last executing test programs: 4.630717147s ago: executing program 0 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socketpair(0x23, 0x5, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r8, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r8}]}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040), 0x4) r10 = syz_io_uring_setup(0x48be, 0x0, &(0x7f00000011c0), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0xe8, "194dc3057681c67364f15ef02f950567e84c42b3e26d6d056e4ef600"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x1, 0x0, 0x0) r12 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r12, 0xc25c4110, &(0x7f0000000380)={0x0, [[0x1], [0x0, 0x5], [0x3]], '\x00', [{0x0, 0x81}, {0x3, 0x3ff}, {0x0, 0xe}, {0x100bb}, {}, {}, {}, {}, {}, {0x0, 0x2}], '\x00', 0x400}) 3.661062186s ago: executing program 3 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r1], 0x1c}}, 0x0) (fail_nth: 5) 3.659965642s ago: executing program 0 (id=518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200)=@abs={0x1}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@abs={0x1}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x2, 0x2, 0x6, {0x0, 0x4, 0x6}}) 3.58996271s ago: executing program 0 (id=519): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) 3.52958266s ago: executing program 3 (id=520): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000080)=0x8) 3.529271648s ago: executing program 3 (id=521): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ce0000000000000001000081"]) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) creat(0x0, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x10}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0x40045010, &(0x7f0000000080)) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.963923703s ago: executing program 2 (id=524): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000600)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffa1}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb, 0x0, 0x0, 0x4c00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x308800, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socket(0xf, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502"], 0x38) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f000000ea80)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000007540)="5ed926876bf0dabf61ea86c82a62c9f23a0a95f9a423dc3c56385338c69ae7768dcc3ca5bc8d8d9398463b6b7436fa28", 0x30}], 0x1, &(0x7f0000009640)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4840}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/169, 0xa9}], 0x1}, 0x7}], 0x1, 0x2140, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4080, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@nfs_export_on}], [{@hash}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0x4, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 2.716779783s ago: executing program 2 (id=526): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x340, 0x25, 0x148, 0x8800, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) 2.716340194s ago: executing program 2 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socketpair(0x23, 0x5, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r8, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r8}]}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040), 0x4) r10 = syz_io_uring_setup(0x48be, 0x0, &(0x7f00000011c0), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0xe8, "194dc3057681c67364f15ef02f950567e84c42b3e26d6d056e4ef600"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x1, 0x0, 0x0) r12 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r12, 0xc25c4110, &(0x7f0000000380)={0x0, [[0x1], [0x0, 0x5], [0x3]], '\x00', [{0x0, 0x81}, {0x3, 0x3ff}, {0x0, 0xe}, {0x100bb}, {}, {}, {}, {}, {}, {0x0, 0x2}], '\x00', 0x400}) 2.379509824s ago: executing program 0 (id=531): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418}) syz_io_uring_setup(0x931, &(0x7f0000000480)={0x0, 0xeff, 0x100, 0xfffffffe, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"}) r5 = dup(r4) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000300)={0x7, 0x101, 0xb5c, 0x3, 0x401}) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x82f6, 0x0, "fffff5337cffff7f"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2050a0c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff, 0x1}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) 2.238251726s ago: executing program 0 (id=533): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) gettid() r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000200)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='contention_begin\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000008c0)={0x13, 0x1, 0x0, "0e6a605103787fa03e08fd65b728aec1b20a1ca8de67a818b1c85f5a22f39ca6"}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2, 0x13, r5, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0xa0e73000) syz_emit_ethernet(0x2a, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) 1.669830505s ago: executing program 2 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000007b000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 768.915717ms ago: executing program 2 (id=536): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x1e, 0x13, 0x18a, &(0x7f00000000c0)="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"}) flistxattr(r2, &(0x7f0000000500)=""/197, 0xc5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @remote}}, [0x4, 0x3, 0x40000, 0x2, 0x0, 0x6, 0x4a96, 0xe, 0x3, 0x4, 0x1, 0x8000, 0xfffffffffffffc01, 0x1ff, 0x6]}, &(0x7f0000000700)=0xfc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000740)={r4, 0x9}, &(0x7f0000000780)=0x8) r5 = openat$hwrng(0xffffff9c, &(0x7f00000007c0), 0x801, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x10000}, &(0x7f0000000840)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000880)={0x7, 'veth0_to_bridge\x00', {0x6b}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000008c0)={0x9, 0x0, [{0x6, 0xfffffff0, 0x7, 0x5, 0x5}, {0xb, 0xfffffffd, 0xffff15c9, 0x1000, 0x80000000}, {0x80000008, 0xef4, 0xfffffffe, 0x7fffffff, 0x9}, {0x7, 0x200, 0x3e4, 0x8, 0x1000}, {0xd, 0x9, 0x3, 0x4}, {0xc0000000, 0x3ff, 0x2, 0x8001, 0x80000000}, {0x80000001, 0x9, 0x2, 0x0, 0x5}, {0x4, 0xffffffff, 0x401, 0x4fc, 0x8}, {0x4, 0x0, 0x0, 0x0, 0x2}]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r5) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044844}, 0x20000080) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x401, 0x40200) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000b40)=r5, 0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000b80)) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$BTRFS_IOC_SEND(r9, 0x40449426, &(0x7f0000000c80)={{r5}, 0x3, &(0x7f0000000c40)=[0x8, 0x8, 0x8000000000000000], 0x2, 0x4, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d40)={r3, &(0x7f0000000d00)="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", &(0x7f0000001d00)=@udp6=r5}, 0x1c) r10 = openat(r5, &(0x7f0000001dc0)='./file0\x00', 0x161880, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001e00)=@o_path={&(0x7f0000001d80)='./file0/file0\x00', r10, 0x4000, r5}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000001e40)={r6, 0x8, 0xfe01}, 0x8) sendfile(r10, r9, &(0x7f0000001e80)=0x9, 0x5) 700.019693ms ago: executing program 2 (id=537): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000013c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 699.581596ms ago: executing program 1 (id=538): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), &(0x7f0000000200)=0x4) syz_io_uring_setup(0x1864, &(0x7f0000000040), &(0x7f0000000000)=0x0, &(0x7f00000000c0)) socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = memfd_secret(0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x58, r6, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0xb, 0x1}, {}]}, @val={0x3, 0x1, 0xf8}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r6, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000070000100000000000c00000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f00000003c0)=@abs={0x1}, 0x2) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x54}}, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 559.849114ms ago: executing program 0 (id=539): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 469.779843ms ago: executing program 1 (id=540): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) (async) r3 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x400) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x800, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000300000000000000000000000004", @ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=r1], 0x38}, 0x1, 0x2, 0x0, 0x90}, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000f00000000200000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x70, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="e6840ac8ff87"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xb88}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="02af8f71795ee82af448e84d59076fffd4922845f8ac13172f476b6f948eac1bd8de7fa69abac280a0bcc7de00ad796a1b2b9c2542cc19589f95016364261272c2faab07cb3004e395b2a6ece88ee63e6e83dc2d2e5816accb9a1376d9f581eeff153604fb4e", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000a000000"], 0x30}}, 0x10) (async) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2d, 0x0, 0x0) 390.0702ms ago: executing program 1 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setitimer(0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) 380.886592ms ago: executing program 3 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0xc, 0x0, 0x5}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x2f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0xfffffff8}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB='\b'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 330.119942ms ago: executing program 1 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 279.2808ms ago: executing program 3 (id=544): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000100)={@desc={0x1, 0x0, @desc1}, 0x40, r0, '\x00', @b}) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r1, &(0x7f0000001540)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e20, 0x3, @mcast1, 0x6}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="e11080348bc7d966a75a902423d18f3111b439870e9a856d3cb0c587f29d343d08cc7dcec257725bc93012b931ccf02412fe15bee4c7eb8e5eaa48a18d8acf706457ebc3", 0x44}, {&(0x7f00000002c0)="5b59e2e77857921044aacf6eedbaa35d5f3807bd94e5c80463cacb18f2ffd09143bb8e2c4a47ec5a8605232fde39280bd5a6fcaeb866c0c7dd25985dee801cdda721ca95d8a3442571a1840100c0c33673340a6fb00085d3396a1ef5e7322ce7caa4ca1fcc090219c1113475bb0309d7c937425e1fc8637ee83d369b0aa201c0ff26e6d37fba480bf72212a085dc8a5918da353ac78614327e7cfd71fc880d8472a6c0b0046ab8728808abec19f62dd446f7f64a02a165c5a92890e649a0022d4084d7", 0xc3}], 0x2, &(0x7f0000000400)=[{0x78, 0x117, 0x2, "29901b2c523c12e10ac9eba2837af9b546db0047d99e48cd594dcd59d6bc241a93b74d6c92f40f3c4256388cd68eaf429cfa6f68531dffd8a6a8714f3e8fa73f12b690073225fc2cbc8a76c24ef77e155870e7e853c258a36a5c8722fde5b497aa597967b0361f503d"}, {0x9c, 0x0, 0xbd81, "3b4d064b29c13480a9ca462d3adb20957767a5fe504beeaa2ffa9c0e52858099242a562a4e4f005f6977c534685eb66359c421dfb653747842e48f7013928395d470426ab699e7649fcbdfcbc9f55376d9bee08e5b09611b4e50b5b7a9f3bfa34fa68e932653eef6f4b48d8bcbb14559f5fd0c63bb7d05baf1aaa781c3af0308b51f61c165a3e792287daedc5effe0c7"}, {0xc8, 0x3a, 0xfffffffe, "77f2eadda85bbd1f62bf9b111bf5cc689d1356a64d447414e577687da44e33446a267c94e737f112ec96ea1b544c2f215ba6533336baad44b9b628a6db05680de76d46b52b03b52e3e71c3fdd1e97dec5209356edaf1f696ac36d956e454571060db6c33987c2743623c24ff0cb4b8f277b27d6a121b0bbd6aa21485ded26c26a00f2254772888ab4fcdbe38a84e8d59d516101a6661288d21f566420030faba80c394a9fd4fb34b2602e632ada04eba356cc14ae9569c4d680214"}, {0x10c, 0x10b, 0x800, "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"}, {0xd4, 0x10c, 0x5, "aaaddcb6f4455e5ffd81cd0107391c7b93166f42b1c9eb7f4d2e48b27ba498e70fe6900c4dd7137dee76710ba97bee5438867146b7a33cae9ebe38df654c5572b346c916a85859f02fbb9ad02e324ec2c743896cd1020a4b2261ef4e268c4eb6050ac0a31e500e1219b799961d731e78a43deb64783354aebe01de640f5c390456cea512ef1baf8e9e23236696c1f9a4e68588e042f4ae5d477f933c2f3c43323cd71ef99e538137a4c74cf833fe464dd91144432e361abba50085b61c46bdde52fa411a518a36"}, {0x108, 0x84, 0x2, "ec23e542582ea293b5f9c361f6ad13b6efff2bd955d255b2c9c3fffcb87fc42880812dc3c00760022c7f673788b80430096b68026d92f5c68a8baf15669e5967bad0302d1ccd0aafca4005a955c67551aa2689a913f279a142958ab3ab9f5368d37b39099d8a5fa4f05da4b849c9a889a448bc300d3f8916a0d2c047e6c9c87349a5970e63578a714218a4f20db611ac8a5b2e2dfa25ea44d47d2a704867cce75bf53ef27a5fcd30b1e9d29fe23b9257685eba30e3675c4cb7028ceda345b6d8190025adffbc101e0c350763a4d2943993b23b450083e9f8a7af2bd657b68240999b7a09a40a7e53342acf6c0521c0893a81c2797b33b5f622"}, {0x80, 0x117, 0x7fff, "cde71af37c98fab5c80f31fd86bdd6803dee9abdc9403a2b9570db09400e38fc1422392c58731205276a8cd6c880556b7971fb9df57af5f37e0cf217243bf11461455ba37cdec39b781d3698d124a9a1701240755a4d35d1b9ac3f0ea98a66681884634a5af9b26773446762fdbf19263d"}, {0xa4, 0x112, 0xd8, "9a436769270040d866f279ae73754f0099dc6cc3540b3e441fde0e894a281ccc0df7187a72198c86f8cf083077b27867431606f84e43a2bc924e8d367419c9ae155d6c92051a849668d84316f8fca230a97d07efebcbb9dc6339b1669ad8c300843d4f4ba54be8f6d6b7240ebb8d013cbaca17b62436edcb47428b7ec6fd759efaf6ce29f2b6d4878d16ab7716fa2a9712e111ff6b"}, {0xd8, 0x102, 0xa, "b285dd856d2df9f87c7e5ed148fa02de61b933b8e986258c715952017cd01af6b76f261f71815311c1b2d1d007333276c6276a0faee9264936402e720a5a7d147dd74404c83938bc44e3e5709c3f3983e038beca4e264a57b2312c9bc4e98fc08021873fa8397352b85cce332902f19808d55c30b18cefedcd90d2162e467f2db5a977721e4c44ee74a584daf44ea67620e9911bb5ae1739a46e5b984a2eb170e0a0659d3fa14675db1735c0196185df239df6a8a6ec45dd4fa20b8942a1393e0cd492612ee35dce71"}, {0x48, 0x119, 0x7, "8f7ac813661f1ff0f616823f2f342ae5e6d51fc06a2a7d1dd62e5c2fcfde5e2a76a9b96075315b625030fb4f45129d211d774045bdb72b889343"}], 0x708}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="d62c1c59cf5033019e6be4740b836c3787ed135591929319dc3cfd939372eb241c42ef3ac68481de56552bf993e7930f85022a8220feff50606f90175494bac6dec1917973e7d954c179dc4d727ff45af7f7a6995d5cda9bb9728c69e42cfa9282dc9db468463769c14a4e3ee2ac6a", 0x6f}, {&(0x7f0000000bc0)="2d6ab28946ae09aeff6a29cf26bbb7e879997abf2e52c4e89ed90cde386ef46610a8c9a117b2c3fa48edcb971d1c20a95ad1ea3fde37cc48aefcc9468cc5f7e87e533857fd1681d8423b16abcf299da072033bdcfa3aeb30f041e946f8d5541c01c1e26e4f97a36e7dc555352d79288991b10ef861f2379fdd728d3c706444fb402139b847545ef261a4cc4c0189edd653a47e6f1ec5605744cb327314dbbabf22f310f35eee8ea0a89e3f2339906d75b95b971c10591751daf88a619bdddbf1c97d5172fb98d980ec3ddaa4e6ff19c35c3edb", 0xd3}], 0x2, &(0x7f0000000d00)=[{0x104, 0x10f, 0x62d, "f246ab9cbb7bbbaf2bb3ad447e1c330bb6afdb178a8d8321535219030330af751b180870f47cc4040a1779c8a1f977a1f3b8b8b8632c13e801142a83f02135de5da49eee032221b9449c03bc1bb1675afaceb377ac8a096eec1e5dc45a1cad8a460e1161cf3947049ea3bd7683d76c21c82a1444c75870f1bf224248eae46078e160d52e3ad66761d3d8138a02343b6551cae8e2d11feea5f69bcab8c9cf078d262e210b9825bc952a32180b31401e70dcc3d196002ca0b1a1de63b8d03422156e3231ea9449724a95ada45583d2891230e4540510dfd7d36a0820668c352385153ae6887481aad6e88b118795513faeacd44bc9d4cf"}], 0x104}}, {{&(0x7f0000000e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x1, 0x4, {0xa, 0x4e24, 0x28000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="1a75a0431828497a80a8a3c7f3ec156a941db8b16518cb5094a1ae9f94fb63b40ec434", 0x23}, {&(0x7f0000000f00)="04166e35697ea13a620e85f4c1afcf5caf0d1cf46fb95b91a4ee8af6677733c244328140187b", 0x26}], 0x2, &(0x7f0000000f80)=[{0xf0, 0x84, 0x3, "469a41cd7a9babfedc7d038ee32abfeb86c313bb73129bba466b5dfa6ab995ee0322f029018a8478766ef345a9d93c424b80cb7c032ad470fe10a81e61dbd532b9426b01c15644b4f761c787c283d5350d00e331a9f83e441ce707718665e60ee6464dd00cc7b68bf7f500333d2a799c7e5201b3dbcafe868814cdfe4235f943e337da03078f43767e39188285bf1e6faa78abd0b054b36ccbd5f8e7ddf20da88291ea546025708f682e8fd3ef4ad9c9b59298335fd932ff2fcd4f283375a2445a1ae3faffa89f618763634e219487ffc0555ce4131796bfc47310ae11b38737c288"}, {0x2c, 0x119, 0x8, "c4d97412260be882fd8b1c8f7dae1f2f97ef581a825443ffca4cf762bdc54521"}, {0x38, 0x10e, 0x6, "0305f8ab317b3b6d342ed7a420d81590c02501547dbfcaa4019a8da6df67add9f7a541a082380c024a2d02"}, {0x68, 0x110, 0x7ff, "384237059156f604f591aa06c24aa959e2727b2ca8ca9bfb79ffcb6a4a08120aac217c39195f58014de62767bbc697336aca2a3e5db5b9840fec13f4bb46b7928ba843d891dc3086da1855a6638e1e926597f1d9b398125de6"}, {0xf0, 0x101, 0x2, "910ea371e9b2641f3c3c7a58a8be7c2a417b960e8d67f32807cdb9415543e6c643a3634f4a65337a8b7a487bce521bc61a2390f83ce7c65c5e940028c32fd47d443af8de76e361447a9a7b27bcb3e920ab3fa7657621a59130c0c74778117000bd4947301435e0151a6e2b5dec78758f7dc77799619c39c73a8f32587f51dc6a9756465b3a2315b4e7b123d96ed8c0f5094602700b9b63ed0db8d4447c3f838a467d48eed5ea47acf28484a2a46d1a88d2475ed091aff36e2809512dd418cef83e40633eae96334537c84572cca09a249e294260e286c65c955a01707170ac16ab09da"}, {0xcc, 0x115, 0x7f, "618544939d86cb8f10b76eea51a1689ba4f2bce4410a9b2a9420897742e5426e832adedeaf39a03d5c143c70b883215bfb7c432f72d98bed7b3cd5cbfc764e86cafd1da66bde8edbb1b3a3fcce3aecc2c63ec6f4414def539131567cdd1ad1d8560e2e8e5904e773ca73096e6a71967c9fb24372073fa821d55f80e9fbbd1b55ca1ba14447d8b39668797ebc4cf1747835e4d9ab8bb1f85cfd3b4b3d440b07899ef219d9ebc64ba6b5c1b0d2e8b3e2ebe700f2c9fffb272be09c2ce86c34"}, {0x80, 0x84, 0xfff, "38a6ac83923b426b704647fb94b5ec195a858c9b0846a69d5f1878ce6ebc3599b4870f17ce3a28cb7e90f039d92b07fd17920d72bb9eae846e1c40a170a4d24a097433dfd5a0c4f2db3a9792187695d30117443313e3c74cbc58dfba096794df299c82ee07bea89c8937dffd1fc7a517db"}, {0xa0, 0x10d, 0x0, "5f5cd94d2d45f7e3821441c28f33d2de9c79d6d85227c629d597eed6d83db8b56a64b19f770b6806b007ee621629eec0bd1b4952006e32d028a319c13e3fa4e1996e7ff08fac0b2d21e2c2f98b9f0d3a935975d2e7737754ba923b730174df84cdd8ebf850cf289021503cd78e9b9c039626a8583f20a1b95ca16474617ea4d5185026b990481be367739c969325f822b8"}, {0xec, 0x104, 0x7c7, "7772ddfde3bb529ce323a3e6bd8ef5e8d7c3436ecdee9c8c9cc739c0d25c0f4df646e42bcc5cf22be91c9756cfab19a0fa5d720c51accb4786869f9f242feb5c020c2208b0fb0676ee4e9e5c249c6922892b5dd2dfea1a65c37b5cff184c4514cf64f6a332eae10c02b1c37f112a20c6468017a3ef76d4f9d5079af0ff9263f7ce76d0585e18e3ee515b495f0e31bc1bab3be0494261d81748c41bed77a6e63785e93c014abc2b8b5cae0dfe6e15388dc66edfb615ebcf1d87bde1c5df90347761d4785a4eb61fd7c60886110e198ed34d3593fb6744fc3743f2042abf"}], 0x584}}], 0x3, 0x4000800) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000015c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000001640)=0x6) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000001680)={[0x9, 0x800, 0xd0, 0x3, 0xfffffffd, 0x40, 0x7bc, 0x5, 0x3, 0x6, 0x80000001, 0x5, 0x7, 0x8a71, 0x1, 0x80000001, 0x5da, 0x80, 0x2b45064e, 0x7, 0x9, 0xd9, 0x0, 0x1, 0x5, 0xd, 0x7, 0x9, 0x5e8d, 0x1, 0x4, 0xc0000000, 0x5, 0xf6a, 0x10, 0x3, 0x62ddcda7, 0x1, 0xde, 0xff, 0x3, 0x5, 0x318, 0x8001, 0x1, 0x2, 0xa07c3ba, 0x8, 0x100, 0x1, 0x80000001, 0x9, 0xff, 0x8, 0x4, 0xaa7d, 0x4, 0x2, 0x74, 0x5, 0xc8f, 0x8, 0x3, 0xfffffff7, 0x7f, 0x1e, 0x2, 0x35b, 0x10, 0x10001, 0xe, 0x3, 0x6, 0x7f, 0x9, 0x101, 0x0, 0xa02, 0x7f, 0x7fff, 0x1, 0x4, 0x80000000, 0x9, 0x400, 0x5, 0x0, 0x1, 0x0, 0x3, 0x5, 0x80000001, 0x81, 0x7ff, 0x3, 0x9, 0x9, 0x5, 0x6160, 0x5, 0x80000001, 0xfffffffa, 0x6, 0xff, 0x7, 0x0, 0x80000000, 0x7, 0xdd, 0x1, 0x7fffffff, 0x9, 0x200, 0x7, 0x3, 0x4, 0x2, 0x5, 0x1ff, 0x400, 0x401, 0xd9, 0x306, 0x4, 0x2, 0xda, 0x1, 0x0, 0x4, 0x4, 0x1, 0xb, 0x28, 0x5, 0x1, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x6, 0x1, 0xf9, 0x4, 0x1ff, 0x9, 0x7f, 0xffff, 0x800, 0x3, 0x6, 0x9, 0x3, 0x80, 0x1, 0x1, 0x2, 0x0, 0x0, 0x7, 0x0, 0x8, 0x4, 0x5, 0xc, 0x800, 0x2, 0x2, 0x7, 0x80000000, 0x2b, 0x7f, 0xfffffffa, 0x6, 0x2, 0x40, 0xfffffffa, 0x8001, 0x0, 0x1, 0x7, 0xffff, 0x5, 0x6, 0x81, 0x101, 0x1ff, 0x2, 0x9, 0x8001, 0x81, 0xc, 0x1000, 0x595, 0x40, 0x7fffffff, 0x6, 0x7, 0x8, 0x7, 0x7f, 0x4, 0x401, 0xf, 0x5, 0x5, 0x8, 0x3, 0x6, 0xfffffc01, 0x4, 0x5, 0x1, 0x0, 0x5, 0x9, 0x40, 0xb, 0xfffffff7, 0x9, 0xb, 0xa8, 0x4, 0xbcee, 0x4, 0x6, 0x10000, 0x0, 0x7ff, 0x6, 0xd, 0x4, 0x72, 0xc364, 0x7, 0x5, 0x7c95da16, 0xc, 0x80000000, 0x80000000, 0xffff, 0x8, 0x8, 0xffffffc0, 0x6, 0x200, 0x9, 0x3, 0x5, 0x744, 0x9, 0x0, 0x0, 0x4, 0xf, 0x2, 0x7f, 0x9, 0xe, 0x6, 0xbea, 0x1, 0x10000, 0x7f, 0x1, 0x13, 0x7d66, 0x10000, 0x4, 0x2, 0x800, 0xd5f62be, 0x23, 0x2c61, 0x4, 0x10000, 0x3, 0x325, 0x5, 0x4, 0x7, 0x4, 0x0, 0x200, 0x2, 0x94, 0x10000, 0x0, 0x3, 0x1b07000, 0x4, 0x1000, 0x1, 0x0, 0xe, 0x0, 0xcc, 0xffffffff, 0x80000001, 0xf53, 0x9, 0x7, 0x3, 0x7, 0x0, 0x5, 0x558c, 0xe3d, 0x7ff, 0xa9, 0x1000, 0xfff, 0xa6f, 0x4, 0x3, 0x1ff, 0x6, 0x7, 0x800, 0x9, 0xfffffe6f, 0x2, 0x3, 0x7, 0x944, 0x3, 0x84, 0x9, 0x9, 0xba, 0x7, 0x3ff, 0x8, 0x9, 0x7, 0xffffffff, 0x1, 0x4, 0x101, 0x5, 0xbdb, 0xb, 0x7fffffff, 0x8, 0x6, 0x7, 0x5, 0x7, 0xfff, 0x2, 0x6, 0x9, 0x8, 0x8001, 0x4, 0x54706856, 0x8, 0xac1, 0xffffffff, 0x1, 0x10001, 0xd, 0xfffffffa, 0x100, 0x8, 0x1, 0x7, 0x0, 0x200, 0xff, 0x635d, 0x1, 0xc3e, 0x4, 0x9, 0x80, 0x4, 0x1000, 0x8, 0x8, 0x1, 0xfaa, 0xe, 0x0, 0x1ff, 0x8, 0x4, 0x9, 0x5, 0x9, 0x6, 0xffff, 0x9, 0x7, 0x5, 0x8, 0x10001, 0x80000001, 0x80000001, 0x894, 0x800, 0xca3, 0x8, 0x9, 0xffffffff, 0x6, 0x9, 0x1, 0x8e31, 0x6, 0x5, 0x4, 0xffffffff, 0x6, 0xc2fb, 0x0, 0xe, 0x7f, 0xfffffffe, 0x81, 0x6, 0x6, 0x800, 0x9, 0x2, 0xb350, 0x9, 0x2, 0xea2d, 0x1, 0x0, 0x3ff, 0x400, 0x3, 0xfffffffd, 0x7, 0x9, 0x7fff, 0xaa, 0x6, 0xff, 0x7, 0x0, 0x3, 0x886, 0x3, 0x8, 0xad96, 0x0, 0x8, 0xc62, 0x2, 0x0, 0x8001, 0x1ff, 0x9, 0xd, 0x200, 0xe, 0x2, 0x4, 0x101, 0x10, 0xc71, 0x7, 0x7, 0x3ff, 0x7, 0x0, 0x0, 0x6, 0x8, 0x3, 0xf3, 0x8, 0x0, 0x2fa1, 0xa, 0x0, 0x4, 0x8, 0x3, 0x0, 0x4, 0x7, 0xf3d3, 0x8, 0x400, 0x3, 0x3, 0x9, 0x9, 0x7ff, 0xffffffff, 0x9, 0x400, 0x8, 0x1, 0x14c00, 0x80000000, 0x0, 0xdf7, 0x2, 0x1, 0x6, 0x1, 0x8, 0xfffff0b2, 0x0, 0xffffff80, 0xc, 0x0, 0xff, 0x0, 0x1d, 0x54, 0x1, 0x9, 0x8, 0xfffffff9, 0x9, 0x91d1, 0x0, 0x2, 0xffffffff, 0x530e, 0x2, 0x8, 0x0, 0x1, 0x1ff, 0x8, 0x9790, 0x7, 0x8138, 0x81, 0x80, 0x400, 0x101, 0x3, 0x27b0, 0x48, 0x3, 0x10, 0x3, 0x200, 0xa4, 0x4, 0x2400, 0x7f, 0x101, 0x6, 0x5, 0xd, 0x4, 0x3, 0xffffffff, 0x2, 0x1, 0xbf3, 0x7, 0x3ff, 0x1, 0x9adf, 0x7, 0x401, 0x521, 0x80000001, 0x0, 0x9, 0xc5ab, 0x5, 0x5e762178, 0x4, 0xd2e, 0x6, 0x2, 0x10000, 0x4, 0x6, 0x5c9, 0x0, 0x1, 0x7, 0x0, 0x0, 0x22d7, 0xfffffff7, 0x4, 0x4, 0xffffff7f, 0xf96, 0x4, 0x8485, 0xacd, 0x9, 0x6, 0x3, 0x2, 0x6099, 0x8, 0x4, 0x26, 0x4, 0x1fb4, 0x7f, 0x9, 0x400, 0x7, 0x3, 0x12000000, 0x3bff, 0x3ff, 0x1, 0x8, 0xf, 0x259, 0x4fcc, 0x1, 0x10000, 0xc75, 0x8001, 0x4, 0x1, 0x6, 0xb5c, 0x5, 0x5, 0x3, 0x2, 0x7, 0x1, 0xeb, 0x14cf, 0x8, 0x8, 0x5, 0x4, 0x2, 0x6, 0x0, 0x0, 0x80000001, 0x1, 0xbc2d, 0xff, 0x9, 0x6, 0x9, 0x2bce, 0x2, 0x9f, 0x0, 0xfffffff8, 0xfff, 0x35f, 0x3, 0xb8, 0xa8c3, 0xa7, 0x4, 0x7, 0x1e, 0x4, 0xaf, 0x9, 0x1, 0x5, 0x7, 0x80, 0x6, 0x2, 0x7, 0x8, 0x9, 0x77a4bcfe, 0x4, 0x8, 0x7fffffff, 0x7f, 0x8001, 0x44, 0xffffe94e, 0x1, 0x9, 0x7, 0x5, 0xffffffff, 0x7fff, 0x800, 0x4, 0x200, 0x324, 0xd, 0x6, 0x7fff, 0x80, 0x1b1, 0x98a, 0x0, 0x0, 0x8, 0x7, 0x8, 0x7, 0x5, 0x0, 0x80000001, 0x7, 0x7ff, 0x4, 0xd, 0xff, 0x2bc68bef, 0xffffffff, 0x35, 0x8, 0xf8e, 0x7, 0x5, 0x5, 0x3, 0x9, 0x0, 0x3, 0xe8, 0x6, 0x10001, 0x9, 0x81, 0xa24, 0x9, 0x6, 0x400, 0xffffffff, 0x0, 0x4, 0x4, 0x0, 0x0, 0x6, 0x2, 0x2, 0x80000001, 0x7, 0x6, 0x6099, 0x1, 0x101, 0xffffffff, 0x5, 0x8, 0xe, 0x401, 0x6, 0x3, 0x53, 0x7, 0x9e, 0xd, 0x7fffffff, 0x800, 0x2, 0x2, 0x101, 0x800, 0x3, 0x1, 0x5, 0x5, 0x7ff, 0x13b, 0x7, 0x4, 0x2, 0x3, 0x8d6, 0x7, 0x8775, 0x5, 0x26, 0x9, 0xedbe, 0xfffff4be, 0x0, 0xffff9a7d, 0x7, 0xfffffff9, 0x63f, 0x5ef0, 0x0, 0x14b4, 0xade, 0x55e6, 0x8, 0x8, 0x4, 0x8000, 0x3, 0x4, 0x80000000, 0x47, 0x5, 0x1, 0x1, 0x4, 0x2, 0x1, 0xc6bf, 0x10000, 0x9, 0x2, 0x3ff, 0x7c, 0x67c, 0x0, 0x1, 0x10, 0x8, 0x1, 0xe0000000, 0x2, 0xa389, 0x10001, 0x6e, 0x4, 0x9, 0xc0, 0x6c3d, 0x7, 0x6, 0x100, 0x7fffffff, 0x4f0, 0xa9, 0xdbd, 0x6, 0xa, 0xffffffff, 0x2, 0xf41, 0x0, 0x4, 0x10b, 0xdf, 0x6, 0x3, 0x5, 0x8000, 0x6, 0xf5cf, 0x9, 0x0, 0x9, 0x400, 0x5, 0x80, 0x8, 0x1, 0x9, 0x1, 0x5, 0x80, 0x3, 0x4, 0x4, 0x6, 0x7, 0x3, 0x4, 0x92b, 0x7, 0x3, 0x8, 0x6, 0x7, 0xb4, 0x9, 0x4, 0x344, 0x5, 0x8, 0xff, 0x6e08000, 0x5, 0x3, 0x4, 0x7ff, 0x8, 0x7, 0xffffff7f, 0x7, 0x2, 0x5e8e, 0x1, 0x2, 0xd, 0x6, 0x23e, 0x7, 0x0, 0x8, 0x5, 0x100, 0x9b7, 0x9, 0x91, 0x400, 0x3, 0x0, 0xba, 0x2, 0x0, 0x3ff, 0x2, 0x0, 0x5, 0x5, 0x7, 0x7, 0x5, 0x3, 0x2, 0x30400000, 0x8, 0x1c000, 0x1, 0x9, 0x8, 0x0, 0xffffff81, 0xf5f5, 0x7, 0x80000000, 0xfffffffd, 0x8, 0x5f5, 0x1, 0x2, 0x8, 0x2, 0xfffffff1, 0x0, 0x101, 0x3, 0xfffffffd, 0x2, 0x2, 0x101, 0x5aa2dcdf, 0xc1a5, 0x2, 0x7, 0x0, 0x921, 0x7f, 0x8, 0x2, 0x66a, 0x3e9c, 0x101, 0x2, 0x80, 0x1, 0x401, 0x5, 0x6, 0x1000, 0x8, 0x73e6cbfc, 0x6, 0x2, 0x2, 0x4, 0x4, 0x80000000, 0x6, 0x9, 0x2, 0xffffff01, 0x95, 0x1, 0xd283, 0x0, 0x101, 0x4, 0xffff, 0x4, 0x10, 0xfffffffd, 0x9, 0xa, 0x358a0, 0x5, 0x5, 0xf8e3, 0x9, 0xb, 0x4, 0xffffff80, 0x7fffffff, 0x8, 0xfffffffc, 0x6, 0xee, 0x6, 0x3, 0x1, 0x5, 0xc, 0xffff, 0x7, 0xfff, 0x3, 0x6, 0x5, 0x8, 0x9, 0x4, 0x5000000, 0x80000001, 0xff, 0x3]}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000002680)={0x0, @aes128, 0x0, @desc3}) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002840), 0x180, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000002880)={0x5, r2}) r8 = socket$igmp(0x2, 0x3, 0x2) statx(0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = getuid() (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002ac0)={{0x1, 0x1, 0x18, r1, {0x0, 0x0}}, './file0\x00'}) r13 = getuid() (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000004c40)={0x0, 0x0, 0x0}, &(0x7f0000004c80)=0xc) (async) r18 = socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006040)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) (async) stat(&(0x7f0000006080)='./file0\x00', &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r21 = getegid() (async) r22 = signalfd4(r2, &(0x7f0000006140)={[0xaf51, 0x9]}, 0x8, 0x0) (async) r23 = getegid() sendmmsg$unix(r5, &(0x7f000000bd80)=[{{&(0x7f00000026c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002740)="88f38551fcd008c4f0345efffb313adeff46ffc9f06d5e437a3698e395eba5879e1a121679d85f40ea87a8f0ab16b3a13ce55e0e5337fd7be67956940f37527b4ea2980b4d976899e91dbfe8d11f1359e5e0d6ffbe56cffb457e7b97f3f6041a6b4b9dedca8628749e9d839d7313d436250a51b376841c04b997513c67d221b4b8e5ac2fb701620306e005da58c1953b3adfef354a72", 0x96}], 0x1, &(0x7f0000004cc0)=[@rights={{0x18, 0x1, 0x1, [r6, r7, r8]}}, @rights={{0x2c, 0x1, 0x1, [r4, r2, r4, r1, r1, r4, r1, r4]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r9, r10}}}, @cred={{0x18, 0x1, 0x2, {r3, r11, r12}}}, @cred={{0x18, 0x1, 0x2, {r3, r13, r14}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r3, 0xee00, r17}}}], 0xd8, 0x4048014}}, {{&(0x7f0000004dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000004e40)="d61ed0ec42138f015933ff76b3002b7ee24abd11e59d97affc2f590f59a833d9a8fc772b056d922e67eadb0a5285aa01d205cec8ef26845ed56c416a0e4a3be0f0f83f7bad8633aeb020cc423e30b7148504e42c7fe00b44aca8b74eca3b4d745d18cb38f65f5e44035f640839b2bcbb99572a1c4f30d6cb44857af46dfe04881ff5876898963150db4dbf441584771fe6068dea100ae5c8ea9d6ccf679e71b70dec3b3465f26e0a732ff6", 0xab}, {&(0x7f0000004f00)="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", 0x1000}, {&(0x7f0000005f00)="cb6e50aad0a1baf79b7f707f0394b1288dab0405e4599c095cc286a5251e77b862c9e5f926fa6177319547a3dd9d58418077d4813021be2392b1faa85e2ac5834c7ac49144e3c778deb144e1d97ab7ba56a38cf82b7cc089fd81f55965ec6bca4080e330703ad2b9b46ecb98a4c296b1907214a5a9c4a5896126217e32bcc0b3980be98abc94677e7e9d9637b0ca604378075a70470ee749593bf8237f0cc799211787c35393ae13336bc96b40e23b16f404a050bd3f08ca9dccd12d226f3b07250d0840e7e17b5b3648e651e0004f01cc5de87577ef1c", 0xd7}], 0x3, &(0x7f0000006180)=[@rights={{0x24, 0x1, 0x1, [r18, r4, r4, r1, r4, r4]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xee01, r19}}}, @rights={{0x14, 0x1, 0x1, [r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r3, r20, r21}}}, @rights={{0x2c, 0x1, 0x1, [r4, r2, r4, r1, r22, r2, r2, r2]}}], 0x94, 0x4080}}, {{&(0x7f0000006240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006680)=[{&(0x7f00000062c0)="b1ee0747dab848961b42d79cc0332e2770bb00db4d80003b92dad378e5e2049a9d5d248b1892e5c6bbbd6c8d49932e3c2ab8d817f93fbdf5c46f1eadc124d4e6543c11e7c4f7e9133c27ad7e383d488e901c969a5db2af5fe2518beb057a1be2d194ba5662369bbaededf10c6c55d8a30ebdec439a751bd436779e05935bf53d9bfbfff9e7e34af14a7a1aec0c40cd9d99e2712b04cef997699eb0511a5cb4fa8253b629", 0xa4}, {&(0x7f0000006380)="39a17e49bdd5b339ca1859fcc520827cbb20327fb43a7791acb0b78c5cdc2511fc82476b5eca7e", 0x27}, {&(0x7f00000063c0)="1d8f91b8ef2f82719841fe41f3c6de8704452c293c235a3714706313c02f0a3af7a2b9563b99e928d0230a0f8b8ac2d8f371d4b41d871a5d13468d64fb1fd3d66eaebbe0e6a2d253b0a9551a5ec966d73b1b445454da7182a0c11dd120da281aa924bdad3019a91a4f6c80c0b45c9a7c0cf4ee0bfee00eb30478e94a8ef60209c478190cd1ff2afb1ea208b481239a6f906c9766ba9a25d6d26e1bc1c76116c35a598b192543fedba287", 0xaa}, {&(0x7f0000006480)="d94ba6744bb312e90ad233e43a08ee96b827aadd378a87ac6328a3cd6a8dd60a67b632a92b4c8ad58d7eecf6c2c18b2f7534c845584719bfddaf47c4b402f302dd3028440da8999abd9b811a738622a69b12ccdcd7609a76bc33d24bed889d0802bdf1fd56ef3aa4882c78cb171e43bc7185e38770d44e5df84806ea8d611637b36b8f46b55b501935d10764d90554185ea4f6f34f1f112f6faec7974a13195247139de4da2326d113574dd913ebd8180c54f5490d", 0xb5}, {&(0x7f0000006540)="6072215cb5ff5782f4e55f08bfdf7265e7aefa6baa883feae88c769f309f6080b22fafb7074de79f32a8f1110b52d254681b6cd2bb633be3a89456706cb91767f62dffaa4a54fec662fe73e7e5711dffebffbc472fd000c0f104037e8b45f2cfdfce425291fb2dc37d0d63bcc4fb8171bfa04f514ba2ca1f98f7d2c84389fe393570d077e1c83ba61246c9839bba7db57aca9d38d12157cca5ecee1488a71eb56ef3131f2007e217e4370dccd5bf43e46706adec38", 0xb5}, {&(0x7f0000006600)="a59c9f62285bbe333cf1cb281d327af7b6f3d99ab1690e76969ac750a762144f02ccc58b0bd6ddccd556048619147de5c40f5c834f2c44232cf2f533f61492a0e9f1312d769312555385ef8ed854de9ef693593b7636f0fd0f978691bfc9c0878d2edd01c2161a0b4e0f7f", 0x6b}], 0x6, &(0x7f0000006740)=[@rights={{0x20, 0x1, 0x1, [r2, r2, r1, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r3, 0x0, r23}}}, @rights={{0x18, 0x1, 0x1, [r2, r4, r4]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r3, 0x0, 0xee01}}}], 0x90, 0x4048000}}, {{&(0x7f0000006800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006880)="9a81cc5107ad1b104f24d91bc90fc593e946168113f2d50073f31c75935d122f4fdd56745923cbd3726ea3b3cf0885152c9663a78d0a5ebe", 0x38}, {&(0x7f00000068c0)="edf1c3f2bd4ccb7595de0100eecd593e", 0x10}, {&(0x7f0000006900)="8f766e64f9d583c01f9e69be4d85687717f889e5a471f9b107da6ee9d20d4297cd18f5038d4b", 0x26}, {&(0x7f0000006940)="7bbcccb697dd2ea726349c088d7a5595e3cb830f77f4f877103ac65eb68c939069f29b30", 0x24}, {&(0x7f0000006980)="2cb5cbbf709d9cf5a524c9361ccaec7eba6a71f7c9f5694955d11aa8a24bd940d8ce2b485c5c20b9442d9d27f4a08854adec66bb829fc955254e7435f602d4ec5f7fa3b6c316309daa680ade6e3e997a535ae08e7b75917eee539f50065ec1f327ce090803ec76dd84ffc330fd3d18e4dbe4748c4cf56e3a2713c743fd74cc321d3b2a830e6629760725023fb8a8816a3adf04a6", 0x94}, {&(0x7f0000006a40)="6da1b09781cb2603fb4ca9411e8c979da29cfea8814c3e6484d54711d2bb046d33df9fe460b3793f13168d8605eb8b944c80a72c979c4f477e9123479965c1e7b4c5d1882f69ba812754b6b40546849045502beec5e25663c9671c4ef0681eb550169a2c4b52812cb4066ae8b3931e7da80769576e44c9621836635ed10e98658c7a01803747143784c18e4804cb", 0x8e}, {&(0x7f0000006b00)="d27997a1797e21ab0c596ae6084eb520dd32e7a5af32003198464b72fdc1316ce5c20b4ad6191089cc1f33f823e8bb9474db80563fa806330b7ce18366c89da01c89922e64", 0x45}], 0x7, &(0x7f0000009000)=[@cred={{0x18, 0x1, 0x2, {r3}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1, r2]}}], 0x74, 0x4c000}}, {{&(0x7f0000009080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009240)=[{&(0x7f0000009100)="c18f454d3856acc9d241f6727383a34b03a9b6f61da32b7742d20ca9298a54c2d6d75e3c085cae3d3f98dfa496bfdd60b93d119d202b26c19d7c74ab78d011f2713631357a3e8b8ded8a173870fcd5aab37fdb143afe", 0x56}, {&(0x7f0000009180)="7ce2193b3d2f0466114c3648501bb417febf251e1327632ce5d7146be9053080bc64c2d0a9d8d81dc80baf872ef331bca656032dd34dd730826259c088b937f930fc16d392fed89d0b72c13248afa640d183e103b074858f503452f18e9ae738b288e27a9c2c86631fba0b52e6340fb07e9fd8af4b762aecab61933d1758ef9d9886a4c7f37a00552345a7e45344be48b07bba6d1c6360437408c4f43a2bd39d585aaec42abc103fef17550cc6b1ffba50bcd75adfeadc81", 0xb8}], 0x2, &(0x7f00000096c0)=[@rights={{0x18, 0x1, 0x1, [r2, r1, r4]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0xbc, 0x20008080}}, {{&(0x7f0000009780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a840)=[{&(0x7f0000009800)="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", 0x1000}, {&(0x7f000000a800)}], 0x2, 0x0, 0x0, 0x4044800}}, {{&(0x7f000000a880)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000ab00)=[{&(0x7f000000a900)="f075adc083f8359e1d0268d8dc9b97c3d2cb740770bbb9ffb860723520dbef6e45d3073989b3", 0x26}, {&(0x7f000000a940)="22b1247afa128b9909f0a4f0c99c3fc1cb8ff2a9ac496f972d2cb0a5cae2e9bb3cff6fb2b6949124c2f76406e7e67ffb918d22c92b7cf23acfba4def494a63a186a3c8366307cd106460e8c37ace08a82d53608291c640394a4ded9b52a2bcab7f1c4fdce207a587eeba1a80d66ee8d3e68c0f75550a8ecd756bc18f804c3f8ef7c22f901fd218e87d463c8ca53b29f0d606483d897d", 0x96}, {&(0x7f000000aa00)="4977be50925b260f28b822a352c20f07015e3bcbf7a9629ead5c421107c6ed815a86649371d40211b57e19f2abace3df8cb07e6a57aa8f286a54d6e0d825113b2fd461aefb4fa3", 0x47}, {&(0x7f000000aa80)="0d83ff29359648d511b240a123c712d060a6cd19a5a73e81256073ea1d4d95b0111577389ea3bc13839ea5b81c81ad5087cf6cf3c0d2fc4e5d82fc976c4b6de52519088bc66c433322a245d7b2a6ca0b1e67730db4436c5780b87e066e84cf9d2e648f05cb0c3b9838f141d3b783a6", 0x6f}], 0x4, &(0x7f000000ab40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r2, r1, r2, 0xffffffffffffffff, r1, r2]}}], 0x30, 0x20000010}}, {{0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f000000ab80)="321ab9391c261247", 0x8}], 0x1, &(0x7f000000ac40)=[@cred={{0x18, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r2, r1, r2, r4, 0xffffffffffffffff, r4, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r2, r1]}}], 0x64, 0x4000}}, {{&(0x7f000000acc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000bd40)=[{&(0x7f000000ad40)="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", 0x1000}], 0x1, 0x0, 0x0, 0x44894}}], 0x9, 0x2) 219.845434ms ago: executing program 3 (id=545): openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='i2c_read\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000200)=[{0x67, 0xa000, 0x0, 0x0}, {0x4, 0x0, 0x0, 0x0}], 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1080441, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB="00000000000000c2506ce81b41fab90000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40}]) r6 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="1f0000000a00000000000000fe880000000000000000000000000501000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fc0000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000668ab867d4dcb5470b62a5b752559b703bd0f04ea6e1a0428db1ae30f7249b3c1f61fef16cfc2408476b463c0d288102012498f2fe9d30dc4135f39c254122e651139ecaa51b42cf7e77291039b65564797e2b1e85d2cde344544c1db2fc299fa22144846d3d"], 0x10c) epoll_create(0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r6, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000040)=0x1) 106.438357ms ago: executing program 1 (id=546): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0xfff5, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan0\x00'}]}}]}, 0x48}}, 0x0) 0s ago: executing program 1 (id=547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0096616, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) write$sysctl(r4, &(0x7f0000000180)='7\x00', 0x2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x80085665, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000b00000008000300", @ANYRESOCT=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.365938][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.369014][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.371966][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.375786][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.378248][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.380679][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.383160][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.386133][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.388290][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.390454][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.393372][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.396041][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.398347][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.400620][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.403614][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.406286][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.408774][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.411400][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.413622][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.415794][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.418057][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.420260][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.422591][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.424832][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.427025][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.427601][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 69.429195][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.433594][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.436035][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.438708][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.441734][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 69.442493][ T1850] usb 5-1: USB disconnect, device number 6 [ 69.471040][ T980] usb 8-1: device descriptor read/64, error -71 [ 69.591190][ T980] usb usb8-port1: attempt power cycle [ 69.871403][ T1850] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 69.931069][ T980] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.011454][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.017769][ T39] audit: type=1326 audit(1728817662.973:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.026422][ T39] audit: type=1326 audit(1728817662.973:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.032743][ T1850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.034393][ T39] audit: type=1326 audit(1728817662.973:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.036557][ T1850] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.036585][ T1850] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 70.043801][ T39] audit: type=1326 audit(1728817662.973:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.056172][ T39] audit: type=1326 audit(1728817662.973:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.061578][ T1850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.062136][ T39] audit: type=1326 audit(1728817662.973:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.069690][ T39] audit: type=1326 audit(1728817662.973:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.070361][ T1850] usb 5-1: config 0 descriptor?? [ 70.077181][ T39] audit: type=1326 audit(1728817662.973:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.084046][ T1850] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 70.085807][ T1850] dvb-usb: bulk message failed: -22 (3/0) [ 70.087949][ T39] audit: type=1326 audit(1728817662.973:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.094537][ T39] audit: type=1326 audit(1728817662.973:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 70.104096][ T1850] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 70.106676][ T1850] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 70.108578][ T1850] usb 5-1: media controller created [ 70.110385][ T1850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.116055][ T1850] dvb-usb: bulk message failed: -22 (6/0) [ 70.117672][ T1850] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 70.121440][ T1850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input9 [ 70.125450][ T1850] dvb-usb: schedule remote query interval to 150 msecs. [ 70.127357][ T1850] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 70.141098][ T980] usb 8-1: device not accepting address 5, error -71 [ 70.252340][ T45] wlan1: Trigger new scan to find an IBSS to join [ 70.282793][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 70.285056][ T25] dvb-usb: error while querying for an remote control event. [ 70.290212][ T5380] usb 5-1: USB disconnect, device number 7 [ 70.313962][ T5380] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 70.691085][ T30] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 70.741174][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 70.817110][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.821089][ T30] usb 6-1: device descriptor read/64, error -71 [ 70.835117][ T6133] FAULT_INJECTION: forcing a failure. [ 70.835117][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 70.839226][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.0.212 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 70.843155][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.847098][ T6133] Call Trace: [ 70.848349][ T6133] [ 70.849430][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 70.851198][ T6133] should_fail_ex+0x497/0x5b0 [ 70.852941][ T6133] ? fs_reclaim_acquire+0xae/0x150 [ 70.854817][ T6133] should_failslab+0xc2/0x120 [ 70.856535][ T6133] __kmalloc_node_noprof+0xd1/0x440 [ 70.858449][ T6133] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 70.860557][ T6133] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 70.862226][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 70.863545][ T6133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.865189][ T6133] ? __might_fault+0xe3/0x190 [ 70.866814][ T6133] ? _copy_to_user+0x46/0xc0 [ 70.868424][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 70.870197][ T6133] vmalloc_noprof+0x6b/0x90 [ 70.871775][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 70.873563][ T6133] bpf_prog_calc_tag+0x100/0x780 [ 70.875326][ T6133] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 70.876801][ T6133] ? __pfx_add_subprog+0x10/0x10 [ 70.878022][ T6133] ? add_subprog_and_kfunc+0x5e5/0x1b80 [ 70.879726][ T6133] resolve_pseudo_ldimm64+0xcd/0x2950 [ 70.881596][ T6133] ? __pfx_add_subprog_and_kfunc+0x10/0x10 [ 70.883613][ T6133] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 70.885673][ T6133] ? trace_kmalloc+0x2d/0xe0 [ 70.887288][ T6133] ? __kmalloc_node_noprof+0x22f/0x440 [ 70.889168][ T6133] ? __pfx_bpf_lsm_ptrace_traceme+0x1/0x10 [ 70.891047][ T6133] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 70.892810][ T6133] ? check_subprogs+0x57c/0x7d0 [ 70.894439][ T6133] bpf_check+0x72cb/0xc7c0 [ 70.895910][ T6133] ? __pfx_bpf_check+0x10/0x10 [ 70.897459][ T6133] ? find_held_lock+0x2d/0x110 [ 70.899023][ T6133] ? ktime_get_with_offset+0x13a/0x240 [ 70.900799][ T6133] ? trace_lock_acquire+0x14a/0x1d0 [ 70.902507][ T6133] ? ktime_get_with_offset+0x13a/0x240 [ 70.904240][ T6133] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 70.906132][ T6133] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.907893][ T6133] ? bpf_obj_name_cpy+0x156/0x1b0 [ 70.909604][ T6133] bpf_prog_load+0xe3f/0x2670 [ 70.911193][ T6133] ? __pfx_bpf_prog_load+0x10/0x10 [ 70.912912][ T6133] ? find_held_lock+0x2d/0x110 [ 70.914551][ T6133] __sys_bpf+0x4c8c/0x5780 [ 70.916054][ T6133] ? ksys_write+0x21e/0x260 [ 70.917600][ T6133] ? __pfx___sys_bpf+0x10/0x10 [ 70.919178][ T6133] ? vfs_write+0x14d/0x1140 [ 70.920726][ T6133] ? __mutex_unlock_slowpath+0x164/0x650 [ 70.922650][ T6133] ? fput+0x30/0x390 [ 70.923996][ T6133] ? ksys_write+0x1ad/0x260 [ 70.925564][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 70.927211][ T6133] __ia32_sys_bpf+0x76/0xe0 [ 70.928727][ T6133] __do_fast_syscall_32+0x73/0x120 [ 70.930454][ T6133] do_fast_syscall_32+0x32/0x80 [ 70.932050][ T6133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.934032][ T6133] RIP: 0023:0xf748e579 [ 70.935338][ T6133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.941380][ T6133] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 70.944033][ T6133] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 70.946593][ T6133] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000000 [ 70.949132][ T6133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.951699][ T6133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.954321][ T6133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.956956][ T6133] [ 70.958170][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.972901][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.975798][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.979158][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.981464][ T6133] syz.0.212: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 70.985499][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.986896][ T6133] CPU: 2 UID: 0 PID: 6133 Comm: syz.0.212 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 70.994569][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.997359][ T6135] overlay: Unknown parameter '/' [ 70.997430][ T6133] Call Trace: [ 70.997437][ T6133] [ 70.997443][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 71.001949][ T6133] warn_alloc+0x24d/0x3a0 [ 71.003492][ T6133] ? __pfx_warn_alloc+0x10/0x10 [ 71.005288][ T6133] ? dump_stack_lvl+0x197/0x1f0 [ 71.006697][ T6133] ? dump_stack_lvl+0x1a1/0x1f0 [ 71.007950][ T6133] ? should_fail_ex+0x2de/0x5b0 [ 71.009194][ T6133] ? rcu_is_watching+0x12/0xc0 [ 71.010646][ T6133] ? trace_kmalloc+0x2d/0xe0 [ 71.012293][ T6133] ? __kmalloc_node_noprof+0x22f/0x440 [ 71.014217][ T6133] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 71.016353][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 71.018179][ T6133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 71.019947][ T6133] ? __might_fault+0xe3/0x190 [ 71.021264][ T6133] ? _copy_to_user+0x46/0xc0 [ 71.022790][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 71.024580][ T6133] vmalloc_noprof+0x6b/0x90 [ 71.026171][ T6133] ? bpf_prog_calc_tag+0x100/0x780 [ 71.027949][ T6133] bpf_prog_calc_tag+0x100/0x780 [ 71.029670][ T6133] ? __pfx_bpf_prog_calc_tag+0x10/0x10 [ 71.031432][ T6133] ? __pfx_add_subprog+0x10/0x10 [ 71.032635][ T6133] ? add_subprog_and_kfunc+0x5e5/0x1b80 [ 71.033968][ T6133] resolve_pseudo_ldimm64+0xcd/0x2950 [ 71.035321][ T6133] ? __pfx_add_subprog_and_kfunc+0x10/0x10 [ 71.036913][ T6133] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 71.038424][ T6133] ? trace_kmalloc+0x2d/0xe0 [ 71.039576][ T6133] ? __kmalloc_node_noprof+0x22f/0x440 [ 71.040925][ T6133] ? __pfx_bpf_lsm_ptrace_traceme+0x1/0x10 [ 71.042433][ T6133] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 71.044315][ T6133] ? check_subprogs+0x57c/0x7d0 [ 71.045957][ T6133] bpf_check+0x72cb/0xc7c0 [ 71.047241][ T6133] ? __pfx_bpf_check+0x10/0x10 [ 71.048480][ T6133] ? find_held_lock+0x2d/0x110 [ 71.049745][ T6133] ? ktime_get_with_offset+0x13a/0x240 [ 71.051222][ T6133] ? trace_lock_acquire+0x14a/0x1d0 [ 71.052685][ T6133] ? ktime_get_with_offset+0x13a/0x240 [ 71.054125][ T6133] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 71.055610][ T6133] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.056991][ T6133] ? bpf_obj_name_cpy+0x156/0x1b0 [ 71.058312][ T6133] bpf_prog_load+0xe3f/0x2670 [ 71.059673][ T6133] ? __pfx_bpf_prog_load+0x10/0x10 [ 71.060028][ T6137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.061100][ T6133] ? find_held_lock+0x2d/0x110 [ 71.061125][ T6133] __sys_bpf+0x4c8c/0x5780 [ 71.061138][ T6133] ? ksys_write+0x21e/0x260 [ 71.061150][ T6133] ? __pfx___sys_bpf+0x10/0x10 [ 71.061162][ T6133] ? vfs_write+0x14d/0x1140 [ 71.061174][ T6133] ? __mutex_unlock_slowpath+0x164/0x650 [ 71.061193][ T6133] ? fput+0x30/0x390 [ 71.061206][ T6133] ? ksys_write+0x1ad/0x260 [ 71.061215][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 71.061227][ T6133] __ia32_sys_bpf+0x76/0xe0 [ 71.061240][ T6133] __do_fast_syscall_32+0x73/0x120 [ 71.061254][ T6133] do_fast_syscall_32+0x32/0x80 [ 71.061267][ T6133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.061281][ T6133] RIP: 0023:0xf748e579 [ 71.061290][ T6133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.061299][ T6133] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 71.061310][ T6133] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 71.061316][ T6133] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000000 [ 71.061322][ T6133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.061328][ T6133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.061334][ T6133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.065450][ T30] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 71.066457][ T6133] [ 71.068992][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.071702][ T6133] Mem-Info: [ 71.073302][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.074482][ T6133] active_anon:2020 inactive_anon:76 isolated_anon:0 [ 71.074482][ T6133] active_file:11862 inactive_file:30664 isolated_file:0 [ 71.074482][ T6133] unevictable:768 dirty:30 writeback:0 [ 71.074482][ T6133] slab_reclaimable:5174 slab_unreclaimable:51654 [ 71.074482][ T6133] mapped:17129 shmem:919 pagetables:660 [ 71.074482][ T6133] sec_pagetables:314 bounce:0 [ 71.074482][ T6133] kernel_misc_reclaimable:0 [ 71.074482][ T6133] free:98384 free_pcp:3211 free_cma:0 [ 71.075790][ T35] usb 7-1: Product: syz [ 71.076975][ T6133] Node 0 active_anon:4kB inactive_anon:288kB active_file:1908kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8056kB dirty:52kB writeback:0kB shmem:1592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9424kB pagetables:1640kB sec_pagetables:1224kB all_unreclaimable? no [ 71.078590][ T35] usb 7-1: Manufacturer: syz [ 71.079836][ T6133] Node 1 active_anon:8076kB inactive_anon:16kB active_file:45540kB inactive_file:122524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60460kB dirty:68kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1632kB pagetables:1000kB sec_pagetables:32kB all_unreclaimable? no [ 71.122910][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 71.126555][ T6133] Node 0 [ 71.136564][ T35] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 71.137930][ T6133] DMA free:944kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:8kB free_cma:0kB [ 71.159649][ T6133] lowmem_reserve[]: 0 273 0 0 0 [ 71.161306][ T6133] Node 0 DMA32 free:21176kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:288kB active_file:0kB inactive_file:2352kB unevictable:1536kB writepending:48kB present:1032196kB managed:306280kB mlocked:0kB bounce:0kB free_pcp:760kB local_pcp:224kB free_cma:0kB [ 71.169474][ T6133] lowmem_reserve[]: 0 0 0 0 0 [ 71.170977][ T6133] Node 1 DMA32 free:371556kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:8076kB inactive_anon:16kB active_file:45540kB inactive_file:122524kB unevictable:1536kB writepending:68kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:12148kB local_pcp:4952kB free_cma:0kB [ 71.178760][ T6133] lowmem_reserve[]: 0 0 0 0 0 [ 71.180022][ T6133] Node 0 DMA: 42*4kB (U) 41*8kB (U) 29*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 960kB [ 71.183377][ T6133] Node 0 DMA32: 177*4kB (UMEH) 89*8kB (UMEH) 148*16kB (UMH) 141*32kB (MEH) 88*64kB (UMEH) 36*128kB (UME) 10*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21100kB [ 71.187646][ T6133] Node 1 DMA32: 48*4kB (UE) 496*8kB (UME) 393*16kB (UME) 334*32kB (UME) 356*64kB (UME) 73*128kB (UME) 33*256kB (UM) 13*512kB (UME) 8*1024kB (UME) 6*2048kB (UME) 69*4096kB (UM) = 371472kB [ 71.192601][ T6133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.195046][ T6133] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.197432][ T6133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.200503][ T6133] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.202934][ T6133] 44187 total pagecache pages [ 71.204149][ T6133] 741 pages in swap cache [ 71.205294][ T6133] Free swap = 112320kB [ 71.206374][ T6133] Total swap = 124996kB [ 71.207693][ T6133] 524155 pages RAM [ 71.209013][ T6133] 0 pages HighMem/MovableOnly [ 71.210484][ T6133] 206682 pages reserved [ 71.211743][ T6133] 0 pages cma reserved [ 71.221135][ T30] usb 6-1: device descriptor read/64, error -71 [ 71.242334][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.276781][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 71.279100][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 71.309162][ T6143] syz.0.216: attempt to access beyond end of device [ 71.309162][ T6143] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 71.313234][ T6143] EXT4-fs (nbd0): unable to read superblock [ 71.341206][ T30] usb usb6-port1: attempt power cycle [ 71.389750][ T25] usb 7-1: USB disconnect, device number 11 [ 71.711014][ T30] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 71.731428][ T30] usb 6-1: device descriptor read/8, error -71 [ 71.981095][ T30] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 72.012601][ T30] usb 6-1: device descriptor read/8, error -71 [ 72.131642][ T30] usb usb6-port1: unable to enumerate USB device [ 72.147724][ T6151] netlink: 3 bytes leftover after parsing attributes in process `syz.3.219'. [ 72.481097][ T980] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 72.575176][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 72.633203][ T980] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.636875][ T980] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.640485][ T980] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 72.644294][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.649002][ T980] usb 8-1: config 0 descriptor?? [ 72.653552][ T980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 72.656184][ T980] dvb-usb: bulk message failed: -22 (3/0) [ 72.659963][ T980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 72.663673][ T980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 72.666830][ T980] usb 8-1: media controller created [ 72.672336][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.678708][ T980] dvb-usb: bulk message failed: -22 (6/0) [ 72.680857][ T980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 72.685082][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input10 [ 72.693864][ T980] dvb-usb: schedule remote query interval to 150 msecs. [ 72.696371][ T980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 72.856793][ T25] usb 8-1: USB disconnect, device number 7 [ 72.872866][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 72.937495][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 72.939864][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 73.221332][ T11] wlan1: Trigger new scan to find an IBSS to join [ 73.629923][ T6196] FAULT_INJECTION: forcing a failure. [ 73.629923][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 73.637775][ T6196] CPU: 3 UID: 0 PID: 6196 Comm: syz.3.233 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 73.641510][ T6196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.645541][ T6196] Call Trace: [ 73.646766][ T6196] [ 73.647843][ T6196] dump_stack_lvl+0x16c/0x1f0 [ 73.649566][ T6196] should_fail_ex+0x497/0x5b0 [ 73.651291][ T6196] ? fs_reclaim_acquire+0xae/0x150 [ 73.653162][ T6196] should_failslab+0xc2/0x120 [ 73.654875][ T6196] kmem_cache_alloc_node_noprof+0x71/0x310 [ 73.657000][ T6196] ? __alloc_skb+0x2b3/0x380 [ 73.658691][ T6196] __alloc_skb+0x2b3/0x380 [ 73.660312][ T6196] ? __pfx___alloc_skb+0x10/0x10 [ 73.662139][ T6196] ? lock_acquire+0x2f/0xb0 [ 73.663807][ T6196] netlink_alloc_large_skb+0x69/0x130 [ 73.665788][ T6196] netlink_sendmsg+0x689/0xd70 [ 73.667531][ T6196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.669443][ T6196] ? lock_acquire+0x2f/0xb0 [ 73.671090][ T6196] ____sys_sendmsg+0x9ae/0xb40 [ 73.672802][ T6196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.674741][ T6196] ? get_compat_msghdr+0x11b/0x170 [ 73.676587][ T6196] ? __pfx___lock_acquire+0x10/0x10 [ 73.678463][ T6196] ___sys_sendmsg+0x135/0x1e0 [ 73.680168][ T6196] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.681783][ T6196] ? lock_acquire+0x2f/0xb0 [ 73.683160][ T6196] ? __fget_files+0x40/0x3f0 [ 73.684852][ T6196] ? fdget+0x176/0x210 [ 73.686312][ T6196] __sys_sendmsg+0x117/0x1f0 [ 73.688000][ T6196] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.689849][ T6196] ? bpf_trace_run2+0x2a6/0x590 [ 73.691675][ T6196] ? __pfx_bpf_trace_run2+0x10/0x10 [ 73.693545][ T6196] ? rcu_is_watching+0x12/0xc0 [ 73.695266][ T6196] __do_fast_syscall_32+0x73/0x120 [ 73.697121][ T6196] do_fast_syscall_32+0x32/0x80 [ 73.698859][ T6196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.701087][ T6196] RIP: 0023:0xf7f46579 [ 73.701104][ T6196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.701121][ T6196] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 73.712465][ T6196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 73.715297][ T6196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.718085][ T6196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.720881][ T6196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.723693][ T6196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.726514][ T6196] [ 73.761339][ T70] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 73.941097][ T70] usb 7-1: Using ep0 maxpacket: 16 [ 73.944971][ T70] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 73.948622][ T70] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 73.952141][ T70] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 73.955191][ T70] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.963263][ T70] usb 7-1: config 0 descriptor?? [ 74.009232][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.045005][ T65] Bluetooth: hci3: Malformed LE Event: 0x02 [ 74.174016][ T6179] netlink: 264 bytes leftover after parsing attributes in process `syz.2.230'. [ 74.241437][ T67] wlan1: Creating new IBSS network, BSSID 62:4b:31:9b:f9:b9 [ 74.434532][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 74.451039][ T980] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 74.486090][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.489122][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.494306][ T70] hid (null): unknown global tag 0xc [ 74.496300][ T70] hid (null): unknown global tag 0xe [ 74.509002][ T70] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 74.512646][ T70] hid-generic 0003:0158:0100.0002: unexpected long global item [ 74.524357][ T70] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 74.633534][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.636732][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 74.639333][ T980] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 74.642820][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.648113][ T980] usb 6-1: config 0 descriptor?? [ 74.652769][ T980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 74.655059][ T980] dvb-usb: bulk message failed: -22 (3/0) [ 74.662569][ T980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 74.666649][ T980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 74.668575][ T980] usb 6-1: media controller created [ 74.671050][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.677874][ T980] dvb-usb: bulk message failed: -22 (6/0) [ 74.679745][ T980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 74.683337][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 74.687574][ T980] dvb-usb: schedule remote query interval to 150 msecs. [ 74.689891][ T980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.699120][ T980] usb 7-1: USB disconnect, device number 12 [ 74.841081][ T5380] dvb-usb: bulk message failed: -22 (1/0) [ 74.843193][ T5380] dvb-usb: error while querying for an remote control event. [ 74.855156][ T9] usb 6-1: USB disconnect, device number 10 [ 74.869891][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 75.491010][ T1850] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 75.629335][ T6229] overlay: Unknown parameter '/' [ 75.650014][ T6229] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 75.653091][ T6229] hsr0: entered promiscuous mode [ 75.656312][ T1850] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.659270][ T1850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.663085][ T1850] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.667106][ T6229] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.671210][ T1850] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.677705][ T1850] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.680506][ T1850] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.681152][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 75.683106][ T1850] usb 7-1: Product: syz [ 75.686817][ T1850] usb 7-1: Manufacturer: syz [ 75.692976][ T1850] cdc_wdm 7-1:1.0: skipping garbage [ 75.694673][ T1850] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 75.725783][ T6229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.831186][ T9] usb 6-1: device descriptor read/64, error -71 [ 75.956296][ T58] cfg80211: failed to load regulatory.db [ 75.958228][ T5376] usb 7-1: USB disconnect, device number 13 [ 76.081364][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 76.211035][ T9] usb 6-1: device descriptor read/64, error -71 [ 76.321317][ T9] usb usb6-port1: attempt power cycle [ 76.590731][ T6236] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.595665][ T6236] binder: 6234:6236 ioctl c0306201 20000400 returned -14 [ 76.681021][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 76.701424][ T9] usb 6-1: device descriptor read/8, error -71 [ 76.961511][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 76.982841][ T9] usb 6-1: device descriptor read/8, error -71 [ 77.091990][ T9] usb usb6-port1: unable to enumerate USB device [ 77.554963][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 78.891168][ T58] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 79.066239][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.074246][ T58] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.077417][ T58] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 79.080503][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.123973][ T58] usb 6-1: config 0 descriptor?? [ 79.136735][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 79.138619][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 79.145491][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 79.157375][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 79.256659][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 79.259050][ T58] usb 6-1: media controller created [ 79.270508][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.287123][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 79.288818][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 79.305610][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input12 [ 79.377818][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 79.386032][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 79.392966][ T6270] loop6: detected capacity change from 0 to 524287999 [ 79.402681][ C1] blk_print_req_error: 7 callbacks suppressed [ 79.402695][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.407799][ C1] buffer_io_error: 7 callbacks suppressed [ 79.407810][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.413927][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.414664][ T58] usb 6-1: USB disconnect, device number 15 [ 79.416841][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.417864][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.424103][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.427594][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.430561][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.433390][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.436554][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.439391][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.442412][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.448864][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.451431][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.461254][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.463616][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.465648][ T6270] ldm_validate_partition_table(): Disk read failed. [ 79.468869][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.471544][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.475514][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.478708][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.487024][ T6270] Dev loop6: unable to read RDB block 0 [ 79.495048][ T6270] loop6: unable to read partition table [ 79.497457][ T6270] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 79.612360][ T58] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 79.761784][ T6273] FAULT_INJECTION: forcing a failure. [ 79.761784][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 79.765356][ T6273] CPU: 3 UID: 0 PID: 6273 Comm: syz.0.250 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 79.767993][ T6273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.770728][ T6273] Call Trace: [ 79.771687][ T6273] [ 79.772456][ T6273] dump_stack_lvl+0x16c/0x1f0 [ 79.773696][ T6273] should_fail_ex+0x497/0x5b0 [ 79.774894][ T6273] should_failslab+0xc2/0x120 [ 79.776130][ T6273] __kmalloc_noprof+0xcb/0x410 [ 79.777385][ T6273] io_cqring_event_overflow+0xcb/0x6f0 [ 79.778803][ T6273] __io_submit_flush_completions+0x1069/0x20e0 [ 79.780384][ T6273] io_submit_sqes+0xa73/0x2530 [ 79.781762][ T6273] __do_sys_io_uring_enter+0xc0f/0x1170 [ 79.783698][ T6273] ? __fget_files+0x244/0x3f0 [ 79.785093][ T6273] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 79.786616][ T6273] ? fput+0x30/0x390 [ 79.787579][ T6273] ? ksys_write+0x1ad/0x260 [ 79.788723][ T6273] ? __pfx_ksys_write+0x10/0x10 [ 79.789958][ T6273] __do_fast_syscall_32+0x73/0x120 [ 79.791284][ T6273] do_fast_syscall_32+0x32/0x80 [ 79.792631][ T6273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.794280][ T6273] RIP: 0023:0xf748e579 [ 79.795327][ T6273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.800294][ T6273] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 79.802924][ T6273] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000184c [ 79.805775][ T6273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.807997][ T6273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.810104][ T6273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.812273][ T6273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.814337][ T6273] [ 79.875609][ T6275] FAULT_INJECTION: forcing a failure. [ 79.875609][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.879181][ T6275] CPU: 3 UID: 0 PID: 6275 Comm: syz.0.251 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 79.881925][ T6275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.884635][ T6275] Call Trace: [ 79.885521][ T6275] [ 79.886284][ T6275] dump_stack_lvl+0x16c/0x1f0 [ 79.887458][ T6275] should_fail_ex+0x497/0x5b0 [ 79.888677][ T6275] _copy_to_user+0x30/0xc0 [ 79.889832][ T6275] simple_read_from_buffer+0xd0/0x160 [ 79.891208][ T6275] proc_fail_nth_read+0x198/0x270 [ 79.892988][ T6275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.894799][ T6275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.896215][ T6275] vfs_read+0x1ce/0xbd0 [ 79.897297][ T6275] ? __fget_files+0x23a/0x3f0 [ 79.898508][ T6275] ? fdget_pos+0x24c/0x360 [ 79.899656][ T6275] ? __pfx_lock_release+0x10/0x10 [ 79.900965][ T6275] ? trace_lock_acquire+0x14a/0x1d0 [ 79.902332][ T6275] ? __pfx_vfs_read+0x10/0x10 [ 79.903543][ T6275] ? __pfx___mutex_lock+0x10/0x10 [ 79.904867][ T6275] ? __fget_files+0x244/0x3f0 [ 79.906129][ T6275] ksys_read+0x12f/0x260 [ 79.907239][ T6275] ? __pfx_ksys_read+0x10/0x10 [ 79.908451][ T6275] __do_fast_syscall_32+0x73/0x120 [ 79.909745][ T6275] do_fast_syscall_32+0x32/0x80 [ 79.910976][ T6275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.913105][ T6275] RIP: 0023:0xf748e579 [ 79.914496][ T6275] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.919408][ T6275] RSP: 002b:00000000f57765a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.921619][ T6275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5776620 [ 79.923696][ T6275] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 79.925686][ T6275] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 79.927599][ T6275] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 79.929536][ T6275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.931578][ T6275] [ 80.074247][ T6283] netlink: 'syz.3.254': attribute type 11 has an invalid length. [ 80.077115][ T6283] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.254'. [ 80.160294][ T6291] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 80.168142][ T6291] CIFS: Unable to determine destination address [ 80.242784][ T6295] Invalid ELF header type: 0 != 1 [ 80.322126][ T58] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 80.351281][ T6299] netlink: 'syz.3.260': attribute type 3 has an invalid length. [ 80.374784][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 80.374795][ T39] audit: type=1326 audit(1728817673.341:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.258" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 80.486898][ T6303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.503623][ T58] usb 6-1: no configurations [ 80.505138][ T58] usb 6-1: can't read configurations, error -22 [ 80.514550][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 80.594547][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 80.651031][ T58] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 80.673389][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 80.773988][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 80.778575][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 80.789760][ T6321] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 80.801478][ T58] usb 6-1: no configurations [ 80.802594][ T58] usb 6-1: can't read configurations, error -22 [ 80.804212][ T58] usb usb6-port1: attempt power cycle [ 80.842901][ T6323] [U] : [ 80.843718][ T6323] [U] [ 80.844382][ T6323] [U] [ 80.845069][ T6323] [U] [ 80.845724][ T6323] [U] [ 80.846377][ T6323] [U] [ 80.847037][ T6323] [U] [ 80.847691][ T6323] [U] [ 80.848444][ T6323] [U] [ 80.849118][ T6323] [U] [ 80.849767][ T6323] [U] [ 80.850426][ T6323] [U] [ 80.851099][ T6323] [U] [ 80.851753][ T6323] [U] [ 80.852410][ T6323] [U] [ 80.853086][ T6323] [U] [ 80.856314][ T6323] [U] [ 80.857013][ T6323] [U] [ 80.857649][ T6323] [U] [ 80.858299][ T6323] [U] [ 80.858963][ T6323] [U] [ 80.859615][ T6323] [U] [ 80.860269][ T6323] [U] [ 80.860928][ T6323] [U] [ 80.862482][ T6323] [U] [ 80.863158][ T6323] [U] [ 80.863810][ T6323] [U] [ 80.864465][ T6323] [U] [ 80.865145][ T6323] [U] [ 80.865794][ T6323] [U] [ 80.866448][ T6323] [U] [ 80.867102][ T6323] [U] [ 80.867929][ T6323] [U] [ 80.868581][ T6323] [U] [ 80.869243][ T6323] [U] [ 80.869889][ T6323] [U] [ 80.870543][ T6323] [U] [ 80.871202][ T6323] [U] [ 80.871849][ T6323] [U] [ 80.872502][ T6323] [U] [ 80.873977][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 80.877043][ T6323] [U] [ 80.877716][ T6323] [U] [ 80.878382][ T6323] [U] [ 80.879041][ T6323] [U] [ 80.879695][ T6323] [U] [ 80.880352][ T6323] [U] [ 80.881034][ T6323] [U] [ 80.881687][ T6323] [U] [ 80.882960][ T6323] [U] [ 80.883627][ T6323] [U] [ 80.884280][ T6323] [U] [ 80.884960][ T6323] [U] [ 80.885612][ T6323] [U] [ 80.886267][ T6323] [U] [ 80.886917][ T6323] [U] [ 80.887568][ T6323] [U] [ 80.888235][ T6323] [U] [ 80.888895][ T6323] [U] [ 80.889551][ T6323] [U] [ 80.890208][ T6323] [U] [ 80.890866][ T6323] [U] [ 80.891532][ T6323] [U] [ 80.892189][ T6323] [U] [ 80.892843][ T6323] [U] [ 80.894716][ T6323] [U] [ 80.895385][ T6323] [U] [ 80.896038][ T6323] [U] [ 80.896688][ T6323] [U] [ 80.897349][ T6323] [U] [ 80.897998][ T6323] [U] [ 80.898661][ T6323] [U] [ 80.899303][ T6323] [U] [ 80.899993][ T6323] [U] [ 80.900653][ T6323] [U] [ 80.901328][ T6323] [U] [ 80.901979][ T6323] [U] [ 80.902630][ T6323] [U] [ 80.903284][ T6323] [U] [ 80.903935][ T6323] [U] [ 80.904588][ T6323] [U] [ 80.905968][ T6323] [U] [ 80.906641][ T6323] [U] [ 80.907309][ T6323] [U] [ 80.907958][ T6323] [U] [ 80.908618][ T6323] [U] [ 80.909283][ T6323] [U] [ 80.909936][ T6323] [U] [ 80.910601][ T6323] [U] [ 80.912131][ T6323] [U] [ 80.912793][ T6323] [U] [ 80.913452][ T6323] [U] [ 80.914099][ T6323] [U] [ 80.914747][ T6323] [U] [ 80.915399][ T6323] [U] [ 80.916049][ T6323] [U] [ 80.916696][ T6323] [U] [ 80.917364][ T6323] [U] [ 80.918028][ T6323] [U] [ 80.918679][ T6323] [U] [ 80.919332][ T6323] [U] [ 80.919989][ T6323] [U] [ 80.920650][ T6323] [U] [ 80.921319][ T6323] [U] [ 80.921969][ T6323] [U] [ 80.923608][ T6323] [U] [ 80.924281][ T6323] [U] [ 80.924952][ T6323] [U] [ 80.925594][ T6323] [U] [ 80.926239][ T6323] [U] [ 80.926854][ T6323] [U] [ 80.927491][ T6323] [U] [ 80.928107][ T6323] [U] [ 80.928765][ T6323] [U] [ 80.929421][ T6323] [U] [ 80.930074][ T6323] [U] [ 80.930729][ T6323] [U] [ 80.931416][ T6323] [U] [ 80.932073][ T6323] [U] [ 80.932752][ T6323] [U] [ 80.933411][ T6323] [U] [ 80.935042][ T6323] [U] [ 80.935717][ T6323] [U] [ 80.936372][ T6323] [U] [ 80.937024][ T6323] [U] [ 80.937678][ T6323] [U] [ 80.938341][ T6323] [U] [ 80.938983][ T6323] [U] [ 80.945724][ T6324] can: request_module (can-proto-0) failed. [ 81.031061][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 81.037251][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.039752][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.045147][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.047882][ T25] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 81.049956][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.052981][ T25] usb 8-1: config 0 descriptor?? [ 81.104833][ T6322] [U] [ 81.151093][ T58] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 81.173990][ T58] usb 6-1: no configurations [ 81.175228][ T58] usb 6-1: can't read configurations, error -22 [ 81.256235][ T6331] mkiss: ax0: crc mode is auto. [ 81.311084][ T58] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 81.331959][ T58] usb 6-1: no configurations [ 81.333547][ T58] usb 6-1: can't read configurations, error -22 [ 81.335769][ T58] usb usb6-port1: unable to enumerate USB device [ 81.477925][ T25] usbhid 8-1:0.0: can't add hid device: -32 [ 81.482151][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 81.488240][ T25] usb 8-1: USB disconnect, device number 8 [ 81.515264][ T6339] FAULT_INJECTION: forcing a failure. [ 81.515264][ T6339] name failslab, interval 1, probability 0, space 0, times 0 [ 81.518561][ T6339] CPU: 1 UID: 0 PID: 6339 Comm: syz.0.275 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 81.521419][ T6339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.524726][ T6339] Call Trace: [ 81.525962][ T6339] [ 81.527054][ T6339] dump_stack_lvl+0x16c/0x1f0 [ 81.528773][ T6339] should_fail_ex+0x497/0x5b0 [ 81.530230][ T6339] should_failslab+0xc2/0x120 [ 81.531738][ T6339] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 81.533153][ T6339] ? inet_bind2_bucket_create+0x36/0x590 [ 81.534638][ T6339] inet_bind2_bucket_create+0x36/0x590 [ 81.536061][ T6339] inet_csk_get_port+0x18f8/0x2530 [ 81.537436][ T6339] __inet_bind+0x571/0xd80 [ 81.538598][ T6339] inet_bind_sk+0x17b/0x230 [ 81.539787][ T6339] ? __pfx_inet_bind_sk+0x10/0x10 [ 81.541551][ T6339] ? _copy_from_user+0xc1/0xf0 [ 81.543306][ T6339] __sys_bind+0x1eb/0x220 [ 81.544943][ T6339] ? __pfx___sys_bind+0x10/0x10 [ 81.546664][ T6339] __ia32_sys_bind+0x71/0xb0 [ 81.547863][ T6339] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 81.549563][ T6339] __do_fast_syscall_32+0x73/0x120 [ 81.551036][ T6339] do_fast_syscall_32+0x32/0x80 [ 81.552291][ T6339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.553954][ T6339] RIP: 0023:0xf748e579 [ 81.555003][ T6339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.560030][ T6339] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 81.562549][ T6339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200003c0 [ 81.564882][ T6339] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.567566][ T6339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.570310][ T6339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.572949][ T6339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.575017][ T6339] [ 82.604896][ T6368] support for the xor transformation has been removed. [ 82.653631][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 82.656645][ T6370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.284'. [ 82.677265][ T6370] vlan2: entered allmulticast mode [ 82.688946][ T6372] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 82.696953][ T6372] bond0: (slave netdevsim0): Releasing backup interface [ 82.816074][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 83.271637][ T5380] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 83.412065][ T6386] FAULT_INJECTION: forcing a failure. [ 83.412065][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.416733][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.2.293 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 83.420593][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.424511][ T6386] Call Trace: [ 83.425729][ T6386] [ 83.426801][ T6386] dump_stack_lvl+0x16c/0x1f0 [ 83.428511][ T6386] should_fail_ex+0x497/0x5b0 [ 83.430242][ T6386] _copy_to_user+0x30/0xc0 [ 83.431868][ T6386] simple_read_from_buffer+0xd0/0x160 [ 83.433884][ T6386] proc_fail_nth_read+0x198/0x270 [ 83.435648][ T6386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.437730][ T6386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.439774][ T6386] vfs_read+0x1ce/0xbd0 [ 83.441562][ T6386] ? __fget_files+0x23a/0x3f0 [ 83.443740][ T6386] ? fdget_pos+0x24c/0x360 [ 83.445631][ T6386] ? __pfx_lock_release+0x10/0x10 [ 83.447597][ T6386] ? trace_lock_acquire+0x14a/0x1d0 [ 83.449664][ T6386] ? __pfx_vfs_read+0x10/0x10 [ 83.451447][ T6386] ? __pfx___mutex_lock+0x10/0x10 [ 83.453388][ T6386] ? __fget_files+0x244/0x3f0 [ 83.455369][ T6386] ksys_read+0x12f/0x260 [ 83.457286][ T6386] ? __pfx_ksys_read+0x10/0x10 [ 83.459029][ T6386] __do_fast_syscall_32+0x73/0x120 [ 83.460552][ T6386] do_fast_syscall_32+0x32/0x80 [ 83.462281][ T6386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.464698][ T6386] RIP: 0023:0xf7f15579 [ 83.466307][ T6386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.473994][ T6386] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 83.477289][ T6386] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5696620 [ 83.480048][ T6386] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 83.482674][ T6386] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 83.485049][ T6386] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 83.488041][ T6386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.491137][ T6386] [ 83.588074][ T6389] binder: BINDER_SET_CONTEXT_MGR already set [ 83.590605][ T6389] binder: 6388:6389 ioctl 4018620d 20000080 returned -16 [ 83.608724][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 83.673550][ T5380] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.677186][ T5380] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.680312][ T5380] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 83.684731][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.689173][ T5380] usb 8-1: config 0 descriptor?? [ 83.693188][ T5380] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 83.695549][ T5380] dvb-usb: bulk message failed: -22 (3/0) [ 83.733643][ T5380] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 83.751776][ T5380] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 83.754208][ T5380] usb 8-1: media controller created [ 83.756793][ T5380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.767403][ T5380] dvb-usb: bulk message failed: -22 (6/0) [ 83.769488][ T5380] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.782609][ T5380] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 83.797499][ T5380] dvb-usb: schedule remote query interval to 150 msecs. [ 83.800018][ T5380] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 83.901580][ T5398] usb 8-1: USB disconnect, device number 9 [ 83.930455][ T5398] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 85.539074][ T6428] FAULT_INJECTION: forcing a failure. [ 85.539074][ T6428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.548393][ T6428] CPU: 3 UID: 0 PID: 6428 Comm: syz.2.307 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 85.552183][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.556057][ T6428] Call Trace: [ 85.557267][ T6428] [ 85.558309][ T6428] dump_stack_lvl+0x16c/0x1f0 [ 85.559822][ T6428] should_fail_ex+0x497/0x5b0 [ 85.561119][ T6428] _copy_to_user+0x30/0xc0 [ 85.562283][ T6428] simple_read_from_buffer+0xd0/0x160 [ 85.563689][ T6428] proc_fail_nth_read+0x198/0x270 [ 85.565046][ T6428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.566550][ T6428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.568081][ T6428] vfs_read+0x1ce/0xbd0 [ 85.569308][ T6428] ? __fget_files+0x23a/0x3f0 [ 85.570688][ T6428] ? fdget_pos+0x24c/0x360 [ 85.571954][ T6428] ? __pfx_lock_release+0x10/0x10 [ 85.573307][ T6428] ? trace_lock_acquire+0x14a/0x1d0 [ 85.574825][ T6428] ? __pfx_vfs_read+0x10/0x10 [ 85.576136][ T6428] ? __pfx___mutex_lock+0x10/0x10 [ 85.577588][ T6428] ? __fget_files+0x244/0x3f0 [ 85.579083][ T6428] ksys_read+0x12f/0x260 [ 85.580530][ T6428] ? __pfx_ksys_read+0x10/0x10 [ 85.582243][ T6428] __do_fast_syscall_32+0x73/0x120 [ 85.583943][ T6428] do_fast_syscall_32+0x32/0x80 [ 85.585597][ T6428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.587668][ T6428] RIP: 0023:0xf7f15579 [ 85.589102][ T6428] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.595773][ T6428] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 85.599352][ T6428] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5696620 [ 85.602358][ T6428] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 85.605085][ T6428] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 85.607794][ T6428] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 85.610509][ T6428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.613240][ T6428] [ 85.819960][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 86.585785][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 86.670050][ T6447] netlink: 'syz.0.312': attribute type 7 has an invalid length. [ 86.673553][ T6447] netlink: 15 bytes leftover after parsing attributes in process `syz.0.312'. [ 86.675913][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 86.678256][ T6447] netlink: 872 bytes leftover after parsing attributes in process `syz.0.312'. [ 86.680736][ T6447] netlink: 'syz.0.312': attribute type 7 has an invalid length. [ 86.684339][ T6447] netlink: 15 bytes leftover after parsing attributes in process `syz.0.312'. [ 86.953106][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 87.243717][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 87.253338][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 87.872492][ T6477] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 87.883555][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 87.896718][ T6477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.899899][ T6477] bond1: (slave bond2): making interface the new active one [ 87.903297][ T6477] bond1: (slave bond2): Enslaving as an active interface with an up link [ 88.371072][ T58] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.532922][ T58] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.535722][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.538971][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.552836][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.562904][ T58] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.565342][ T58] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.568077][ T58] usb 8-1: Product: syz [ 88.569530][ T58] usb 8-1: Manufacturer: syz [ 88.600208][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 88.611109][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 88.612499][ T58] cdc_wdm 8-1:1.0: skipping garbage [ 88.613868][ T58] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 88.882510][ T980] usb 8-1: USB disconnect, device number 10 [ 89.581169][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 89.688968][ T6506] overlay: Unknown parameter '/' [ 89.750961][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 89.753506][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.756367][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.758870][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 89.762224][ T35] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 89.764580][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.767684][ T35] usb 7-1: config 0 descriptor?? [ 90.178851][ T35] usbhid 7-1:0.0: can't add hid device: -32 [ 90.180474][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 90.187192][ T35] usb 7-1: USB disconnect, device number 14 [ 90.534368][ T6513] FAULT_INJECTION: forcing a failure. [ 90.534368][ T6513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.537745][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.0.334 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 90.540472][ T6513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.543268][ T6513] Call Trace: [ 90.544145][ T6513] [ 90.544946][ T6513] dump_stack_lvl+0x16c/0x1f0 [ 90.546190][ T6513] should_fail_ex+0x497/0x5b0 [ 90.547437][ T6513] _copy_from_user+0x30/0xf0 [ 90.548687][ T6513] video_usercopy+0xc62/0x1500 [ 90.550096][ T6513] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.551572][ T6513] ? __pfx_video_usercopy+0x10/0x10 [ 90.552967][ T6513] v4l2_ioctl+0x1ba/0x250 [ 90.554060][ T6513] v4l2_compat_ioctl32+0x214/0x2c0 [ 90.555435][ T6513] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 90.556913][ T6513] __do_compat_sys_ioctl+0x259/0x2b0 [ 90.558293][ T6513] __do_fast_syscall_32+0x73/0x120 [ 90.559674][ T6513] do_fast_syscall_32+0x32/0x80 [ 90.560974][ T6513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.562626][ T6513] RIP: 0023:0xf748e579 [ 90.563696][ T6513] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.568558][ T6513] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 90.570779][ T6513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 90.573128][ T6513] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.575186][ T6513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.577269][ T6513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.579434][ T6513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.581510][ T6513] [ 90.655621][ T6515] syz.0.335: attempt to access beyond end of device [ 90.655621][ T6515] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 90.659828][ T6515] XFS (nbd0): SB validate failed with error -5. [ 90.878478][ T6530] FAULT_INJECTION: forcing a failure. [ 90.878478][ T6530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.882439][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.1.339 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 90.885079][ T6530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.887822][ T6530] Call Trace: [ 90.888690][ T6530] [ 90.889467][ T6530] dump_stack_lvl+0x16c/0x1f0 [ 90.890701][ T6530] should_fail_ex+0x497/0x5b0 [ 90.891907][ T6530] _copy_to_user+0x30/0xc0 [ 90.893018][ T6530] simple_read_from_buffer+0xd0/0x160 [ 90.894406][ T6530] proc_fail_nth_read+0x198/0x270 [ 90.895717][ T6530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.897177][ T6530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.898581][ T6530] vfs_read+0x1ce/0xbd0 [ 90.899594][ T6530] ? __fget_files+0x23a/0x3f0 [ 90.900744][ T6530] ? fdget_pos+0x24c/0x360 [ 90.901989][ T6530] ? __pfx_lock_release+0x10/0x10 [ 90.903295][ T6530] ? trace_lock_acquire+0x14a/0x1d0 [ 90.904658][ T6530] ? __pfx_vfs_read+0x10/0x10 [ 90.905885][ T6530] ? __pfx___mutex_lock+0x10/0x10 [ 90.907197][ T6530] ? __fget_files+0x244/0x3f0 [ 90.908413][ T6530] ksys_read+0x12f/0x260 [ 90.909537][ T6530] ? __pfx_ksys_read+0x10/0x10 [ 90.910790][ T6530] __do_fast_syscall_32+0x73/0x120 [ 90.912124][ T6530] do_fast_syscall_32+0x32/0x80 [ 90.913413][ T6530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.915052][ T6530] RIP: 0023:0xf7f6f579 [ 90.916075][ T6530] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.920989][ T6530] RSP: 002b:00000000f56f65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 90.923138][ T6530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 90.925203][ T6530] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 90.927248][ T6530] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 90.929310][ T6530] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 90.931350][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.933406][ T6530] [ 90.934282][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.959694][ T6534] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 90.994855][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.200428][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.349787][ T39] audit: type=1326 audit(1728817685.301:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.361518][ T39] audit: type=1326 audit(1728817685.301:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.371044][ T39] audit: type=1326 audit(1728817685.301:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.374273][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.376468][ T39] audit: type=1326 audit(1728817685.301:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.376489][ T39] audit: type=1326 audit(1728817685.301:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.390838][ T39] audit: type=1326 audit(1728817685.301:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.396220][ T39] audit: type=1326 audit(1728817685.301:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.401837][ T39] audit: type=1326 audit(1728817685.301:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.407352][ T39] audit: type=1326 audit(1728817685.301:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.413041][ T39] audit: type=1326 audit(1728817685.311:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.2.354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 92.521042][ T58] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 92.693013][ T58] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.695402][ T58] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.698025][ T58] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.700353][ T58] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.721946][ T58] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.724308][ T58] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.726392][ T58] usb 6-1: Product: syz [ 92.727481][ T58] usb 6-1: Manufacturer: syz [ 92.741375][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 92.742930][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 92.744295][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 92.745686][ T58] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 92.991559][ T58] usb 6-1: USB disconnect, device number 20 [ 93.201399][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.218874][ T65] Bluetooth: hci0: Malformed LE Event: 0x02 [ 93.681008][ T5398] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.871227][ T5398] usb 5-1: Using ep0 maxpacket: 32 [ 93.876511][ T5398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.879712][ T5398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.885672][ T5398] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.889370][ T5398] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 93.892001][ T5398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.896191][ T5398] usb 5-1: config 0 descriptor?? [ 94.374584][ T5398] usbhid 5-1:0.0: can't add hid device: -32 [ 94.382572][ T5398] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 94.387387][ T6628] 9pnet_virtio: no channels available for device syz [ 94.389498][ T6628] 9pnet_virtio: no channels available for device syz [ 94.797828][ T5398] usb 5-1: USB disconnect, device number 8 [ 94.829422][ T6631] __nla_validate_parse: 1 callbacks suppressed [ 94.829439][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 94.881413][ T6633] FAULT_INJECTION: forcing a failure. [ 94.881413][ T6633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.884808][ T6633] CPU: 3 UID: 0 PID: 6633 Comm: syz.2.363 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 94.887545][ T6633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.890626][ T6633] Call Trace: [ 94.891505][ T6633] [ 94.892280][ T6633] dump_stack_lvl+0x16c/0x1f0 [ 94.893528][ T6633] should_fail_ex+0x497/0x5b0 [ 94.894768][ T6633] _copy_from_user+0x30/0xf0 [ 94.895977][ T6633] get_compat_msghdr+0xa8/0x170 [ 94.897258][ T6633] ? __pfx_get_compat_msghdr+0x10/0x10 [ 94.898672][ T6633] ? __pfx___lock_acquire+0x10/0x10 [ 94.900027][ T6633] ___sys_sendmsg+0x1b0/0x1e0 [ 94.901270][ T6633] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.902585][ T6633] ? lock_acquire+0x2f/0xb0 [ 94.903689][ T6633] ? __fget_files+0x40/0x3f0 [ 94.904848][ T6633] ? fdget+0x176/0x210 [ 94.905829][ T6633] __sys_sendmsg+0x117/0x1f0 [ 94.907064][ T6633] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.908375][ T6633] ? __fget_files+0x244/0x3f0 [ 94.909532][ T6633] __do_fast_syscall_32+0x73/0x120 [ 94.910877][ T6633] do_fast_syscall_32+0x32/0x80 [ 94.912276][ T6633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.914421][ T6633] RIP: 0023:0xf7f15579 [ 94.915799][ T6633] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.921566][ T6633] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 94.924288][ T6633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 94.926650][ T6633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.928704][ T6633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.930772][ T6633] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.932833][ T6633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.934934][ T6633] [ 95.350997][ T5398] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 96.346255][ T6644] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:65534 [ 96.348825][ T6644] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:1 [ 96.601966][ T6655] libceph: resolve '. [ 96.601966][ T6655] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 96.601966][ T6655] ' (ret=-3): failed [ 97.052966][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.060198][ T65] Bluetooth: hci1: Malformed LE Event: 0x02 [ 97.313002][ T6655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.315453][ T6655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.327406][ T6655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.336413][ T6655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.338601][ T6655] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.347732][ T6655] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.351379][ T6655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.353601][ T6655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.359809][ T6655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.368448][ T6655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.370073][ T6655] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.376306][ T6655] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.621009][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 97.771080][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 97.776738][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.779711][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.792488][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.797381][ T30] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 97.810814][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.821500][ T30] usb 7-1: config 0 descriptor?? [ 98.080996][ T5398] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 98.233104][ T30] usbhid 7-1:0.0: can't add hid device: -32 [ 98.235810][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 98.243367][ T5398] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.246198][ T5398] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.249545][ T5398] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.250202][ T30] usb 7-1: USB disconnect, device number 15 [ 98.252176][ T5398] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.264324][ T5398] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.267029][ T5398] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.269196][ T5398] usb 8-1: Product: syz [ 98.270318][ T5398] usb 8-1: Manufacturer: syz [ 98.280232][ T5398] cdc_wdm 8-1:1.0: skipping garbage [ 98.282555][ T5398] cdc_wdm 8-1:1.0: skipping garbage [ 98.284779][ T5398] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.538200][ T5376] usb 8-1: USB disconnect, device number 11 [ 98.563059][ T6687] syz.1.377: attempt to access beyond end of device [ 98.563059][ T6687] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 98.567046][ T6687] EXT4-fs (loop1): unable to read superblock [ 98.598122][ T6687] hub 2-0:1.0: USB hub found [ 98.599578][ T6687] hub 2-0:1.0: 2 ports detected [ 98.730991][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.969637][ T6710] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 98.972221][ T6710] netlink: 224 bytes leftover after parsing attributes in process `syz.2.382'. [ 98.990690][ T6710] loop2: detected capacity change from 0 to 16384 [ 99.339871][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.383'. [ 99.381073][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 99.382681][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.384256][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.539973][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 100.402749][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.405714][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.436634][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.439247][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.492005][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.495868][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.596376][ T6736] fuse: Unknown parameter 'f¸dÕ*€' [ 100.667256][ T6740] ata3.00: invalid multi_count 1 ignored [ 100.900559][ T5341] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.117494][ T6760] support for the xor transformation has been removed. [ 101.136887][ T6758] netlink: 'syz.3.391': attribute type 10 has an invalid length. [ 101.139255][ T6758] ipvlan1: entered promiscuous mode [ 101.150648][ T6758] team0: Device ipvlan1 failed to register rx_handler [ 101.165676][ T6758] autofs: Bad value for 'fd' [ 101.281923][ T6763] overlay: Unknown parameter '/' [ 101.301893][ T6763] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 101.304826][ T6763] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.321977][ T6763] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.451563][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.451746][ T4781] Bluetooth: hci3: command 0x0405 tx timeout [ 101.451769][ T5341] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.395900][ T6775] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 102.400018][ T6775] qnx6: wrong signature (magic) in superblock #1. [ 102.403032][ T6775] qnx6: unable to read the first superblock [ 102.444348][ T6769] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 102.595102][ T6782] syz.0.402[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.595187][ T6782] syz.0.402[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.599056][ T6782] syz.0.402[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.765708][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 102.771003][ T35] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 102.819833][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.926525][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.930083][ T35] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 102.933281][ T35] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.937298][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.943117][ T35] usb 7-1: config 0 descriptor?? [ 102.971107][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.168921][ T5398] usb 7-1: USB disconnect, device number 16 [ 103.532241][ T4781] Bluetooth: hci3: command 0x0405 tx timeout [ 103.534375][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.541237][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.991090][ T1850] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 104.001064][ T30] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 104.141098][ T1850] usb 7-1: Using ep0 maxpacket: 32 [ 104.145864][ T1850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.149087][ T1850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.151862][ T1850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.153373][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.155146][ T1850] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 104.158559][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.160977][ T1850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.165969][ T1850] usb 7-1: config 0 descriptor?? [ 104.167355][ T30] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 104.172236][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.182190][ T30] usb 6-1: config 0 descriptor?? [ 104.188519][ T30] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 104.191281][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 104.195604][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.199044][ T30] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.202424][ T30] usb 6-1: media controller created [ 104.206125][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.211331][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 104.216529][ T30] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.223124][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input14 [ 104.235314][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 104.237694][ T30] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.287641][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 104.392119][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 104.392943][ T58] usb 6-1: USB disconnect, device number 21 [ 104.394211][ T30] dvb-usb: error while querying for an remote control event. [ 104.408551][ T58] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.517019][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 104.780349][ T1850] usbhid 7-1:0.0: can't add hid device: -32 [ 104.782308][ T1850] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 104.785027][ T1850] usb 7-1: USB disconnect, device number 17 [ 104.810994][ T5380] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 104.958407][ T58] IPVS: starting estimator thread 0... [ 104.992706][ T5380] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.995540][ T5380] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 104.998081][ T5380] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 105.000428][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.003914][ T5380] usb 8-1: config 0 descriptor?? [ 105.051101][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.071422][ T6822] IPVS: using max 32 ests per chain, 76800 per kthread [ 105.210710][ T5380] usb 8-1: USB disconnect, device number 12 [ 105.341412][ T6854] 9pnet_virtio: no channels available for device syz [ 105.345073][ T6853] FAULT_INJECTION: forcing a failure. [ 105.345073][ T6853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.348404][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.0.423 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 105.351592][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.355242][ T6853] Call Trace: [ 105.356125][ T6853] [ 105.356912][ T6853] dump_stack_lvl+0x16c/0x1f0 [ 105.358138][ T6853] should_fail_ex+0x497/0x5b0 [ 105.359364][ T6853] _copy_from_iter+0x29b/0x13e0 [ 105.361089][ T6853] ? __pfx__copy_from_iter+0x10/0x10 [ 105.362996][ T6853] ? __virt_addr_valid+0x1a4/0x590 [ 105.365083][ T6853] ? __virt_addr_valid+0x5e/0x590 [ 105.366942][ T6853] ? __phys_addr_symbol+0x30/0x80 [ 105.368706][ T6853] ? __check_object_size+0x488/0x710 [ 105.370290][ T6853] netlink_sendmsg+0x813/0xd70 [ 105.371584][ T6853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.372921][ T6853] ? lock_acquire+0x2f/0xb0 [ 105.374075][ T6853] ____sys_sendmsg+0x9ae/0xb40 [ 105.375376][ T6853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.377128][ T6853] ? get_compat_msghdr+0x11b/0x170 [ 105.378928][ T6853] ? __pfx___lock_acquire+0x10/0x10 [ 105.380795][ T6853] ___sys_sendmsg+0x135/0x1e0 [ 105.382354][ T6853] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.384136][ T6853] ? lock_acquire+0x2f/0xb0 [ 105.385651][ T6853] ? __fget_files+0x40/0x3f0 [ 105.387157][ T6853] ? fdget+0x176/0x210 [ 105.388477][ T6853] __sys_sendmsg+0x117/0x1f0 [ 105.390025][ T6853] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.391699][ T6853] ? __fget_files+0x244/0x3f0 [ 105.393125][ T6853] __do_fast_syscall_32+0x73/0x120 [ 105.394394][ T6853] do_fast_syscall_32+0x32/0x80 [ 105.395673][ T6853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.397285][ T6853] RIP: 0023:0xf748e579 [ 105.398309][ T6853] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.403161][ T6853] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 105.405308][ T6853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 105.407320][ T6853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.409361][ T6853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.411710][ T6853] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.414548][ T6853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.417409][ T6853] [ 105.452624][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 105.454900][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 105.662771][ T6862] nbd2: detected capacity change from 0 to 22 [ 105.676798][ T6864] block nbd2: shutting down sockets [ 105.677511][ T5340] blk_print_req_error: 7 callbacks suppressed [ 105.677525][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.686352][ T5340] buffer_io_error: 7 callbacks suppressed [ 105.686440][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.713207][ T71] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.716066][ T71] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.720126][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.723670][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.727734][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.731064][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.733682][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.735970][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.738198][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.740816][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.743915][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.748818][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.753233][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.758956][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.767632][ T5340] ldm_validate_partition_table(): Disk read failed. [ 105.774280][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.781070][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.783755][ T5340] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.786883][ T5340] Buffer I/O error on dev nbd2, logical block 0, async page read [ 105.789698][ T5340] Dev nbd2: unable to read RDB block 0 [ 105.792194][ T5340] nbd2: unable to read partition table [ 105.796135][ T5340] nbd2: partition table beyond EOD, truncated [ 105.813413][ T6856] ldm_validate_partition_table(): Disk read failed. [ 105.815492][ T6856] Dev nbd2: unable to read RDB block 0 [ 105.817007][ T6856] nbd2: unable to read partition table [ 105.818479][ T6856] nbd2: partition table beyond EOD, truncated [ 105.823609][ T5340] ldm_validate_partition_table(): Disk read failed. [ 105.826424][ T5340] Dev nbd2: unable to read RDB block 0 [ 105.828525][ T5340] nbd2: unable to read partition table [ 105.830450][ T5340] nbd2: partition table beyond EOD, truncated [ 105.863127][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 106.144066][ T6878] /dev/sg0: Can't lookup blockdev [ 106.158625][ T6878] can0: slcan on ttyS3. [ 106.173879][ T6879] overlay: Unknown parameter '/' [ 106.281268][ T6878] can0 (unregistered): slcan off ttyS3. [ 106.652330][ T1102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 106.683652][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.710395][ T65] Bluetooth: hci1: Malformed LE Event: 0x02 [ 106.821920][ T6900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.863540][ T65] Bluetooth: hci0: Malformed LE Event: 0x02 [ 107.237390][ T6917] 9pnet_fd: Insufficient options for proto=fd [ 107.344493][ T6920] FAULT_INJECTION: forcing a failure. [ 107.344493][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.348474][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.1.439 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 107.351048][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.353657][ T6920] Call Trace: [ 107.354506][ T6920] [ 107.355261][ T6920] dump_stack_lvl+0x16c/0x1f0 [ 107.356456][ T6920] should_fail_ex+0x497/0x5b0 [ 107.357681][ T6920] _copy_from_iter+0x29b/0x13e0 [ 107.358916][ T6920] ? __pfx__copy_from_iter+0x10/0x10 [ 107.360235][ T6920] ? __virt_addr_valid+0x1a4/0x590 [ 107.361515][ T6920] ? __virt_addr_valid+0x5e/0x590 [ 107.362785][ T6920] ? __phys_addr_symbol+0x30/0x80 [ 107.364050][ T6920] ? __check_object_size+0x488/0x710 [ 107.365412][ T6920] netlink_sendmsg+0x813/0xd70 [ 107.366632][ T6920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.367982][ T6920] ? lock_acquire+0x2f/0xb0 [ 107.369139][ T6920] ____sys_sendmsg+0x9ae/0xb40 [ 107.370348][ T6920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.371609][ T6920] ? get_compat_msghdr+0x11b/0x170 [ 107.372916][ T6920] ? __pfx___lock_acquire+0x10/0x10 [ 107.374267][ T6920] ___sys_sendmsg+0x135/0x1e0 [ 107.375497][ T6920] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.376861][ T6920] ? lock_acquire+0x2f/0xb0 [ 107.378042][ T6920] ? __fget_files+0x40/0x3f0 [ 107.379253][ T6920] ? fdget+0x176/0x210 [ 107.380327][ T6920] __sys_sendmsg+0x117/0x1f0 [ 107.381632][ T6920] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.383061][ T6920] ? __fget_files+0x244/0x3f0 [ 107.384337][ T6920] __do_fast_syscall_32+0x73/0x120 [ 107.385703][ T6920] do_fast_syscall_32+0x32/0x80 [ 107.386979][ T6920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.388636][ T6920] RIP: 0023:0xf7f6f579 [ 107.389706][ T6920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.394677][ T6920] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 107.396843][ T6920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 107.398887][ T6920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.401133][ T6920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.403187][ T6920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.405164][ T6920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.407179][ T6920] [ 107.461187][ T5380] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 107.625307][ T5380] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.627744][ T5380] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.630272][ T5380] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.632995][ T5380] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.637043][ T5380] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.639344][ T5380] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.644206][ T5380] usb 8-1: Product: syz [ 107.645415][ T5380] usb 8-1: Manufacturer: syz [ 107.653069][ T6924] Bluetooth: MGMT ver 1.23 [ 107.655803][ T5380] cdc_wdm 8-1:1.0: skipping garbage [ 107.657541][ T5380] cdc_wdm 8-1:1.0: skipping garbage [ 107.659223][ T5380] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.910652][ T5380] usb 8-1: USB disconnect, device number 13 [ 108.610633][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 108.683149][ T6934] capability: warning: `syz.1.444' uses 32-bit capabilities (legacy support in use) [ 108.742291][ T6942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.792909][ T6940] netlink: 104 bytes leftover after parsing attributes in process `syz.2.446'. [ 109.691061][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.054839][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.060095][ T65] Bluetooth: hci0: Malformed LE Event: 0x02 [ 110.453135][ T4781] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 110.759928][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 111.305913][ T6977] netlink: 92 bytes leftover after parsing attributes in process `syz.0.457'. [ 111.308291][ T6977] netlink: 92 bytes leftover after parsing attributes in process `syz.0.457'. [ 111.382322][ T6979] netlink: 'syz.3.458': attribute type 3 has an invalid length. [ 111.733566][ T30] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 111.881101][ T70] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 111.885476][ T30] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.887974][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.891011][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.894057][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.897875][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.902746][ T30] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.905879][ T30] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.908557][ T30] usb 8-1: Product: syz [ 111.909991][ T30] usb 8-1: Manufacturer: syz [ 111.914754][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 111.916608][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 111.920524][ T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 111.922734][ T30] cdc_wdm 8-1:1.0: Unknown control protocol [ 112.033534][ T70] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.037149][ T70] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 112.040186][ T70] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.043382][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.047595][ T70] usb 5-1: config 0 descriptor?? [ 112.051024][ T5376] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 112.120241][ T6984] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 112.177812][ T5380] usb 8-1: USB disconnect, device number 14 [ 112.211159][ T5376] usb 7-1: Using ep0 maxpacket: 32 [ 112.214689][ T5376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.217701][ T5376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.220198][ T5376] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.224700][ T5376] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 112.227013][ T5376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.231221][ T5376] usb 7-1: config 0 descriptor?? [ 112.257935][ T5398] usb 5-1: USB disconnect, device number 10 [ 112.841835][ T5376] usbhid 7-1:0.0: can't add hid device: -32 [ 112.844129][ T5376] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 112.852052][ T5376] usb 7-1: USB disconnect, device number 18 [ 113.460510][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 113.771125][ T58] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 113.922724][ T58] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.926152][ T58] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 113.929119][ T58] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 113.932598][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.936528][ T58] usb 7-1: config 0 descriptor?? [ 114.141954][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 114.145272][ T1850] usb 7-1: USB disconnect, device number 19 [ 114.400989][ T5380] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.551005][ T5380] usb 5-1: Using ep0 maxpacket: 32 [ 114.554336][ T5380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.557114][ T5380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.560067][ T5380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.564345][ T5380] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 114.566590][ T5380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.570130][ T5380] usb 5-1: config 0 descriptor?? [ 114.586475][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 114.771018][ T7035] netlink: 2 bytes leftover after parsing attributes in process `syz.2.482'. [ 114.774076][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.777048][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.779689][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.783081][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.785597][ T7035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.788570][ T7035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.793917][ T7035] batadv_slave_1: entered promiscuous mode [ 115.188676][ T5380] usbhid 5-1:0.0: can't add hid device: -32 [ 115.191536][ T5380] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 115.198878][ T5380] usb 5-1: USB disconnect, device number 11 [ 115.656529][ T39] audit: type=1326 audit(1728817708.610:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.483" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 116.058181][ T7052] team0: Port device team_slave_0 removed [ 116.060411][ T7052] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 116.481144][ T58] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 116.633670][ T58] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.640981][ T58] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.644256][ T58] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.646655][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.650126][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.656509][ T58] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.659273][ T58] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.664815][ T58] usb 7-1: Product: syz [ 116.671064][ T58] usb 7-1: Manufacturer: syz [ 116.676424][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 116.677795][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 116.687039][ T58] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 116.688693][ T58] cdc_wdm 7-1:1.0: Unknown control protocol [ 116.878992][ T7058] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 116.926899][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 116.930991][ T58] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 116.935165][ T70] usb 7-1: USB disconnect, device number 20 [ 117.083124][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.086512][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 117.089340][ T58] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 117.095080][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.098586][ T58] usb 8-1: config 0 descriptor?? [ 117.108059][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 117.109772][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 117.116878][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 117.121328][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 117.123219][ T58] usb 8-1: media controller created [ 117.125108][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.128841][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 117.132869][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 117.135626][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input16 [ 117.139560][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 117.141479][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 117.161020][ T1850] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 117.304452][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 117.305219][ T9] usb 8-1: USB disconnect, device number 15 [ 117.306585][ T58] dvb-usb: error while querying for an remote control event. [ 117.321026][ T1850] usb 6-1: Using ep0 maxpacket: 32 [ 117.324987][ T1850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.328954][ T1850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.329536][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 117.332843][ T1850] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.339887][ T1850] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 117.343559][ T1850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.347938][ T1850] usb 6-1: config 0 descriptor?? [ 117.959124][ T1850] usbhid 6-1:0.0: can't add hid device: -32 [ 117.960961][ T1850] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 117.967480][ T1850] usb 6-1: USB disconnect, device number 22 [ 117.987719][ T7074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.992124][ T4781] Bluetooth: hci3: Malformed LE Event: 0x02 [ 118.571426][ T7080] Cannot find add_set index 1 as target [ 118.639916][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 118.659827][ T7082] block device autoloading is deprecated and will be removed. [ 118.691225][ T7082] tmpfs: Bad value for 'mpol' [ 118.780147][ T7085] netlink: 'syz.0.498': attribute type 3 has an invalid length. [ 118.782253][ T7085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.498'. [ 118.804749][ T7088] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 118.846219][ T7088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.848724][ T7088] bond1: (slave bond2): making interface the new active one [ 118.861172][ T7088] bond1: (slave bond2): Enslaving as an active interface with an up link [ 119.601056][ T58] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 119.610981][ T980] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 119.761987][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 119.764424][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.767092][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.769730][ T980] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.771876][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.772155][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.774816][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.778023][ T980] usb 6-1: config 0 descriptor?? [ 119.785839][ T980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.787602][ T980] dvb-usb: bulk message failed: -22 (3/0) [ 119.790724][ T980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.791102][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.795564][ T980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.796396][ T58] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 119.798208][ T980] usb 6-1: media controller created [ 119.800529][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.802578][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.806540][ T58] usb 7-1: config 0 descriptor?? [ 119.809162][ T980] dvb-usb: bulk message failed: -22 (6/0) [ 119.810744][ T980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.814590][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input17 [ 119.818653][ T980] dvb-usb: schedule remote query interval to 150 msecs. [ 119.820739][ T980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.839591][ T7113] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 119.970999][ T980] dvb-usb: bulk message failed: -22 (1/0) [ 119.972574][ T980] dvb-usb: error while querying for an remote control event. [ 120.011127][ T4781] Bluetooth: hci3: command 0x0405 tx timeout [ 120.024106][ T980] usb 6-1: USB disconnect, device number 23 [ 120.114370][ T980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.276517][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input18 [ 120.291623][ T7119] FAULT_INJECTION: forcing a failure. [ 120.291623][ T7119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.295365][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.508 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 120.298194][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.301578][ T7119] Call Trace: [ 120.302780][ T7119] [ 120.303859][ T7119] dump_stack_lvl+0x16c/0x1f0 [ 120.305512][ T7119] should_fail_ex+0x497/0x5b0 [ 120.307154][ T7119] _copy_from_user+0x30/0xf0 [ 120.308646][ T7119] kstrtouint_from_user+0xd7/0x1c0 [ 120.310442][ T7119] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 120.312415][ T7119] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 120.314495][ T7119] proc_fail_nth_write+0x84/0x250 [ 120.316246][ T7119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.318433][ T7119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.320404][ T7119] vfs_write+0x28e/0x1140 [ 120.322059][ T7119] ? __fget_files+0x23a/0x3f0 [ 120.323693][ T7119] ? fdget_pos+0x24c/0x360 [ 120.325284][ T7119] ? __pfx_lock_release+0x10/0x10 [ 120.327035][ T7119] ? trace_lock_acquire+0x14a/0x1d0 [ 120.328848][ T7119] ? __pfx_vfs_write+0x10/0x10 [ 120.330500][ T7119] ? __pfx___mutex_lock+0x10/0x10 [ 120.332253][ T7119] ? __fget_files+0x244/0x3f0 [ 120.333963][ T7119] ksys_write+0x12f/0x260 [ 120.335511][ T7119] ? __pfx_ksys_write+0x10/0x10 [ 120.337205][ T7119] __do_fast_syscall_32+0x73/0x120 [ 120.339100][ T7119] do_fast_syscall_32+0x32/0x80 [ 120.340918][ T7119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.343179][ T7119] RIP: 0023:0xf7f46579 [ 120.344703][ T7119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.351953][ T7119] RSP: 002b:00000000f56c65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 120.354985][ T7119] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56c6620 [ 120.357884][ T7119] RDX: 0000000000000001 RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 120.360746][ T7119] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 120.363753][ T7119] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.366602][ T7119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.369444][ T7119] [ 120.407563][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input19 [ 120.556817][ T58] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 120.971216][ T980] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 121.141117][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 121.163571][ T980] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 121.166994][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.170253][ T980] usb 6-1: Product: syz [ 121.172108][ T980] usb 6-1: Manufacturer: syz [ 121.174024][ T980] usb 6-1: SerialNumber: syz [ 121.187262][ T980] usb 6-1: config 0 descriptor?? [ 121.214189][ T980] as10x_usb: device has been detected [ 121.217884][ T980] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 121.241856][ T980] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 121.318347][ T980] as10x_usb: error during firmware upload part1 [ 121.324896][ T980] Registered device Sky IT Digital Key (green led) [ 121.452268][ T7126] random: crng reseeded on system resumption [ 121.611384][ T30] usb 6-1: USB disconnect, device number 24 [ 121.745952][ T30] Unregistered device Sky IT Digital Key (green led) [ 121.752174][ T30] as10x_usb: device has been disconnected [ 121.832894][ T7146] FAULT_INJECTION: forcing a failure. [ 121.832894][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 121.836166][ T7146] CPU: 3 UID: 0 PID: 7146 Comm: syz.3.517 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 121.838848][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.841664][ T7146] Call Trace: [ 121.842540][ T7146] [ 121.843323][ T7146] dump_stack_lvl+0x16c/0x1f0 [ 121.844570][ T7146] should_fail_ex+0x497/0x5b0 [ 121.845773][ T7146] should_failslab+0xc2/0x120 [ 121.847013][ T7146] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 121.848410][ T7146] ? skb_clone+0x190/0x3f0 [ 121.849605][ T7146] skb_clone+0x190/0x3f0 [ 121.850726][ T7146] netlink_deliver_tap+0xb26/0xcf0 [ 121.852075][ T7146] netlink_unicast+0x5e1/0x7f0 [ 121.853360][ T7146] ? __pfx_netlink_unicast+0x10/0x10 [ 121.854748][ T7146] ? __phys_addr_symbol+0x30/0x80 [ 121.856518][ T7146] ? __check_object_size+0x488/0x710 [ 121.857937][ T7146] netlink_sendmsg+0x8b8/0xd70 [ 121.859207][ T7146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.860604][ T7146] ? lock_acquire+0x2f/0xb0 [ 121.861802][ T7146] ____sys_sendmsg+0x9ae/0xb40 [ 121.863064][ T7146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.864460][ T7146] ? get_compat_msghdr+0x11b/0x170 [ 121.865805][ T7146] ? __pfx___lock_acquire+0x10/0x10 [ 121.867178][ T7146] ___sys_sendmsg+0x135/0x1e0 [ 121.868431][ T7146] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.869816][ T7146] ? lock_acquire+0x2f/0xb0 [ 121.871036][ T7146] ? __fget_files+0x40/0x3f0 [ 121.872263][ T7146] ? fdget+0x176/0x210 [ 121.873348][ T7146] __sys_sendmsg+0x117/0x1f0 [ 121.874569][ T7146] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.875913][ T7146] ? __fget_files+0x244/0x3f0 [ 121.877162][ T7146] __do_fast_syscall_32+0x73/0x120 [ 121.878515][ T7146] do_fast_syscall_32+0x32/0x80 [ 121.879793][ T7146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.881449][ T7146] RIP: 0023:0xf7f46579 [ 121.882517][ T7146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 121.887484][ T7146] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 121.889651][ T7146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 121.891702][ T7146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.893774][ T7146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.895826][ T7146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 121.897888][ T7146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.899931][ T7146] [ 122.121719][ T58] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 122.186329][ T7160] overlay: Unknown parameter '/' [ 122.202455][ T7160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.211957][ T1850] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 122.292877][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.296128][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.301006][ T58] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 122.303700][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.307088][ T58] usb 5-1: config 0 descriptor?? [ 122.311101][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 122.312835][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 122.315233][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.317811][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.319943][ T58] usb 5-1: media controller created [ 122.321966][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.327843][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 122.329469][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.332335][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input20 [ 122.338407][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 122.340393][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.382537][ T1850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.387749][ T1850] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.391004][ T1850] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 122.393487][ T1850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.398430][ T1850] usb 8-1: config 0 descriptor?? [ 122.404707][ T1850] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 122.407115][ T1850] dvb-usb: bulk message failed: -22 (3/0) [ 122.410206][ T1850] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.413583][ T1850] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.415899][ T1850] usb 8-1: media controller created [ 122.418159][ T1850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.423954][ T1850] dvb-usb: bulk message failed: -22 (6/0) [ 122.425686][ T1850] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.428772][ T1850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input21 [ 122.433731][ T1850] dvb-usb: schedule remote query interval to 150 msecs. [ 122.435635][ T1850] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.496137][ T30] usb 7-1: USB disconnect, device number 21 [ 122.504785][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 122.507112][ T1850] dvb-usb: error while querying for an remote control event. [ 122.523454][ T5380] usb 5-1: USB disconnect, device number 12 [ 122.550885][ T39] audit: type=1326 audit(1728817715.500:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.563792][ T39] audit: type=1326 audit(1728817715.500:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.575961][ T39] audit: type=1326 audit(1728817715.500:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.582320][ T39] audit: type=1326 audit(1728817715.500:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.584126][ T5380] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.587893][ T39] audit: type=1326 audit(1728817715.500:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.587912][ T39] audit: type=1326 audit(1728817715.500:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.587927][ T39] audit: type=1326 audit(1728817715.500:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.601276][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 122.603071][ T39] audit: type=1326 audit(1728817715.500:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.617506][ T39] audit: type=1326 audit(1728817715.500:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.617586][ T1850] dvb-usb: error while querying for an remote control event. [ 122.624072][ T39] audit: type=1326 audit(1728817715.500:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.2.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 122.627025][ T65] Bluetooth: hci0: Malformed LE Event: 0x02 [ 122.648262][ T7162] overlay: Unknown parameter 'hash' [ 122.781864][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 122.783498][ T1850] dvb-usb: error while querying for an remote control event. [ 122.900519][ T7181] syz.3.521 (7181): drop_caches: 2 [ 122.952603][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 122.954294][ T1850] dvb-usb: error while querying for an remote control event. [ 123.111021][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.113711][ T1850] dvb-usb: error while querying for an remote control event. [ 123.271213][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.273597][ T1850] dvb-usb: error while querying for an remote control event. [ 123.432238][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.434312][ T1850] dvb-usb: error while querying for an remote control event. [ 123.591107][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.593066][ T1850] dvb-usb: error while querying for an remote control event. [ 123.760391][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.771084][ T1850] dvb-usb: error while querying for an remote control event. [ 123.941188][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 123.949087][ T1850] dvb-usb: error while querying for an remote control event. [ 124.111617][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.113823][ T1850] dvb-usb: error while querying for an remote control event. [ 124.291103][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.292732][ T1850] dvb-usb: error while querying for an remote control event. [ 124.451017][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.453177][ T1850] dvb-usb: error while querying for an remote control event. [ 124.611070][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.615369][ T1850] dvb-usb: error while querying for an remote control event. [ 124.771135][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.773264][ T1850] dvb-usb: error while querying for an remote control event. [ 124.941425][ T1850] dvb-usb: bulk message failed: -22 (1/0) [ 124.943521][ T1850] dvb-usb: error while querying for an remote control event. [ 124.962602][ T1850] usb 8-1: USB disconnect, device number 16 [ 124.995412][ T1850] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 125.012011][ T5380] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 125.136505][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.139162][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.142649][ T70] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 125.183136][ T5380] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.188841][ T5380] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.193539][ T5380] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.196555][ T5380] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.204259][ T5380] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.207539][ T5380] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.210367][ T5380] usb 7-1: Product: syz [ 125.212703][ T5380] usb 7-1: Manufacturer: syz [ 125.217792][ T5380] cdc_wdm 7-1:1.0: skipping garbage [ 125.219677][ T5380] cdc_wdm 7-1:1.0: skipping garbage [ 125.223346][ T5380] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 125.225368][ T5380] cdc_wdm 7-1:1.0: Unknown control protocol [ 125.292969][ T70] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.295803][ T70] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.298193][ T70] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.300695][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.306829][ T70] usb 5-1: config 0 descriptor?? [ 125.311854][ T70] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.314219][ T70] dvb-usb: bulk message failed: -22 (3/0) [ 125.320210][ T70] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.324423][ T70] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.326263][ T70] usb 5-1: media controller created [ 125.327977][ T70] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.334793][ T70] dvb-usb: bulk message failed: -22 (6/0) [ 125.336921][ T70] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.351889][ T70] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input22 [ 125.371181][ T70] dvb-usb: schedule remote query interval to 150 msecs. [ 125.373719][ T70] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 125.381727][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 125.483294][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.485180][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.486967][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.488700][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.490425][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.492319][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.494123][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.495813][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.497599][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.499292][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.501118][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.502814][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.504516][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.506182][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.507963][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.509822][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.511578][ T5398] usb 7-1: USB disconnect, device number 22 [ 125.513304][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 125.513315][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 125.513322][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 125.525804][ T5380] usb 5-1: USB disconnect, device number 13 [ 125.531088][ T70] dvb-usb: bulk message failed: -22 (1/0) [ 125.533331][ T70] dvb-usb: error while querying for an remote control event. SYZFAIL: bad allocate request [ 125.553720][ T5380] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. allocated=0 size=4193831/4193832 (errno 11: Resource temporarily unavailable) [ 125.795770][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.884350][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.006808][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.072204][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.198657][ T11] bridge_slave_1: left allmulticast mode [ 126.200642][ T11] bridge_slave_1: left promiscuous mode [ 126.206072][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.213981][ T11] bridge_slave_0: left allmulticast mode [ 126.215491][ T11] bridge_slave_0: left promiscuous mode [ 126.217206][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.616841][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.622654][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.627666][ T11] bond0 (unregistering): Released all slaves [ 126.695367][ T11] : left promiscuous mode [ 127.099931][ T11] hsr_slave_0: left promiscuous mode [ 127.103973][ T11] hsr_slave_1: left promiscuous mode [ 127.106739][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.109762][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.113710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.116189][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.146089][ T11] veth1_macvtap: left promiscuous mode [ 127.149339][ T11] veth0_macvtap: left promiscuous mode [ 127.152246][ T11] veth1_vlan: left promiscuous mode [ 127.154373][ T11] veth0_vlan: left promiscuous mode [ 127.905077][ T11] team0 (unregistering): Port device team_slave_1 removed [ 128.012886][ T11] team0 (unregistering): Port device team_slave_0 removed [ 128.989476][ T11] IPVS: stop unused estimator thread 0... [ 129.085743][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.160613][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.229330][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.271574][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.364296][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.432588][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.486316][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.579274][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.676303][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.759165][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.857413][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.953450][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.064334][ T11] bridge_slave_1: left allmulticast mode [ 130.066530][ T11] bridge_slave_1: left promiscuous mode [ 130.068635][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.075286][ T11] bridge_slave_0: left allmulticast mode [ 130.077180][ T11] bridge_slave_0: left promiscuous mode [ 130.079164][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.086085][ T11] bridge_slave_1: left allmulticast mode [ 130.088001][ T11] bridge_slave_1: left promiscuous mode [ 130.089942][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.094482][ T11] bridge_slave_0: left allmulticast mode [ 130.096165][ T11] bridge_slave_0: left promiscuous mode [ 130.097658][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.105082][ T11] bridge_slave_1: left allmulticast mode [ 130.107111][ T11] bridge_slave_1: left promiscuous mode [ 130.109217][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.115095][ T11] bridge_slave_0: left allmulticast mode [ 130.117151][ T11] bridge_slave_0: left promiscuous mode [ 130.119114][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.947359][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.950950][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.953958][ T11] bond0 (unregistering): Released all slaves [ 130.958371][ T11] bond1 (unregistering): (slave bond2): Releasing backup interface [ 130.960783][ T11] bond1 (unregistering): Released all slaves [ 131.031942][ T11] bond2 (unregistering): Released all slaves [ 131.102685][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.106805][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.110608][ T11] bond0 (unregistering): Released all slaves [ 131.182625][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.187317][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.191268][ T11] bond0 (unregistering): Released all slaves [ 131.196087][ T11] bond1 (unregistering): (slave bond2): Releasing backup interface [ 131.199074][ T11] bond1 (unregistering): Released all slaves [ 131.270615][ T11] bond2 (unregistering): Released all slaves [ 131.927371][ T11] hsr_slave_0: left promiscuous mode [ 131.929879][ T11] hsr_slave_1: left promiscuous mode [ 131.932155][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.934573][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.937718][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.940224][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.945075][ T11] hsr_slave_0: left promiscuous mode [ 131.947390][ T11] hsr_slave_1: left promiscuous mode [ 131.949670][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.951994][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.954995][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.957345][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.962545][ T11] hsr_slave_0: left promiscuous mode [ 131.964794][ T11] hsr_slave_1: left promiscuous mode [ 131.967075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.969617][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.973550][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.975904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.031865][ T11] veth1_macvtap: left promiscuous mode [ 132.033385][ T11] veth0_macvtap: left promiscuous mode [ 132.035176][ T11] veth1_vlan: left promiscuous mode [ 132.036574][ T11] veth0_vlan: left promiscuous mode [ 132.038720][ T11] veth1_macvtap: left promiscuous mode [ 132.040621][ T11] veth0_macvtap: left promiscuous mode [ 132.042807][ T11] veth1_vlan: left promiscuous mode [ 132.044792][ T11] veth0_vlan: left promiscuous mode [ 132.047092][ T11] veth1_macvtap: left promiscuous mode [ 132.048527][ T11] veth0_macvtap: left promiscuous mode [ 132.051092][ T11] veth1_vlan: left promiscuous mode [ 132.052524][ T11] veth0_vlan: left promiscuous mode [ 132.265638][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 132.980733][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.383981][ T11] team0 (unregistering): Port device team_slave_1 removed [ 134.487869][ T11] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 11:08:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000022 RCX=0000000000000000 RDX=1ffff11003ec95ed RSI=0000000000000008 RDI=ffff88801f64af68 RBP=ffffc90000e9f470 RSP=ffffc90000e9f320 R8 =0000000000000000 R9 =fffffbfff2d3198a R10=ffffffff9698cc57 R11=0000000000000002 R12=ffff88801f64a440 R13=0000000000000200 R14=0000000000000009 R15=1ffff920001d3e6c RIP=ffffffff81694fca RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7418e2c CR3=0000000059c9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9144b4fa RBX=ffffffff90920de4 RCX=dffffc0000000000 RDX=ffffffff90920de4 RSI=0000000000000003 RDI=ffffffff90920de0 RBP=ffffffff90920de0 RSP=ffffc900037670d8 R8 =ffffffff9144b530 R9 =ffffffff9144b498 R10=ffffc90003767188 R11=000000000008a17a R12=ffffffff90920dec R13=ffffffff89a17a99 R14=ffffffff90920de0 R15=ffffffff90920de0 RIP=ffffffff813cf338 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73fc230 CR3=0000000059ca0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff848f187c RDX=ffff8880205ba440 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc900032c7538 RSP=ffffc900032c73f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8bb1ce54 R13=dffffc0000000000 R14=0000000000000004 R15=0000000000000040 RIP=ffffffff818cb91c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9e60d0d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055694c266000 CR3=000000000019e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 12b263c012b263c0 ZMM22=eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f eca51e1feca51e1f ZMM23=e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d e117aa7de117aa7d ZMM24=97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 97dcbfc797dcbfc7 ZMM25=24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 24a5da2424a5da24 ZMM26=5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 5e15d6855e15d685 ZMM27=913be8db913be8db 913be8db913be8db 913be8db913be8db 913be8db913be8db 913be8db913be8db 913be8db913be8db 913be8db913be8db 913be8db913be8db ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85037bc5 RDI=ffffffff9a63c220 RBP=ffffffff9a63c1e0 RSP=ffffc900046271f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85037b60 R15=0000000000000000 RIP=ffffffff85037bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0e6778440 CR3=0000000028b82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000fff80000 Opmask02=000000000000ffdf Opmask03=1040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd821ac570 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 acb9133cfcba0d5d 73732601853d286c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642d6332692f 322d6332692f312d 352f356273752f30 2e6463685f796d6d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000322d6332692f 7665642d6332692f 322d6332692f312d 352f356273752f30 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 0000000000000000 0000322d6332692f 7665642d6332692f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 370a007d6c796667 6b78264b483b2649 333b263d333b263f 333b2639333b2638 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263e393a3a263b 393a3a263a393a3a 264c383a3a264f38 3a3a264e383a3a26 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000