Bluetooth: hci0: command tx timeout [ 55.106342][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.119084][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.125990][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.142127][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.169466][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.175176][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.183427][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.191057][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.243400][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.254574][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.262585][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.268646][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.359418][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.366328][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.371760][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.377361][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.392925][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.414179][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.433125][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.443130][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.446309][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.468648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.470979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.481665][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.491302][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.494040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.502959][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.506044][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.541585][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.587415][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.602531][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.612817][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.615107][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.620665][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.622950][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.682631][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.691413][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.705682][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.707976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.711644][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.713956][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.775010][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.797818][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.825873][ T5939] veth0_vlan: entered promiscuous mode [ 55.843339][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.848284][ T5939] veth1_vlan: entered promiscuous mode [ 55.861207][ T5946] veth0_vlan: entered promiscuous mode [ 55.881303][ T5946] veth1_vlan: entered promiscuous mode [ 55.901297][ T5939] veth0_macvtap: entered promiscuous mode [ 55.912560][ T5939] veth1_macvtap: entered promiscuous mode [ 55.932354][ T5943] veth0_vlan: entered promiscuous mode [ 55.944202][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.961838][ T5946] veth0_macvtap: entered promiscuous mode [ 55.967862][ T5943] veth1_vlan: entered promiscuous mode [ 55.975397][ T5946] veth1_macvtap: entered promiscuous mode [ 55.980447][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.987676][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.011798][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.028609][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.033584][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.039113][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.058352][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.068303][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.072907][ T5943] veth0_macvtap: entered promiscuous mode [ 56.108335][ T5943] veth1_macvtap: entered promiscuous mode [ 56.113420][ T5951] veth0_vlan: entered promiscuous mode [ 56.140768][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.141126][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.147952][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.153100][ T5951] veth1_vlan: entered promiscuous mode [ 56.159013][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.163219][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.166880][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.198538][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.204787][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.208387][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.217125][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.250385][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.252134][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.254077][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.272450][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.276086][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.283322][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.286553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.330155][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.331246][ T5951] veth0_macvtap: entered promiscuous mode [ 56.334944][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.341879][ T5951] veth1_macvtap: entered promiscuous mode [ 56.365289][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.377495][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.401882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.405995][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.429573][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432454][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.441791][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.449419][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.457237][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.487492][ T6030] binder: 6029:6030 ioctl c01c64ae 80000240 returned -22 [ 56.493079][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.519971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.532653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.569584][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.590646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.724239][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.737922][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.820430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.823338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.850871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.922993][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.929428][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.960166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.963243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.965943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.022756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.180174][ T5955] Bluetooth: hci1: command tx timeout [ 57.190902][ T5955] Bluetooth: hci3: command tx timeout [ 57.193952][ T5955] Bluetooth: hci0: command tx timeout [ 57.196254][ T5948] Bluetooth: hci2: command tx timeout [ 57.292777][ T40] audit: type=1326 audit(1763277729.948:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 57.295559][ T6038] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 57.305412][ T40] audit: type=1326 audit(1763277729.948:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.2" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 57.373396][ T6046] netlink: ct family unspecified [ 57.375221][ T6046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.572435][ T6059] binder: 6058:6059 ioctl c01c64ae 80000240 returned -22 [ 58.561437][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 58.563743][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.566857][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.573444][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 58.575585][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.578246][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.584405][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 58.587194][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.590692][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.593804][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 58.595960][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.598358][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.602119][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 58.604215][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.606671][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.654749][ T6087] FAULT_INJECTION: forcing a failure. [ 58.654749][ T6087] name failslab, interval 1, probability 0, space 0, times 1 [ 58.660646][ T6087] CPU: 3 UID: 0 PID: 6087 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT(full) [ 58.660661][ T6087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.660667][ T6087] Call Trace: [ 58.660671][ T6087] [ 58.660676][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 58.660693][ T6087] should_fail_ex+0x512/0x640 [ 58.660710][ T6087] ? __kmalloc_noprof+0xca/0x880 [ 58.660728][ T6087] should_failslab+0xc2/0x120 [ 58.660742][ T6087] __kmalloc_noprof+0xdd/0x880 [ 58.660759][ T6087] ? kernfs_fop_write_iter+0x237/0x570 [ 58.660772][ T6087] ? kernfs_fop_write_iter+0x237/0x570 [ 58.660780][ T6087] kernfs_fop_write_iter+0x237/0x570 [ 58.660791][ T6087] vfs_write+0x7d3/0x11d0 [ 58.660804][ T6087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.660815][ T6087] ? __pfx_vfs_write+0x10/0x10 [ 58.660825][ T6087] ? find_held_lock+0x2b/0x80 [ 58.660846][ T6087] ksys_write+0x12a/0x250 [ 58.660857][ T6087] ? __pfx_ksys_write+0x10/0x10 [ 58.660869][ T6087] ? rcu_is_watching+0x12/0xc0 [ 58.660883][ T6087] __do_fast_syscall_32+0x7c/0x300 [ 58.660898][ T6087] do_fast_syscall_32+0x32/0x80 [ 58.660911][ T6087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.660924][ T6087] RIP: 0023:0xf70cd579 [ 58.660932][ T6087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 58.660942][ T6087] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 58.660952][ T6087] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 58.660958][ T6087] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.660963][ T6087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.660969][ T6087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 58.660974][ T6087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.660988][ T6087] [ 58.820764][ T840] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 58.886813][ T6075] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 58.889106][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.900594][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 58.910708][ T6075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 58.914015][ T6075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 58.917121][ T6075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 58.922636][ T6075] vhci_hcd vhci_hcd.0: port 0 already used [ 58.935246][ T6101] vhci_hcd: connection closed [ 58.935391][ T6078] vhci_hcd: connection closed [ 58.936346][ T6084] vhci_hcd: connection closed [ 58.936941][ T6082] vhci_hcd: connection closed [ 58.940022][ T6080] vhci_hcd: connection closed [ 58.940984][ T6076] vhci_hcd: connection reset by peer [ 58.943261][ T81] vhci_hcd: stop threads [ 58.947292][ T81] vhci_hcd: release socket [ 58.948882][ T81] vhci_hcd: disconnect device [ 58.950947][ T81] vhci_hcd: stop threads [ 58.952448][ T81] vhci_hcd: release socket [ 58.954450][ T81] vhci_hcd: disconnect device [ 58.956101][ T81] vhci_hcd: stop threads [ 58.957491][ T81] vhci_hcd: release socket [ 58.959067][ T81] vhci_hcd: disconnect device [ 58.961081][ T81] vhci_hcd: stop threads [ 58.962629][ T81] vhci_hcd: release socket [ 58.964539][ T81] vhci_hcd: disconnect device [ 58.966345][ T81] vhci_hcd: stop threads [ 58.967849][ T81] vhci_hcd: release socket [ 58.969936][ T81] vhci_hcd: disconnect device [ 58.972532][ T81] vhci_hcd: stop threads [ 58.974061][ T81] vhci_hcd: release socket [ 58.975588][ T81] vhci_hcd: disconnect device [ 59.259960][ T5944] Bluetooth: hci0: command tx timeout [ 59.260241][ T5955] Bluetooth: hci2: command tx timeout [ 59.261850][ T5944] Bluetooth: hci3: command tx timeout [ 59.264162][ T5955] Bluetooth: hci1: command tx timeout [ 59.583540][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.885580][ T6114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 59.888371][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.900264][ T6114] vhci_hcd vhci_hcd.0: Device attached [ 60.179892][ T5994] usb 38-1: SetAddress Request (2) to port 0 [ 60.182639][ T5994] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 60.425718][ T6115] vhci_hcd: connection reset by peer [ 60.428141][ T1140] vhci_hcd: stop threads [ 60.432596][ T1140] vhci_hcd: release socket [ 60.435487][ T1140] vhci_hcd: disconnect device [ 60.550142][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.703686][ T55] usb 6-1: config 0 has no interfaces? [ 60.713133][ T55] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 60.716569][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.719249][ T55] usb 6-1: Product: syz [ 60.720993][ T55] usb 6-1: Manufacturer: syz [ 60.722603][ T55] usb 6-1: SerialNumber: syz [ 60.738972][ T55] usb 6-1: config 0 descriptor?? [ 61.032321][ T1457] usb 6-1: USB disconnect, device number 2 [ 61.233751][ T6126] No source specified [ 61.321971][ T6129] netlink: 'syz.0.25': attribute type 4 has an invalid length. [ 61.342377][ T5955] Bluetooth: hci2: command tx timeout [ 61.342394][ T5948] Bluetooth: hci0: command tx timeout [ 61.351544][ T5955] Bluetooth: hci1: command tx timeout [ 61.876664][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 62.147272][ T6141] FAULT_INJECTION: forcing a failure. [ 62.147272][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 62.155577][ T6141] CPU: 2 UID: 0 PID: 6141 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 62.155601][ T6141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.155609][ T6141] Call Trace: [ 62.155614][ T6141] [ 62.155621][ T6141] dump_stack_lvl+0x16c/0x1f0 [ 62.155645][ T6141] should_fail_ex+0x512/0x640 [ 62.155668][ T6141] ? __kmalloc_noprof+0xca/0x880 [ 62.155695][ T6141] should_failslab+0xc2/0x120 [ 62.155716][ T6141] __kmalloc_noprof+0xdd/0x880 [ 62.155741][ T6141] ? drm_atomic_state_init+0x17b/0x320 [ 62.155769][ T6141] ? drm_atomic_state_init+0x17b/0x320 [ 62.155791][ T6141] drm_atomic_state_init+0x17b/0x320 [ 62.155812][ T6141] ? __kasan_kmalloc+0xaa/0xb0 [ 62.155831][ T6141] drm_atomic_state_alloc+0xd3/0x120 [ 62.155855][ T6141] drm_mode_atomic_ioctl+0x393/0x2600 [ 62.155894][ T6141] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 62.155919][ T6141] ? __lock_acquire+0xb8a/0x1c90 [ 62.155957][ T6141] ? drm_is_current_master+0x2c/0x40 [ 62.155984][ T6141] ? do_raw_spin_unlock+0x172/0x230 [ 62.156003][ T6141] drm_ioctl_kernel+0x1f4/0x3e0 [ 62.156023][ T6141] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 62.156049][ T6141] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 62.156082][ T6141] drm_ioctl+0x5c9/0xc30 [ 62.156106][ T6141] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 62.156133][ T6141] ? __pfx_drm_ioctl+0x10/0x10 [ 62.156172][ T6141] drm_compat_ioctl+0x327/0x460 [ 62.156199][ T6141] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 62.156225][ T6141] __ia32_compat_sys_ioctl+0x242/0x370 [ 62.156254][ T6141] __do_fast_syscall_32+0x7c/0x300 [ 62.156278][ T6141] do_fast_syscall_32+0x32/0x80 [ 62.156299][ T6141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.156318][ T6141] RIP: 0023:0xf70bd579 [ 62.156332][ T6141] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.156347][ T6141] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 62.156363][ T6141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 62.156374][ T6141] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.156382][ T6141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.156391][ T6141] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.156399][ T6141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.156419][ T6141] [ 62.262262][ C2] vkms_vblank_simulate: vblank timer overrun [ 62.344134][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 62.794630][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 62.800156][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 62.912306][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.092492][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 63.096326][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 63.099782][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.114864][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.118178][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.121687][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.167313][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.173282][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.211736][ T6163] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 63.219525][ T6163] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 63.431319][ T55] usb 5-1: usb_control_msg returned -32 [ 63.435699][ T55] usbtmc 5-1:16.0: can't read capabilities [ 63.449666][ T55] usb 5-1: USB disconnect, device number 2 [ 63.597285][ T54] cfg80211: failed to load regulatory.db [ 63.860282][ C2] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 63.864564][ C2] sr 2:0:0:0: [sr0] tag#19 CDB: Test Unit Ready [ 63.983412][ T840] vhci_hcd: vhci_device speed not set [ 64.158064][ T6176] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 64.569068][ T6174] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 64.629496][ T6186] netlink: 'syz.0.42': attribute type 8 has an invalid length. [ 64.703332][ T6187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 65.269601][ T5994] usb 38-1: device descriptor read/8, error -110 [ 65.301073][ T6194] binder: 6193:6194 ioctl c01c64ae 80000240 returned -22 [ 66.035695][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 66.092116][ T6199] binder: 6198:6199 ioctl c01c64ae 80000240 returned -22 [ 66.236551][ T5994] usb usb38-port1: attempt power cycle [ 67.386901][ T6207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.427329][ T5994] usb usb38-port1: unable to enumerate USB device [ 67.617017][ T1132] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.817612][ T1132] usb 5-1: Using ep0 maxpacket: 16 [ 67.863347][ T1132] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 67.863362][ T1132] usb 5-1: config 0 has no interface number 0 [ 67.863716][ T1132] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.863730][ T1132] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 67.892829][ T1132] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 67.892889][ T1132] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 67.892961][ T1132] usb 5-1: Product: syz [ 67.892970][ T1132] usb 5-1: SerialNumber: syz [ 67.926249][ T1132] usb 5-1: config 0 descriptor?? [ 67.954183][ T1132] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 67.972816][ T1132] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input5 [ 68.951217][ T6226] binder: 6225:6226 ioctl c01c64ae 80000240 returned -22 [ 69.225689][ T6229] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 69.225741][ T6229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.226022][ T6229] vhci_hcd vhci_hcd.0: Device attached [ 69.524922][ T5994] usb 44-1: SetAddress Request (2) to port 0 [ 69.524992][ T5994] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 69.608249][ T6230] vhci_hcd: connection reset by peer [ 69.614175][ T46] vhci_hcd: stop threads [ 69.614187][ T46] vhci_hcd: release socket [ 69.614268][ T46] vhci_hcd: disconnect device [ 69.876780][ T6236] Zero length message leads to an empty skb [ 70.311838][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 70.313910][ T6055] usb 5-1: USB disconnect, device number 3 [ 70.314027][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 70.360276][ T6055] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 70.615388][ T40] audit: type=1326 audit(1763277999.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 70.624190][ T40] audit: type=1326 audit(1763277999.257:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 70.661445][ T40] audit: type=1326 audit(1763277999.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 70.671203][ T40] audit: type=1326 audit(1763277999.257:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 70.678091][ T40] audit: type=1326 audit(1763277999.257:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 70.691166][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.696447][ T40] audit: type=1326 audit(1763277999.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.1.64" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd579 code=0x0 [ 70.763322][ T6264] netfs: Couldn't get user pages (rc=-14) [ 70.765271][ T6264] netfs: Zero-sized read [R=1] [ 70.841088][ T53] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.844908][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 70.849364][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.853569][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.858619][ T53] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.862454][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.867628][ T53] usb 7-1: config 0 descriptor?? [ 71.296185][ T53] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 71.620385][ T24] usb 7-1: USB disconnect, device number 2 [ 71.829765][ T840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.012286][ T840] usb 5-1: Using ep0 maxpacket: 16 [ 72.051457][ T840] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 72.051527][ T840] usb 5-1: config 0 has no interface number 0 [ 72.052019][ T840] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.052074][ T840] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.065489][ T840] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 72.065543][ T840] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 72.065885][ T840] usb 5-1: Product: syz [ 72.065941][ T840] usb 5-1: SerialNumber: syz [ 72.091488][ T840] usb 5-1: config 0 descriptor?? [ 72.138912][ T840] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 72.163936][ T840] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input7 [ 72.929914][ T6289] overlayfs: failed to resolve './file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -36 [ 73.082368][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.276482][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 73.276526][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.276548][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.276568][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.276649][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.276683][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.276701][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.279626][ T24] usb 6-1: config 0 descriptor?? [ 73.308010][ T6287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.523321][ T6287] sg_write: data in/out 124/36 bytes for SCSI command 0x1c-- guessing data in; [ 73.523321][ T6287] program syz.1.71 not setting count and/or reply_len properly [ 73.746597][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.748415][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.762314][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.765986][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.795648][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 73.795701][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 73.834346][ T24] usb 6-1: USB disconnect, device number 3 [ 74.602490][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.602647][ T1132] usb 5-1: USB disconnect, device number 4 [ 74.604731][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.641245][ T1132] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.643615][ T5994] usb 44-1: device descriptor read/8, error -110 [ 75.044441][ T5994] usb usb44-port1: attempt power cycle [ 75.490889][ T6333] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.522103][ T6333] evm: overlay not supported [ 75.707557][ T40] audit: type=1800 audit(1763278004.162:10): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.84" name="file0" dev="overlay" ino=74973325 res=0 errno=0 [ 76.005221][ T5994] usb usb44-port1: unable to enumerate USB device [ 76.005378][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.014960][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.076440][ T6342] binder: 6341:6342 ioctl c01c64ae 80000240 returned -22 [ 76.708129][ T6346] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 77.020617][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 77.093885][ T6357] netlink: 'syz.3.91': attribute type 12 has an invalid length. [ 77.205049][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 77.214797][ T6363] openvswitch: netlink: IP tunnel dst address not specified [ 77.247841][ T6361] input: syz0 as /devices/virtual/input/input8 [ 77.285891][ T6367] comedi comedi3: comedi_config --init_data is deprecated [ 77.775456][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 77.856134][ T6323] Set syz1 is full, maxelem 65536 reached [ 77.866440][ T6378] binder: 6377:6378 ioctl c01c64ae 80000240 returned -22 [ 77.984484][ T6373] mmap: syz.3.97 (6373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.384181][ T6383] overlayfs: missing 'workdir' [ 78.405068][ C1] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 78.408412][ C1] sr 2:0:0:0: [sr0] tag#7 CDB: Test Unit Ready [ 79.926072][ T6407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 79.928806][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.936727][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 79.951839][ T6404] block device autoloading is deprecated and will be removed. [ 80.321596][ T5994] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 80.890982][ T6408] vhci_hcd: connection reset by peer [ 80.900988][ T761] vhci_hcd: stop threads [ 80.903223][ T761] vhci_hcd: release socket [ 80.905207][ T761] vhci_hcd: disconnect device [ 80.924809][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 80.960879][ T6413] netfs: Couldn't get user pages (rc=-14) [ 80.978984][ T6415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.109'. [ 81.239813][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.325142][ T6419] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 81.327724][ T6419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.331884][ T6419] vhci_hcd vhci_hcd.0: Device attached [ 81.420012][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 81.435755][ T54] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 81.439363][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 81.445350][ T54] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.460638][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.471323][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.501857][ T54] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 81.504443][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 81.509339][ T54] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.520454][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.525111][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.543719][ T54] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 81.546744][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 81.551371][ T54] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.558654][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.566684][ T54] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.577352][ T54] usb 7-1: string descriptor 0 read error: -22 [ 81.582853][ T54] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.589711][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.607583][ T54] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 81.650322][ T1468] usb 44-1: SetAddress Request (6) to port 0 [ 81.653225][ T1468] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 82.031265][ T6421] vhci_hcd: connection reset by peer [ 82.033227][ T1235] vhci_hcd: stop threads [ 82.035173][ T1235] vhci_hcd: release socket [ 82.037016][ T1235] vhci_hcd: disconnect device [ 84.011463][ T6031] usb 7-1: USB disconnect, device number 3 [ 84.342001][ T6465] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 84.344713][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.348505][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 84.580243][ T6469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 84.582649][ T6469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.586047][ T6469] vhci_hcd vhci_hcd.0: Device attached [ 84.640062][ T6469] wg2 speed is unknown, defaulting to 1000 [ 84.643886][ T6469] wg2 speed is unknown, defaulting to 1000 [ 84.646686][ T6469] wg2 speed is unknown, defaulting to 1000 [ 84.697760][ T54] usb 42-1: SetAddress Request (2) to port 0 [ 84.699910][ T54] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 84.764004][ T6469] infiniband syz2: set active [ 84.765599][ T6469] infiniband syz2: added wg2 [ 84.789888][ T6469] RDS/IB: syz2: added [ 84.791777][ T6469] smc: adding ib device syz2 with port count 1 [ 84.793897][ T6469] smc: ib device syz2 port 1 has no pnetid [ 84.799722][ T6008] wg2 speed is unknown, defaulting to 1000 [ 84.802979][ T6469] wg2 speed is unknown, defaulting to 1000 [ 84.871423][ T5987] usb 38-1: SetAddress Request (6) to port 0 [ 84.874309][ T5987] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 84.879703][ T6008] wg2 speed is unknown, defaulting to 1000 [ 84.950955][ T6469] wg2 speed is unknown, defaulting to 1000 [ 85.070500][ T6469] wg2 speed is unknown, defaulting to 1000 [ 85.182321][ T6469] wg2 speed is unknown, defaulting to 1000 [ 85.376251][ T6466] vhci_hcd: connection reset by peer [ 85.378157][ T46] vhci_hcd: stop threads [ 85.378504][ T6471] vhci_hcd: connection reset by peer [ 85.379923][ T46] vhci_hcd: release socket [ 85.383488][ T46] vhci_hcd: disconnect device [ 85.385843][ T46] vhci_hcd: stop threads [ 85.387669][ T46] vhci_hcd: release socket [ 85.389545][ T46] vhci_hcd: disconnect device [ 85.434113][ T5994] vhci_hcd: vhci_device speed not set [ 86.289385][ T6031] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.434687][ T6031] usb 5-1: Using ep0 maxpacket: 16 [ 86.441368][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.450491][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.464209][ T6031] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 86.469563][ T6496] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 86.471598][ T6496] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 86.474714][ T55] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 86.474942][ T6031] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 86.481416][ T6496] vhci_hcd vhci_hcd.0: Device attached [ 86.484734][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.495833][ T6031] usb 5-1: config 0 descriptor?? [ 86.638099][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 86.644996][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 86.654960][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.658014][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.667260][ T6494] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.670428][ T6494] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.675892][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.732754][ T1468] usb 44-1: device descriptor read/8, error -110 [ 86.881959][ T55] usb 6-1: USB disconnect, device number 4 [ 86.956011][ T6487] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 86.994975][ T6487] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 87.006244][ T6487] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 87.062332][ T6500] bond1: (slave gretap1): making interface the new active one [ 87.067317][ T6500] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.085354][ T6500] macvlan2: entered promiscuous mode [ 87.087814][ T6500] macvlan2: entered allmulticast mode [ 87.091242][ T6500] bond1: entered promiscuous mode [ 87.092904][ T6500] gretap1: entered promiscuous mode [ 87.095377][ T6500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.100582][ T6500] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 87.106301][ T6500] bond1: left promiscuous mode [ 87.107938][ T6500] gretap1: left promiscuous mode [ 87.136117][ T1468] usb usb44-port1: attempt power cycle [ 87.155813][ T6497] vhci_hcd: connection closed [ 87.156398][ T13] vhci_hcd: stop threads [ 87.159723][ T13] vhci_hcd: release socket [ 87.161289][ T13] vhci_hcd: disconnect device [ 87.197953][ T6031] usbhid 5-1:0.0: can't add hid device: -71 [ 87.199949][ T6031] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 87.203552][ T6031] usb 5-1: USB disconnect, device number 5 [ 87.719042][ T1468] usb usb44-port1: unable to enumerate USB device [ 87.791797][ T6504] fuse: Bad value for 'user_id' [ 87.794260][ T6504] fuse: Bad value for 'user_id' [ 88.164752][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.3.135'. [ 88.186481][ T6517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 88.189293][ T6517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.196354][ T6517] vhci_hcd vhci_hcd.0: Device attached [ 88.244220][ T6520] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 88.246966][ T6520] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.251686][ T6520] vhci_hcd vhci_hcd.0: Device attached [ 88.790526][ T6521] vhci_hcd: connection closed [ 88.796615][ T761] vhci_hcd: stop threads [ 88.809080][ T761] vhci_hcd: release socket [ 88.811059][ T761] vhci_hcd: disconnect device [ 89.062317][ T6518] vhci_hcd: connection closed [ 89.062703][ T13] vhci_hcd: stop threads [ 89.066430][ T13] vhci_hcd: release socket [ 89.077140][ T13] vhci_hcd: disconnect device [ 89.674210][ T6535] Invalid source name [ 89.767829][ T54] usb 42-1: device descriptor read/8, error -110 [ 89.826813][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.830712][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.834832][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 89.862286][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 89.928221][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 89.929093][ T5987] usb 38-1: device descriptor read/8, error -110 [ 89.944318][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.948093][ T6546] input: syz0 as /devices/virtual/input/input9 [ 89.951912][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.080516][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.086999][ T53] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.089561][ T6031] wg2 speed is unknown, defaulting to 1000 [ 90.093193][ T6031] syz2: Port: 1 Link DOWN [ 90.094989][ T6031] wg2 speed is unknown, defaulting to 1000 [ 90.097108][ T761] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.101278][ T761] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.103995][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.105454][ T761] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.114433][ T761] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.116384][ T53] usb 7-1: config 0 descriptor?? [ 90.159635][ T54] usb usb42-port1: attempt power cycle [ 90.287210][ T40] audit: type=1804 audit(1763278018.908:11): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.147" name="/newroot/43/file1" dev="fuse" ino=1 res=1 errno=0 [ 90.293807][ T40] audit: type=1800 audit(1763278018.908:12): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="/" dev="fuse" ino=1 res=0 errno=0 [ 90.300254][ T40] audit: type=1800 audit(1763278018.928:13): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="/" dev="fuse" ino=1 res=0 errno=0 [ 90.318957][ T5987] usb usb38-port1: attempt power cycle [ 90.342017][ T53] usbhid 7-1:0.0: can't add hid device: -71 [ 90.344798][ T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 90.350599][ T53] usb 7-1: USB disconnect, device number 4 [ 90.406791][ T6563] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 90.408909][ T6563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.413623][ T6563] vhci_hcd vhci_hcd.0: Device attached [ 90.558501][ T6031] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 90.678712][ T5987] usb 38-1: SetAddress Request (8) to port 0 [ 90.680901][ T5987] usb 38-1: new SuperSpeed USB device number 8 using vhci_hcd [ 90.698686][ T6031] usb 6-1: device descriptor read/64, error -71 [ 90.769709][ T54] usb usb42-port1: unable to enumerate USB device [ 90.798871][ T1468] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.948858][ T1468] usb 7-1: Using ep0 maxpacket: 16 [ 90.953353][ T1468] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 90.957720][ T1468] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.958945][ T6031] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 90.962000][ T1468] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 90.968162][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.980623][ T1468] usb 7-1: config 0 descriptor?? [ 91.034300][ T6564] vhci_hcd: connection reset by peer [ 91.036268][ T761] vhci_hcd: stop threads [ 91.037692][ T761] vhci_hcd: release socket [ 91.039409][ T761] vhci_hcd: disconnect device [ 91.099061][ T6031] usb 6-1: device descriptor read/64, error -71 [ 91.209430][ T6031] usb usb6-port1: attempt power cycle [ 91.549427][ T6031] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 91.569864][ T6031] usb 6-1: device descriptor read/8, error -71 [ 91.824205][ T6031] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 91.855995][ T6031] usb 6-1: device descriptor read/8, error -71 [ 91.961975][ T6031] usb usb6-port1: unable to enumerate USB device [ 92.672820][ T6588] tipc: Can't bind to reserved service type 1 [ 93.215180][ T6480] usb 7-1: USB disconnect, device number 5 [ 93.404283][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 93.641365][ T1468] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 93.701070][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 93.851713][ T1468] usb 6-1: Using ep0 maxpacket: 8 [ 93.872000][ T1468] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 93.875893][ T1468] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.880127][ T1468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.883307][ T1468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.886491][ T1468] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.892013][ T1468] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.896083][ T1468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.583191][ T1468] usb 6-1: usb_control_msg returned -32 [ 94.586418][ T1468] usbtmc 6-1:16.0: can't read capabilities [ 94.682052][ T6620] FAULT_INJECTION: forcing a failure. [ 94.682052][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.690052][ T6620] CPU: 3 UID: 0 PID: 6620 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT(full) [ 94.690075][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.690087][ T6620] Call Trace: [ 94.690094][ T6620] [ 94.690104][ T6620] dump_stack_lvl+0x16c/0x1f0 [ 94.690128][ T6620] should_fail_ex+0x512/0x640 [ 94.690156][ T6620] _copy_from_iter+0x29f/0x1720 [ 94.690184][ T6620] ? __alloc_skb+0x200/0x380 [ 94.690210][ T6620] ? __pfx__copy_from_iter+0x10/0x10 [ 94.690235][ T6620] ? __kernel_text_address+0xd/0x40 [ 94.690251][ T6620] ? __pfx___might_resched+0x10/0x10 [ 94.690279][ T6620] netlink_sendmsg+0x820/0xdd0 [ 94.690303][ T6620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.690326][ T6620] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 94.690357][ T6620] ____sys_sendmsg+0xa98/0xc70 [ 94.690378][ T6620] ? free_raid_bio+0x3c0/0x480 [ 94.690401][ T6620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.690418][ T6620] ? get_compat_msghdr+0x11a/0x170 [ 94.690444][ T6620] ___sys_sendmsg+0x134/0x1d0 [ 94.690462][ T6620] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.690493][ T6620] ? find_held_lock+0x2b/0x80 [ 94.690529][ T6620] __sys_sendmsg+0x16d/0x220 [ 94.690546][ T6620] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.690575][ T6620] ? rcu_is_watching+0x12/0xc0 [ 94.690597][ T6620] __do_fast_syscall_32+0x7c/0x300 [ 94.690622][ T6620] do_fast_syscall_32+0x32/0x80 [ 94.690642][ T6620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.690663][ T6620] RIP: 0023:0xf706d579 [ 94.690676][ T6620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.690690][ T6620] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 94.690705][ T6620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 94.690716][ T6620] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.690726][ T6620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.690735][ T6620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.690752][ T6620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.690775][ T6620] [ 94.731056][ T6615] overlay: ./file1 is not a directory [ 94.820050][ T6615] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 94.823279][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.162'. [ 94.846862][ T6615] team0: Port device geneve0 added [ 95.783263][ T5987] usb 38-1: device descriptor read/8, error -110 [ 95.899273][ T6640] syzkaller0: entered promiscuous mode [ 95.901691][ T6640] syzkaller0: entered allmulticast mode [ 96.175129][ T5987] usb usb38-port1: unable to enumerate USB device [ 96.590855][ T24] usb 6-1: USB disconnect, device number 9 [ 96.635007][ T6652] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 96.637168][ T6652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.641970][ T6652] vhci_hcd vhci_hcd.0: Device attached [ 96.774547][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.799064][ T6660] dvmrp31: entered allmulticast mode [ 96.925707][ T9] usb 5-1: config 0 has no interfaces? [ 96.927482][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 96.930313][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.941840][ T9] usb 5-1: config 0 descriptor?? [ 96.984511][ T5987] usb 42-1: SetAddress Request (6) to port 0 [ 96.986474][ T5987] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 97.094512][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 97.157788][ T9] usb 5-1: USB disconnect, device number 6 [ 97.215753][ T6653] vhci_hcd: connection reset by peer [ 97.219661][ T61] vhci_hcd: stop threads [ 97.221757][ T61] vhci_hcd: release socket [ 97.224067][ T61] vhci_hcd: disconnect device [ 97.244583][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 97.420094][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.705386][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.720233][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.725277][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.729873][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.738331][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.741659][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.746469][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.751239][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.755879][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.765711][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 97.768810][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.773600][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.780644][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.785463][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.793076][ T24] usb 6-1: string descriptor 0 read error: -22 [ 97.795981][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.821909][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.842823][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.904577][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 97.909936][ T6674] loop6: detected capacity change from 0 to 7 [ 97.915536][ T6674] Dev loop6: unable to read RDB block 7 [ 97.917556][ T6674] loop6: unable to read partition table [ 97.919770][ T6674] loop6: partition table beyond EOD, truncated [ 97.922443][ T6674] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.037559][ T6674] Illegal XDP return value 4294967274 on prog (id 32) dev N/A, expect packet loss! [ 98.210222][ T24] usb 6-1: USB disconnect, device number 10 [ 98.336834][ T6690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 98.339356][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.342704][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 98.355883][ T1132] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.515741][ T1132] usb 5-1: Using ep0 maxpacket: 8 [ 98.519040][ T1132] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 98.521602][ T1132] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.524606][ T1132] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.529115][ T1132] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.534564][ T1132] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.539491][ T1132] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.543146][ T1132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.686058][ T5994] usb 44-1: SetAddress Request (10) to port 0 [ 98.688725][ T5994] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 98.754135][ T1132] usb 5-1: usb_control_msg returned -32 [ 98.755995][ T1132] usbtmc 5-1:16.0: can't read capabilities [ 98.892947][ T6691] vhci_hcd: connection reset by peer [ 98.894790][ T1235] vhci_hcd: stop threads [ 98.896956][ T1235] vhci_hcd: release socket [ 98.899481][ T1235] vhci_hcd: disconnect device [ 99.109474][ T6697] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 99.112986][ T54] usb 5-1: USB disconnect, device number 7 [ 99.416593][ T6480] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 99.508754][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 99.577246][ T6480] usb 7-1: Using ep0 maxpacket: 16 [ 99.580946][ T6480] usb 7-1: config 1 interface 0 altsetting 220 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.585031][ T6480] usb 7-1: config 1 interface 0 altsetting 220 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.590174][ T6480] usb 7-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.595536][ T6480] usb 7-1: config 1 interface 0 has no altsetting 0 [ 99.601899][ T6480] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.605647][ T6480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.609170][ T6480] usb 7-1: Product: syz [ 99.610940][ T6480] usb 7-1: Manufacturer: syz [ 99.612887][ T6480] usb 7-1: SerialNumber: syz [ 99.734709][ T6715] overlayfs: missing 'lowerdir' [ 99.827317][ T6480] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 220 proto 1 vid 0x0525 pid 0xA4A8 [ 99.887058][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.036088][ T54] usb 7-1: USB disconnect, device number 6 [ 100.039828][ T54] usblp0: removed [ 100.047123][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 100.052615][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.056288][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.060769][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.064816][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.069684][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.079090][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.087319][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.436984][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 100.439962][ T55] usbtmc 5-1:16.0: can't read capabilities [ 100.498936][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 100.734672][ T55] usb 5-1: USB disconnect, device number 8 [ 100.861705][ T6736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 100.863927][ T6736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.867018][ T6736] vhci_hcd vhci_hcd.0: Device attached [ 101.438457][ T1457] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 101.481942][ T6737] vhci_hcd: connection closed [ 101.483275][ T46] vhci_hcd: stop threads [ 101.487123][ T46] vhci_hcd: release socket [ 101.491231][ T46] vhci_hcd: disconnect device [ 101.608350][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 101.618780][ T1457] usb 7-1: Using ep0 maxpacket: 8 [ 101.625002][ T1457] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 101.628764][ T1457] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.632864][ T1457] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.636836][ T1457] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.642501][ T1457] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.647716][ T1457] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.651937][ T1457] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.863079][ T1457] usb 7-1: usb_control_msg returned -32 [ 101.865521][ T1457] usbtmc 7-1:16.0: can't read capabilities [ 102.221988][ T6751] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 102.225174][ T1457] usb 7-1: USB disconnect, device number 7 [ 102.375927][ T5987] usb 42-1: device descriptor read/8, error -110 [ 102.771714][ T5987] usb usb42-port1: attempt power cycle [ 102.796686][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 103.381219][ T5987] usb usb42-port1: unable to enumerate USB device [ 103.546052][ T6769] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 103.548493][ T6769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.554257][ T6769] vhci_hcd vhci_hcd.0: Device attached [ 103.781061][ T5994] usb 44-1: device descriptor read/8, error -110 [ 103.840608][ T5987] usb 40-1: SetAddress Request (2) to port 0 [ 103.844576][ T5987] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 104.193610][ T6770] vhci_hcd: connection reset by peer [ 104.201896][ T5994] usb usb44-port1: attempt power cycle [ 104.202176][ T61] vhci_hcd: stop threads [ 104.209628][ T61] vhci_hcd: release socket [ 104.217608][ T61] vhci_hcd: disconnect device [ 104.946792][ T6784] FAULT_INJECTION: forcing a failure. [ 104.946792][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 104.953783][ T6784] CPU: 3 UID: 0 PID: 6784 Comm: syz.2.216 Not tainted syzkaller #0 PREEMPT(full) [ 104.953805][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.953814][ T6784] Call Trace: [ 104.953821][ T6784] [ 104.953827][ T6784] dump_stack_lvl+0x16c/0x1f0 [ 104.953852][ T6784] should_fail_ex+0x512/0x640 [ 104.953876][ T6784] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 104.953897][ T6784] should_failslab+0xc2/0x120 [ 104.953919][ T6784] kmem_cache_alloc_node_noprof+0x78/0x770 [ 104.953936][ T6784] ? __alloc_skb+0x2b2/0x380 [ 104.953966][ T6784] ? __alloc_skb+0x2b2/0x380 [ 104.953988][ T6784] ? __pfx_netlink_insert+0x10/0x10 [ 104.954004][ T6784] __alloc_skb+0x2b2/0x380 [ 104.954029][ T6784] ? __pfx___alloc_skb+0x10/0x10 [ 104.954054][ T6784] ? netlink_autobind.isra.0+0x158/0x370 [ 104.954077][ T6784] netlink_alloc_large_skb+0x69/0x140 [ 104.954096][ T6784] netlink_sendmsg+0x698/0xdd0 [ 104.954118][ T6784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.954138][ T6784] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 104.954167][ T6784] ____sys_sendmsg+0xa98/0xc70 [ 104.954192][ T6784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.954231][ T6784] ? get_compat_msghdr+0x11a/0x170 [ 104.954258][ T6784] ___sys_sendmsg+0x134/0x1d0 [ 104.954276][ T6784] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.954305][ T6784] ? find_held_lock+0x2b/0x80 [ 104.954339][ T6784] __sys_sendmsg+0x16d/0x220 [ 104.954356][ T6784] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.954383][ T6784] ? rcu_is_watching+0x12/0xc0 [ 104.954405][ T6784] __do_fast_syscall_32+0x7c/0x300 [ 104.954428][ T6784] do_fast_syscall_32+0x32/0x80 [ 104.954449][ T6784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.954470][ T6784] RIP: 0023:0xf706d579 [ 104.954483][ T6784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.954498][ T6784] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 104.954514][ T6784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005a40 [ 104.954524][ T6784] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.954534][ T6784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.954543][ T6784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.954552][ T6784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.954575][ T6784] [ 105.401972][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.552180][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 105.556042][ T55] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 105.559414][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.563731][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.567859][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.571923][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.577615][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.581627][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.792596][ T55] usb 7-1: usb_control_msg returned -32 [ 105.795039][ T55] usbtmc 7-1:16.0: can't read capabilities [ 105.891173][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 105.943517][ T5994] usb usb44-port1: unable to enumerate USB device [ 105.985468][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 106.150828][ T6798] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 106.154168][ T34] usb 7-1: USB disconnect, device number 8 [ 106.335198][ T6806] fuse: Bad value for 'group_id' [ 106.336925][ T6806] fuse: Bad value for 'group_id' [ 106.491801][ T6811] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 106.520761][ T6812] openvswitch: netlink: Unknown nsh attribute 0 [ 106.523425][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.576040][ T6813] bond1: entered allmulticast mode [ 106.718577][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 106.768000][ T6819] overlayfs: overlapping lowerdir path [ 106.768851][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 106.785973][ T6819] overlayfs: failed to verify upper root origin [ 108.101345][ T6844] FAULT_INJECTION: forcing a failure. [ 108.101345][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 108.106609][ T6844] CPU: 3 UID: 0 PID: 6844 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(full) [ 108.106635][ T6844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.106645][ T6844] Call Trace: [ 108.106651][ T6844] [ 108.106656][ T6844] dump_stack_lvl+0x16c/0x1f0 [ 108.106680][ T6844] should_fail_ex+0x512/0x640 [ 108.106706][ T6844] should_failslab+0xc2/0x120 [ 108.106727][ T6844] kmem_cache_alloc_noprof+0x75/0x6e0 [ 108.106743][ T6844] ? fib6_add+0xdf9/0x1d90 [ 108.106767][ T6844] ? fib6_add+0xdf9/0x1d90 [ 108.106783][ T6844] fib6_add+0xdf9/0x1d90 [ 108.106806][ T6844] ? do_raw_spin_lock+0x12c/0x2b0 [ 108.106830][ T6844] ? __pfx_fib6_add+0x10/0x10 [ 108.106847][ T6844] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.106876][ T6844] ip6_route_multipath_add+0x4a6/0x1bd0 [ 108.106901][ T6844] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 108.106937][ T6844] ? kmem_cache_free+0x2d4/0x6c0 [ 108.106953][ T6844] ? kfree_skbmem+0x1a4/0x1f0 [ 108.106978][ T6844] ? inet6_rtm_newroute+0xe4/0x1a0 [ 108.106993][ T6844] inet6_rtm_newroute+0xe4/0x1a0 [ 108.107008][ T6844] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 108.107024][ T6844] ? __lock_acquire+0x622/0x1c90 [ 108.107056][ T6844] ? find_held_lock+0x2b/0x80 [ 108.107071][ T6844] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 108.107087][ T6844] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 108.107101][ T6844] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 108.107114][ T6844] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 108.107125][ T6844] rtnetlink_rcv_msg+0x95e/0xe90 [ 108.107138][ T6844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.107152][ T6844] ? ref_tracker_free+0x37c/0x830 [ 108.107163][ T6844] netlink_rcv_skb+0x158/0x420 [ 108.107175][ T6844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.107187][ T6844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.107202][ T6844] ? netlink_deliver_tap+0x1ae/0xd30 [ 108.107215][ T6844] netlink_unicast+0x5aa/0x870 [ 108.107228][ T6844] ? __pfx_netlink_unicast+0x10/0x10 [ 108.107244][ T6844] netlink_sendmsg+0x8c8/0xdd0 [ 108.107257][ T6844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.107269][ T6844] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 108.107286][ T6844] ____sys_sendmsg+0xa98/0xc70 [ 108.107301][ T6844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.107314][ T6844] ? get_compat_msghdr+0x11a/0x170 [ 108.107329][ T6844] ___sys_sendmsg+0x134/0x1d0 [ 108.107340][ T6844] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.107356][ T6844] ? find_held_lock+0x2b/0x80 [ 108.107374][ T6844] __sys_sendmsg+0x16d/0x220 [ 108.107384][ T6844] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.107400][ T6844] ? rcu_is_watching+0x12/0xc0 [ 108.107413][ T6844] __do_fast_syscall_32+0x7c/0x300 [ 108.107428][ T6844] do_fast_syscall_32+0x32/0x80 [ 108.107441][ T6844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.107454][ T6844] RIP: 0023:0xf70cd579 [ 108.107462][ T6844] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.107471][ T6844] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 108.107481][ T6844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 108.107487][ T6844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.107493][ T6844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.107498][ T6844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.107504][ T6844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.107516][ T6844] [ 108.334932][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 108.537659][ T6872] netlink: 96 bytes leftover after parsing attributes in process `syz.1.242'. [ 108.905137][ T5987] usb 40-1: device descriptor read/8, error -110 [ 109.306132][ T5987] usb usb40-port1: attempt power cycle [ 110.090784][ T5987] usb usb40-port1: unable to enumerate USB device [ 110.135110][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 110.633924][ T6940] fuse: Bad value for 'user_id' [ 110.646660][ T6940] fuse: Bad value for 'user_id' [ 111.080760][ T40] audit: type=1804 audit(1763278039.689:14): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.253" name="/newroot/67/bus/bus" dev="overlay" ino=386 res=1 errno=0 [ 111.106663][ T6951] Bluetooth: MGMT ver 1.23 [ 111.123301][ T40] audit: type=1804 audit(1763278039.709:15): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.253" name="/newroot/67/bus/bus" dev="overlay" ino=386 res=1 errno=0 [ 111.133567][ T40] audit: type=1800 audit(1763278039.709:16): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="bus" dev="overlay" ino=386 res=0 errno=0 [ 111.323197][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 111.678756][ T1132] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.808495][ T6974] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 111.830215][ T6975] netlink: 608 bytes leftover after parsing attributes in process `syz.1.262'. [ 111.840234][ T1132] usb 7-1: Using ep0 maxpacket: 16 [ 111.842862][ T1132] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.842881][ T1132] usb 7-1: config 0 has no interface number 0 [ 111.842909][ T1132] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.842927][ T1132] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.844418][ T1132] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.844439][ T1132] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 111.844453][ T1132] usb 7-1: Product: syz [ 111.844465][ T1132] usb 7-1: SerialNumber: syz [ 111.846339][ T1132] usb 7-1: config 0 descriptor?? [ 111.849132][ T1132] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 111.851583][ T1132] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input10 [ 112.043901][ T40] audit: type=1400 audit(1763278040.619:17): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6980 comm="syz.0.263" [ 112.077903][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 112.631524][ T9] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 112.631549][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.631565][ T9] usb 6-1: config 0 has no interfaces? [ 112.631589][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 112.631665][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.867398][ T9] usb 6-1: config 0 descriptor?? [ 113.092523][ T9] usb 6-1: USB disconnect, device number 11 [ 113.339056][ T5994] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.499346][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 113.504406][ T5994] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.504448][ T5994] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.504466][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.504486][ T5994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.504505][ T5994] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.504536][ T5994] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.504555][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.673558][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 113.737636][ T5994] usb 5-1: usb_control_msg returned -32 [ 113.739965][ T5994] usbtmc 5-1:16.0: can't read capabilities [ 114.020161][ T5994] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 114.096399][ T7006] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 114.098780][ T1457] usb 5-1: USB disconnect, device number 9 [ 114.149991][ T5994] usb 6-1: device descriptor read/64, error -71 [ 114.373515][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.374500][ T1457] usb 7-1: USB disconnect, device number 9 [ 114.375507][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.390707][ T1457] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 114.399985][ T5994] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.502609][ T7010] overlay: filesystem on ./bus not supported as upperdir [ 114.530138][ T5994] usb 6-1: device descriptor read/64, error -71 [ 114.661894][ T5994] usb usb6-port1: attempt power cycle [ 114.692712][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 114.893176][ T7018] fuse: Unknown parameter 'rootmodE' [ 115.000584][ T5994] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 115.031337][ T5994] usb 6-1: device descriptor read/8, error -71 [ 115.258106][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.300770][ T5994] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 115.322205][ T5994] usb 6-1: device descriptor read/8, error -71 [ 115.441930][ T5994] usb usb6-port1: unable to enumerate USB device [ 115.911372][ T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 116.061429][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 116.062988][ T55] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 116.067036][ T55] usb 8-1: config 0 has no interface number 0 [ 116.067071][ T55] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.067090][ T55] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 116.079946][ T55] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 116.079968][ T55] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 116.079980][ T55] usb 8-1: Product: syz [ 116.079990][ T55] usb 8-1: SerialNumber: syz [ 116.081625][ T55] usb 8-1: config 0 descriptor?? [ 116.095741][ T55] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 116.097377][ T55] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input11 [ 116.992337][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 116.992973][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.148555][ T7050] syzkaller0: entered promiscuous mode [ 117.148601][ T7050] syzkaller0: entered allmulticast mode [ 117.152548][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 117.164572][ T40] audit: type=1326 audit(1763278045.774:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.164616][ T40] audit: type=1326 audit(1763278045.774:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.165909][ T40] audit: type=1326 audit(1763278045.774:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191259][ T40] audit: type=1326 audit(1763278045.774:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191299][ T40] audit: type=1326 audit(1763278045.774:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191334][ T40] audit: type=1326 audit(1763278045.774:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191367][ T40] audit: type=1326 audit(1763278045.774:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191401][ T40] audit: type=1326 audit(1763278045.774:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191435][ T40] audit: type=1326 audit(1763278045.774:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.191468][ T40] audit: type=1326 audit(1763278045.774:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.290" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 117.245434][ T53] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 117.358431][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 117.403846][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 117.410350][ T53] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 117.410390][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.410406][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.410423][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.410440][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.410468][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.410484][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.617959][ T53] usb 6-1: usb_control_msg returned -32 [ 117.617983][ T53] usbtmc 6-1:16.0: can't read capabilities [ 117.972206][ T7063] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 117.983821][ T24] usb 6-1: USB disconnect, device number 16 [ 118.150492][ T7064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 118.150515][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.151960][ T7064] vhci_hcd vhci_hcd.0: Device attached [ 118.443528][ T54] usb 38-1: SetAddress Request (10) to port 0 [ 118.443583][ T54] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 118.627982][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.628265][ T5994] usb 8-1: USB disconnect, device number 2 [ 118.630940][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 118.684477][ T5994] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 118.908615][ T7065] vhci_hcd: connection reset by peer [ 118.933980][ T1235] vhci_hcd: stop threads [ 118.936443][ T1235] vhci_hcd: release socket [ 118.938781][ T1235] vhci_hcd: disconnect device [ 119.691005][ T7085] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 119.691005][ T7085] program syz.0.300 not setting count and/or reply_len properly [ 119.699536][ T7085] FAULT_INJECTION: forcing a failure. [ 119.699536][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 119.704923][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 119.704962][ T7085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.704971][ T7085] Call Trace: [ 119.704979][ T7085] [ 119.704985][ T7085] dump_stack_lvl+0x16c/0x1f0 [ 119.705010][ T7085] should_fail_ex+0x512/0x640 [ 119.705036][ T7085] ? __kasan_kmalloc+0xaa/0xb0 [ 119.705059][ T7085] should_failslab+0xc2/0x120 [ 119.705082][ T7085] __kmalloc_noprof+0xdd/0x880 [ 119.705110][ T7085] ? blk_rq_map_user_iov+0x2b2/0x13c0 [ 119.705132][ T7085] ? blk_rq_map_user_iov+0x2b2/0x13c0 [ 119.705148][ T7085] blk_rq_map_user_iov+0x2b2/0x13c0 [ 119.705175][ T7085] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 119.705198][ T7085] ? policy_nodemask+0xea/0x4e0 [ 119.705224][ T7085] ? find_held_lock+0x2b/0x80 [ 119.705244][ T7085] ? sg_common_write.constprop.0+0xbf9/0x1c90 [ 119.705263][ T7085] ? import_ubuf+0x1b6/0x220 [ 119.705290][ T7085] blk_rq_map_user_io+0x1ff/0x230 [ 119.705335][ T7085] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 119.705351][ T7085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.705385][ T7085] sg_common_write.constprop.0+0xd43/0x1c90 [ 119.705414][ T7085] ? __pfx__printk+0x10/0x10 [ 119.705437][ T7085] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 119.705459][ T7085] ? __pfx____ratelimit+0x10/0x10 [ 119.705482][ T7085] sg_write+0x813/0xe10 [ 119.705503][ T7085] ? __pfx_sg_write+0x10/0x10 [ 119.705526][ T7085] ? __pfx_aa_file_perm+0x10/0x10 [ 119.705567][ T7085] ? bpf_lsm_file_permission+0x9/0x10 [ 119.705585][ T7085] ? security_file_permission+0x71/0x210 [ 119.705603][ T7085] ? iov_iter_advance+0x1e3/0x6c0 [ 119.705624][ T7085] ? rw_verify_area+0xcf/0x6c0 [ 119.705641][ T7085] ? __pfx_sg_write+0x10/0x10 [ 119.705657][ T7085] vfs_writev+0x5df/0xde0 [ 119.705680][ T7085] ? __pfx_vfs_writev+0x10/0x10 [ 119.705696][ T7085] ? trace_sched_exit_tp+0xd1/0x120 [ 119.705722][ T7085] ? __schedule+0x11a3/0x5de0 [ 119.705756][ T7085] ? __fget_files+0x20e/0x3c0 [ 119.705772][ T7085] ? __fget_files+0x160/0x3c0 [ 119.705795][ T7085] ? do_writev+0x132/0x340 [ 119.705810][ T7085] do_writev+0x132/0x340 [ 119.705826][ T7085] ? __pfx_do_writev+0x10/0x10 [ 119.705845][ T7085] ? rcu_is_watching+0x12/0xc0 [ 119.705866][ T7085] __do_fast_syscall_32+0x7c/0x300 [ 119.705890][ T7085] do_fast_syscall_32+0x32/0x80 [ 119.705912][ T7085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.705933][ T7085] RIP: 0023:0xf70bd579 [ 119.705947][ T7085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.705962][ T7085] RSP: 002b:00000000f546b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 119.705978][ T7085] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 119.705988][ T7085] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.705997][ T7085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.706006][ T7085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.706016][ T7085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.706039][ T7085] [ 120.513475][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 120.644313][ T7098] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.917477][ T7110] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 120.919638][ T7110] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.923223][ T7110] vhci_hcd vhci_hcd.0: Device attached [ 121.412372][ T7124] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 121.415344][ T7124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 121.418506][ T7124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 121.421273][ T7124] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 121.424117][ T7124] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 121.427320][ T7124] comedi comedi3: 8255: I/O port conflict (0x3df,4) [ 121.430174][ T7124] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 121.432951][ T7124] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 121.435663][ T7124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffff350,4) [ 121.439016][ T7124] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 121.441735][ T7124] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 121.444403][ T7124] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 121.447013][ T7124] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 121.449718][ T7124] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 121.452437][ T7124] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 121.455232][ T7124] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 121.457802][ T7124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 121.460372][ T7124] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 121.462420][ T7124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 121.707325][ T7125] vlan1: entered promiscuous mode [ 121.710471][ T7125] vlan1: entered allmulticast mode [ 121.712749][ T7125] veth0_vlan: entered allmulticast mode [ 121.857844][ T7111] vhci_hcd: connection closed [ 121.858083][ T1140] vhci_hcd: stop threads [ 121.866484][ T1140] vhci_hcd: release socket [ 121.868208][ T1140] vhci_hcd: disconnect device [ 122.032052][ T7131] fuse: Bad value for 'fd' [ 122.110718][ T7125] syz.1.312 (7125) used greatest stack depth: 17912 bytes left [ 122.338544][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 123.477918][ T54] usb 38-1: device descriptor read/8, error -110 [ 123.491751][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 123.518079][ T5994] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 123.688063][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 123.691899][ T5994] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 123.695039][ T5994] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.708423][ T5994] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.718369][ T5994] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.722123][ T5994] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.726636][ T5994] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.732261][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.883058][ T54] usb usb38-port1: attempt power cycle [ 123.956029][ T5994] usb 6-1: usb_control_msg returned -32 [ 123.963857][ T5994] usbtmc 6-1:16.0: can't read capabilities [ 124.311035][ T7167] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 124.315805][ T55] usb 6-1: USB disconnect, device number 17 [ 124.459816][ T54] usb usb38-port1: unable to enumerate USB device [ 126.132875][ T55] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 126.410392][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 126.433095][ T55] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.433110][ T55] usb 6-1: config 0 has no interface number 0 [ 126.433132][ T55] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.433148][ T55] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.508889][ T55] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.134952][ T55] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.134967][ T55] usb 6-1: Product: syz [ 127.134975][ T55] usb 6-1: SerialNumber: syz [ 127.201308][ T55] usb 6-1: config 0 descriptor?? [ 127.225893][ T55] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 127.229252][ T55] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input12 [ 127.448565][ T7199] ======================================================= [ 127.448565][ T7199] WARNING: The mand mount option has been deprecated and [ 127.448565][ T7199] and is ignored by this kernel. Remove the mand [ 127.448565][ T7199] option from the mount to silence this warning. [ 127.448565][ T7199] ======================================================= [ 127.448773][ T7199] 9pnet_fd: Insufficient options for proto=fd [ 127.449114][ T7198] 9pnet_fd: Insufficient options for proto=fd [ 127.545055][ T7196] binder: 7193:7196 ioctl 0 80000040 returned -22 [ 128.365499][ T7210] kAFS: unable to lookup cell 'Þ({^ú@' [ 128.421182][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 128.421195][ T40] audit: type=1326 audit(1763278057.014:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 128.423930][ T40] audit: type=1326 audit(1763278057.014:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.423979][ T40] audit: type=1326 audit(1763278057.014:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.424004][ T40] audit: type=1326 audit(1763278057.024:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.424061][ T40] audit: type=1326 audit(1763278057.024:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.424095][ T40] audit: type=1326 audit(1763278057.024:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 128.424143][ T40] audit: type=1326 audit(1763278057.024:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 128.424582][ T40] audit: type=1326 audit(1763278057.024:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.433727][ T40] audit: type=1326 audit(1763278057.024:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 128.433775][ T40] audit: type=1326 audit(1763278057.024:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.2.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 128.816865][ T1457] usb 6-1: USB disconnect, device number 18 [ 128.818726][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.822362][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 128.843578][ T1457] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 129.661270][ T54] IPVS: starting estimator thread 0... [ 129.753448][ T7225] IPVS: using max 30 ests per chain, 72000 per kthread [ 129.941267][ T7224] netfs: Couldn't get user pages (rc=-14) [ 131.241832][ T81] smc: removing ib device syz2 [ 131.264498][ T7262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 131.264521][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.264884][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 131.544089][ T54] usb 44-1: SetAddress Request (14) to port 0 [ 131.544125][ T54] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 131.733334][ T7266] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.353'. [ 131.978310][ T7263] vhci_hcd: connection reset by peer [ 131.978516][ T81] vhci_hcd: stop threads [ 131.981918][ T81] vhci_hcd: release socket [ 131.991460][ T81] vhci_hcd: disconnect device [ 133.326177][ T7291] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.326177][ T7291] program syz.2.361 not setting count and/or reply_len properly [ 133.938087][ T7303] trusted_key: encrypted_key: keylen parameter is missing [ 134.326838][ T7312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 134.330089][ T7312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.333711][ T7312] vhci_hcd vhci_hcd.0: Device attached [ 134.654624][ T5987] usb 42-1: SetAddress Request (10) to port 0 [ 134.658189][ T5987] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 134.865668][ T7313] vhci_hcd: connection reset by peer [ 134.870913][ T1235] vhci_hcd: stop threads [ 134.872703][ T1235] vhci_hcd: release socket [ 134.874796][ T1235] vhci_hcd: disconnect device [ 135.846269][ T7326] binder: 7325:7326 ioctl c01c64ae 80000240 returned -22 [ 136.284453][ T7330] tipc: Started in network mode [ 136.287034][ T7330] tipc: Node identity 921d7c1a3c58, cluster identity 4711 [ 136.291459][ T7330] tipc: Enabled bearer , priority 0 [ 136.309121][ T7330] syzkaller0: entered promiscuous mode [ 136.311110][ T7330] syzkaller0: entered allmulticast mode [ 136.604324][ T54] usb 44-1: device descriptor read/8, error -110 [ 137.366983][ T54] usb usb44-port1: attempt power cycle [ 137.377361][ T7336] tipc: Resetting bearer [ 137.389036][ T7329] tipc: Resetting bearer [ 137.506165][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.508235][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.581043][ T7329] tipc: Disabling bearer [ 137.868975][ T24] tipc: Node number set to 2923789338 [ 137.940964][ T54] usb usb44-port1: unable to enumerate USB device [ 139.734085][ T5987] usb 42-1: device descriptor read/8, error -110 [ 139.901047][ T7373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 139.903257][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.121689][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 140.155534][ T5987] usb usb42-port1: attempt power cycle [ 140.411043][ T5994] usb 40-1: SetAddress Request (6) to port 0 [ 140.413785][ T5994] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 140.486351][ T7379] 9pnet_fd: Insufficient options for proto=fd [ 140.636250][ T7374] vhci_hcd: connection reset by peer [ 140.640314][ T1235] vhci_hcd: stop threads [ 140.645785][ T1235] vhci_hcd: release socket [ 140.649772][ T1235] vhci_hcd: disconnect device [ 140.719853][ T7386] binder: 7382:7386 ioctl c0306201 800001c0 returned -14 [ 140.726969][ T5987] usb usb42-port1: unable to enumerate USB device [ 140.754550][ T7386] IPv6: Can't replace route, no match found [ 140.806706][ T7389] binder: 7388:7389 ioctl c0306201 80000280 returned -14 [ 140.914149][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.084057][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 141.087279][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 141.090418][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.093684][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.096970][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.100418][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.104618][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.107569][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.319963][ T24] usb 5-1: usb_control_msg returned -32 [ 141.321834][ T24] usbtmc 5-1:16.0: can't read capabilities [ 141.677249][ T7395] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 141.680242][ T24] usb 5-1: USB disconnect, device number 10 [ 142.214626][ T7402] Can't find ip_set type hash:i [ 142.631572][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 143.176917][ T7436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 143.179350][ T7436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.182254][ T7436] vhci_hcd vhci_hcd.0: Device attached [ 143.286279][ T7440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 143.288410][ T7440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.291803][ T7440] vhci_hcd vhci_hcd.0: Device attached [ 143.296201][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.477639][ T5987] usb 44-1: SetAddress Request (18) to port 0 [ 143.547310][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 143.550136][ T5987] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 143.647091][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.676371][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.679428][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.683437][ T54] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 143.686254][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.728017][ T54] usb 5-1: config 0 descriptor?? [ 143.777613][ T7438] vhci_hcd: connection reset by peer [ 143.780309][ T1235] vhci_hcd: stop threads [ 143.782244][ T1235] vhci_hcd: release socket [ 143.784247][ T1235] vhci_hcd: disconnect device [ 143.842012][ T7441] vhci_hcd: connection closed [ 143.848934][ T12] vhci_hcd: stop threads [ 143.852641][ T12] vhci_hcd: release socket [ 143.856194][ T12] vhci_hcd: disconnect device [ 144.136023][ T7429] random: crng reseeded on system resumption [ 144.217572][ T54] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 144.249481][ T54] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 144.252774][ T54] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 144.404322][ T1468] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 144.404685][ T55] usb 5-1: USB disconnect, device number 11 [ 144.417492][ T1468] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.420934][ T1468] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.421899][ T55] ------------[ cut here ]------------ [ 144.424351][ T1468] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 144.426654][ T55] workqueue: work disable count underflowed [ 144.432684][ T55] WARNING: CPU: 2 PID: 55 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 144.436428][ T55] Modules linked in: [ 144.438369][ T55] CPU: 2 UID: 0 PID: 55 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 144.443636][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.448071][ T55] Workqueue: usb_hub_wq hub_event [ 144.449872][ T55] RIP: 0010:enable_work+0x2f8/0x340 [ 144.452064][ T55] Code: 89 ee e8 2b 96 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 9b 38 00 c6 05 75 09 e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 c9 1d f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 45 a0 00 e9 aa fe ff ff [ 144.459875][ T55] RSP: 0018:ffffc9000076f3b0 EFLAGS: 00010086 [ 144.462425][ T55] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48 [ 144.465572][ T55] RDX: ffff88801d3a2480 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 144.468809][ T55] RBP: ffff888020cc1738 R08: 0000000000000001 R09: 0000000000000000 [ 144.472086][ T55] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000ede77 [ 144.475380][ T55] R13: 0000000000000000 R14: ffff888020cc1698 R15: ffff888020cc1730 [ 144.478631][ T55] FS: 0000000000000000(0000) GS:ffff888097a0d000(0000) knlGS:0000000000000000 [ 144.482363][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.485110][ T55] CR2: 00007f9b67c7d720 CR3: 0000000026c8f000 CR4: 0000000000352ef0 [ 144.488388][ T55] Call Trace: [ 144.489740][ T55] [ 144.491021][ T55] ? __pfx_enable_work+0x10/0x10 [ 144.493132][ T55] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 144.495649][ T55] __cancel_work_sync+0xe7/0x130 [ 144.497756][ T55] thermal_zone_device_unregister+0x28e/0x4d0 [ 144.500434][ T55] ? __pfx_shield_remove+0x10/0x10 [ 144.502645][ T55] power_supply_unregister+0x10a/0x150 [ 144.504978][ T55] shield_remove+0x75/0x130 [ 144.506929][ T55] ? __pfx_shield_remove+0x10/0x10 [ 144.509117][ T55] hid_device_remove+0xd1/0x260 [ 144.511213][ T55] ? __pfx_hid_device_remove+0x10/0x10 [ 144.513547][ T55] device_remove+0xcb/0x170 [ 144.515512][ T55] device_release_driver_internal+0x44b/0x620 [ 144.518065][ T55] bus_remove_device+0x22f/0x420 [ 144.520496][ T55] device_del+0x396/0x9f0 [ 144.522366][ T55] ? __pfx_device_del+0x10/0x10 [ 144.524437][ T55] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.526600][ T55] hid_destroy_device+0x19c/0x240 [ 144.528733][ T55] usbhid_disconnect+0xa0/0xe0 [ 144.530738][ T55] usb_unbind_interface+0x1dd/0x9e0 [ 144.532939][ T55] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 144.535311][ T55] ? __pfx_usb_unbind_interface+0x10/0x10 [ 144.537728][ T55] device_remove+0x125/0x170 [ 144.539697][ T55] device_release_driver_internal+0x44b/0x620 [ 144.542405][ T55] bus_remove_device+0x22f/0x420 [ 144.544517][ T55] device_del+0x396/0x9f0 [ 144.546395][ T55] ? __pfx_device_del+0x10/0x10 [ 144.548471][ T55] ? kobject_put+0x210/0x5a0 [ 144.550455][ T55] usb_disable_device+0x355/0x7d0 [ 144.552589][ T55] usb_disconnect+0x2e1/0x9c0 [ 144.554610][ T55] hub_event+0x1c81/0x4fe0 [ 144.556535][ T55] ? __lock_acquire+0xb8a/0x1c90 [ 144.558641][ T55] ? __pfx_hub_event+0x10/0x10 [ 144.560661][ T55] ? interval_tree_span_iter_first+0x220/0x3c0 [ 144.563320][ T55] ? rcu_is_watching+0x12/0xc0 [ 144.565373][ T55] process_one_work+0x9cf/0x1b70 [ 144.567487][ T55] ? __pfx_process_one_work+0x10/0x10 [ 144.569792][ T55] ? assign_work+0x1a0/0x250 [ 144.571819][ T55] worker_thread+0x6c8/0xf10 [ 144.573806][ T55] ? __kthread_parkme+0x19e/0x250 [ 144.575970][ T55] ? __pfx_worker_thread+0x10/0x10 [ 144.578153][ T55] kthread+0x3c5/0x780 [ 144.579896][ T55] ? __pfx_kthread+0x10/0x10 [ 144.581892][ T55] ? rcu_is_watching+0x12/0xc0 [ 144.583902][ T55] ? __pfx_kthread+0x10/0x10 [ 144.585886][ T55] ret_from_fork+0x675/0x7d0 [ 144.587858][ T55] ? __pfx_kthread+0x10/0x10 [ 144.589838][ T55] ret_from_fork_asm+0x1a/0x30 [ 144.591573][ T55] [ 144.592536][ T55] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.594799][ T55] CPU: 2 UID: 0 PID: 55 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 144.597612][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.600923][ T55] Workqueue: usb_hub_wq hub_event [ 144.603028][ T55] Call Trace: [ 144.604388][ T55] [ 144.605656][ T55] dump_stack_lvl+0x3d/0x1f0 [ 144.607623][ T55] vpanic+0x640/0x6f0 [ 144.609337][ T55] ? enable_work+0x2f8/0x340 [ 144.611294][ T55] panic+0xca/0xd0 [ 144.612901][ T55] ? __pfx_panic+0x10/0x10 [ 144.614855][ T55] ? check_panic_on_warn+0x1f/0xb0 [ 144.617032][ T55] check_panic_on_warn+0xab/0xb0 [ 144.619161][ T55] __warn+0xf6/0x3c0 [ 144.620811][ T55] ? __pfx_vprintk_emit+0x10/0x10 [ 144.622942][ T55] ? enable_work+0x2f8/0x340 [ 144.624907][ T55] report_bug+0x3c3/0x580 [ 144.626753][ T55] ? enable_work+0x2f8/0x340 [ 144.628717][ T55] handle_bug+0x184/0x210 [ 144.630535][ T55] exc_invalid_op+0x17/0x50 [ 144.632454][ T55] asm_exc_invalid_op+0x1a/0x20 [ 144.634564][ T55] RIP: 0010:enable_work+0x2f8/0x340 [ 144.636736][ T55] Code: 89 ee e8 2b 96 38 00 45 84 ed 0f 85 29 fe ff ff e8 3d 9b 38 00 c6 05 75 09 e7 0e 01 90 48 c7 c7 20 29 8c 8b e8 c9 1d f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 45 a0 00 e9 aa fe ff ff [ 144.644585][ T55] RSP: 0018:ffffc9000076f3b0 EFLAGS: 00010086 [ 144.647139][ T55] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48 [ 144.650424][ T55] RDX: ffff88801d3a2480 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 144.653735][ T55] RBP: ffff888020cc1738 R08: 0000000000000001 R09: 0000000000000000 [ 144.657042][ T55] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000ede77 [ 144.660358][ T55] R13: 0000000000000000 R14: ffff888020cc1698 R15: ffff888020cc1730 [ 144.663689][ T55] ? __warn_printk+0x198/0x350 [ 144.665758][ T55] ? __warn_printk+0x1a5/0x350 [ 144.667800][ T55] ? __pfx_enable_work+0x10/0x10 [ 144.669906][ T55] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 144.672408][ T55] __cancel_work_sync+0xe7/0x130 [ 144.674528][ T55] thermal_zone_device_unregister+0x28e/0x4d0 [ 144.677106][ T55] ? __pfx_shield_remove+0x10/0x10 [ 144.679261][ T55] power_supply_unregister+0x10a/0x150 [ 144.681565][ T55] shield_remove+0x75/0x130 [ 144.683495][ T55] ? __pfx_shield_remove+0x10/0x10 [ 144.685660][ T55] hid_device_remove+0xd1/0x260 [ 144.687719][ T55] ? __pfx_hid_device_remove+0x10/0x10 [ 144.690025][ T55] device_remove+0xcb/0x170 [ 144.691960][ T55] device_release_driver_internal+0x44b/0x620 [ 144.694554][ T55] bus_remove_device+0x22f/0x420 [ 144.696666][ T55] device_del+0x396/0x9f0 [ 144.698516][ T55] ? __pfx_device_del+0x10/0x10 [ 144.700579][ T55] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.702724][ T55] hid_destroy_device+0x19c/0x240 [ 144.704866][ T55] usbhid_disconnect+0xa0/0xe0 [ 144.706910][ T55] usb_unbind_interface+0x1dd/0x9e0 [ 144.709119][ T55] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 144.711493][ T55] ? __pfx_usb_unbind_interface+0x10/0x10 [ 144.713909][ T55] device_remove+0x125/0x170 [ 144.715877][ T55] device_release_driver_internal+0x44b/0x620 [ 144.718452][ T55] bus_remove_device+0x22f/0x420 [ 144.720547][ T55] device_del+0x396/0x9f0 [ 144.722430][ T55] ? __pfx_device_del+0x10/0x10 [ 144.724496][ T55] ? kobject_put+0x210/0x5a0 [ 144.726486][ T55] usb_disable_device+0x355/0x7d0 [ 144.728594][ T55] usb_disconnect+0x2e1/0x9c0 [ 144.730609][ T55] hub_event+0x1c81/0x4fe0 [ 144.732538][ T55] ? __lock_acquire+0xb8a/0x1c90 [ 144.734665][ T55] ? __pfx_hub_event+0x10/0x10 [ 144.736688][ T55] ? interval_tree_span_iter_first+0x220/0x3c0 [ 144.739299][ T55] ? rcu_is_watching+0x12/0xc0 [ 144.741326][ T55] process_one_work+0x9cf/0x1b70 [ 144.743435][ T55] ? __pfx_process_one_work+0x10/0x10 [ 144.745721][ T55] ? assign_work+0x1a0/0x250 [ 144.747694][ T55] worker_thread+0x6c8/0xf10 [ 144.749670][ T55] ? __kthread_parkme+0x19e/0x250 [ 144.751815][ T55] ? __pfx_worker_thread+0x10/0x10 [ 144.754007][ T55] kthread+0x3c5/0x780 [ 144.755735][ T55] ? __pfx_kthread+0x10/0x10 [ 144.757732][ T55] ? rcu_is_watching+0x12/0xc0 [ 144.759749][ T55] ? __pfx_kthread+0x10/0x10 [ 144.761728][ T55] ret_from_fork+0x675/0x7d0 [ 144.763693][ T55] ? __pfx_kthread+0x10/0x10 [ 144.765670][ T55] ret_from_fork_asm+0x1a/0x30 [ 144.767721][ T55] [ 144.769871][ T55] Kernel Offset: disabled [ 144.771708][ T55] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:23:37 Registers: info registers vcpu 0 CPU#0 RAX=00000000002b37fb RBX=0000000000000000 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da28d25 RDI=ffffffff8bf075c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9b67c7d720 CR3=0000000065e87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000300000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81ff6773 RDX=1ffff1100d667838 RSI=ffffffff8243024f RDI=ffff88806b33c1c0 RBP=ffffc9000476f898 RSP=ffffc9000476f710 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806b33c260 R15=ffff88806b33c1c0 RIP=ffffffff8b5912bd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000302daff8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009000000000 0000000200000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269255 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc9000076ed20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9adc5da0 R15=ffffffff852691f0 RIP=ffffffff8526927f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9b67c7d720 CR3=0000000026c8f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=00000000fffdf7f0 Opmask02=00000000ffffffff Opmask03=0000000000000840 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564bbc382850 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564bbc382750 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b67df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b67d52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3132373a35353930 3a333030302f302e 303a312d352f312d 352f356273752f30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 306e6f6d77682f30 5f656b6972747372 65646e7568742f79 6c707075735f7265 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f702f33303030 2e343132373a3535 39303a333030302f 302e303a312d352f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564bbc00306e 6f6d77682f305f65 6b69727473726564 6e7568742f796c70 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001b13a7 RBX=0000000000000003 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da28d25 RDI=ffffffff8bf075c0 RBP=ffffed10037eb000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf58000 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fee4ff8 CR3=0000000066554000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000