last executing test programs: 4.269864829s ago: executing program 0 (id=1803): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000, &(0x7f00000000c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38, 0x25]}}, {@grpquota}, {@size={'size', 0x3d, [0x33, 0x37, 0x36, 0x0]}}, {@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x70, 0x30, 0x34, 0x30, 0x35, 0x25, 0x3b]}}], [{@measure}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) poll(0x0, 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x2c, 0x4, 0x0, @void, @value}, 0x20) 4.099799726s ago: executing program 0 (id=1805): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.040426519s ago: executing program 0 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00ffa100000000002c0012800b00010062726964676500001c0002800800040000000000080015000000000005"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0xb7be7bbd266f8ab5) 4.04017347s ago: executing program 0 (id=1807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000040)) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x8084) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 3.460222453s ago: executing program 3 (id=1812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000040)) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 3.430678883s ago: executing program 1 (id=1813): unshare(0x8000480) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "21d58a", 0x1f8, 0x11, 0xff, @mcast2, @private2, {[@srh={0x5c, 0x2, 0x4, 0x1, 0x0, 0x68, 0x2, [@local]}, @fragment={0x3b, 0x0, 0xe6, 0x1, 0x0, 0x7, 0x66}, @dstopts={0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @ra={0x5, 0x2, 0x6}, @generic={0x7, 0x38, "8317a6c2f299a4c8e571421742d7a6c567ca9d196c16bcb8f6ddbf4c042ac6f1469018b3365bf988132abba17f4fc35f795bebbd9f81212e"}, @enc_lim={0x4, 0x1, 0x81}, @pad1, @jumbo={0xc2, 0x4, 0x6}]}, @routing={0x71, 0xc, 0x2, 0xf7, 0x0, [@mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, @srh={0x16, 0x8, 0x4, 0x4, 0x7, 0x78, 0x1, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1d}]}, @hopopts={0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x16, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x7, [0x8, 0x6, 0x2b21, 0x9]}}, @ra={0x5, 0x2, 0x1e}]}, @fragment={0x2, 0x0, 0x9, 0x0, 0x0, 0x1f, 0x67}, @srh={0x0, 0x6, 0x4, 0x3, 0xff, 0x0, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2]}], {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "7a2931c88affb9e21c03b6d0f667a91a5f80cdec75525ce5", "95156aafc43855ead544e2f3e3c715387c0408e04b3273f0d6cad5ba0516b121"}}}}}}}, 0x0) 3.366108556s ago: executing program 1 (id=1814): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000001f000800030000000000140006"], 0x58}}, 0x0) 3.365743779s ago: executing program 1 (id=1815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r0 = epoll_create(0x400) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000005c0)="ca996e4a4c9748265ca5b19498b6941430e963570a676702000000a4c124ed6bfe0d8004a355af19a6e3", 0x2a, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502fff5000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.14044209s ago: executing program 2 (id=1817): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) 3.140171779s ago: executing program 0 (id=1818): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (fail_nth: 2) 2.514743645s ago: executing program 3 (id=1819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000040)) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 2.45042809s ago: executing program 1 (id=1820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r6, 0x4bfb, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000000000003f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) 1.880264316s ago: executing program 2 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2000000, 0x5}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010405"], 0x1c}}, 0x0) 1.879940351s ago: executing program 2 (id=1822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x8084) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 1.559467512s ago: executing program 3 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0xe0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 1.559161348s ago: executing program 1 (id=1824): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000480)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') 1.447989389s ago: executing program 3 (id=1825): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) (fail_nth: 4) 1.346393987s ago: executing program 3 (id=1826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) io_uring_setup(0x200045d7, &(0x7f00000004c0)={0x0, 0x98e0, 0x4, 0x2000003, 0x2ee, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="035d0470a0903f9e66f7718029db51b6e3dd8d09a8b1c5d348b226fc91a2606b84e0bd4ed22663558010a74ef3ef33ef3f0128cfd6f9ce5b55c56d6c6a425a160c7e6ebdcdbdd72563bc8575fd53ecf233e6e70f23f424235ae4bb027e12c1844c776b1a12555ba9311188d8662446c5080000000000000000000055ad117fc40a35aebb3850186ba3f70cb7e90cb5cf8bb14cf4641a710138bb7226b6a3b3cb", 0xa0}], 0x1}, 0x2404c810) recvmsg(r4, &(0x7f0000000480)={0x0, 0x15, 0x0, 0x0, 0x0, 0x53}, 0x222) recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x100) syz_io_uring_submit(r3, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x17, &(0x7f0000000200), 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@secondary) add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 954.406492ms ago: executing program 2 (id=1827): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x80000) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000200)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f00000002c0)={@id={0x2, 0x0, @auto="b2a8c8f88c973100"}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0056322c4790cca552c6d66083b4d81cc8640005000000000400000900006da4fae200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='ext4_alloc_da_blocks\x00', r4, 0x0, 0x5}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r8, 0x80045439, &(0x7f0000000200)) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x5, 0x1}}, 0x10, 0x0}, 0x4004810) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 951.547341ms ago: executing program 2 (id=1828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000040)) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 650.31166ms ago: executing program 1 (id=1829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) 417.439914ms ago: executing program 3 (id=1830): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(chacha20-simd)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x0, 0x7, 0x0, r2, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080)="aa88", 0x0, 0x0, 0x0, 0xd352, r3}, 0x38) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@loopback, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) syz_usb_disconnect(r4) r10 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 333.608µs ago: executing program 2 (id=1831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000040)) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 0s ago: executing program 0 (id=1832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, 0xffffffffffffffff) openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kfree\x00', r8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[], 0x0) r9 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r9, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf773, "00207d1df8e70300201b14700c1e0ac74f000000001200000000000900"}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x11000) vmsplice(r10, &(0x7f0000000280)=[{&(0x7f0000000080)="a5c3", 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): 1:1.0: Stall on int endpoint [ 173.880152][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.881660][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.883176][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.884684][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.886221][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.887782][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.889324][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.890834][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.892353][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.893869][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.895376][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.896415][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.896924][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.900951][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.902470][ T77] usb 7-1: Product: Ф [ 173.903568][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.903589][ C2] cdc_wdm 6-1:1.0: Cannot schedule work [ 173.905100][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.906640][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.908164][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.909700][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.911246][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.912753][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.914281][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.915789][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.917376][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.918892][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.920448][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.922045][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.923577][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.925107][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.926672][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.928171][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.929701][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.931230][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.932730][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.934241][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.935738][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.937258][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.938771][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.940293][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.941811][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.943325][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.944851][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.946637][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.948235][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.949748][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.951259][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.952762][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.954476][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.956101][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.957635][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.959156][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.960678][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.962230][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.963741][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.965379][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.967314][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.969007][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.970744][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.972373][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.973966][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.975478][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.977020][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.978566][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.980086][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.981609][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.983145][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.984651][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.986189][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.987768][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.989278][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.990794][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.992336][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.993866][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.995379][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.996913][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.998435][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 173.999966][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.001506][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.003023][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.004540][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.006058][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.007581][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.009086][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.010603][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.012144][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.013653][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.015171][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.016721][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.018249][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.019760][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.021305][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.022809][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.024312][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.025838][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.027370][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.028874][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.030395][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.031918][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.033422][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.034954][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.036489][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.038018][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.039585][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.041146][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.042683][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.044187][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.045698][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.047219][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.048711][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.050228][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.051731][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.053232][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.054741][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.056247][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.057827][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.059357][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.060871][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.062376][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.063867][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.065367][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.066911][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.068417][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.069956][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.071472][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.072972][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.074489][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.075986][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.077535][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.079035][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.080541][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.082066][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.083562][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.085056][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.086617][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.088135][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.089638][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.091177][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.092690][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.094205][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.095700][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.097218][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.098741][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.100243][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.101767][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.103273][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.104756][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.106436][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.107953][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.109455][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.111017][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.112532][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.114052][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.115568][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.117126][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.118638][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.120154][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.121660][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.123169][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.124668][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.126174][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.127685][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.129183][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.130715][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.132216][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.133724][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.135215][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.136759][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.138261][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.139763][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.141300][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.142807][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.144296][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.145818][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.147341][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.148786][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.150255][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.151753][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.153247][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.154753][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.156276][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.157789][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.159311][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.160889][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.162433][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.163970][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.165477][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.167029][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.168534][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.170046][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.171558][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.173055][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.174556][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.176050][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.177561][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.179071][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.180594][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.182102][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.183597][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.185089][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.186632][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.188124][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.189628][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.191195][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.192688][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.194236][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.195709][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.197238][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.198744][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.200265][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.201798][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.203307][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.204804][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.206338][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.207836][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.209388][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.210931][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.212434][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.213948][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.215467][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.217054][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.218565][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.220077][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.221607][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.223108][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.224604][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.226116][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.227645][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.229144][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.230653][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.232151][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.233774][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.235300][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.236858][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.238394][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.239916][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.241452][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.242955][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.244469][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.245985][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.247525][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.249036][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.250555][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.252198][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.253727][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.255239][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.256780][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.258303][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.259807][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.261346][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.262856][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.264376][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.265881][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.267426][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.268956][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.270499][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.272024][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.273530][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.275041][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.276569][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.278074][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.279572][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.281087][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.282595][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.284097][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.285595][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.287133][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.288640][ C2] cdc_wdm 6-1:1.0: Stall on int endpoint [ 174.291747][ T77] usb 7-1: Manufacturer: 轧ꥊ榬ṁ丞጗ῼ뗶耲⏵ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌䜝픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂鐖忰鐢쥏鸡洣㜅ਗ਼珫庤빟튃걨뾐 [ 174.292189][ T63] usb 6-1: USB disconnect, device number 17 [ 174.296395][ T77] usb 7-1: SerialNumber: ࠔ [ 174.302877][ T9984] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.525780][T10042] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1095'. [ 174.541668][ T9981] kAFS: No cell specified [ 174.558321][ T77] usbhid 7-1:1.0: can't add hid device: -71 [ 174.560008][ T77] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 174.564702][ T77] usb 7-1: USB disconnect, device number 21 [ 175.470602][T10051] overlayfs: failed to resolve './file2': -2 [ 175.500012][T10056] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1101'. [ 175.749843][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 175.976416][ C0] net_ratelimit: 3 callbacks suppressed [ 175.976429][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.536332][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.559759][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 176.627012][T10086] openvswitch: netlink: IP tunnel dst address not specified [ 176.665213][T10098] 9pnet_virtio: no channels available for device syz [ 176.794743][T10108] pimreg: entered allmulticast mode [ 177.016329][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.067246][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 177.263266][T10119] netlink: 'syz.3.1118': attribute type 13 has an invalid length. [ 177.265880][T10119] macvtap0: entered promiscuous mode [ 177.268727][T10119] macvtap0: refused to change device tx_queue_len [ 177.284515][T10122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1119'. [ 177.482174][T10132] support for the xor transformation has been removed. [ 177.546328][ T6214] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 177.576343][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.726004][ T6214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.729500][ T6214] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.731838][ T6214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.741434][ T6214] usb 7-1: config 0 descriptor?? [ 177.827862][T10147] SET target dimension over the limit! [ 177.897779][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 177.949836][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.952589][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.957620][ T6214] usbhid 7-1:0.0: can't add hid device: -71 [ 177.959282][ T6214] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 177.964135][ T6214] usb 7-1: USB disconnect, device number 22 [ 178.056370][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.158068][T10153] netlink: 'syz.1.1131': attribute type 39 has an invalid length. [ 178.396367][ T6214] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 178.483039][T10165] lo speed is unknown, defaulting to 1000 [ 178.544795][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 178.546552][ T6214] usb 7-1: Using ep0 maxpacket: 16 [ 178.549602][ T6214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 178.551913][ T6214] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 178.554366][ T6214] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 178.556937][ T6214] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 178.559350][ T6214] usb 7-1: config 1 interface 0 has no altsetting 0 [ 178.561054][ T6214] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 178.563379][ T6214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.568067][ T6214] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 178.607469][T10184] FAULT_INJECTION: forcing a failure. [ 178.607469][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.610511][T10184] CPU: 2 UID: 0 PID: 10184 Comm: syz.3.1139 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 178.613002][T10184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.615521][T10184] Call Trace: [ 178.616333][T10184] [ 178.617042][T10184] dump_stack_lvl+0x16c/0x1f0 [ 178.618164][T10184] should_fail_ex+0x497/0x5b0 [ 178.619286][T10184] _copy_from_user+0x2e/0xd0 [ 178.620400][T10184] lo_ioctl+0x364/0x18a0 [ 178.621411][T10184] ? __pfx_lo_ioctl+0x10/0x10 [ 178.622548][T10184] ? find_held_lock+0x2d/0x110 [ 178.623681][T10184] ? tomoyo_path_number_perm+0x298/0x5b0 [ 178.625000][T10184] ? __pfx_lock_release+0x10/0x10 [ 178.626193][T10184] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 178.627515][T10184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.628918][T10184] lo_compat_ioctl+0xb9/0x170 [ 178.630076][T10184] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 178.631335][T10184] compat_blkdev_ioctl+0x2f7/0x750 [ 178.632556][T10184] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 178.633893][T10184] ? __fget_files+0x206/0x3a0 [ 178.635007][T10184] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 178.636338][T10184] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 178.637585][T10184] __do_fast_syscall_32+0x73/0x120 [ 178.638801][T10184] do_fast_syscall_32+0x32/0x80 [ 178.639952][T10184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.641470][T10184] RIP: 0023:0xf708e579 [ 178.642459][T10184] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.646947][T10184] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 178.648887][T10184] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c0a [ 178.650874][T10184] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.652750][T10184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.654605][T10184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.656445][T10184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.658453][T10184] [ 178.659438][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.865611][ T6214] scsi host6: usb-storage 7-1:1.0 [ 178.985454][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 179.070265][T10198] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1143'. [ 179.078575][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 179.096316][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.149308][T10201] ERROR: device name not specified. [ 179.306072][T10203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.734683][T10215] binder: 10213:10215 ioctl c0306201 0 returned -14 [ 179.736411][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.910189][ T1134] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 179.924976][ T1134] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 179.935505][T10190] sddr09: could not read card info [ 180.076490][T10190] usb 7-1: reset high-speed USB device number 23 using dummy_hcd [ 180.216332][T10190] usb 7-1: device descriptor read/64, error -32 [ 180.287818][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 180.290186][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 180.292456][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 180.294703][T10221] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1150'. [ 180.942101][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 181.139671][ T6056] usb 7-1: USB disconnect, device number 23 [ 181.176345][ C0] net_ratelimit: 2 callbacks suppressed [ 181.176358][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.187238][ T11] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 181.189158][ T11] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 181.190831][ T11] sd 6:0:0:0: [sdb] Write Protect is off [ 181.192398][ T11] sd 6:0:0:0: [sdb] Asking for cache data failed [ 181.194137][ T11] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 181.208189][ T11] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 181.681976][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 181.711506][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 181.740286][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 181.826304][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.932472][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 182.019777][ T77] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.216318][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.456845][ T77] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.856400][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.898664][T10312] infiniband sz1: set active [ 182.907274][ T145] lo speed is unknown, defaulting to 1000 [ 183.256322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.309383][T10341] infiniband sz1: set active [ 183.318100][ T6056] lo speed is unknown, defaulting to 1000 [ 183.742001][T10366] infiniband sz1: set active [ 183.751845][ T1485] lo speed is unknown, defaulting to 1000 [ 183.776215][T10370] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 183.811114][T10372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.821298][T10372] kvm: pic: level sensitive irq not supported [ 183.822071][T10372] kvm: pic: non byte read [ 183.896348][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.068525][T10391] __nla_validate_parse: 7 callbacks suppressed [ 184.068604][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 184.137509][T10395] SET target dimension over the limit! [ 184.190754][T10397] infiniband sz1: set active [ 184.201010][ T25] lo speed is unknown, defaulting to 1000 [ 184.241505][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 184.243296][T10401] 8021q: VLANs not supported on lo [ 184.296381][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.626349][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 184.779354][T10409] 9pnet_fd: Insufficient options for proto=fd [ 184.832819][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 184.927736][T10417] lo speed is unknown, defaulting to 1000 [ 184.936356][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.226841][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 185.322091][T10437] IPv6: addrconf: prefix option has invalid lifetime [ 185.336356][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.376587][ T6214] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 185.527790][ T6214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.530742][ T6214] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 185.534208][ T6214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.539185][ T6214] usb 8-1: config 0 descriptor?? [ 185.574604][ T5945] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 185.636461][ T1485] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 185.747002][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.750538][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.754376][ T6214] usbhid 8-1:0.0: can't add hid device: -71 [ 185.755970][ T6214] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 185.759463][ T6214] usb 8-1: USB disconnect, device number 20 [ 185.806390][ T1485] usb 6-1: Using ep0 maxpacket: 16 [ 185.811041][ T1485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.814896][ T1485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.817961][ T1485] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.821292][ T1485] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 185.823608][ T1485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.827498][ T1485] usb 6-1: config 0 descriptor?? [ 186.017918][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1227'. [ 186.057612][T10453] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1228'. [ 186.061362][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1228'. [ 186.064391][T10453] netlink: 'syz.0.1228': attribute type 7 has an invalid length. [ 186.067284][T10453] netlink: 'syz.0.1228': attribute type 8 has an invalid length. [ 186.069828][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 186.196393][ T6214] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 186.222490][T10456] tipc: Enabling of bearer rejected, already enabled [ 186.237565][ T1485] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 186.252395][ T1485] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 186.258599][ T1485] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 186.346373][ T6214] usb 8-1: Using ep0 maxpacket: 16 [ 186.349912][ T6214] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 186.353169][ T6214] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 186.355931][ T6214] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 186.362816][ T6214] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 186.365484][ T6214] usb 8-1: config 1 interface 0 has no altsetting 0 [ 186.367374][ T6214] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 186.369771][ T6214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.374631][ T6214] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 186.386307][ C0] net_ratelimit: 2 callbacks suppressed [ 186.386317][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.436520][T10447] random: crng reseeded on system resumption [ 186.457238][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 186.501767][ T77] usb 6-1: USB disconnect, device number 18 [ 186.506585][ T6227] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 186.509790][ T6227] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.512658][ T6227] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.515597][ T6227] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.575697][ T6214] scsi host6: usb-storage 8-1:1.0 [ 186.869118][ T77] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 187.016378][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.018592][ T77] usb 6-1: Using ep0 maxpacket: 8 [ 187.021679][ T77] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.024259][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.028429][ T77] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.032569][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 136, changing to 11 [ 187.036331][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.041095][ T77] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.043690][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.048204][ T77] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.052418][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 136, changing to 11 [ 187.055483][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.059324][ T77] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.062186][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 187.065183][ T77] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.068276][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 136, changing to 11 [ 187.072169][ T77] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 187.082019][ T77] usb 6-1: string descriptor 0 read error: -22 [ 187.083703][ T77] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.086445][ T77] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.091956][ T77] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 187.329529][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 187.416321][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.664838][ T86] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 187.679828][ T86] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 187.683013][T10472] sddr09: could not read card info [ 187.808661][ T77] usb 6-1: USB disconnect, device number 19 [ 187.817025][T10472] usb 8-1: reset high-speed USB device number 21 using dummy_hcd [ 187.976462][T10472] usb 8-1: device descriptor read/64, error -32 [ 188.056348][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.092336][T10508] program syz.1.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.095859][T10508] support for the xor transformation has been removed. [ 188.129833][T10511] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 188.149371][T10511] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 188.154924][ T8065] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.160706][T10511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.276353][ T1134] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.456363][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.681244][T10532] bridge31: entered promiscuous mode [ 188.682910][T10532] bridge31: entered allmulticast mode [ 188.867405][ T6214] usb 8-1: USB disconnect, device number 21 [ 188.906484][ T12] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 188.908346][ T12] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 188.909980][ T12] sd 6:0:0:0: [sdb] Write Protect is off [ 188.911632][ T12] sd 6:0:0:0: [sdb] Asking for cache data failed [ 188.913281][ T12] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 188.922459][ T12] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 188.966358][ T77] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 189.106339][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.180306][ T77] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.182613][ T77] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.185118][ T77] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.187471][ T77] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.190180][ T77] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 189.193920][ T77] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.196152][ T77] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.198499][ T77] usb 7-1: Product: syz [ 189.199587][ T77] usb 7-1: Manufacturer: syz [ 189.202907][ T77] cdc_wdm 7-1:1.0: skipping garbage [ 189.204268][ T77] cdc_wdm 7-1:1.0: skipping garbage [ 189.207910][ T77] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 189.209792][ T77] cdc_wdm 7-1:1.0: Unknown control protocol [ 189.286002][T10545] __nla_validate_parse: 3 callbacks suppressed [ 189.286018][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 189.311845][ T6622] udevd[6622]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 189.343956][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 189.407136][ T6056] usb 7-1: USB disconnect, device number 24 [ 189.466335][ T57] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 189.496336][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.649343][ T57] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.651686][ T57] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.654520][ T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.656937][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.659854][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 189.663959][ T57] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.666445][ T57] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.668448][ T57] usb 5-1: Product: syz [ 189.669510][ T57] usb 5-1: Manufacturer: syz [ 189.672552][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 189.674041][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 189.675882][ T57] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 189.677584][ T57] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.736370][ T77] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 189.873212][ T63] usb 5-1: USB disconnect, device number 27 [ 189.897517][ T77] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.899718][ T77] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.902265][ T77] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.904488][ T77] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.907413][ T77] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 189.911203][ T77] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.913424][ T77] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.915444][ T77] usb 8-1: Product: syz [ 189.916615][ T77] usb 8-1: Manufacturer: syz [ 189.919713][ T77] cdc_wdm 8-1:1.0: skipping garbage [ 189.921087][ T77] cdc_wdm 8-1:1.0: skipping garbage [ 189.923019][ T77] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 189.924543][ T77] cdc_wdm 8-1:1.0: Unknown control protocol [ 190.056342][ T25] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 190.125349][ T145] usb 8-1: USB disconnect, device number 22 [ 190.136334][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.218117][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.220274][ T25] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.222813][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.225031][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.227872][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.232321][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.234599][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.236667][ T25] usb 7-1: Product: syz [ 190.237746][ T25] usb 7-1: Manufacturer: syz [ 190.240936][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 190.242309][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 190.244018][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 190.245548][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 190.526327][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 190.700369][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.703500][ T25] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.706782][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.709148][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.711973][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.716362][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.719606][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.722157][ T25] usb 5-1: Product: syz [ 190.723278][ T25] usb 5-1: Manufacturer: syz [ 190.726930][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 190.728295][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 190.730177][ T25] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 190.731732][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 190.798147][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.799586][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.801130][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.802537][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.804094][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.805551][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.807161][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.808751][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.810181][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.811719][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.813123][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.814696][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.816266][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.817867][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.819249][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.820852][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.822473][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.824053][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.825620][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.827144][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.828007][ T57] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 190.828628][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.832309][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.833713][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.835384][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.837281][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.838907][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.840462][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.841974][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.843495][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.845008][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.846571][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.848091][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.849667][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.851238][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.852761][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.854160][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.855805][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.857420][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.858947][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.860498][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.862072][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.863616][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.865227][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.866714][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.868236][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.869870][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.871321][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.872852][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.874291][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.875879][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.877284][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.878849][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.880461][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.882250][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.883839][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.885342][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.887008][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.888506][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.890491][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.892076][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.893501][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.895099][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.896633][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.898246][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.899793][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.901275][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.902837][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.904318][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.905965][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.907402][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.908964][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.910440][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.912037][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.913502][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.915046][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.916525][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.918086][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.919524][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.921105][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.922555][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.924086][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.925581][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.927174][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.928632][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.930215][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.931893][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.933390][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.934949][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.936534][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.938081][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.939649][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.941305][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.942768][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.944359][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.945870][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.947480][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.948927][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.950507][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.951974][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.953636][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.955098][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.956686][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.958144][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.959722][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.961354][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.962818][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.964390][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.965879][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.967487][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.968969][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.970566][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.972174][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.973658][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.975345][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.976437][ T57] usb 8-1: device descriptor read/64, error -71 [ 190.976921][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.980430][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.981902][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.983437][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.984039][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 190.985035][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.988776][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.990255][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.991848][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.993275][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.994825][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.996319][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 190.997937][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 190.999475][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 191.001067][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.002647][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.004205][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.005814][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.007414][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.008877][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 191.010426][ C2] cdc_wdm 7-1:1.0: Stall on int endpoint [ 191.011846][ C2] cdc_wdm 7-1:1.0: Cannot schedule work [ 191.013303][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 191.016069][ T25] usb 7-1: USB disconnect, device number 25 [ 191.217091][ T39] audit: type=1326 audit(1734423893.923:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.222543][ T39] audit: type=1326 audit(1734423893.923:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.228276][ T39] audit: type=1326 audit(1734423893.923:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.233816][ T39] audit: type=1326 audit(1734423893.923:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.236333][ T57] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 191.239391][ T39] audit: type=1326 audit(1734423893.923:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.247353][ T39] audit: type=1326 audit(1734423893.923:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.252751][ T39] audit: type=1326 audit(1734423893.923:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.258820][ T39] audit: type=1326 audit(1734423893.923:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.264320][ T39] audit: type=1326 audit(1734423893.923:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.269715][ T39] audit: type=1326 audit(1734423893.923:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.1.1264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 191.281961][T10572] FAULT_INJECTION: forcing a failure. [ 191.281961][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.285363][T10572] CPU: 2 UID: 0 PID: 10572 Comm: syz.0.1256 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 191.288082][T10572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.290729][T10572] Call Trace: [ 191.291599][T10572] [ 191.292377][T10572] dump_stack_lvl+0x16c/0x1f0 [ 191.293587][T10572] should_fail_ex+0x497/0x5b0 [ 191.294794][T10572] _copy_to_user+0x32/0xd0 [ 191.295976][T10572] simple_read_from_buffer+0xd0/0x160 [ 191.297350][T10572] proc_fail_nth_read+0x198/0x270 [ 191.298637][T10572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.300045][T10572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.301457][T10572] vfs_read+0x1df/0xbe0 [ 191.302539][T10572] ? __fget_files+0x1fc/0x3a0 [ 191.303748][T10572] ? __pfx___mutex_lock+0x10/0x10 [ 191.305038][T10572] ? __pfx_vfs_read+0x10/0x10 [ 191.306311][T10572] ? __fget_files+0x206/0x3a0 [ 191.307543][T10572] ksys_read+0x12b/0x250 [ 191.308634][T10572] ? __pfx_ksys_read+0x10/0x10 [ 191.309874][T10572] __do_fast_syscall_32+0x73/0x120 [ 191.311151][T10572] do_fast_syscall_32+0x32/0x80 [ 191.312396][T10572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.314034][T10572] RIP: 0023:0xf7fdf579 [ 191.315114][T10572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.319999][T10572] RSP: 002b:00000000f5115590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 191.322079][T10572] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5115620 [ 191.324037][T10572] RDX: 000000000000000f RSI: 00000000f7473ff4 RDI: 0000000000000000 [ 191.326160][T10572] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 191.328161][T10572] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 191.330175][T10572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.332194][T10572] [ 191.333058][ C2] vkms_vblank_simulate: vblank timer overrun [ 191.344424][ T25] usb 5-1: USB disconnect, device number 28 [ 191.369246][ T57] usb 8-1: device descriptor read/64, error -71 [ 191.486499][ T57] usb usb8-port1: attempt power cycle [ 191.580391][ C0] net_ratelimit: 2 callbacks suppressed [ 191.580401][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.592387][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 191.836329][ T57] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 191.856726][ T57] usb 8-1: device descriptor read/8, error -71 [ 192.106389][ T57] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 192.126916][ T57] usb 8-1: device descriptor read/8, error -71 [ 192.226301][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.236673][ T57] usb usb8-port1: unable to enumerate USB device [ 192.305133][T10596] FAULT_INJECTION: forcing a failure. [ 192.305133][T10596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.311457][T10596] CPU: 3 UID: 0 PID: 10596 Comm: syz.1.1272 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 192.314343][T10596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.317560][T10596] Call Trace: [ 192.318428][T10596] [ 192.319189][T10596] dump_stack_lvl+0x16c/0x1f0 [ 192.320422][T10596] should_fail_ex+0x497/0x5b0 [ 192.321682][T10596] _copy_from_user+0x2e/0xd0 [ 192.323082][T10596] get_compat_msghdr+0xa8/0x170 [ 192.324331][T10596] ? __pfx_get_compat_msghdr+0x10/0x10 [ 192.325744][T10596] ___sys_sendmsg+0x1b0/0x1e0 [ 192.326959][T10596] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.328332][T10596] ? __pfx_lock_release+0x10/0x10 [ 192.329646][T10596] ? trace_lock_acquire+0x14e/0x1f0 [ 192.331003][T10596] ? __fget_files+0x206/0x3a0 [ 192.332223][T10596] __sys_sendmsg+0x16e/0x220 [ 192.333413][T10596] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.334754][T10596] __do_fast_syscall_32+0x73/0x120 [ 192.336075][T10596] do_fast_syscall_32+0x32/0x80 [ 192.337319][T10596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.338938][T10596] RIP: 0023:0xf7f47579 [ 192.340005][T10596] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.344860][T10596] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 192.346989][T10596] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000140 [ 192.348981][T10596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.350990][T10596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.352964][T10596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 192.354970][T10596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.357005][T10596] [ 192.403244][T10607] support for the xor transformation has been removed. [ 192.416077][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 192.427810][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 192.506495][T10618] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 192.508773][T10618] overlayfs: missing 'lowerdir' [ 192.515530][T10618] IPv6: addrconf: prefix option has invalid lifetime [ 192.548471][T10624] IPv6: addrconf: prefix option has invalid lifetime [ 192.581246][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1285'. [ 192.616319][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.740523][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1287'. [ 192.885284][ T5945] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 192.899969][T10645] tipc: Enabling of bearer rejected, already enabled [ 192.926960][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.979331][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.981659][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.983972][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 193.081459][T10661] netlink: 'syz.1.1294': attribute type 2 has an invalid length. [ 193.256395][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.283002][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.656401][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.796392][ T25] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 193.977736][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.980932][ T25] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.983286][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.989026][ T25] usb 7-1: config 0 descriptor?? [ 194.195846][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.199996][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.204501][T10697] tmpfs: Unknown parameter 'usrquota_inode_h' [ 194.206597][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 194.209599][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 194.212465][ T25] usb 7-1: USB disconnect, device number 26 [ 194.306334][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.498059][T10684] block nbd3: shutting down sockets [ 194.646484][ T6056] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 194.696368][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.796609][ T6056] usb 7-1: Using ep0 maxpacket: 16 [ 194.798129][T10710] __nla_validate_parse: 7 callbacks suppressed [ 194.798138][T10710] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1312'. [ 194.803277][ T6056] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 194.805760][ T6056] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 194.808920][ T6056] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 194.816391][ T6056] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 194.818977][ T6056] usb 7-1: config 1 interface 0 has no altsetting 0 [ 194.820706][ T6056] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 194.823017][ T6056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.827843][ T6056] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 194.890944][T10712] tipc: Enabling of bearer rejected, already enabled [ 194.954425][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 194.957026][ T86] bond1: (slave ip6gretap1): link status up again after 0 ms [ 194.973972][T10725] support for the xor transformation has been removed. [ 195.028613][ T6056] scsi host6: usb-storage 7-1:1.0 [ 195.161913][T10735] program syz.0.1319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.179837][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 195.199478][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 195.887964][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1326'. [ 196.057669][ T86] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 196.083306][ T86] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 196.085270][T10728] sddr09: could not read card info [ 196.212541][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 196.236408][T10728] usb 7-1: reset high-speed USB device number 27 using dummy_hcd [ 196.426465][T10728] usb 7-1: device descriptor read/64, error -32 [ 196.461154][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 196.656510][ T1134] net_ratelimit: 18 callbacks suppressed [ 196.656524][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.734511][T10773] lo speed is unknown, defaulting to 1000 [ 196.766757][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.776342][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.791611][T10780] SET target dimension over the limit! [ 196.815329][T10784] fuse: Unknown parameter '000000000000365005300000x0000000000000005' [ 196.876477][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 196.986374][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.067075][ T57] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 197.098146][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.207165][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.210291][T10802] capability: warning: `syz.0.1339' uses 32-bit capabilities (legacy support in use) [ 197.226607][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 197.229937][ T57] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.233026][ T57] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.236208][ T57] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.239407][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.242901][ T57] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.244938][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 197.245997][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.252192][ T57] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.254533][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.258198][ T57] usb 6-1: config 0 descriptor?? [ 197.307299][ T25] usb 7-1: USB disconnect, device number 27 [ 197.316766][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.346505][ T93] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 197.348229][ T93] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 197.349720][ T93] sd 6:0:0:0: [sdb] Write Protect is off [ 197.351114][ T93] sd 6:0:0:0: [sdb] Asking for cache data failed [ 197.352613][ T93] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 197.358542][ T93] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 197.426441][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.426737][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.463755][ T57] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.668906][ T57] usb 6-1: USB disconnect, device number 20 [ 197.673997][ T57] usblp0: removed [ 197.718882][T10471] udevd[10471]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 197.746737][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 198.006701][ T6056] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 198.078558][T10820] FAULT_INJECTION: forcing a failure. [ 198.078558][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 198.082964][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.2.1345 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 198.086739][T10820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.090495][T10820] Call Trace: [ 198.091684][T10820] [ 198.092745][T10820] dump_stack_lvl+0x16c/0x1f0 [ 198.094468][T10820] should_fail_ex+0x497/0x5b0 [ 198.096148][T10820] ? fs_reclaim_acquire+0xae/0x150 [ 198.097982][T10820] should_failslab+0xc2/0x120 [ 198.099661][T10820] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 198.101784][T10820] ? __alloc_skb+0x2b3/0x380 [ 198.103451][T10820] __alloc_skb+0x2b3/0x380 [ 198.105059][T10820] ? __pfx___alloc_skb+0x10/0x10 [ 198.106732][T10820] ? lock_acquire+0x2f/0xb0 [ 198.108233][T10820] netlink_alloc_large_skb+0x69/0x130 [ 198.110045][T10820] netlink_sendmsg+0x689/0xd70 [ 198.111721][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.113509][T10820] ____sys_sendmsg+0x9ae/0xb40 [ 198.115124][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.116904][T10820] ? get_compat_msghdr+0x11b/0x170 [ 198.118654][T10820] ___sys_sendmsg+0x135/0x1e0 [ 198.120266][T10820] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.122052][T10820] ? __pfx_lock_release+0x10/0x10 [ 198.123746][T10820] ? trace_lock_acquire+0x14e/0x1f0 [ 198.125520][T10820] ? __fget_files+0x206/0x3a0 [ 198.127100][T10820] __sys_sendmsg+0x16e/0x220 [ 198.128673][T10820] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.130394][T10820] __do_fast_syscall_32+0x73/0x120 [ 198.132152][T10820] do_fast_syscall_32+0x32/0x80 [ 198.133805][T10820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.135925][T10820] RIP: 0023:0xf708e579 [ 198.137293][T10820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 198.143095][T10820] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 198.145231][T10820] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000140 [ 198.147274][T10820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.149308][T10820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.151379][T10820] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 198.153422][T10820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.155474][T10820] [ 198.180194][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.184094][ T6056] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.187327][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.189133][T10824] support for the xor transformation has been removed. [ 198.191270][ T6056] usb 8-1: config 0 descriptor?? [ 198.228964][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 198.346673][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.399995][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.402845][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.406071][ T6056] usbhid 8-1:0.0: can't add hid device: -71 [ 198.407886][ T6056] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 198.410594][ T6056] usb 8-1: USB disconnect, device number 27 [ 198.603080][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 198.846703][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.856425][ T57] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 199.016399][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 199.019010][ T57] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 199.021476][ T57] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 199.024102][ T57] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 199.026809][ T57] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 199.029439][ T57] usb 8-1: config 1 interface 0 has no altsetting 0 [ 199.031228][ T57] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 199.033713][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.038241][ T57] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 199.239671][ T57] scsi host6: usb-storage 8-1:1.0 [ 199.441609][T10866] lo speed is unknown, defaulting to 1000 [ 200.297174][ T86] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 200.314279][T10852] sddr09: could not read card info [ 200.317498][ T86] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 200.418714][T10883] __nla_validate_parse: 2 callbacks suppressed [ 200.418767][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 200.451953][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 200.456654][T10852] usb 8-1: reset high-speed USB device number 28 using dummy_hcd [ 200.626513][T10852] usb 8-1: device descriptor read/64, error -32 [ 201.257730][T10896] support for the xor transformation has been removed. [ 201.547808][ T25] usb 8-1: USB disconnect, device number 28 [ 201.597164][ T8065] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 201.599012][ T8065] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 201.600584][ T8065] sd 6:0:0:0: [sdb] Write Protect is off [ 201.602116][ T8065] sd 6:0:0:0: [sdb] Asking for cache data failed [ 201.603756][ T8065] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 201.623145][ T8065] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 201.737182][ T86] net_ratelimit: 45 callbacks suppressed [ 201.737195][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 201.773155][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 201.837767][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 201.846795][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 201.874459][T10911] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.890636][T10911] kvm: pic: level sensitive irq not supported [ 201.890902][T10911] kvm: pic: non byte read [ 201.966401][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 201.976334][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.992258][T10915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.032504][ T5879] udevd[5879]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 202.062610][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 202.077108][ T45] bond1: (slave ip6gretap1): link status up again after 0 ms [ 202.079246][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.083540][T10918] tipc: Enabling of bearer rejected, already enabled [ 202.119474][T10925] netlink: 1784 bytes leftover after parsing attributes in process `syz.1.1373'. [ 202.211265][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.478657][T10932] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1371'. [ 202.494782][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 202.559498][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.616391][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.435004][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 203.440343][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 203.915455][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 205.625928][T10981] __nla_validate_parse: 1 callbacks suppressed [ 205.625939][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 205.876779][T10988] fuse: Unknown parameter '' [ 206.660379][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.776441][ C2] net_ratelimit: 44 callbacks suppressed [ 206.776484][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.816422][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 206.936811][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.020434][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 207.047162][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.157001][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.176396][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.307256][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.409838][T11019] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1394'. [ 207.416467][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 207.423675][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.537831][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.647255][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.835418][T11024] netlink: 1784 bytes leftover after parsing attributes in process `syz.0.1397'. [ 207.922269][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 208.804323][T11041] fuse: Unknown parameter '' [ 210.446488][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 210.517919][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 210.544488][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 211.300557][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 211.816565][ T8065] net_ratelimit: 45 callbacks suppressed [ 211.816579][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 211.938205][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 211.986299][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.048606][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.158082][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.253455][T11109] IPVS: ovf: UDP 0.0.0.0:0 - no destination available [ 212.266737][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.376326][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.386741][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.496369][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.513525][T11118] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1424'. [ 212.565737][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 212.864868][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 213.067054][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 213.183783][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 213.437632][T11147] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1432'. [ 213.549503][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 213.725103][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1436'. [ 213.936382][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.966372][ T57] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 214.026409][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.066942][ T6214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.137768][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.140631][ T57] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.143115][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.175484][ T57] usb 5-1: config 0 descriptor?? [ 214.189243][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.207941][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 214.207951][ T39] audit: type=1800 audit(1734423916.903:226): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1442" name="file0" dev="9p" ino=36574637 res=0 errno=0 [ 214.231240][T11175] 9pnet_virtio: no channels available for device syz [ 214.347405][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.385260][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.388197][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.394154][ T57] usbhid 5-1:0.0: can't add hid device: -71 [ 214.395751][ T57] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.406654][ T57] usb 5-1: USB disconnect, device number 29 [ 214.445676][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 214.486610][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.519584][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.586437][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.646410][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.676474][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.836504][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 214.996330][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 215.004842][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 215.008521][ T25] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 215.011718][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 215.014915][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 215.018592][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 215.021069][ T25] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 215.024383][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.029094][ T25] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 215.233945][ T25] scsi host6: usb-storage 5-1:1.0 [ 215.465080][T11211] lo speed is unknown, defaulting to 1000 [ 216.302497][ T8065] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 216.316126][ T8065] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 216.317667][T11205] sddr09: could not read card info [ 216.446509][T11205] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 216.501737][T11237] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 216.563220][T11238] __nla_validate_parse: 5 callbacks suppressed [ 216.563232][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 216.781307][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 216.826595][ T93] net_ratelimit: 47 callbacks suppressed [ 216.826625][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 216.946343][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.066654][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.073541][T11271] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1471'. [ 217.123053][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.125037][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.127745][T11269] bridge0: entered allmulticast mode [ 217.147389][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.149401][T11269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.151966][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.154378][T11269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.172945][T11269] bridge0: entered promiscuous mode [ 217.176416][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.266391][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.276864][ T57] usb 5-1: USB disconnect, device number 30 [ 217.316390][ T1134] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 217.318449][ T1134] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 217.319993][ T1134] sd 6:0:0:0: [sdb] Write Protect is off [ 217.321515][ T1134] sd 6:0:0:0: [sdb] Asking for cache data failed [ 217.323114][ T1134] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 217.343774][ T1134] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 217.388412][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.496564][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.576295][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.626344][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.642877][T11281] lo speed is unknown, defaulting to 1000 [ 217.998114][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 218.024229][T11285] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 218.026602][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1475'. [ 218.029401][T11285] batman_adv: batadv0: Adding interface: vlan1 [ 218.031042][T11285] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.038528][T11285] batman_adv: batadv0: Interface activated: vlan1 [ 218.123237][ T6622] udevd[6622]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 218.161406][ T6159] udevd[6159]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 218.290050][T11267] syz.1.1470 (11267) used greatest stack depth: 20336 bytes left [ 218.528671][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 219.042982][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 219.064360][T11318] lo speed is unknown, defaulting to 1000 [ 219.077220][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 219.326726][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 219.473165][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 219.653060][T11336] SET target dimension over the limit! [ 219.869922][T11344] bridge0: entered allmulticast mode [ 219.872928][T11344] bridge0: entered promiscuous mode [ 220.218563][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'. [ 220.512875][T11360] --map-set only usable from mangle table [ 221.761496][T11389] __nla_validate_parse: 3 callbacks suppressed [ 221.761514][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 221.946468][ T12] net_ratelimit: 41 callbacks suppressed [ 221.946486][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.066383][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.176396][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.373812][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.376348][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.481914][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.511544][ T39] audit: type=1800 audit(1734423925.213:227): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1507" name="file0" dev="9p" ino=36574637 res=0 errno=0 [ 222.536167][T11402] 9pnet_virtio: no channels available for device syz [ 222.597127][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.716388][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.776309][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.827835][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.872836][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.874832][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.877927][T11420] bridge0: entered allmulticast mode [ 223.019795][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.022025][T11420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.024852][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.026956][T11420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.034169][T11420] bridge0: entered promiscuous mode [ 223.607436][T11431] nbd1: detected capacity change from 0 to 12 [ 223.616516][ T6159] block nbd1: Send control failed (result -89) [ 223.619530][ T6159] block nbd1: Request send failed, requeueing [ 223.624886][ T5945] block nbd1: Receive control failed (result -32) [ 223.627912][ T6054] block nbd1: Dead connection, failed to find a fallback [ 223.630580][ T6054] block nbd1: shutting down sockets [ 223.632587][ T6054] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.635903][ T6054] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.637851][T11432] block nbd1: NBD_DISCONNECT [ 223.641216][T11434] tipc: Enabling of bearer rejected, already enabled [ 223.641501][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.643333][T11432] block nbd1: Send disconnect failed -89 [ 223.648173][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.653256][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.656651][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.656743][ T6214] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 223.656756][ T6214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.662030][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.667908][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.673663][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.677081][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.679934][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.683187][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.686034][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.689417][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.692339][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.695560][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.699940][ T6159] ldm_validate_partition_table(): Disk read failed. [ 223.703637][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.707568][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.716698][ T6159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.720158][ T6159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 223.722652][ T6159] Dev nbd1: unable to read RDB block 0 [ 223.724215][ T6159] nbd1: unable to read partition table [ 223.725776][ T6159] nbd1: partition table beyond EOD, truncated [ 223.725892][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 223.730966][T11440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 223.734063][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 223.737824][T11440] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1520'. [ 223.742687][ T6159] ldm_validate_partition_table(): Disk read failed. [ 223.748103][ T6159] Dev nbd1: unable to read RDB block 0 [ 223.750106][ T6159] nbd1: unable to read partition table [ 223.751967][ T6159] nbd1: partition table beyond EOD, truncated [ 223.876447][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.895195][ T39] audit: type=1800 audit(1734423926.593:228): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1517" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 223.921533][T11446] warning: `syz.2.1517' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.046454][ T6214] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 224.186442][ T6214] usb 5-1: device descriptor read/64, error -71 [ 224.426326][ T6214] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 224.553629][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 224.566767][ T6214] usb 5-1: device descriptor read/64, error -71 [ 224.621317][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 224.623769][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'. [ 224.626134][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 224.628781][T11457] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1526'. [ 224.676608][ T6214] usb usb5-port1: attempt power cycle [ 224.679343][T11462] x_tables: duplicate underflow at hook 1 [ 225.027154][ T6214] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 225.049057][ T6214] usb 5-1: device descriptor read/8, error -71 [ 225.296545][ T6214] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 225.317143][ T6214] usb 5-1: device descriptor read/8, error -71 [ 225.426632][ T6214] usb usb5-port1: unable to enumerate USB device [ 226.692244][T11493] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.698755][T11493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.946550][T11498] syzkaller1: entered promiscuous mode [ 226.948449][T11498] syzkaller1: entered allmulticast mode [ 227.156597][ T86] net_ratelimit: 43 callbacks suppressed [ 227.156614][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.276715][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.386684][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.507088][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.576385][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.629614][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.756583][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.888487][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.967973][T11516] __nla_validate_parse: 3 callbacks suppressed [ 227.968064][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 227.976332][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.070865][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 228.086828][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 228.096355][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.951079][T11540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.208723][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 229.545448][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 229.676223][T11551] SET target dimension over the limit! [ 230.016515][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 230.110740][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 230.477727][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 230.639576][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 231.227484][ T39] audit: type=1800 audit(1734423933.933:229): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1557" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 231.435990][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.789842][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 232.256352][ T93] net_ratelimit: 44 callbacks suppressed [ 232.256364][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.366352][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.486931][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.596398][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.706544][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.786304][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 232.826380][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.936549][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.053744][T11629] __nla_validate_parse: 4 callbacks suppressed [ 233.053857][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 233.056442][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.176423][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 233.676604][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.768038][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 234.002424][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'. [ 234.206386][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 234.456956][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.925573][T11679] netlink: 728 bytes leftover after parsing attributes in process `syz.1.1594'. [ 234.929256][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'. [ 234.985756][ T5945] Bluetooth: hci1: unexpected event for opcode 0x201c [ 234.992564][ T5945] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 235.314054][T11700] lo speed is unknown, defaulting to 1000 [ 235.497242][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 235.499631][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1596'. [ 235.502361][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 235.505180][T11712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1596'. [ 237.336399][ C0] net_ratelimit: 46 callbacks suppressed [ 237.336412][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.373745][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.467574][T11757] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 237.476362][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.586729][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.706574][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.816432][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.928663][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.976347][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 238.036721][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.139471][T11772] sock: sock_set_timeout: `syz.2.1614' (pid 11772) tries to set negative timeout [ 238.385540][T11777] __nla_validate_parse: 5 callbacks suppressed [ 238.385628][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 238.396450][ T6056] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 238.536628][ T6056] usb 7-1: device descriptor read/64, error -71 [ 238.786683][ T6056] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 238.916389][ T6056] usb 7-1: device descriptor read/64, error -71 [ 239.017373][ T5945] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 239.020616][ T5945] Bluetooth: hci1: Injecting HCI hardware error event [ 239.023512][ T5945] Bluetooth: hci1: hardware error 0x00 [ 239.026945][ T6056] usb usb7-port1: attempt power cycle [ 239.093832][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 239.296729][T11797] Invalid ELF header magic: != ELF [ 239.652789][ T6056] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 239.677181][ T6056] usb 7-1: device descriptor read/8, error -71 [ 239.763186][T11800] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 239.776524][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.779763][T11800] team0: Port device bond0 added [ 239.926522][ T6056] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 239.946934][ T6056] usb 7-1: device descriptor read/8, error -71 [ 240.056666][ T6056] usb usb7-port1: unable to enumerate USB device [ 240.727091][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 240.872590][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 241.056081][T11817] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1626'. [ 241.096617][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 241.227910][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 241.436426][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 242.167832][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 242.437618][ T12] net_ratelimit: 44 callbacks suppressed [ 242.437630][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.507927][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 242.536376][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.547314][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.623492][ T39] audit: type=1326 audit(1734423945.323:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.629339][ T39] audit: type=1326 audit(1734423945.323:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.635482][ T39] audit: type=1326 audit(1734423945.323:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.643187][ T39] audit: type=1326 audit(1734423945.323:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.648847][ T39] audit: type=1326 audit(1734423945.323:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.656536][ T39] audit: type=1326 audit(1734423945.323:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.658634][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.667342][ T39] audit: type=1326 audit(1734423945.323:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.675050][ T39] audit: type=1326 audit(1734423945.323:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.676807][T11858] IPVS: ovf: UDP 0.0.0.0:0 - no destination available [ 242.683130][ T39] audit: type=1326 audit(1734423945.323:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.692369][ T39] audit: type=1326 audit(1734423945.323:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.1.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 242.767155][T11862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.776670][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.886789][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.904442][T11864] netlink: 'syz.3.1641': attribute type 10 has an invalid length. [ 242.919100][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.922062][T11864] team0: Port device bond0 added [ 242.996434][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.106498][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.176341][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.207540][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 243.500443][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 243.574688][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'. [ 243.972710][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 244.442296][T11892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.922227][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 244.976132][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 245.104302][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 245.567932][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 245.723419][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 245.725847][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 245.728565][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 245.817458][T11927] FAULT_INJECTION: forcing a failure. [ 245.817458][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 245.820722][T11927] CPU: 3 UID: 0 PID: 11927 Comm: syz.3.1658 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 245.823475][T11927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.826228][T11927] Call Trace: [ 245.827114][T11927] [ 245.827893][T11927] dump_stack_lvl+0x16c/0x1f0 [ 245.829135][T11927] should_fail_ex+0x497/0x5b0 [ 245.830363][T11927] ? fs_reclaim_acquire+0xae/0x150 [ 245.831702][T11927] should_failslab+0xc2/0x120 [ 245.832936][T11927] __kmalloc_cache_noprof+0x68/0x420 [ 245.834325][T11927] rtnl_newlink+0x108/0x1d70 [ 245.835542][T11927] ? hlock_class+0x4e/0x130 [ 245.836729][T11927] ? __lock_acquire+0xcc5/0x3c40 [ 245.838036][T11927] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.839353][T11927] ? __pfx___lock_acquire+0x10/0x10 [ 245.840727][T11927] ? kmem_cache_free+0x152/0x4c0 [ 245.842030][T11927] ? aa_get_newest_label+0x376/0x680 [ 245.843398][T11927] ? find_held_lock+0x2d/0x110 [ 245.844653][T11927] ? find_held_lock+0x2d/0x110 [ 245.845922][T11927] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 245.847266][T11927] ? __pfx_lock_release+0x10/0x10 [ 245.848583][T11927] ? trace_lock_acquire+0x14e/0x1f0 [ 245.849957][T11927] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.851318][T11927] rtnetlink_rcv_msg+0x95b/0xea0 [ 245.852621][T11927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.854022][T11927] ? __pfx___dev_queue_xmit+0x10/0x10 [ 245.855418][T11927] netlink_rcv_skb+0x165/0x410 [ 245.856666][T11927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.858092][T11927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.859480][T11927] ? netlink_deliver_tap+0x1ae/0xca0 [ 245.860869][T11927] netlink_unicast+0x53c/0x7f0 [ 245.862116][T11927] ? __pfx_netlink_unicast+0x10/0x10 [ 245.863494][T11927] ? __phys_addr_symbol+0x30/0x80 [ 245.864802][T11927] ? __check_object_size+0x488/0x710 [ 245.866201][T11927] netlink_sendmsg+0x8b8/0xd70 [ 245.867455][T11927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.868834][T11927] ____sys_sendmsg+0x9ae/0xb40 [ 245.870096][T11927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.871484][T11927] ? get_compat_msghdr+0x11b/0x170 [ 245.872825][T11927] ___sys_sendmsg+0x135/0x1e0 [ 245.874072][T11927] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.875436][T11927] ? __pfx_lock_release+0x10/0x10 [ 245.876755][T11927] ? trace_lock_acquire+0x14e/0x1f0 [ 245.878120][T11927] ? __fget_files+0x206/0x3a0 [ 245.879348][T11927] __sys_sendmsg+0x16e/0x220 [ 245.880583][T11927] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.881932][T11927] __do_fast_syscall_32+0x73/0x120 [ 245.883241][T11927] do_fast_syscall_32+0x32/0x80 [ 245.884503][T11927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.886160][T11927] RIP: 0023:0xf708e579 [ 245.887231][T11927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.892206][T11927] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 245.894374][T11927] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000140 [ 245.896416][T11927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.898461][T11927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.900533][T11927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.902594][T11927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.904612][T11927] [ 246.033350][T11945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.122606][T11964] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.516841][ T45] net_ratelimit: 46 callbacks suppressed [ 247.516860][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.627729][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.736474][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 247.738510][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.896831][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.006498][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.116337][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.236383][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.346711][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.376327][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.118370][T12021] __nla_validate_parse: 8 callbacks suppressed [ 249.118381][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 250.394172][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 250.496603][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 250.616426][T12044] netlink: 'syz.0.1683': attribute type 10 has an invalid length. [ 250.876228][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 251.469571][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 251.472311][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 252.546304][ C2] net_ratelimit: 42 callbacks suppressed [ 252.546316][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 252.553099][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 252.596571][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.706532][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.712554][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.849868][T12118] SET target dimension over the limit! [ 252.914123][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 252.921473][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.936314][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.027088][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.136402][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.246581][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.312381][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 253.356446][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.371040][T12147] syz.1.1706[12147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.371229][T12147] syz.1.1706[12147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.374399][T12147] syz.1.1706[12147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.388928][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 254.381657][T12161] lo speed is unknown, defaulting to 1000 [ 254.681642][T12165] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.604311][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 255.821308][T12189] Cannot find del_set index 3 as target [ 255.902459][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 256.600964][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 256.726854][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 256.952344][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 257.416577][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 257.616451][ T86] net_ratelimit: 44 callbacks suppressed [ 257.616466][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.726396][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.746307][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.839976][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.898768][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 257.966387][ T93] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.076364][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.136413][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 258.186482][ T45] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.306387][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.381682][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 258.416435][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.935562][T12243] infiniband sz1: set active [ 258.946146][ T25] lo speed is unknown, defaulting to 1000 [ 258.991420][ T5945] Bluetooth: hci0: unexpected event for opcode 0x200c [ 259.630295][T12265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.852344][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 260.875442][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 261.147090][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 261.824690][T12310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.947606][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 262.686699][ T1142] net_ratelimit: 43 callbacks suppressed [ 262.686719][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.806320][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.877177][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 262.926490][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.946304][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.026869][T12339] lo speed is unknown, defaulting to 1000 [ 263.036425][ T1142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.156555][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.280585][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.329067][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 263.336387][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.386420][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.496491][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.776746][T12359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.261355][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 264.263691][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'. [ 264.266074][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 264.268680][T12376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1766'. [ 264.484902][T12383] netlink: 'syz.0.1768': attribute type 39 has an invalid length. [ 264.607635][T12386] SET target dimension over the limit! [ 265.038441][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 265.652897][T12413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 266.116381][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 266.451135][T12428] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1782'. [ 266.515022][T12434] fuse: Unknown parameter 'roo Hp00000000000000040000' [ 266.564467][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 266.886810][T12439] IPVS: Unknown mcast interface: pim6reg [ 267.147441][T12444] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1787'. [ 267.209105][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 267.489939][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 267.559159][T12459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.776615][ T8065] net_ratelimit: 43 callbacks suppressed [ 267.776635][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.886660][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.996508][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.106517][ T86] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.136407][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.216483][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.346477][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.456365][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.536441][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.566993][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.619979][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'. [ 269.160245][T12502] SET target dimension over the limit! [ 269.406289][T12516] bridge55: entered promiscuous mode [ 269.407742][T12516] bridge55: entered allmulticast mode [ 269.596965][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 269.699370][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 269.955627][T12529] bridge0: port 3(syz_tun) entered blocking state [ 269.957961][T12529] bridge0: port 3(syz_tun) entered disabled state [ 269.959853][T12529] syz_tun: entered allmulticast mode [ 269.961978][T12529] syz_tun: entered promiscuous mode [ 269.964234][T12529] bridge0: port 3(syz_tun) entered blocking state [ 269.966073][T12529] bridge0: port 3(syz_tun) entered forwarding state [ 270.082597][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 270.606339][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 270.767429][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.770233][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.772734][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.775767][ T25] usb 5-1: config 0 descriptor?? [ 270.978866][T12550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.981085][T12550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.030204][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 271.031807][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 271.034616][ T25] usb 5-1: USB disconnect, device number 35 [ 271.255360][T12560] __nla_validate_parse: 1 callbacks suppressed [ 271.255371][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 271.577904][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 271.796434][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 271.827598][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 272.004233][T12575] FAULT_INJECTION: forcing a failure. [ 272.004233][T12575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.007764][T12575] CPU: 3 UID: 0 PID: 12575 Comm: syz.3.1825 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 272.010556][T12575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.010911][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 272.013294][T12575] Call Trace: [ 272.013301][T12575] [ 272.015773][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 272.016231][T12575] dump_stack_lvl+0x16c/0x1f0 [ 272.016249][T12575] should_fail_ex+0x497/0x5b0 [ 272.016265][T12575] _copy_to_user+0x32/0xd0 [ 272.016281][T12575] simple_read_from_buffer+0xd0/0x160 [ 272.016300][T12575] proc_fail_nth_read+0x198/0x270 [ 272.018505][ T25] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 272.019756][T12575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.020943][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 272.022083][T12575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.023454][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 272.024816][T12575] vfs_read+0x1df/0xbe0 [ 272.027318][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 272.028731][T12575] ? __fget_files+0x1fc/0x3a0 [ 272.031219][ T25] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 272.032677][T12575] ? __pfx___mutex_lock+0x10/0x10 [ 272.034955][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.036008][T12575] ? __pfx_vfs_read+0x10/0x10 [ 272.040500][ T25] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 272.041309][T12575] ? __fget_files+0x206/0x3a0 [ 272.049432][T12575] ksys_read+0x12b/0x250 [ 272.050737][T12575] ? __pfx_ksys_read+0x10/0x10 [ 272.051936][T12575] __do_fast_syscall_32+0x73/0x120 [ 272.053196][T12575] do_fast_syscall_32+0x32/0x80 [ 272.054406][T12575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.056006][T12575] RIP: 0023:0xf708e579 [ 272.057079][T12575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 272.063089][T12575] RSP: 002b:00000000f5080590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 272.065210][T12575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5080620 [ 272.067176][T12575] RDX: 000000000000000f RSI: 00000000f73c3ff4 RDI: 0000000000000000 [ 272.069248][T12575] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 272.071232][T12575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 272.073207][T12575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.075208][T12575] [ 272.076159][ C3] vkms_vblank_simulate: vblank timer overrun [ 272.229198][T12583] overlayfs: missing 'workdir' [ 272.348731][ T25] scsi host6: usb-storage 5-1:1.0 [ 272.803539][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 272.876630][ T1134] net_ratelimit: 45 callbacks suppressed [ 272.876670][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.987363][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.116533][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.226349][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.326329][ T6214] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 273.336531][T12494] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.346310][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.426483][T12494] scsi 6:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 273.446379][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.455983][T12494] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 273.463990][ T57] usb 5-1: USB disconnect, device number 36 [ 273.552513][ T6214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.553880][ T1134] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 273.555288][ T6214] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.555303][ T6214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.556033][ T6214] usb 8-1: config 0 descriptor?? [ 273.563341][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.571522][ T1134] sd 6:0:0:0: [sdb] Sense not available. [ 273.573050][ T1134] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 273.574858][ T1134] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 273.576401][ T1134] sd 6:0:0:0: [sdb] Write Protect is off [ 273.577885][ T1134] sd 6:0:0:0: [sdb] Asking for cache data failed [ 273.579536][ T1134] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 273.583101][ T1134] [ 273.583736][ T1134] ====================================================== [ 273.585517][ T1134] WARNING: possible circular locking dependency detected [ 273.587303][ T1134] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted [ 273.590159][ T1134] ------------------------------------------------------ [ 273.592598][ T1134] kworker/u32:6/1134 is trying to acquire lock: [ 273.594223][ T1134] ffff8880695892e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 273.596646][ T1134] [ 273.596646][ T1134] but task is already holding lock: [ 273.598524][ T1134] ffff888069588aa8 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 273.601195][ T1134] [ 273.601195][ T1134] which lock already depends on the new lock. [ 273.601195][ T1134] [ 273.603803][ T1134] [ 273.603803][ T1134] the existing dependency chain (in reverse order) is: [ 273.606104][ T1134] [ 273.606104][ T1134] -> #5 (&q->q_usage_counter(queue)#54){++++}-{0:0}: [ 273.608382][ T1134] blk_queue_enter+0x50f/0x640 [ 273.609762][ T1134] blk_mq_alloc_request+0x59b/0x950 [ 273.611252][ T1134] scsi_execute_cmd+0x1f1/0xff0 [ 273.612649][ T1134] read_capacity_10+0x1d4/0x6d0 [ 273.614054][ T1134] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 273.615655][ T1134] sd_probe+0x8ee/0xfa0 [ 273.616875][ T1134] really_probe+0x23e/0xa90 [ 273.618182][ T1134] __driver_probe_device+0x1de/0x440 [ 273.619696][ T1134] driver_probe_device+0x4c/0x1b0 [ 273.621137][ T1134] __device_attach_driver+0x1df/0x310 [ 273.622666][ T1134] bus_for_each_drv+0x157/0x1e0 [ 273.624059][ T1134] __device_attach_async_helper+0x1d3/0x290 [ 273.625722][ T1134] async_run_entry_fn+0x9c/0x530 [ 273.627132][ T1134] process_one_work+0x958/0x1b30 [ 273.628528][ T1134] worker_thread+0x6c8/0xf00 [ 273.629807][ T1134] kthread+0x2c1/0x3a0 [ 273.630965][ T1134] ret_from_fork+0x45/0x80 [ 273.632205][ T1134] ret_from_fork_asm+0x1a/0x30 [ 273.633524][ T1134] [ 273.633524][ T1134] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 273.635412][ T1134] __mutex_lock+0x19b/0xa60 [ 273.636695][ T1134] __nbd_set_size+0x2c0/0x730 [ 273.638032][ T1134] nbd_start_device+0x8fd/0xd70 [ 273.639426][ T1134] nbd_ioctl+0x21a/0xfd0 [ 273.640656][ T1134] compat_blkdev_ioctl+0x2f7/0x750 [ 273.642105][ T1134] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 273.643650][ T1134] __do_fast_syscall_32+0x73/0x120 [ 273.645106][ T1134] do_fast_syscall_32+0x32/0x80 [ 273.646499][ T1134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.648256][ T1134] [ 273.648256][ T1134] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 273.650494][ T1134] blk_mq_submit_bio+0x1fb6/0x24c0 [ 273.651942][ T1134] __submit_bio+0x384/0x540 [ 273.653260][ T1134] submit_bio_noacct_nocheck+0x698/0xd70 [ 273.654858][ T1134] submit_bio_noacct+0x93a/0x1e20 [ 273.656287][ T1134] block_read_full_folio+0x812/0xa50 [ 273.657808][ T1134] filemap_read_folio+0xc6/0x2a0 [ 273.659229][ T1134] filemap_get_pages+0x155f/0x1be0 [ 273.660670][ T1134] filemap_read+0x3ca/0xd70 [ 273.662002][ T1134] blkdev_read_iter+0x187/0x480 [ 273.663391][ T1134] vfs_read+0x87f/0xbe0 [ 273.664629][ T1134] ksys_read+0x12b/0x250 [ 273.665887][ T1134] do_syscall_64+0xcd/0x250 [ 273.667195][ T1134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.668871][ T1134] [ 273.668871][ T1134] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 273.671043][ T1134] down_read+0x9a/0x330 [ 273.672265][ T1134] page_cache_ra_unbounded+0x173/0x750 [ 273.673822][ T1134] page_cache_ra_order+0x8f2/0xc80 [ 273.675274][ T1134] filemap_fault+0x14a5/0x2820 [ 273.676642][ T1134] __do_fault+0x10a/0x490 [ 273.677912][ T1134] do_pte_missing+0x99f/0x3e00 [ 273.679301][ T1134] __handle_mm_fault+0x103c/0x2a40 [ 273.680749][ T1134] handle_mm_fault+0x3fa/0xaa0 [ 273.682129][ T1134] __get_user_pages+0x8d9/0x3b50 [ 273.683557][ T1134] __gup_longterm_locked+0x5ff/0x1870 [ 273.685092][ T1134] pin_user_pages+0x13f/0x160 [ 273.686414][ T1134] xdp_umem_create+0x73c/0x1270 [ 273.687790][ T1134] xsk_setsockopt+0x7e7/0xac0 [ 273.689164][ T1134] do_sock_setsockopt+0x222/0x480 [ 273.690600][ T1134] __sys_setsockopt+0x1a0/0x230 [ 273.691988][ T1134] __ia32_sys_setsockopt+0xbc/0x160 [ 273.693477][ T1134] __do_fast_syscall_32+0x73/0x120 [ 273.694928][ T1134] do_fast_syscall_32+0x32/0x80 [ 273.696315][ T1134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.698082][ T1134] [ 273.698082][ T1134] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 273.700050][ T1134] __might_fault+0x11b/0x190 [ 273.701388][ T1134] _copy_from_user+0x29/0xd0 [ 273.702736][ T1134] compat_blk_trace_setup+0xc9/0x200 [ 273.704254][ T1134] blk_trace_ioctl+0x24a/0x290 [ 273.705635][ T1134] compat_blkdev_ioctl+0x13c/0x750 [ 273.706479][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.707080][ T1134] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 273.707098][ T1134] __do_fast_syscall_32+0x73/0x120 [ 273.707109][ T1134] do_fast_syscall_32+0x32/0x80 [ 273.707119][ T1134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.707133][ T1134] [ 273.707133][ T1134] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 273.717955][ T1134] __lock_acquire+0x249e/0x3c40 [ 273.719402][ T1134] lock_acquire.part.0+0x11b/0x380 [ 273.720867][ T1134] __mutex_lock+0x19b/0xa60 [ 273.722194][ T1134] blk_mq_init_sched+0x42b/0x640 [ 273.723609][ T1134] elevator_init_mq+0x2cd/0x420 [ 273.725011][ T1134] add_disk_fwnode+0x113/0x1300 [ 273.726376][ T1134] sd_probe+0xa66/0xfa0 [ 273.727607][ T1134] really_probe+0x23e/0xa90 [ 273.728923][ T1134] __driver_probe_device+0x1de/0x440 [ 273.730439][ T1134] driver_probe_device+0x4c/0x1b0 [ 273.731876][ T1134] __device_attach_driver+0x1df/0x310 [ 273.733417][ T1134] bus_for_each_drv+0x157/0x1e0 [ 273.734804][ T1134] __device_attach_async_helper+0x1d3/0x290 [ 273.736389][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.736493][ T1134] async_run_entry_fn+0x9c/0x530 [ 273.739782][ T1134] process_one_work+0x958/0x1b30 [ 273.741238][ T1134] worker_thread+0x6c8/0xf00 [ 273.742605][ T1134] kthread+0x2c1/0x3a0 [ 273.743814][ T1134] ret_from_fork+0x45/0x80 [ 273.745112][ T1134] ret_from_fork_asm+0x1a/0x30 [ 273.746415][ T1134] [ 273.746415][ T1134] other info that might help us debug this: [ 273.746415][ T1134] [ 273.748947][ T1134] Chain exists of: [ 273.748947][ T1134] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#54 [ 273.748947][ T1134] [ 273.752631][ T1134] Possible unsafe locking scenario: [ 273.752631][ T1134] [ 273.754553][ T1134] CPU0 CPU1 [ 273.755940][ T1134] ---- ---- [ 273.757328][ T1134] lock(&q->q_usage_counter(queue)#54); [ 273.758782][ T1134] lock(&q->limits_lock); [ 273.760586][ T1134] lock(&q->q_usage_counter(queue)#54); [ 273.762690][ T1134] lock(&q->debugfs_mutex); [ 273.763891][ T1134] [ 273.763891][ T1134] *** DEADLOCK *** [ 273.763891][ T1134] [ 273.765927][ T1134] 4 locks held by kworker/u32:6/1134: [ 273.767316][ T1134] #0: ffff88801c6d3948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 273.770016][ T1134] #1: ffffc90006a07d80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 273.772904][ T1134] #2: ffff888069de2378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 273.775561][ T1134] #3: ffff888069588aa8 (&q->q_usage_counter(queue)#54){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 273.778373][ T1134] [ 273.778373][ T1134] stack backtrace: [ 273.779909][ T1134] CPU: 3 UID: 0 PID: 1134 Comm: kworker/u32:6 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 273.782696][ T1134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.785462][ T1134] Workqueue: async async_run_entry_fn [ 273.786853][ T1134] Call Trace: [ 273.787726][ T1134] [ 273.788507][ T1134] dump_stack_lvl+0x116/0x1f0 [ 273.789751][ T1134] print_circular_bug+0x41c/0x610 [ 273.791093][ T1134] check_noncircular+0x31a/0x400 [ 273.792388][ T1134] ? __pfx_check_noncircular+0x10/0x10 [ 273.793815][ T1134] ? lockdep_lock+0xc6/0x200 [ 273.795022][ T1134] ? __pfx_lockdep_lock+0x10/0x10 [ 273.796308][ T1134] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.797913][ T1134] __lock_acquire+0x249e/0x3c40 [ 273.799196][ T1134] ? __pfx___lock_acquire+0x10/0x10 [ 273.800560][ T1134] lock_acquire.part.0+0x11b/0x380 [ 273.801904][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.803240][ T1134] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 273.804693][ T1134] ? rcu_is_watching+0x12/0xc0 [ 273.805950][ T1134] ? trace_lock_acquire+0x14e/0x1f0 [ 273.807299][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.808628][ T1134] ? lock_acquire+0x2f/0xb0 [ 273.809822][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.811164][ T1134] __mutex_lock+0x19b/0xa60 [ 273.812349][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.813690][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.815017][ T1134] ? __pfx___mutex_lock+0x10/0x10 [ 273.816329][ T1134] ? blk_queue_flag_set+0x29/0x40 [ 273.817631][ T1134] ? blk_mq_init_sched+0x42b/0x640 [ 273.818959][ T1134] blk_mq_init_sched+0x42b/0x640 [ 273.820259][ T1134] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 273.821679][ T1134] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 273.823260][ T1134] ? lock_acquire+0x2f/0xb0 [ 273.824448][ T1134] ? add_disk_fwnode+0x113/0x1300 [ 273.825766][ T1134] elevator_init_mq+0x2cd/0x420 [ 273.827033][ T1134] ? add_disk_fwnode+0x113/0x1300 [ 273.828341][ T1134] add_disk_fwnode+0x113/0x1300 [ 273.829613][ T1134] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.831000][ T1134] sd_probe+0xa66/0xfa0 [ 273.832094][ T1134] ? __pfx_sd_probe+0x10/0x10 [ 273.833334][ T1134] really_probe+0x23e/0xa90 [ 273.834523][ T1134] __driver_probe_device+0x1de/0x440 [ 273.835895][ T1134] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.837414][ T1134] driver_probe_device+0x4c/0x1b0 [ 273.838721][ T1134] __device_attach_driver+0x1df/0x310 [ 273.840137][ T1134] ? __pfx___device_attach_driver+0x10/0x10 [ 273.841681][ T1134] bus_for_each_drv+0x157/0x1e0 [ 273.842956][ T1134] ? __pfx_bus_for_each_drv+0x10/0x10 [ 273.844347][ T1134] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.845715][ T1134] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 273.847226][ T1134] ? __pfx___device_attach_async_helper+0x10/0x10 [ 273.848895][ T1134] __device_attach_async_helper+0x1d3/0x290 [ 273.850428][ T1134] ? __pfx___device_attach_async_helper+0x10/0x10 [ 273.852085][ T1134] ? ktime_get+0x206/0x300 [ 273.853286][ T1134] ? read_tsc+0x9/0x20 [ 273.854358][ T1134] ? ktime_get+0x1ac/0x300 [ 273.855527][ T1134] async_run_entry_fn+0x9c/0x530 [ 273.856824][ T1134] process_one_work+0x958/0x1b30 [ 273.858121][ T1134] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 273.859586][ T1134] ? __pfx_process_one_work+0x10/0x10 [ 273.861011][ T1134] ? rcu_is_watching+0x12/0xc0 [ 273.862261][ T1134] ? assign_work+0x1a0/0x250 [ 273.863483][ T1134] worker_thread+0x6c8/0xf00 [ 273.864728][ T1134] ? __pfx_worker_thread+0x10/0x10 [ 273.866069][ T1134] kthread+0x2c1/0x3a0 [ 273.867134][ T1134] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.868483][ T1134] ? __pfx_kthread+0x10/0x10 [ 273.869705][ T1134] ret_from_fork+0x45/0x80 [ 273.870890][ T1134] ? __pfx_kthread+0x10/0x10 [ 273.872102][ T1134] ret_from_fork_asm+0x1a/0x30 [ 273.873363][ T1134] [ 273.874219][ C3] vkms_vblank_simulate: vblank timer overrun [ 273.878099][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.880294][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.884034][ T1134] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 273.889324][ T6214] usbhid 8-1:0.0: can't add hid device: -71 [ 273.890915][ T6214] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 273.893470][ T6214] usb 8-1: USB disconnect, device number 29 [ 273.944671][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 274.235185][ T5950] udevd[5950]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 274.326381][ T145] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 274.476389][ T145] usb 8-1: Using ep0 maxpacket: 16 [ 274.478825][ T145] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 274.482017][ T145] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.485337][ T145] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 274.488836][ T145] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 8 [ 274.491417][ T145] usb 8-1: config 1 interface 0 has no altsetting 0 [ 274.493138][ T145] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 274.495484][ T145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.499568][ T145] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 274.700826][ T145] scsi host6: usb-storage 8-1:1.0 [ 275.388268][ T25] usb 8-1: USB disconnect, device number 30 [ 277.896377][ C0] net_ratelimit: 44 callbacks suppressed [ 277.896389][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.936470][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.046523][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.156439][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.266427][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.376378][T12489] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.486414][T12489] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.546319][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.596481][T12489] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.706355][ T8065] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 282.946324][T12485] net_ratelimit: 45 callbacks suppressed [ 282.946337][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.056553][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.096343][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 283.166547][T12485] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.276476][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.386480][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.496550][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex VM DIAGNOSIS: 08:26:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff82076370 RDX=ffff88802264c880 RSI=ffffffff820763c7 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc9002213f638 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff888049f0d7c0 R14=dffffc0000000000 R15=1ffff92004427ecf RIP=ffffffff8b2014f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020680000 CR3=000000007331e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000025a00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff88802264c880 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000008 RSP=ffffc9002451f880 R8 =0000000000000000 R9 =fffffbfff2039b3a R10=ffffffff901cd9d7 R11=000000000007b128 R12=0000000000000003 R13=1ffff920048a3f11 R14=0000000000000000 R15=ffffc9002451f8a8 RIP=ffffffff8147a098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000204f2000 CR3=000000007331e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000028f0bc RBX=0000000000000002 RCX=ffffffff8b1a17a9 RDX=ffffed10056c6fee RSI=ffffffff8bb16bc0 RDI=ffffffff81702e19 RBP=ffffed10036eb000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b758000 R14=ffffffff901cd9d0 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005596ab5ad3d8 CR3=000000004b75c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90006a06e90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c249b35 CR3=0000000072214000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000