last executing test programs: 7.179880001s ago: executing program 2 (id=1664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf251800000008000300", @ANYRES32=r6, @ANYBLOB="1800308004000180080001000200000008000400"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x24040090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc701a3faac1e644f) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0328000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write$uinput_user_dev(r10, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r10, 0x5501) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r13 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r13, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r14, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r15, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r12, 0x40045701, &(0x7f0000000200)=0x400a45) ioctl$SW_SYNC_IOC_INC(r13, 0x40045701, &(0x7f00000002c0)=0x3) ppoll(&(0x7f0000000040)=[{r16, 0x1241}, {0xffffffffffffffff, 0x1002}], 0x2, 0x0, 0x0, 0x0) 5.700439272s ago: executing program 2 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000a60a95000000200000"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="d1000103", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000fcffffff0800a0009e090000080026008009000008009f0003000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x15c}}, 0x4008014) r10 = dup(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000e80)={0x708, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x18a, 0xb, 0x5, 0x9}, {0x5, 0x0, 0x7, 0x9}, {0x7, 0x81, 0x7, 0x4}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7b, 0x80, 0x6, 0x7}]}}}]}}, {{0x8}, {0x294, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x0, 0x3, 0x8000}, {0xc, 0x10, 0x5}, {0x6, 0xe, 0x10, 0x3}, {0x8, 0x6, 0xe4, 0x93f4}, {0x7, 0x7f, 0xe, 0xff}, {0x7, 0x5, 0x0, 0x4}, {0x101, 0x3, 0x57, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x4004001}, 0x815) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.800296918s ago: executing program 0 (id=1673): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x400}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfb}, 0x18) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x400}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfb}, 0x18) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffe], 0x0, 0x8340}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) (async) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) (async) 4.799908652s ago: executing program 3 (id=1674): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f}, 0x94) msgget$private(0x0, 0x0) mkdir(0x0, 0x10) pipe2$9p(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) close(0xffffffffffffffff) r4 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r5 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd4, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) socket(0x2a, 0x3, 0x3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x0) 4.590219211s ago: executing program 0 (id=1675): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x487, 0x0, 0xe8}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r0], 0x7) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x80000002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100000ffdf000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$nci(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) 3.878142645s ago: executing program 2 (id=1678): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0xaaa, @local, 0xff, 0x1}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8000, 0xfffffffc, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x24, 0x0, 0x3, 0xffeff010}, {0x6, 0x0, 0x0, 0x101}]}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "2874b1", 0x18, 0x11, 0x0, @local, @empty, {[], {0x4e21, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2000, 0x4}}}}}}}, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000000)=0x2) 3.741486153s ago: executing program 3 (id=1679): syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x5, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300f1ff000000000000000000100800010001000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r7, 0x0, 0x0, 0x9) 3.631699457s ago: executing program 0 (id=1681): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000005}) syz_clone3(&(0x7f0000000640)={0x844000, 0x0, 0x0, 0x0, {0x17}, &(0x7f0000003d80)=""/4096, 0x1000, &(0x7f0000000540)=""/135, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_setscheduler(0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.089860985s ago: executing program 2 (id=1683): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)="09e5bc2d3e60", 0x6, 0x20000000, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x18, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000000280)=0x5) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mem_return_failed\x00'}, 0x18) kexec_load(0x1, 0x0, 0x0, 0x2) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000640)={0x40002, 0x0, {[0xdaf, 0x5, 0x1, 0xffffffffffff335c, 0x8, 0x6, 0x4, 0x1]}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) listen(r0, 0x401) 2.770338786s ago: executing program 3 (id=1684): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="001547e0fd37383d6fafcd376f57ab6f681f3898b190246b1357293c850ae89d1f18"], 0x38}}, 0x0) syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0xb3f, 0x800, 0x2, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f0000000080)) (async) r7 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0xb3f, 0x800, 0x2, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r10 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000306050000f50000000000000000000a09000200732d610f3956ec709c112fcd38797a3200000000"], 0x20}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000306050000f50000000000000000000a09000200732d610f3956ec709c112fcd38797a3200000000"], 0x20}}, 0x0) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x363e82, 0x0) (async) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x363e82, 0x0) readv(r11, &(0x7f00000018c0)=[{&(0x7f00000022c0)=""/4099, 0x1003}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 2.699064338s ago: executing program 1 (id=1685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000180)={r3, 0x2, 0x8, 0x0, 0x0}) 2.432136748s ago: executing program 3 (id=1686): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x300, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280), 0x0, r3) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={0x0}) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 2.430307084s ago: executing program 1 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000180)={r3, 0x2, 0x8, 0x0, 0x0}) 2.355908803s ago: executing program 1 (id=1687): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f}, 0x94) msgget$private(0x0, 0x0) mkdir(0x0, 0x10) pipe2$9p(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) close(0xffffffffffffffff) r4 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r5 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd4, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) socket(0x2a, 0x3, 0x3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x0) 1.649894758s ago: executing program 2 (id=1688): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)="09e5bc2d", 0x4, 0x20000000, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x18, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000000280)=0x5) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='mem_return_failed\x00'}, 0x18) kexec_load(0x1, 0x0, 0x0, 0x2) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000640)={0x40002, 0x0, {[0xdaf, 0x5, 0x1, 0xffffffffffff335c, 0x8, 0x6, 0x4, 0x1]}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) listen(r0, 0x401) 1.630326104s ago: executing program 3 (id=1689): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/104) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9bce, 0x100000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35, 0x0, 0x1}, 0x28) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0xb6, 0x0, 0x40}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRESOCT], 0x50) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0xf4}) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x5, 0x1, 0xa, 0x7, 0x8, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.551112306s ago: executing program 3 (id=1690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) r4 = socket(0x10, 0x3, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a000000"], 0x190) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.320259321s ago: executing program 1 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="180055002f0300"/20, @ANYRES32=0x0], 0xfffffe87}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 1.240023973s ago: executing program 1 (id=1692): syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x5, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300f1ff000000000000000000100800010001000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r7, 0x0, 0x0, 0x9) 360.786658ms ago: executing program 1 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x1, 0x0, {0x0, 0x3}, {0x841, 0x400}, @ramp={0x81, 0x93, {0x4, 0x7ff, 0x4, 0x4}}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd7013000000000400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 357.715575ms ago: executing program 2 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x1, 0x0, {0x0, 0x3}, {0x841, 0x400}, @ramp={0x81, 0x93, {0x4, 0x7ff, 0x4, 0x4}}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x8c2b01) r2 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000001c0)={0x4}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r8, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x36]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd7013000000000400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 90.0956ms ago: executing program 0 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000180)={r3, 0x2, 0x8, 0x0, 0x0}) 89.790599ms ago: executing program 0 (id=1697): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffff7b, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, 0xfe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x101ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) fanotify_init(0x200, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 0s ago: executing program 0 (id=1698): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x1, 'sh\x00', 0x12, 0x6}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x7, &(0x7f0000000240)={@empty, @rand_addr=0x64010100}, 0xc) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x1, 'wlc\x00', 0x20, 0x0, 0x1}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/53, 0x35}], 0x4, &(0x7f0000001400)=""/241, 0xf1}, 0xfffb}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/254, 0xfe}, {&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/241, 0xf1}], 0x3, &(0x7f0000001600)=""/98, 0x62}, 0x3}, {{&(0x7f0000001940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000019c0)=""/222, 0xde}, {&(0x7f0000001ac0)=""/176, 0xb0}, {&(0x7f0000001b80)=""/178, 0xb2}], 0x3, &(0x7f0000001c40)=""/133, 0x85}, 0xfb6}, {{&(0x7f0000001d00)=@sco, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/160, 0xa0}], 0x3, &(0x7f0000002f40)=""/13, 0xd}, 0x4}, {{&(0x7f0000002f80)=@isdn, 0x80, &(0x7f0000003180)=[{&(0x7f0000003000)=""/32, 0x20}, {&(0x7f0000003040)=""/73, 0x49}, {&(0x7f00000030c0)=""/139, 0x8b}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000}}], 0x6, 0x0, &(0x7f0000004280)) syz_emit_ethernet(0x7a, &(0x7f0000004380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500006c000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c020000907810000303062204f0b213122313a3101166d6c8030000003c016f4308123bf619e8efd34e4f57cb930c62a95d3b05160000fffe00000008000000090000001700f46400000000b811059da0db378b88102398eea1ead849624df7cdc0a8765b633634cea019b6888bcc236618a938db220e6ce2be4bc2587dd5a3a6c863ff18ef2a350506483188d5"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000080)=0x5, 0x4) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) fsopen(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000042c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x5) readv(r7, &(0x7f0000000140)=[{&(0x7f0000004300)=""/120, 0x78}], 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) kernel console output (not intermixed with test programs): tting 0 [ 232.468116][ T841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 232.471512][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.479020][ T841] usb 6-1: config 0 descriptor?? [ 232.633045][ T8967] binder: 8966:8967 ioctl 0 80000040 returned -22 [ 232.696534][ T8970] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 232.709718][ T8970] bond1: entered promiscuous mode [ 232.711597][ T8970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.728247][ T8970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.730831][ T8970] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 232.734398][ T8970] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 232.740287][ T8970] bond1: (slave gre1): making interface the new active one [ 232.743330][ T8970] gre1: entered promiscuous mode [ 232.746727][ T8970] bond1: (slave gre1): Enslaving as an active interface with an up link [ 233.732172][ T8982] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.548016][ T8994] netdevsim netdevsim3: Direct firmware load for . [ 234.548016][ T8994] failed with error -2 [ 234.551767][ T8994] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 234.551767][ T8994] [ 234.906103][ T841] usbhid 6-1:0.0: can't add hid device: -71 [ 234.908153][ T841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.911546][ T841] usb 6-1: USB disconnect, device number 12 [ 235.603814][ T9016] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 235.605948][ T9016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.608778][ T9016] vhci_hcd vhci_hcd.0: Device attached [ 235.650844][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 235.903259][ T6026] usb 42-1: SetAddress Request (19) to port 0 [ 235.905198][ T6026] usb 42-1: new SuperSpeed USB device number 19 using vhci_hcd [ 236.383369][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 236.386088][ T5942] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 236.711538][ T9017] vhci_hcd: connection reset by peer [ 236.724827][ T82] vhci_hcd: stop threads [ 236.726385][ T82] vhci_hcd: release socket [ 236.729017][ T82] vhci_hcd: disconnect device [ 236.783420][ T6009] usb 38-1: device descriptor read/8, error -110 [ 236.983203][ T841] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 237.043287][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 237.043298][ T40] audit: type=1326 audit(1761782816.044:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 237.054199][ T40] audit: type=1326 audit(1761782816.044:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.060539][ T40] audit: type=1326 audit(1761782816.044:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.067376][ T40] audit: type=1326 audit(1761782816.044:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.073884][ T40] audit: type=1326 audit(1761782816.044:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.080486][ T40] audit: type=1326 audit(1761782816.044:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 237.087174][ T40] audit: type=1326 audit(1761782816.044:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.093797][ T40] audit: type=1326 audit(1761782816.044:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f25598 code=0x7ffc0000 [ 237.100255][ T40] audit: type=1326 audit(1761782816.044:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 237.107975][ T40] audit: type=1326 audit(1761782816.044:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.850" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 237.153227][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 237.156762][ T841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.161077][ T841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.165100][ T841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.167160][ T841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.169954][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.173816][ T6009] usb usb38-port1: attempt power cycle [ 237.182893][ T841] usb 6-1: config 0 descriptor?? [ 238.193122][ T9048] comedi comedi0: reset error (fatal) [ 238.195720][ T9049] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 238.408736][ T6009] usb usb38-port1: unable to enumerate USB device [ 239.337536][ T841] usbhid 6-1:0.0: can't add hid device: -71 [ 239.341601][ T841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 239.379894][ T841] usb 6-1: USB disconnect, device number 13 [ 239.703214][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 239.853187][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 239.870538][ T56] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.874692][ T56] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.879078][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 239.882297][ T56] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 239.886815][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.940851][ T56] usb 8-1: config 0 descriptor?? [ 240.953585][ T6026] usb 42-1: device descriptor read/8, error -110 [ 241.624761][ T6026] usb usb42-port1: attempt power cycle [ 241.913908][ T9095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 242.234398][ T6026] usb usb42-port1: unable to enumerate USB device [ 242.239330][ T56] usbhid 8-1:0.0: can't add hid device: -71 [ 242.247233][ T56] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 242.262857][ T56] usb 8-1: USB disconnect, device number 10 [ 242.267688][ T9101] binder: BINDER_SET_CONTEXT_MGR already set [ 242.270504][ T9101] binder: 9100:9101 ioctl 4018620d 80000040 returned -16 [ 242.282138][ T9103] binder: 9102:9103 ioctl c0306201 80000140 returned -14 [ 242.599914][ T9111] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 242.713257][ T5960] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.863190][ T5960] usb 6-1: Using ep0 maxpacket: 8 [ 242.867237][ T5960] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.871552][ T5960] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.876274][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.878893][ T5960] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 242.882471][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.887869][ T5960] usb 6-1: config 0 descriptor?? [ 244.271771][ T9130] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 244.274532][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.279500][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 244.316703][ T9134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.553203][ T6027] usb 38-1: SetAddress Request (24) to port 0 [ 244.555920][ T6027] usb 38-1: new SuperSpeed USB device number 24 using vhci_hcd [ 244.889224][ T9135] vhci_hcd: connection reset by peer [ 244.891565][ T1142] vhci_hcd: stop threads [ 244.893376][ T1142] vhci_hcd: release socket [ 244.895326][ T1142] vhci_hcd: disconnect device [ 245.307669][ T5960] usbhid 6-1:0.0: can't add hid device: -71 [ 245.312193][ T5960] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 245.315842][ T5960] usb 6-1: USB disconnect, device number 14 [ 245.373218][ T9147] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 245.753202][ T6026] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 245.903205][ T6026] usb 6-1: Using ep0 maxpacket: 8 [ 245.907522][ T6026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.912092][ T6026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.915638][ T6026] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.918410][ T6026] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 245.924200][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.929573][ T6026] usb 6-1: config 0 descriptor?? [ 247.093926][ T9164] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 247.119139][ T5956] Bluetooth: hci3: unexpected event for opcode 0x732f [ 247.783239][ T5988] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 247.933731][ T5988] usb 7-1: Using ep0 maxpacket: 8 [ 248.044744][ T5988] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.049064][ T5988] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.052201][ T5988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.054415][ T5988] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.057316][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.061077][ T5988] usb 7-1: config 0 descriptor?? [ 248.733249][ T6026] usbhid 6-1:0.0: can't add hid device: -71 [ 248.737064][ T6026] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 249.583242][ T6027] usb 38-1: device descriptor read/8, error -110 [ 249.583832][ T9190] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 249.743328][ T6026] usb 6-1: USB disconnect, device number 15 [ 249.975895][ T6027] usb usb38-port1: attempt power cycle [ 250.261868][ T5988] usbhid 7-1:0.0: can't add hid device: -71 [ 250.263852][ T5988] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 250.267355][ T5988] usb 7-1: USB disconnect, device number 8 [ 250.285232][ T9185] netlink: 'syz.1.895': attribute type 2 has an invalid length. [ 250.290165][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 250.295428][ T9185] fuse: Bad value for 'fd' [ 250.572541][ T6027] usb usb38-port1: unable to enumerate USB device [ 250.624124][ T9198] binder: BINDER_SET_CONTEXT_MGR already set [ 250.626062][ T9198] binder: 9197:9198 ioctl 4018620d 80000140 returned -16 [ 251.788512][ T9219] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 252.243142][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 252.403245][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 252.413619][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.421072][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.425352][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.427366][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.430142][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.436319][ T24] usb 5-1: config 0 descriptor?? [ 252.451068][ T5956] Bluetooth: hci3: unexpected event for opcode 0x730c [ 252.773174][ T6027] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 252.809300][ T9238] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 252.811685][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 252.817851][ T9238] fuse: Bad value for 'fd' [ 252.943164][ T6027] usb 7-1: Using ep0 maxpacket: 8 [ 252.946980][ T6027] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.950160][ T6027] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.952935][ T6027] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.955876][ T6027] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.959721][ T6027] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.962699][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.172310][ T6027] usb 7-1: GET_CAPABILITIES returned 0 [ 253.174136][ T6027] usbtmc 7-1:16.0: can't read capabilities [ 253.475820][ T841] usb 7-1: USB disconnect, device number 9 [ 254.598208][ T5956] Bluetooth: hci1: unexpected event for opcode 0x200c [ 254.633013][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 254.698813][ T9263] input: syz1 as /devices/virtual/input/input8 [ 254.701326][ T9263] input: failed to attach handler leds to device input8, error: -6 [ 254.779677][ T9266] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 254.843959][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 254.848203][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 254.889356][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 254.891276][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.900693][ T24] usb 5-1: USB disconnect, device number 10 [ 255.258244][ T9281] netlink: 'syz.2.922': attribute type 2 has an invalid length. [ 255.260976][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 255.267123][ T9281] fuse: Bad value for 'fd' [ 255.672946][ T9283] random: crng reseeded on system resumption [ 256.641842][ T5956] Bluetooth: hci1: unexpected event for opcode 0x200c [ 257.594958][ T9312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.852291][ T9301] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.198785][ T9341] netlink: 'syz.0.934': attribute type 2 has an invalid length. [ 259.201302][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 259.205676][ T9341] fuse: Bad value for 'fd' [ 259.695036][ T9349] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.387667][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.722380][ T9364] tmpfs: Unknown parameter 'usrquota_inode' [ 261.324775][ T9383] netlink: 'syz.1.950': attribute type 2 has an invalid length. [ 261.327385][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 261.331278][ T9383] fuse: Bad value for 'fd' [ 263.443210][ T56] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 263.603759][ T56] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 263.606954][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.609746][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.613200][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.615966][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.618776][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.622171][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.625092][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.627996][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.631480][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.634369][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.637294][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.640817][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.644485][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.648479][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.652044][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.655249][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.658083][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.661738][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.664940][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.670262][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.675472][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.678382][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.681314][ T56] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.684972][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.688713][ T56] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 263.691663][ T56] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 263.694473][ T56] usb 8-1: Product: syz [ 263.695851][ T56] usb 8-1: Manufacturer: syz [ 263.697442][ T56] usb 8-1: SerialNumber: syz [ 263.700225][ T56] usb 8-1: config 0 descriptor?? [ 263.705959][ T56] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 263.814374][ T9418] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 263.816924][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 263.824159][ T9418] fuse: Bad value for 'fd' [ 265.993302][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 266.000329][ T24] usb 8-1: USB disconnect, device number 11 [ 266.003406][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 266.143256][ T56] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 266.156671][ T9440] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 266.303124][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 266.306031][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.309543][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.312717][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 266.315244][ T56] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 266.318062][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.322012][ T56] usb 7-1: config 0 descriptor?? [ 268.360324][ T9464] netlink: 'syz.0.975': attribute type 2 has an invalid length. [ 268.363705][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 268.369842][ T9464] fuse: Bad value for 'fd' [ 268.774066][ T56] usbhid 7-1:0.0: can't add hid device: -71 [ 268.776086][ T56] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 268.795164][ T56] usb 7-1: USB disconnect, device number 10 [ 268.819262][ T9471] sctp: [Deprecated]: syz.2.981 (pid 9471) Use of int in max_burst socket option deprecated. [ 268.819262][ T9471] Use struct sctp_assoc_value instead [ 269.129545][ T9485] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 270.495352][ T9500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 270.498135][ T9500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 270.501673][ T9500] vhci_hcd vhci_hcd.0: Device attached [ 270.694098][ T9501] vhci_hcd: connection closed [ 270.694761][ T1204] vhci_hcd: stop threads [ 270.700374][ T1204] vhci_hcd: release socket [ 270.701964][ T1204] vhci_hcd: disconnect device [ 271.065763][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 271.393283][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 271.400303][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.404309][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.407764][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.410043][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.413029][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.435058][ T9] usb 5-1: config 0 descriptor?? 0[ 273.058146][ T9545] netlink: 'syz.3.1000': attribute type 2 has an invalid length. [ 273.062359][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 273.068550][ T9545] fuse: Bad value for 'fd' [ 273.425367][ T9552] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 273.683270][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 273.685313][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.702364][ T9] usb 5-1: USB disconnect, device number 11 [ 274.119493][ T9566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 274.122407][ T9566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.127512][ T9566] vhci_hcd vhci_hcd.0: Device attached [ 274.404186][ T24] usb 40-1: SetAddress Request (7) to port 0 [ 274.406828][ T24] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 274.596908][ T9572] vhci_hcd: connection reset by peer [ 274.603643][ T1148] vhci_hcd: stop threads [ 274.605449][ T1148] vhci_hcd: release socket [ 274.607335][ T1148] vhci_hcd: disconnect device [ 275.824054][ T9605] netlink: 'syz.3.1011': attribute type 2 has an invalid length. [ 275.826784][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 275.831436][ T9605] fuse: Bad value for 'fd' [ 275.883138][ T6027] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 276.063138][ T6027] usb 7-1: Using ep0 maxpacket: 8 [ 276.066275][ T6027] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.069712][ T6027] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.072802][ T6027] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.075111][ T6027] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.077913][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.081889][ T6027] usb 7-1: config 0 descriptor?? [ 278.258424][ T9644] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 278.261141][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 278.271478][ T9644] fuse: Bad value for 'fd' [ 278.515152][ T6027] usbhid 7-1:0.0: can't add hid device: -71 [ 278.517486][ T6027] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 278.533780][ T6027] usb 7-1: USB disconnect, device number 11 [ 279.503191][ T24] usb 40-1: device descriptor read/8, error -110 [ 279.893773][ T24] usb usb40-port1: attempt power cycle [ 280.483815][ T24] usb usb40-port1: unable to enumerate USB device [ 280.523327][ T9683] ubi: mtd0 is already attached to ubi31 [ 280.833198][ T5988] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 280.993212][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 280.996240][ T5988] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.999686][ T5988] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.002752][ T5988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.005074][ T5988] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 281.007736][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.011263][ T5988] usb 5-1: config 0 descriptor?? [ 282.116459][ T9709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 282.119046][ T9709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.122353][ T9709] vhci_hcd vhci_hcd.0: Device attached [ 282.393220][ T841] usb 40-1: SetAddress Request (11) to port 0 [ 282.395567][ T841] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 282.863005][ T9714] vhci_hcd: connection reset by peer [ 282.866287][ T12] vhci_hcd: stop threads [ 282.868644][ T12] vhci_hcd: release socket [ 282.870206][ T12] vhci_hcd: disconnect device [ 284.087519][ T5988] usbhid 5-1:0.0: can't add hid device: -71 [ 284.090438][ T5988] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.110497][ T5988] usb 5-1: USB disconnect, device number 12 [ 284.234692][ T9748] binder: 9747:9748 ioctl c0306201 80000640 returned -22 [ 284.294833][ T1148] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.488578][ T9758] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 285.663423][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 285.823264][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 285.857416][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.860926][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.865211][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.868000][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.871437][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.882793][ T24] usb 5-1: config 0 descriptor?? [ 286.616473][ T9794] random: crng reseeded on system resumption [ 287.276605][ T9790] FAULT_INJECTION: forcing a failure. [ 287.276605][ T9790] name fail_futex, interval 1, probability 0, space 0, times 1 [ 287.281502][ T9790] CPU: 2 UID: 0 PID: 9790 Comm: syz.1.1072 Not tainted syzkaller #0 PREEMPT(full) [ 287.281517][ T9790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.281523][ T9790] Call Trace: [ 287.281528][ T9790] [ 287.281533][ T9790] dump_stack_lvl+0x16c/0x1f0 [ 287.281562][ T9790] should_fail_ex+0x512/0x640 [ 287.281583][ T9790] get_futex_key+0x1d0/0x1560 [ 287.281600][ T9790] ? __pfx_get_futex_key+0x10/0x10 [ 287.281614][ T9790] ? find_held_lock+0x2b/0x80 [ 287.281627][ T9790] ? __up_read+0x1f8/0x750 [ 287.281646][ T9790] futex_wake+0xea/0x530 [ 287.281662][ T9790] ? do_user_addr_fault+0x829/0x1370 [ 287.281676][ T9790] ? __pfx_futex_wake+0x10/0x10 [ 287.281693][ T9790] ? do_user_addr_fault+0x843/0x1370 [ 287.281706][ T9790] ? rcu_is_watching+0x12/0xc0 [ 287.281720][ T9790] do_futex+0x1e3/0x350 [ 287.281735][ T9790] ? __pfx_do_futex+0x10/0x10 [ 287.281754][ T9790] mm_release+0x24e/0x300 [ 287.281767][ T9790] do_exit+0x68e/0x2bf0 [ 287.281786][ T9790] ? fuse_put_request+0x1e8/0x310 [ 287.281806][ T9790] ? __pfx_do_exit+0x10/0x10 [ 287.281821][ T9790] ? do_raw_spin_lock+0x12c/0x2b0 [ 287.281839][ T9790] ? find_held_lock+0x2b/0x80 [ 287.281852][ T9790] do_group_exit+0xd3/0x2a0 [ 287.281869][ T9790] get_signal+0x2671/0x26d0 [ 287.281882][ T9790] ? find_held_lock+0x2b/0x80 [ 287.281897][ T9790] ? __pfx_get_signal+0x10/0x10 [ 287.281909][ T9790] ? mntput_no_expire+0x15e/0xc80 [ 287.281928][ T9790] ? do_raw_spin_lock+0x12c/0x2b0 [ 287.281948][ T9790] arch_do_signal_or_restart+0x8f/0x790 [ 287.281963][ T9790] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 287.281981][ T9790] ? ksys_write+0x1ac/0x250 [ 287.281993][ T9790] ? __pfx___ia32_sys_chroot+0x10/0x10 [ 287.282011][ T9790] exit_to_user_mode_loop+0x85/0x130 [ 287.282029][ T9790] __do_fast_syscall_32+0x240/0x300 [ 287.282046][ T9790] do_fast_syscall_32+0x32/0x80 [ 287.282059][ T9790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.282073][ T9790] RIP: 0023:0xf7f41579 [ 287.282082][ T9790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 287.282093][ T9790] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 000000000000003d [ 287.282104][ T9790] RAX: fffffffffffffffc RBX: 0000000080000240 RCX: 0000000000000000 [ 287.282111][ T9790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.282117][ T9790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.282123][ T9790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 287.282129][ T9790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.282146][ T9790] [ 287.433249][ T841] usb 40-1: device descriptor read/8, error -110 [ 287.796930][ T9804] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 287.834939][ T841] usb usb40-port1: attempt power cycle [ 288.259386][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 288.263280][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.270661][ T24] usb 5-1: USB disconnect, device number 13 [ 288.424279][ T841] usb usb40-port1: unable to enumerate USB device [ 289.684564][ T9836] Driver unsupported XDP return value 0 on prog (id 245) dev N/A, expect packet loss! [ 289.754052][ T9829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 290.133370][ T9849] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1086'. [ 290.205996][ T9849] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 290.313281][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 290.463199][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 290.467164][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.471926][ T24] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.476243][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 290.479029][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 290.482761][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.488155][ T24] usb 8-1: config 0 descriptor?? [ 290.955189][ T9864] random: crng reseeded on system resumption [ 292.225410][ T9873] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.960467][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 292.973441][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 292.978802][ T24] usb 8-1: USB disconnect, device number 12 [ 295.639424][ T9890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1098'. [ 295.733224][ T5960] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 295.883189][ T5960] usb 8-1: Using ep0 maxpacket: 8 [ 295.886544][ T5960] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.890646][ T5960] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.894765][ T5960] usb 8-1: config 0 interface 0 has no altsetting 0 [ 295.896949][ T5960] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 295.899696][ T5960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.903628][ T5960] usb 8-1: config 0 descriptor?? [ 296.012250][ T9913] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 297.102586][ T9923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 298.377995][ T5960] usbhid 8-1:0.0: can't add hid device: -71 [ 298.388885][ T5960] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 298.396988][ T5960] usb 8-1: USB disconnect, device number 13 [ 300.484792][ T9976] 9pnet_virtio: no channels available for device syz [ 300.528405][ T9976] netlink: 'syz.1.1117': attribute type 2 has an invalid length. [ 300.531538][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 301.014658][ T5960] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 301.183147][ T5960] usb 7-1: Using ep0 maxpacket: 8 0[ 301.403161][ T5960] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.406666][ T5960] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.409738][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0 [ 301.411848][ T5960] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.822050][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.833851][ T5960] usb 7-1: config 0 descriptor?? [ 302.855499][T10007] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 302.857930][T10007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.879417][T10007] vhci_hcd vhci_hcd.0: Device attached [ 303.143430][ T6009] usb 40-1: SetAddress Request (15) to port 0 [ 303.146281][ T6009] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 303.411356][T10010] vhci_hcd: connection reset by peer [ 303.413649][ T1204] vhci_hcd: stop threads [ 303.415961][ T1204] vhci_hcd: release socket [ 303.418111][ T1204] vhci_hcd: disconnect device [ 303.633256][ T5960] usbhid 7-1:0.0: can't add hid device: -71 [ 303.635324][ T5960] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 303.646056][ T5960] usb 7-1: USB disconnect, device number 12 [ 305.744276][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1138'. [ 306.093245][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 306.273222][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 306.284565][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.289666][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.293044][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 306.295303][ T57] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 306.298235][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.312654][ T57] usb 8-1: config 0 descriptor?? [ 307.103129][ T5960] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 307.253131][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 307.256477][ T5960] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.260179][ T5960] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.263350][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.265525][ T5960] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 307.268425][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.272585][ T5960] usb 7-1: config 0 descriptor?? [ 308.223937][ T6009] usb 40-1: device descriptor read/8, error -110 [ 308.623702][ T6009] usb usb40-port1: attempt power cycle [ 308.652724][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 308.655014][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 308.659574][ T57] usb 8-1: USB disconnect, device number 14 [ 309.205845][ T6009] usb usb40-port1: unable to enumerate USB device [ 309.735528][ T5960] usbhid 7-1:0.0: can't add hid device: -71 [ 309.737633][ T5960] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 309.744601][ T5960] usb 7-1: USB disconnect, device number 13 [ 310.823196][ T5960] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.973653][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 310.977839][ T5960] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.982499][ T5960] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.986956][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.990325][ T5960] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 310.994515][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.002858][ T5960] usb 5-1: config 0 descriptor?? [ 311.693230][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 311.843147][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 311.847403][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.850893][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.854227][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 311.856561][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 311.859737][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.863709][ T9] usb 8-1: config 0 descriptor?? [ 313.760885][ T5960] usbhid 5-1:0.0: can't add hid device: -71 [ 313.765018][ T5960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.774850][ T5960] usb 5-1: USB disconnect, device number 14 [ 313.926523][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 313.929144][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 313.944967][ T9] usb 8-1: USB disconnect, device number 15 [ 314.031104][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 314.059242][T10141] macvlan2: entered allmulticast mode [ 314.061570][T10141] veth1_vlan: entered allmulticast mode [ 314.069063][T10141] veth1_vlan: left allmulticast mode [ 314.990985][T10156] random: crng reseeded on system resumption [ 315.988671][T10165] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 316.148446][T10169] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 317.393175][ T6013] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 317.573172][ T6013] usb 8-1: Using ep0 maxpacket: 8 [ 317.577111][ T6013] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.581244][ T6013] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.584698][ T6013] usb 8-1: config 0 interface 0 has no altsetting 0 [ 317.588168][ T6013] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 317.591067][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.597116][ T6013] usb 8-1: config 0 descriptor?? [ 317.662679][T10185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1174'. [ 319.669018][T10207] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 320.033987][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 320.053450][T10214] macvlan2: entered allmulticast mode [ 320.055242][T10214] veth1_vlan: entered allmulticast mode [ 320.060593][T10214] veth1_vlan: left allmulticast mode [ 320.242961][ T6013] usbhid 8-1:0.0: can't add hid device: -71 [ 320.245533][ T6013] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 320.253298][ T6013] usb 8-1: USB disconnect, device number 16 [ 321.385191][T10232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1186'. [ 321.522131][T10231] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 321.568894][T10230] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 321.829333][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.994641][T10283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.073832][T10318] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.649636][T10321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 329.367737][T10344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 329.369850][T10344] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.374750][T10344] vhci_hcd vhci_hcd.0: Device attached [ 329.599453][T10344] warning: `syz.1.1215' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.939072][T10348] vhci_hcd: connection closed [ 329.939529][ T13] vhci_hcd: stop threads [ 329.943352][ T13] vhci_hcd: release socket [ 329.945072][ T13] vhci_hcd: disconnect device [ 330.769842][T10368] 9pnet_virtio: no channels available for device syz [ 331.592565][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 331.717080][T10379] 9pnet_fd: Insufficient options for proto=fd [ 333.884356][T10402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 335.593755][ T841] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 335.743783][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 335.748071][ T841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.753450][ T841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.757738][ T841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.760542][ T841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 335.765144][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.768693][T10439] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 335.770558][ T841] usb 6-1: config 0 descriptor?? [ 336.598198][T10445] CUSE: info not properly terminated [ 336.876225][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 336.879826][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 336.922127][T10454] sctp: [Deprecated]: syz.3.1244 (pid 10454) Use of int in maxseg socket option. [ 336.922127][T10454] Use struct sctp_assoc_value instead [ 337.153324][ T6027] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 337.303263][ T6027] usb 7-1: Using ep0 maxpacket: 8 [ 337.307701][ T6027] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.311996][ T6027] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.316690][ T6027] usb 7-1: config 0 interface 0 has no altsetting 0 [ 337.320063][ T6027] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.324038][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.329481][ T6027] usb 7-1: config 0 descriptor?? [ 337.959518][ T6026] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 338.021450][ T841] usbhid 6-1:0.0: can't add hid device: -71 [ 338.033961][ T841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 338.037758][ T841] usb 6-1: USB disconnect, device number 16 [ 338.050188][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1248'. [ 338.126822][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 338.200569][ T6026] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.206128][ T6026] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.210703][ T6026] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.213267][ T6026] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 338.216336][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.232668][ T6026] usb 5-1: config 0 descriptor?? [ 339.799626][ T6027] usbhid 7-1:0.0: can't add hid device: -71 [ 339.810783][ T6027] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 339.823041][ T6027] usb 7-1: USB disconnect, device number 14 [ 340.544459][ T6026] usbhid 5-1:0.0: can't add hid device: -71 [ 340.555192][ T6026] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 340.588097][ T6026] usb 5-1: USB disconnect, device number 15 [ 340.908152][T10498] syz_tun: entered allmulticast mode [ 340.918494][T10498] dvmrp8: entered allmulticast mode [ 342.573245][ T57] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 342.598947][T10502] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 342.753276][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 342.756903][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.760470][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.763743][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 342.766533][ T57] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 342.769663][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.792559][ T57] usb 8-1: config 0 descriptor?? [ 343.184970][T10522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 343.933936][ T6026] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 344.103379][ T6026] usb 6-1: Using ep0 maxpacket: 8 [ 344.115311][ T6026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.120091][ T6026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.126542][ T6026] usb 6-1: config 0 interface 0 has no altsetting 0 [ 344.130155][ T6026] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 344.134041][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.142509][ T6026] usb 6-1: config 0 descriptor?? [ 344.218955][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 344.221837][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 344.229339][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 344.232034][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 344.257046][T10534] ceph: No mds server is up or the cluster is laggy [ 344.861948][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 344.864834][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 344.868857][ T57] usb 8-1: USB disconnect, device number 17 [ 345.599384][T10555] overlay: filesystem on ./bus not supported as upperdir [ 345.602379][T10555] overlay: ./bus is not a directory [ 345.605114][T10555] overlay: ./bus is not a directory [ 345.607792][T10555] overlay: ./bus is not a directory [ 345.611054][T10555] overlay: ./bus is not a directory [ 345.617578][T10555] overlay: ./bus is not a directory [ 345.622443][T10555] overlay: ./bus is not a directory [ 345.648591][T10555] overlay: ./bus is not a directory [ 345.651183][T10555] overlay: ./bus is not a directory [ 345.654479][T10555] overlay: ./bus is not a directory [ 345.658201][T10555] overlay: ./bus is not a directory [ 345.660907][T10555] overlay: ./bus is not a directory [ 345.663793][T10555] overlay: ./bus is not a directory [ 345.666622][T10555] overlay: ./bus is not a directory [ 345.733221][ T6009] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 345.883185][ T6009] usb 5-1: Using ep0 maxpacket: 8 [ 345.888616][ T6009] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.893401][ T6009] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.897830][ T6009] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.900652][ T6009] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 345.904650][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.925483][ T6009] usb 5-1: config 0 descriptor?? [ 346.013183][ T5960] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 346.163250][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 346.175606][ T5960] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 346.183427][ T5960] usb 7-1: config 0 has no interface number 0 [ 346.188054][ T5960] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 346.191146][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.195169][ T5960] usb 7-1: Product: syz [ 346.197209][ T5960] usb 7-1: Manufacturer: syz [ 346.198844][ T5960] usb 7-1: SerialNumber: syz [ 346.213690][ T5960] usb 7-1: config 0 descriptor?? [ 346.224215][ T5960] hub 7-1:0.132: bad descriptor, ignoring hub [ 346.226472][ T5960] hub 7-1:0.132: probe with driver hub failed with error -5 [ 346.231208][ T5960] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input9 [ 346.380536][ T6026] usbhid 6-1:0.0: can't add hid device: -71 [ 346.388032][ T6026] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 346.393306][ T6026] usb 6-1: USB disconnect, device number 17 [ 346.673262][T10569] batadv_slave_1: entered promiscuous mode [ 346.691553][T10569] veth0: entered promiscuous mode [ 347.570724][T10572] 9pnet_virtio: no channels available for device syz [ 347.885990][T10575] 9pnet_virtio: no channels available for device syz [ 348.299992][ T6009] usbhid 5-1:0.0: can't add hid device: -71 [ 348.302380][ T6009] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 348.310088][ T6009] usb 5-1: USB disconnect, device number 16 [ 348.495078][T10578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1278'. [ 348.783457][T10569] veth0: left promiscuous mode [ 348.785967][T10569] batadv_slave_1: left promiscuous mode [ 349.579802][T10585] random: crng reseeded on system resumption [ 349.683523][ T6009] usb 7-1: USB disconnect, device number 15 [ 350.183227][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 350.333393][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 350.337767][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.341352][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.346131][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.348666][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 350.351785][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.356042][ T24] usb 5-1: config 0 descriptor?? [ 350.375318][T10602] No control pipe specified [ 351.068247][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 351.210051][T10614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 351.212178][T10614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.215687][T10614] vhci_hcd vhci_hcd.0: Device attached [ 351.463173][ T6013] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 351.917652][T10616] vhci_hcd: connection reset by peer [ 351.919708][ T1204] vhci_hcd: stop threads [ 351.921133][ T1204] vhci_hcd: release socket [ 351.922849][ T1204] vhci_hcd: disconnect device [ 352.631096][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 352.718547][T10628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 352.721169][T10628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.723907][T10628] vhci_hcd vhci_hcd.0: Device attached [ 352.973155][ T5960] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 353.207978][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 353.530900][T10629] vhci_hcd: connection reset by peer [ 353.534293][ T12] vhci_hcd: stop threads [ 353.535684][ T12] vhci_hcd: release socket [ 353.537247][ T12] vhci_hcd: disconnect device [ 353.639603][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 354.072533][ T24] usb 5-1: USB disconnect, device number 17 [ 354.383775][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 354.533286][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 354.537053][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 354.541371][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 354.546180][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 354.550362][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.559574][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.565484][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.571775][ T24] usbtmc 5-1:16.0: bulk endpoints not found [ 355.126602][ T5956] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 355.453160][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 355.673173][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 355.684088][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.687639][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.690800][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.692940][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 355.696134][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.703583][ T29] usb 6-1: config 0 descriptor?? [ 355.743374][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 355.835674][T10681] random: crng reseeded on system resumption [ 355.893512][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 355.897590][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.902152][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.907083][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 355.909908][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 355.914082][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.919376][ T10] usb 7-1: config 0 descriptor?? [ 356.326353][ T57] usb 5-1: USB disconnect, device number 18 [ 356.613243][ T6013] vhci_hcd: vhci_device speed not set [ 357.280966][T10688] bridge0: port 3(erspan0) entered blocking state [ 357.283259][T10688] bridge0: port 3(erspan0) entered disabled state [ 357.285505][T10688] erspan0: entered allmulticast mode [ 357.288571][T10688] erspan0: entered promiscuous mode [ 357.291388][T10688] bridge0: port 3(erspan0) entered blocking state [ 357.293560][T10688] bridge0: port 3(erspan0) entered forwarding state [ 357.299313][T10688] erspan0: left allmulticast mode [ 357.300981][T10688] erspan0: left promiscuous mode [ 357.303441][T10688] bridge0: port 3(erspan0) entered disabled state [ 358.053194][ T5960] vhci_hcd: vhci_device speed not set [ 358.161815][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 358.164032][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 358.167487][ T29] usb 6-1: USB disconnect, device number 18 [ 358.352260][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 358.356513][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 358.369739][ T10] usb 7-1: USB disconnect, device number 16 [ 358.807494][T10709] infiniband syz1: set down [ 358.809079][T10709] infiniband syz1: added syz_tun [ 358.840429][T10709] RDS/IB: syz1: added [ 358.841943][T10709] smc: adding ib device syz1 with port count 1 [ 358.844032][T10709] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 359.446972][T10721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1311'. [ 359.817039][T10725] FAULT_INJECTION: forcing a failure. [ 359.817039][T10725] name failslab, interval 1, probability 0, space 0, times 1 [ 359.822484][T10725] CPU: 2 UID: 0 PID: 10725 Comm: syz.3.1313 Not tainted syzkaller #0 PREEMPT(full) [ 359.822509][T10725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.822521][T10725] Call Trace: [ 359.822527][T10725] [ 359.822535][T10725] dump_stack_lvl+0x116/0x1f0 [ 359.822563][T10725] should_fail_ex+0x512/0x640 [ 359.822597][T10725] should_failslab+0xc2/0x120 [ 359.822624][T10725] kmem_cache_alloc_noprof+0x75/0x6e0 [ 359.822644][T10725] ? __send_signal_locked+0x159/0x12c0 [ 359.822679][T10725] ? __send_signal_locked+0x159/0x12c0 [ 359.822707][T10725] __send_signal_locked+0x159/0x12c0 [ 359.822744][T10725] send_sig+0xd7/0x170 [ 359.822765][T10725] ? __pfx_send_sig+0x10/0x10 [ 359.822787][T10725] ? __pfx_woken_wake_function+0x10/0x10 [ 359.822818][T10725] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 359.822843][T10725] sk_stream_error+0xb8/0x120 [ 359.822873][T10725] tcp_sendmsg_locked+0xea7/0x42e0 [ 359.822909][T10725] ? __lock_acquire+0xb8a/0x1c90 [ 359.822945][T10725] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 359.822973][T10725] ? do_raw_spin_lock+0x12c/0x2b0 [ 359.823002][T10725] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.823037][T10725] ? __local_bh_enable_ip+0xa4/0x120 [ 359.823077][T10725] tcp_sendmsg+0x2e/0x50 [ 359.823102][T10725] ? __pfx_tcp_sendmsg+0x10/0x10 [ 359.823126][T10725] inet6_sendmsg+0xb9/0x140 [ 359.823150][T10725] ____sys_sendmsg+0x705/0xc70 [ 359.823176][T10725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.823219][T10725] ? get_compat_msghdr+0x11a/0x170 [ 359.823253][T10725] ? __pfx__kstrtoull+0x10/0x10 [ 359.823282][T10725] ___sys_sendmsg+0x134/0x1d0 [ 359.823303][T10725] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.823321][T10725] ? __lock_acquire+0x622/0x1c90 [ 359.823382][T10725] __sys_sendmmsg+0x2f9/0x420 [ 359.823411][T10725] ? __pfx___sys_sendmmsg+0x10/0x10 [ 359.823442][T10725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.823480][T10725] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 359.823509][T10725] ? ksys_write+0x1ac/0x250 [ 359.823531][T10725] ? __pfx_ksys_write+0x10/0x10 [ 359.823551][T10725] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 359.823585][T10725] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 359.823615][T10725] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 359.823639][T10725] __do_fast_syscall_32+0x7c/0x300 [ 359.823665][T10725] do_fast_syscall_32+0x32/0x80 [ 359.823686][T10725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.823710][T10725] RIP: 0023:0xf7f25579 [ 359.823726][T10725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 359.823745][T10725] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 359.823762][T10725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003c00 [ 359.823774][T10725] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.823785][T10725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.823796][T10725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 359.823808][T10725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.823837][T10725] [ 360.381258][T10735] bridge1: entered allmulticast mode [ 360.427316][T10739] QAT: Stopping all acceleration devices. [ 360.661111][T10733] random: crng reseeded on system resumption [ 361.415966][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 361.636292][T10763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 361.638280][T10763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.641491][T10763] vhci_hcd vhci_hcd.0: Device attached [ 361.923316][ T841] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 362.315722][T10767] vhci_hcd: connection reset by peer [ 362.318638][ T1171] vhci_hcd: stop threads [ 362.320419][ T1171] vhci_hcd: release socket [ 362.322265][ T1171] vhci_hcd: disconnect device [ 362.524893][T10777] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 362.527978][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 362.583372][T10777] fuse: Bad value for 'fd' [ 364.085944][T10803] FAULT_INJECTION: forcing a failure. [ 364.085944][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 364.090529][T10803] CPU: 3 UID: 0 PID: 10803 Comm: syz.0.1335 Not tainted syzkaller #0 PREEMPT(full) [ 364.090567][T10803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.090578][T10803] Call Trace: [ 364.090584][T10803] [ 364.090591][T10803] dump_stack_lvl+0x16c/0x1f0 [ 364.090614][T10803] should_fail_ex+0x512/0x640 [ 364.090639][T10803] ? fs_reclaim_acquire+0xae/0x150 [ 364.090663][T10803] should_failslab+0xc2/0x120 [ 364.090685][T10803] __kmalloc_noprof+0xdd/0x880 [ 364.090708][T10803] ? find_held_lock+0x2b/0x80 [ 364.090726][T10803] ? usb_alloc_urb+0x66/0xa0 [ 364.090751][T10803] ? usb_alloc_urb+0x66/0xa0 [ 364.090767][T10803] usb_alloc_urb+0x66/0xa0 [ 364.090786][T10803] do_proc_control+0x2ef/0x10a0 [ 364.090811][T10803] ? __might_fault+0x13b/0x190 [ 364.090828][T10803] ? __pfx_do_proc_control+0x10/0x10 [ 364.090859][T10803] usbdev_ioctl+0x22ff/0x4070 [ 364.090884][T10803] ? __pfx_usbdev_ioctl+0x10/0x10 [ 364.090914][T10803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.090946][T10803] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.090979][T10803] ? find_held_lock+0x2b/0x80 [ 364.090995][T10803] ? hook_file_ioctl_common+0x145/0x410 [ 364.091019][T10803] ? __fget_files+0x20e/0x3c0 [ 364.091038][T10803] ? __pfx_usbdev_ioctl+0x10/0x10 [ 364.091059][T10803] compat_ptr_ioctl+0x6e/0xa0 [ 364.091081][T10803] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 364.091103][T10803] __ia32_compat_sys_ioctl+0x242/0x370 [ 364.091131][T10803] __do_fast_syscall_32+0x7c/0x300 [ 364.091178][T10803] do_fast_syscall_32+0x32/0x80 [ 364.091197][T10803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.091215][T10803] RIP: 0023:0xf70bd579 [ 364.091228][T10803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 364.091242][T10803] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 364.091257][T10803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 364.091267][T10803] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.091276][T10803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.091285][T10803] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 364.091294][T10803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.091319][T10803] [ 364.166930][T10804] random: crng reseeded on system resumption [ 364.423182][ T56] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 364.552170][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1337'. [ 364.593194][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 364.597008][ T56] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 364.599668][ T56] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 364.602303][ T56] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 364.605255][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.609596][ T56] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.612834][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.617008][ T56] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.621282][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.628305][ T56] usb 5-1: config 0 descriptor?? [ 364.851373][ T56] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 364.861353][ T56] usb 5-1: USB disconnect, device number 19 [ 364.874318][ T56] usblp0: removed [ 365.015516][T10817] 9pnet_virtio: no channels available for device syz [ 365.022205][T10817] netlink: 'syz.1.1338': attribute type 2 has an invalid length. [ 365.024857][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 365.063535][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 365.224726][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 365.228710][ T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 365.232040][ T10] usb 8-1: config 0 has no interface number 0 [ 365.234824][ T10] usb 8-1: config 0 interface 12 has no altsetting 0 [ 365.243593][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 365.246337][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.248863][ T10] usb 8-1: Product: syz [ 365.250474][ T10] usb 8-1: Manufacturer: syz [ 365.252457][ T10] usb 8-1: SerialNumber: syz [ 365.256610][ T10] usb 8-1: config 0 descriptor?? [ 365.293246][ T6027] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 365.443183][ T6027] usb 5-1: Using ep0 maxpacket: 32 [ 365.446871][ T6027] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 365.449550][ T6027] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 365.453201][ T6027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 365.456799][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.463218][ T6027] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.467218][ T6027] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.479390][ T6027] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 365.483368][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.490206][ T6027] usb 5-1: config 0 descriptor?? [ 365.683589][ T10] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 365.691838][ T10] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 365.695696][ T10] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 365.700329][ T10] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 365.706153][ T6027] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 365.714067][ T10] usb 8-1: USB disconnect, device number 18 [ 365.952109][ C3] usblp0: nonzero read bulk status received: -71 [ 365.953370][ T10] usb 5-1: USB disconnect, device number 20 [ 365.955907][T10806] usblp0: error -71 reading from printer [ 366.393152][ T5960] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 366.554898][ T5960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.558967][ T5960] usb 5-1: config 9 has an invalid interface number: 224 but max is 0 [ 366.562431][ T5960] usb 5-1: config 9 has an invalid descriptor of length 36, skipping remainder of the config [ 366.566784][ T5960] usb 5-1: config 9 has no interface number 0 [ 366.569365][ T5960] usb 5-1: config 9 interface 224 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.578461][ T5960] usb 5-1: string descriptor 0 read error: -22 [ 366.581194][ T5960] usb 5-1: New USB device found, idVendor=1410, idProduct=7030, bcdDevice=a8.02 [ 366.585089][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.598594][ T5960] option 5-1:9.224: GSM modem (1-port) converter detected [ 366.793507][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.796973][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.806249][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.809820][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.815282][T10805] usblp0: removed [ 366.817748][ T5960] usb 5-1: USB disconnect, device number 21 [ 366.821593][ T5960] option 5-1:9.224: device disconnected [ 367.013221][ T841] vhci_hcd: vhci_device speed not set [ 367.352779][T10851] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.373797][T10849] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 367.421944][T10852] random: crng reseeded on system resumption [ 368.347130][T10858] loop9: detected capacity change from 0 to 7 [ 368.350227][ T9733] buffer_io_error: 28 callbacks suppressed [ 368.350235][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.354981][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.357898][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.360519][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.364389][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.367594][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.370767][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.376071][ T9733] ldm_validate_partition_table(): Disk read failed. [ 368.379538][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.382716][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.387505][ T9733] Buffer I/O error on dev loop9, logical block 0, async page read [ 368.390791][ T9733] Dev loop9: unable to read RDB block 0 [ 368.394016][ T9733] loop9: unable to read partition table [ 368.396414][ T9733] loop9: partition table beyond EOD, truncated [ 368.400813][T10858] ldm_validate_partition_table(): Disk read failed. [ 368.408841][T10858] Dev loop9: unable to read RDB block 0 [ 368.410896][T10858] loop9: unable to read partition table [ 368.412765][T10858] loop9: partition table beyond EOD, truncated [ 368.415779][T10858] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 368.415779][T10858] ) failed (rc=-5) [ 368.624696][T10869] netlink: 'syz.1.1349': attribute type 2 has an invalid length. [ 368.627260][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 368.631372][T10869] fuse: Bad value for 'fd' [ 368.813204][ T5960] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 368.963189][ T5960] usb 7-1: Using ep0 maxpacket: 32 [ 368.966485][ T5960] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 368.969087][ T5960] usb 7-1: config 0 has no interface number 0 [ 368.971117][ T5960] usb 7-1: config 0 interface 12 has no altsetting 0 [ 368.975421][ T5960] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 368.978394][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.981031][ T5960] usb 7-1: Product: syz [ 368.982390][ T5960] usb 7-1: Manufacturer: syz [ 368.984233][ T5960] usb 7-1: SerialNumber: syz [ 368.987136][ T5960] usb 7-1: config 0 descriptor?? [ 369.434113][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 369.567386][ T5960] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 369.574472][ T5960] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 369.577277][ T5960] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 369.579853][ T5960] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 369.596681][ T5960] usb 7-1: USB disconnect, device number 17 [ 369.656484][T10879] FAULT_INJECTION: forcing a failure. [ 369.656484][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 369.661984][T10879] CPU: 2 UID: 0 PID: 10879 Comm: syz.0.1357 Not tainted syzkaller #0 PREEMPT(full) [ 369.662014][T10879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.662025][T10879] Call Trace: [ 369.662032][T10879] [ 369.662039][T10879] dump_stack_lvl+0x16c/0x1f0 [ 369.662063][T10879] should_fail_ex+0x512/0x640 [ 369.662095][T10879] _copy_from_user+0x2e/0xd0 [ 369.662123][T10879] memdup_user+0x6b/0xe0 [ 369.662143][T10879] kvm_vm_ioctl_set_msr_filter+0x3f4/0x990 [ 369.662171][T10879] kvm_arch_vm_compat_ioctl+0x2c8/0x470 [ 369.662197][T10879] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 369.662244][T10879] ? kasan_quarantine_put+0x10a/0x240 [ 369.662298][T10879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.662329][T10879] ? do_vfs_ioctl+0x128/0x14f0 [ 369.662355][T10879] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 369.662382][T10879] kvm_vm_compat_ioctl+0x172/0x3f0 [ 369.662404][T10879] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 369.662424][T10879] ? find_held_lock+0x2b/0x80 [ 369.662443][T10879] ? hook_file_ioctl_common+0x145/0x410 [ 369.662467][T10879] ? __fget_files+0x20e/0x3c0 [ 369.662490][T10879] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 369.662511][T10879] __ia32_compat_sys_ioctl+0x242/0x370 [ 369.662540][T10879] __do_fast_syscall_32+0x7c/0x300 [ 369.662564][T10879] do_fast_syscall_32+0x32/0x80 [ 369.662584][T10879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.662607][T10879] RIP: 0023:0xf70bd579 [ 369.662621][T10879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 369.662638][T10879] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 369.662654][T10879] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000004104aec6 [ 369.662664][T10879] RDX: 0000000080000d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.662673][T10879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.662685][T10879] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 369.662694][T10879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.662719][T10879] [ 369.963223][ T6013] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 370.123207][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 370.126141][ T6013] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 370.128682][ T6013] usb 5-1: config 0 has no interface number 0 [ 370.130629][ T6013] usb 5-1: config 0 interface 48 has no altsetting 0 [ 370.134435][ T6013] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 370.137399][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.139839][ T6013] usb 5-1: Product: syz [ 370.141164][ T6013] usb 5-1: Manufacturer: syz [ 370.142639][ T6013] usb 5-1: SerialNumber: syz [ 370.145442][ T6013] usb 5-1: config 0 descriptor?? [ 370.274398][T10885] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1358'. [ 370.354492][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.359036][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.366822][ T6013] usb 5-1: USB disconnect, device number 22 [ 370.378743][T10885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.385239][T10885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.391927][T10885] bond0 (unregistering): Released all slaves [ 370.614486][T10889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 370.971197][T10894] random: crng reseeded on system resumption [ 371.000985][T10896] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1362'. [ 371.006398][T10896] futex_wake_op: syz.0.1362 tries to shift op by 32; fix this program [ 371.728565][T10908] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 371.797008][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1366'. [ 371.813739][T10910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'. [ 371.859468][T10911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 371.862043][T10911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 371.865321][T10911] vhci_hcd vhci_hcd.0: Device attached [ 372.342725][T10912] vhci_hcd: connection closed [ 372.377564][ T61] vhci_hcd: stop threads [ 372.381807][ T61] vhci_hcd: release socket [ 372.619585][ T61] vhci_hcd: disconnect device [ 372.844272][ T29] usb 44-1: enqueue for inactive port 0 [ 372.875635][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 373.325720][ T56] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 373.381080][ T29] usb usb44-port1: attempt power cycle [ 373.484624][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 373.489493][ T56] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.494287][ T56] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.516206][ T56] usb 6-1: config 0 interface 0 has no altsetting 0 [ 373.518408][ T56] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 373.524174][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.529021][T10936] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 373.531200][ T56] usb 6-1: config 0 descriptor?? [ 373.953821][ T29] usb usb44-port1: unable to enumerate USB device [ 373.999037][T10940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 374.521970][ T5956] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 374.598634][T10955] netlink: 10772 bytes leftover after parsing attributes in process `syz.3.1377'. [ 374.601688][T10955] openvswitch: netlink: Flow key attr not present in new flow. [ 374.646303][T10959] input: syz0 as /devices/virtual/input/input10 [ 374.727450][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 374.737424][T10962] syz1: rxe_newlink: already configured on syz_tun [ 375.079466][ T5956] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 375.143699][T10966] fuse: Unknown parameter 'f éœW«ˆ™h [ 405.122877][T11500] dump_stack_lvl+0x16c/0x1f0 [ 405.122900][T11500] should_fail_ex+0x512/0x640 [ 405.122923][T11500] ? __kmalloc_cache_noprof+0x5f/0x780 [ 405.122953][T11500] should_failslab+0xc2/0x120 [ 405.122974][T11500] __kmalloc_cache_noprof+0x72/0x780 [ 405.122999][T11500] ? device_add+0xccc/0x1aa0 [ 405.123027][T11500] ? device_add+0xccc/0x1aa0 [ 405.123048][T11500] device_add+0xccc/0x1aa0 [ 405.123074][T11500] ? __pfx_device_add+0x10/0x10 [ 405.123110][T11500] input_register_device+0x7e8/0x1180 [ 405.123135][T11500] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 405.123162][T11500] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 405.123192][T11500] ? find_held_lock+0x2b/0x80 [ 405.123223][T11500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.123250][T11500] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 405.123273][T11500] __ia32_compat_sys_ioctl+0x242/0x370 [ 405.123302][T11500] __do_fast_syscall_32+0x7c/0x300 [ 405.123328][T11500] do_fast_syscall_32+0x32/0x80 [ 405.123347][T11500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.123367][T11500] RIP: 0023:0xf7f25579 [ 405.123379][T11500] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 405.123395][T11500] RSP: 002b:00000000f53d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 405.123411][T11500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 405.123421][T11500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.123431][T11500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.123440][T11500] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 405.123449][T11500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.123475][T11500] [ 405.360770][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 405.365151][ T56] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.369212][ T56] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.373514][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.376130][ T56] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.379664][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.390473][ T56] usb 5-1: config 0 descriptor?? [ 405.401090][ T5960] IPVS: starting estimator thread 0... [ 405.403623][T11504] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 405.490719][T11506] IPVS: using max 45 ests per chain, 108000 per kthread [ 405.894784][T11508] xt_hashlimit: size too large, truncated to 1048576 [ 405.897683][T11508] xt_hashlimit: Unknown mode mask FFFFFFE, kernel too old? [ 407.035393][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 407.214632][T11522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.230121][T11526] FAULT_INJECTION: forcing a failure. [ 407.230121][T11526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.236787][T11526] CPU: 3 UID: 0 PID: 11526 Comm: syz.1.1522 Not tainted syzkaller #0 PREEMPT(full) [ 407.236811][T11526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 407.236823][T11526] Call Trace: [ 407.236831][T11526] [ 407.236839][T11526] dump_stack_lvl+0x16c/0x1f0 [ 407.236862][T11526] should_fail_ex+0x512/0x640 [ 407.236896][T11526] _copy_from_user+0x2e/0xd0 [ 407.236948][T11526] dev_ethtool+0x1b41/0x5bc0 [ 407.236974][T11526] ? stack_depot_save_flags+0x29/0x9c0 [ 407.237003][T11526] ? __lock_acquire+0xb8a/0x1c90 [ 407.237039][T11526] ? __pfx_dev_ethtool+0x10/0x10 [ 407.237061][T11526] ? do_fast_syscall_32+0x32/0x80 [ 407.237082][T11526] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.237143][T11526] ? kasan_quarantine_put+0x10a/0x240 [ 407.237166][T11526] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.237192][T11526] ? find_held_lock+0x2b/0x80 [ 407.237217][T11526] ? __lock_acquire+0x622/0x1c90 [ 407.237259][T11526] ? find_held_lock+0x2b/0x80 [ 407.237277][T11526] ? dev_load+0x8e/0x240 [ 407.237311][T11526] dev_ioctl+0x290/0x1060 [ 407.237341][T11526] compat_sock_ioctl+0x42e/0x730 [ 407.237381][T11526] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 407.237403][T11526] ? hook_file_ioctl_common+0x145/0x410 [ 407.237428][T11526] ? __fget_files+0x20e/0x3c0 [ 407.237455][T11526] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 407.237475][T11526] __ia32_compat_sys_ioctl+0x242/0x370 [ 407.237505][T11526] __do_fast_syscall_32+0x7c/0x300 [ 407.237529][T11526] do_fast_syscall_32+0x32/0x80 [ 407.237550][T11526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.237571][T11526] RIP: 0023:0xf7f41579 [ 407.237586][T11526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 407.237603][T11526] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 407.237620][T11526] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008946 [ 407.237630][T11526] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.237642][T11526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.237651][T11526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 407.237661][T11526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.237687][T11526] [ 407.608224][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1526'. [ 407.749322][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 407.752850][ T56] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.757601][ T56] usb 5-1: USB disconnect, device number 23 [ 408.273622][T11550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 408.275690][T11550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.278553][T11550] vhci_hcd vhci_hcd.0: Device attached [ 409.087406][T11551] vhci_hcd: connection reset by peer [ 409.089863][ T13] vhci_hcd: stop threads [ 409.093422][ T13] vhci_hcd: release socket [ 409.095442][ T8113] usb 44-1: device descriptor read/8, error -110 [ 409.098122][ T13] vhci_hcd: disconnect device [ 409.481763][ T8113] usb usb44-port1: attempt power cycle [ 409.695252][T11575] tipc: Started in network mode [ 409.697123][T11575] tipc: Node identity ac1414aa, cluster identity 4711 [ 409.699909][T11575] tipc: Enabled bearer , priority 10 [ 409.702004][T11557] tipc: Enabling of bearer rejected, already enabled [ 409.931291][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 409.931303][ T40] audit: type=1326 audit(1761783500.908:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.939912][ T40] audit: type=1326 audit(1761783500.908:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.948706][ T40] audit: type=1326 audit(1761783500.908:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.960456][ T40] audit: type=1326 audit(1761783500.908:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.968911][ T40] audit: type=1326 audit(1761783500.908:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.977437][ T40] audit: type=1326 audit(1761783500.908:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.986146][ T40] audit: type=1326 audit(1761783500.908:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 409.993663][ T40] audit: type=1326 audit(1761783500.908:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf72585d0 code=0x7ffc0000 [ 410.000298][ T40] audit: type=1326 audit(1761783500.908:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 410.007010][ T40] audit: type=1326 audit(1761783500.908:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.0.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 410.043546][ T8113] usb usb44-port1: unable to enumerate USB device [ 410.692181][ T29] tipc: Node number set to 2886997162 [ 410.787758][T11603] binder: BINDER_SET_CONTEXT_MGR already set [ 410.789652][T11603] binder: 11602:11603 ioctl 4018620d 80000100 returned -16 [ 410.797374][T11603] binder: BINDER_SET_CONTEXT_MGR already set [ 410.799802][T11603] binder: 11602:11603 ioctl 4018620d 800002c0 returned -16 [ 410.803960][T11603] binder: 11602:11603 ioctl 4004700e 5 returned -22 [ 410.830070][T11604] FAULT_INJECTION: forcing a failure. [ 410.830070][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 410.834552][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.1.1546 Not tainted syzkaller #0 PREEMPT(full) [ 410.834579][T11604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.834586][T11604] Call Trace: [ 410.834591][T11604] [ 410.834595][T11604] dump_stack_lvl+0x16c/0x1f0 [ 410.834611][T11604] should_fail_ex+0x512/0x640 [ 410.834634][T11604] ? __kmalloc_cache_noprof+0x5f/0x780 [ 410.834655][T11604] should_failslab+0xc2/0x120 [ 410.834670][T11604] __kmalloc_cache_noprof+0x72/0x780 [ 410.834688][T11604] ? binder_get_thread+0x225/0x8c0 [ 410.834719][T11604] ? binder_get_thread+0x225/0x8c0 [ 410.834731][T11604] ? __pfx_binder_poll+0x10/0x10 [ 410.834741][T11604] binder_get_thread+0x225/0x8c0 [ 410.834754][T11604] ? __pfx_binder_poll+0x10/0x10 [ 410.834765][T11604] binder_poll+0x3f/0x400 [ 410.834776][T11604] ? __pfx_binder_poll+0x10/0x10 [ 410.834786][T11604] do_select+0xd3d/0x17e0 [ 410.834809][T11604] ? __pfx_do_select+0x10/0x10 [ 410.834818][T11604] ? trace_mm_page_alloc+0x11f/0x1a0 [ 410.834834][T11604] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 410.834845][T11604] ? __pfx___pollwait+0x10/0x10 [ 410.834865][T11604] ? __pfx_pollwake+0x10/0x10 [ 410.834884][T11604] ? __pfx_pollwake+0x10/0x10 [ 410.834902][T11604] ? __pfx_pollwake+0x10/0x10 [ 410.834921][T11604] ? __pfx_pollwake+0x10/0x10 [ 410.834940][T11604] ? __pfx_pollwake+0x10/0x10 [ 410.834974][T11604] ? find_held_lock+0x2b/0x80 [ 410.834986][T11604] ? compat_core_sys_select+0x1dd/0x880 [ 410.834999][T11604] ? compat_core_sys_select+0x685/0x880 [ 410.835008][T11604] compat_core_sys_select+0x685/0x880 [ 410.835023][T11604] ? __pfx_compat_core_sys_select+0x10/0x10 [ 410.835037][T11604] ? proc_fail_nth_write+0x9f/0x220 [ 410.835061][T11604] ? set_compat_user_sigmask+0x213/0x2a0 [ 410.835073][T11604] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 410.835089][T11604] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 410.835104][T11604] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 410.835117][T11604] ? ksys_write+0x1ac/0x250 [ 410.835129][T11604] ? __pfx_ksys_write+0x10/0x10 [ 410.835143][T11604] ? rcu_is_watching+0x12/0xc0 [ 410.835157][T11604] __do_fast_syscall_32+0x7c/0x300 [ 410.835172][T11604] do_fast_syscall_32+0x32/0x80 [ 410.835185][T11604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.835199][T11604] RIP: 0023:0xf7f41579 [ 410.835208][T11604] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 410.835220][T11604] RSP: 002b:00000000f541555c EFLAGS: 00000296 ORIG_RAX: 0000000000000134 [ 410.835231][T11604] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0 [ 410.835238][T11604] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 410.835244][T11604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.835250][T11604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 410.835256][T11604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.835272][T11604] [ 410.960846][ T8113] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 411.250820][ T8113] usb 5-1: Using ep0 maxpacket: 8 [ 411.254013][ T8113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.257774][ T8113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.270727][ T8113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.272968][ T8113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.276014][ T8113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.288343][ T8113] usb 5-1: config 0 descriptor?? [ 412.531442][T11635] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 412.533478][T11635] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.536205][T11635] vhci_hcd vhci_hcd.0: Device attached [ 412.900847][ T53] usb 42-1: SetAddress Request (24) to port 0 [ 413.178508][ T53] usb 42-1: new SuperSpeed USB device number 24 using vhci_hcd [ 413.213419][ T8113] usbhid 5-1:0.0: can't add hid device: -71 [ 413.215381][ T8113] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 413.224005][T11636] vhci_hcd: connection closed [ 413.230389][ T8113] usb 5-1: USB disconnect, device number 24 [ 413.233998][ T1142] vhci_hcd: stop threads [ 413.235413][ T1142] vhci_hcd: release socket [ 413.246653][T11639] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.302427][ T1142] vhci_hcd: disconnect device [ 413.354752][T11645] cgroup: release_agent respecified [ 413.417384][T11646] kAFS: unable to lookup cell '.,' [ 414.990798][ T57] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 415.140059][T11678] No control pipe specified [ 415.140865][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 415.147223][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.153727][ T57] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.155653][T11678] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 415.158279][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 415.162386][ T57] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 415.166032][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.173539][ T57] usb 8-1: config 0 descriptor?? [ 415.562185][T11695] Invalid ELF header magic: != ELF [ 415.580884][T11697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 415.582862][T11697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 415.593080][T11697] vhci_hcd vhci_hcd.0: Device attached [ 415.871120][ T29] usb 40-1: SetAddress Request (24) to port 0 [ 415.873158][ T29] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 416.047317][T11702] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 416.143019][T11698] vhci_hcd: connection reset by peer [ 416.151850][ T61] vhci_hcd: stop threads [ 416.153332][ T61] vhci_hcd: release socket [ 416.154849][ T61] vhci_hcd: disconnect device [ 417.316457][T11717] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 417.451838][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 417.460782][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 417.465536][ T57] usb 8-1: USB disconnect, device number 21 [ 418.250844][ T53] usb 42-1: device descriptor read/8, error -110 [ 418.456864][T11735] sit0: entered promiscuous mode [ 418.460840][T11735] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 418.463284][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1582'. [ 418.641334][ T53] usb usb42-port1: attempt power cycle [ 419.234822][ T53] usb usb42-port1: unable to enumerate USB device [ 419.583822][T11753] 9pnet_virtio: no channels available for device syz [ 419.584075][T11752] netlink: 'syz.0.1583': attribute type 2 has an invalid length. [ 419.589357][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 419.648189][T11752] fuse: Bad value for 'fd' [ 419.767666][T11747] batadv_slave_1: entered promiscuous mode [ 419.844219][T11748] batadv_slave_1: left promiscuous mode [ 420.294844][T11763] openvswitch: netlink: Flow key attr not present in new flow. [ 420.724477][T11774] binder: Bad value for 'max' [ 420.973643][ T29] usb 40-1: device descriptor read/8, error -110 [ 421.371377][ T29] usb usb40-port1: attempt power cycle [ 421.386278][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1597'. [ 421.634741][T11787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 421.637503][T11787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 421.651026][T11787] vhci_hcd vhci_hcd.0: Device attached [ 421.745092][T11794] : entered promiscuous mode [ 421.990044][T11801] 9pnet_virtio: no channels available for device syz [ 422.015497][ T29] usb usb40-port1: unable to enumerate USB device [ 422.301075][T11789] vhci_hcd: connection closed [ 422.301307][ T13] vhci_hcd: stop threads [ 422.304408][ T13] vhci_hcd: release socket [ 422.304602][ T53] usb 38-1: SetAddress Request (28) to port 0 [ 422.311207][ T13] vhci_hcd: disconnect device [ 422.343198][ T53] usb 38-1: new SuperSpeed USB device number 28 using vhci_hcd [ 422.370764][ T53] usb 38-1: enqueue for inactive port 0 [ 422.467473][T11788] netlink: 'syz.1.1596': attribute type 2 has an invalid length. [ 422.470086][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1596'. [ 422.491618][T11788] fuse: Bad value for 'fd' [ 423.000765][ T53] usb usb38-port1: attempt power cycle [ 423.535101][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 423.538021][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 423.642963][ T53] usb usb38-port1: unable to enumerate USB device [ 423.671924][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 424.321641][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 424.480893][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 424.500059][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.513480][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.525707][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.534985][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 424.554835][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.620865][ T24] usb 5-1: config 0 descriptor?? [ 425.158141][T11840] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 425.160202][T11840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.172030][T11840] vhci_hcd vhci_hcd.0: Device attached [ 425.910756][ T6007] usb 40-1: SetAddress Request (28) to port 0 [ 425.912770][ T6007] usb 40-1: new SuperSpeed USB device number 28 using vhci_hcd [ 426.473762][T11845] vhci_hcd: connection reset by peer [ 426.476614][ T1056] vhci_hcd: stop threads [ 426.478719][ T1056] vhci_hcd: release socket [ 426.480316][ T1056] vhci_hcd: disconnect device [ 426.769540][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 426.780781][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 426.785321][ T24] usb 5-1: USB disconnect, device number 25 [ 426.798408][T11852] fuse: Unknown parameter '00000000000000000000003ÿ' [ 426.801368][T11852] fuse: Unknown parameter '00000000000000000000003ÿ' [ 426.965969][T11859] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 426.968578][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 426.977923][T11850] fuse: Bad value for 'fd' [ 427.825393][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 427.977020][T11873] syzkaller0: entered promiscuous mode [ 427.978798][T11873] syzkaller0: entered allmulticast mode [ 430.160959][ T8113] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 430.332739][ T8113] usb 5-1: Using ep0 maxpacket: 8 [ 430.341440][ T8113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.346152][ T8113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.350834][ T8113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.354260][ T8113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.357230][ T8113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.365497][ T8113] usb 5-1: config 0 descriptor?? [ 430.971181][ T6007] usb 40-1: device descriptor read/8, error -110 [ 431.525950][ T6007] usb usb40-port1: attempt power cycle [ 432.354541][ T6007] usb usb40-port1: unable to enumerate USB device [ 432.455560][ T8113] usbhid 5-1:0.0: can't add hid device: -71 [ 432.457558][ T8113] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.461568][ T8113] usb 5-1: USB disconnect, device number 26 [ 433.139733][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 433.163934][T11923] macvlan2: entered allmulticast mode [ 433.165832][T11923] veth1_vlan: entered allmulticast mode [ 433.171498][T11923] veth1_vlan: left allmulticast mode [ 433.412942][T11932] netlink: 'syz.0.1625': attribute type 2 has an invalid length. [ 433.415662][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 433.421401][T11932] fuse: Bad value for 'fd' [ 433.688747][ T8113] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 433.850888][ T8113] usb 7-1: Using ep0 maxpacket: 8 [ 433.861153][ T8113] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.865610][ T8113] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.869532][ T8113] usb 7-1: config 0 interface 0 has no altsetting 0 [ 433.882230][ T8113] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.885978][ T8113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.893369][ T8113] usb 7-1: config 0 descriptor?? [ 435.668337][T11968] netlink: 'syz.3.1643': attribute type 2 has an invalid length. [ 435.672255][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 435.676468][T11968] fuse: Bad value for 'fd' [ 436.258841][T11979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1645'. [ 436.275871][T11973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.283771][ T8113] usbhid 7-1:0.0: can't add hid device: -71 [ 436.285674][ T8113] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 436.296540][ T8113] usb 7-1: USB disconnect, device number 19 [ 436.383413][T11984] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1647'. [ 437.778544][T12022] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1655'. [ 438.052463][T12030] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 439.653599][T12044] netlink: 'syz.0.1660': attribute type 3 has an invalid length. [ 439.702328][T12046] FAULT_INJECTION: forcing a failure. [ 439.702328][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 439.707722][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.0.1661 Not tainted syzkaller #0 PREEMPT(full) [ 439.707745][T12046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.707755][T12046] Call Trace: [ 439.707761][T12046] [ 439.707768][T12046] dump_stack_lvl+0x16c/0x1f0 [ 439.707790][T12046] should_fail_ex+0x512/0x640 [ 439.707815][T12046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 439.707844][T12046] should_failslab+0xc2/0x120 [ 439.707866][T12046] kmem_cache_alloc_noprof+0x75/0x6e0 [ 439.707883][T12046] ? skb_clone+0x190/0x3f0 [ 439.707905][T12046] ? skb_clone+0x190/0x3f0 [ 439.707919][T12046] skb_clone+0x190/0x3f0 [ 439.707936][T12046] netlink_deliver_tap+0xabd/0xd30 [ 439.707960][T12046] netlink_unicast+0x71f/0x870 [ 439.707981][T12046] ? __pfx_netlink_unicast+0x10/0x10 [ 439.708010][T12046] netlink_ack+0x696/0xb80 [ 439.708037][T12046] netlink_rcv_skb+0x332/0x420 [ 439.708054][T12046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 439.708078][T12046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.708109][T12046] ? ns_capable+0xd7/0x110 [ 439.708131][T12046] nfnetlink_rcv+0x1b3/0x430 [ 439.708152][T12046] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 439.708172][T12046] ? netlink_deliver_tap+0x1ae/0xd30 [ 439.708194][T12046] netlink_unicast+0x5aa/0x870 [ 439.708216][T12046] ? __pfx_netlink_unicast+0x10/0x10 [ 439.708245][T12046] netlink_sendmsg+0x8c8/0xdd0 [ 439.708267][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.708288][T12046] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 439.708316][T12046] ____sys_sendmsg+0xa98/0xc70 [ 439.708334][T12046] ? remove_rbio_from_cache+0x24/0x110 [ 439.708356][T12046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.708376][T12046] ? get_compat_msghdr+0x11a/0x170 [ 439.708415][T12046] ___sys_sendmsg+0x134/0x1d0 [ 439.708433][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.708465][T12046] ? find_held_lock+0x2b/0x80 [ 439.708502][T12046] __sys_sendmsg+0x16d/0x220 [ 439.708519][T12046] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.708548][T12046] ? rcu_is_watching+0x12/0xc0 [ 439.708570][T12046] __do_fast_syscall_32+0x7c/0x300 [ 439.708592][T12046] do_fast_syscall_32+0x32/0x80 [ 439.708612][T12046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.708632][T12046] RIP: 0023:0xf70bd579 [ 439.708645][T12046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 439.708661][T12046] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 439.708678][T12046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 439.708694][T12046] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.708704][T12046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.708713][T12046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 439.708723][T12046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.708748][T12046] [ 439.825410][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.900478][T12035] netlink: 'syz.2.1653': attribute type 2 has an invalid length. [ 439.902987][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 439.907094][T12035] fuse: Bad value for 'fd' [ 440.640857][ T57] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 440.808273][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 440.811503][ T57] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 440.814046][ T57] usb 7-1: config 0 has no interface number 0 [ 440.816022][ T57] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.819343][ T57] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 440.823164][ T57] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 440.826705][ T57] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.830991][ T57] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.833961][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.838040][ T57] usb 7-1: config 0 descriptor?? [ 440.847209][ T57] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 441.054785][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 441.063730][T12057] input: syz0 as /devices/virtual/input/input14 [ 441.097310][ T57] usb 7-1: USB disconnect, device number 20 [ 441.104970][ T57] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 441.752519][T12104] bridge2: entered promiscuous mode [ 441.840097][ T57] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 442.267469][ T57] usb 6-1: unable to get BOS descriptor or descriptor too short [ 442.272648][ T57] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 442.276300][ T57] usb 6-1: can't read configurations, error -71 [ 442.525714][T12116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 442.723957][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 442.723975][ T40] audit: type=1326 audit(1761783533.698:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1675" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x80000000 [ 442.983102][T12129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.996051][T12129] block device autoloading is deprecated and will be removed. [ 443.220865][ T5956] Bluetooth: hci1: command 0x0419 tx timeout [ 443.223403][ T56] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 443.229372][ T56] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 443.922100][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 444.595042][T12159] syzkaller0: entered promiscuous mode [ 444.596966][T12159] syzkaller0: entered allmulticast mode [ 444.659344][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1684'. [ 444.733147][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.540829][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 445.580722][ T56] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 445.583257][ T56] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 445.883243][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 445.895677][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 445.904171][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 445.912732][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 446.311397][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 447.276542][T12198] netlink: 888 bytes leftover after parsing attributes in process `syz.0.1697'. [ 447.320835][ T5960] IPVS: starting estimator thread 0... [ 447.430725][T12201] IPVS: using max 44 ests per chain, 105600 per kthread [ 447.614687][ T56] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 447.617177][ T56] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 447.620706][ C3] ------------[ cut here ]------------ [ 447.622667][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 447.624834][ C3] WARNING: CPU: 3 PID: 0 at kernel/workqueue.c:2257 __queue_work+0xd03/0x1160 [ 447.627748][ C3] Modules linked in: [ 447.629455][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 447.634022][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 447.637361][ C3] RIP: 0010:__queue_work+0xd03/0x1160 [ 447.639070][ C3] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 3e 42 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 af c0 38 00 90 0f 0b 90 e9 b4 f5 ff [ 447.645039][ C3] RSP: 0018:ffffc900005e8be8 EFLAGS: 00010082 [ 447.646949][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aee58 [ 447.649401][ C3] RDX: ffff88801bf20000 RSI: ffffffff817aee65 RDI: 0000000000000001 [ 447.652038][ C3] RBP: ffff8880259d0978 R08: 0000000000000001 R09: 0000000000000000 [ 447.654698][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000bd18f [ 447.657149][ C3] R13: 0000000000000101 R14: ffffffff8183bbe0 R15: ffff8880131dc178 [ 447.659622][ C3] FS: 0000000000000000(0000) GS:ffff888097b10000(0000) knlGS:0000000000000000 [ 447.662667][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.665392][ C3] CR2: 00000000f73b9068 CR3: 000000006ef35000 CR4: 0000000000352ef0 [ 447.668014][ C3] Call Trace: [ 447.669078][ C3] [ 447.670013][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 447.671930][ C3] call_timer_fn+0x19a/0x620 [ 447.673409][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 447.675025][ C3] ? __run_timers+0x559/0x960 [ 447.676504][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 447.678316][ C3] __run_timers+0x569/0x960 [ 447.679789][ C3] ? __pfx___run_timers+0x10/0x10 [ 447.681402][ C3] run_timer_base+0x114/0x190 [ 447.682906][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 447.684546][ C3] ? rcu_is_watching+0x12/0xc0 [ 447.686053][ C3] run_timer_softirq+0x1a/0x40 [ 447.687568][ C3] handle_softirqs+0x219/0x8e0 [ 447.689069][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 447.690730][ C3] __irq_exit_rcu+0x109/0x170 [ 447.692226][ C3] irq_exit_rcu+0x9/0x30 [ 447.693561][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 447.695312][ C3] [ 447.696247][ C3] [ 447.697187][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.699066][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 447.700817][ C3] Code: d7 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 03 2d 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 447.706965][ C3] RSP: 0018:ffffc9000048fde8 EFLAGS: 00000286 [ 447.708856][ C3] RAX: 0000000000ba8a61 RBX: 0000000000000003 RCX: ffffffff8b5d22a9 [ 447.711354][ C3] RDX: 0000000000000000 RSI: ffffffff8da2729e RDI: ffffffff8bf073c0 [ 447.713821][ C3] RBP: ffffed10037e4000 R08: 0000000000000001 R09: ffffed10056a6655 [ 447.716272][ C3] R10: ffff88802b5332ab R11: 0000000000000001 R12: 0000000000000003 [ 447.718732][ C3] R13: ffff88801bf20000 R14: ffffffff90822cd0 R15: 0000000000000000 [ 447.721207][ C3] ? ct_kernel_exit+0x139/0x190 [ 447.722921][ C3] default_idle+0x13/0x20 [ 447.724295][ C3] default_idle_call+0x6c/0xb0 [ 447.725800][ C3] do_idle+0x38d/0x500 [ 447.727098][ C3] ? __pfx_do_idle+0x10/0x10 [ 447.728550][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 447.730180][ C3] cpu_startup_entry+0x4f/0x60 [ 447.731720][ C3] start_secondary+0x21d/0x2b0 [ 447.733227][ C3] ? __pfx_start_secondary+0x10/0x10 [ 447.734892][ C3] common_startup_64+0x13e/0x148 [ 447.736454][ C3] [ 447.737439][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 447.739699][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 447.742652][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 447.746050][ C3] Call Trace: [ 447.747112][ C3] [ 447.748029][ C3] dump_stack_lvl+0x3d/0x1f0 [ 447.749508][ C3] vpanic+0x640/0x6f0 [ 447.750778][ C3] ? __queue_work+0xd03/0x1160 [ 447.752370][ C3] panic+0xca/0xd0 [ 447.753560][ C3] ? __pfx_panic+0x10/0x10 [ 447.754974][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 447.756574][ C3] check_panic_on_warn+0xab/0xb0 [ 447.758125][ C3] __warn+0xf6/0x3c0 [ 447.759370][ C3] ? __queue_work+0xd03/0x1160 [ 447.760897][ C3] report_bug+0x3c3/0x580 [ 447.762301][ C3] ? __queue_work+0xd03/0x1160 [ 447.763830][ C3] handle_bug+0x184/0x210 [ 447.765186][ C3] exc_invalid_op+0x17/0x50 [ 447.766629][ C3] asm_exc_invalid_op+0x1a/0x20 [ 447.768157][ C3] RIP: 0010:__queue_work+0xd03/0x1160 [ 447.769873][ C3] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 3e 42 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 af c0 38 00 90 0f 0b 90 e9 b4 f5 ff [ 447.775814][ C3] RSP: 0018:ffffc900005e8be8 EFLAGS: 00010082 [ 447.777698][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aee58 [ 447.780146][ C3] RDX: ffff88801bf20000 RSI: ffffffff817aee65 RDI: 0000000000000001 [ 447.782641][ C3] RBP: ffff8880259d0978 R08: 0000000000000001 R09: 0000000000000000 [ 447.785119][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000bd18f [ 447.787583][ C3] R13: 0000000000000101 R14: ffffffff8183bbe0 R15: ffff8880131dc178 [ 447.790090][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 447.791957][ C3] ? __warn_printk+0x198/0x350 [ 447.793470][ C3] ? __warn_printk+0x1a5/0x350 [ 447.794991][ C3] ? __queue_work+0xd02/0x1160 [ 447.796504][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 447.798320][ C3] call_timer_fn+0x19a/0x620 [ 447.799803][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 447.801449][ C3] ? __run_timers+0x559/0x960 [ 447.802957][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 447.804792][ C3] __run_timers+0x569/0x960 [ 447.806232][ C3] ? __pfx___run_timers+0x10/0x10 [ 447.807836][ C3] run_timer_base+0x114/0x190 [ 447.809321][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 447.810962][ C3] ? rcu_is_watching+0x12/0xc0 [ 447.812471][ C3] run_timer_softirq+0x1a/0x40 [ 447.813978][ C3] handle_softirqs+0x219/0x8e0 [ 447.815501][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 447.817149][ C3] __irq_exit_rcu+0x109/0x170 [ 447.818633][ C3] irq_exit_rcu+0x9/0x30 [ 447.819969][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 447.821781][ C3] [ 447.823028][ C3] [ 447.824228][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.826094][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 447.827847][ C3] Code: d7 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 03 2d 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 447.834226][ C3] RSP: 0018:ffffc9000048fde8 EFLAGS: 00000286 [ 447.836117][ C3] RAX: 0000000000ba8a61 RBX: 0000000000000003 RCX: ffffffff8b5d22a9 [ 447.838573][ C3] RDX: 0000000000000000 RSI: ffffffff8da2729e RDI: ffffffff8bf073c0 [ 447.841034][ C3] RBP: ffffed10037e4000 R08: 0000000000000001 R09: ffffed10056a6655 [ 447.843581][ C3] R10: ffff88802b5332ab R11: 0000000000000001 R12: 0000000000000003 [ 447.846025][ C3] R13: ffff88801bf20000 R14: ffffffff90822cd0 R15: 0000000000000000 [ 447.848483][ C3] ? ct_kernel_exit+0x139/0x190 [ 447.850007][ C3] default_idle+0x13/0x20 [ 447.851349][ C3] default_idle_call+0x6c/0xb0 [ 447.852821][ C3] do_idle+0x38d/0x500 [ 447.854095][ C3] ? __pfx_do_idle+0x10/0x10 [ 447.855555][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 447.857182][ C3] cpu_startup_entry+0x4f/0x60 [ 447.858692][ C3] start_secondary+0x21d/0x2b0 [ 447.860111][ C3] ? __pfx_start_secondary+0x10/0x10 [ 447.861874][ C3] common_startup_64+0x13e/0x148 [ 447.863458][ C3] [ 447.865163][ C3] Kernel Offset: disabled [ 447.866538][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:10:26 Registers: info registers vcpu 0 CPU#0 RAX=00000000016d3ab5 RBX=0000000000000000 RCX=ffffffff8b5d22a9 RDX=0000000000000000 RSI=ffffffff8da2729e RDI=ffffffff8bf073c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff90822cd0 R15=0000000000000000 RIP=ffffffff8b5d0d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097810000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000582e099c CR3=0000000042fd1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001e4ea4d RBX=0000000000000001 RCX=ffffffff8b5d22a9 RDX=0000000000000000 RSI=ffffffff8da2729e RDI=ffffffff8bf073c0 RBP=ffffed1003b5a490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=ffffffff9acceed8 R12=0000000000000001 R13=ffff88801dad2480 R14=ffffffff90822cd0 R15=0000000000000000 RIP=ffffffff8b5d0d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080032000 CR3=000000006703f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff9ad90de0 RCX=ffffffff93c6c500 RDX=ffffffff9ad90de4 RSI=ffffffff8da0195d RDI=ffffffff9ad90de4 RBP=1ffff920000efee2 RSP=ffffc9000077f708 R8 =75ac072c8adfe23f R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=ffff8880259d09c0 R14=ffffffff8b901fe0 R15=1ffff920000efefc RIP=ffffffff8198ae49 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555883af7000 CR3=00000000417f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000006aa 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000000080000 00070000000b2208 2780030e000002eb 0000000600000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ba8030000111800 0000100000008500 000000000003b700 000008000002b7ff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff80000010700 0000000000a1bf00 000000fff81a7b20 2020000000000021 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c64200000011800 0000000000000000 0000000000001801 a8080a80030a8004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0390032808000388 0322080003800301 9008002780020008 00060002a8050000 ZMM24=4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d 4852e04d4852e04d ZMM25=f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df f01b87dff01b87df ZMM26=ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ecee6f9decee6f9d ZMM27=b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 b0680a93b0680a93 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d6120000d6120000 d6120000d6120000 d6120000d6120000 d6120000d6120000 d6120000d6120000 d6120000d6120000 d6120000d6120000 d6120000d6120000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85266f55 RDI=ffffffff9adc2da0 RBP=ffffffff9adc2d60 RSP=ffffc900005e8550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9adc2d60 R15=ffffffff85266ef0 RIP=ffffffff85266f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b9068 CR3=000000006ef35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000