last executing test programs: 29.156324587s ago: executing program 3 (id=1200): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000004c0)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)='P', 0x1}]) syz_usbip_server_init(0x5) syz_usbip_server_init(0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 27.886830391s ago: executing program 0 (id=1204): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x6, @sliced}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000400000000000000000000f3cbc6615d0000000001200100"/40], 0x28) sendto$inet6(r1, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x4, 0x400, 0x8, 0x80}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000280000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000097000/0x4000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 27.483879937s ago: executing program 3 (id=1205): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='omfs\x00', 0x10, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') lseek(r3, 0xe00000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r8, @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffc5ffb7000000330000009560207a285f82086e4db9cae8bdd969240c9ce2157e803d8d09890f70e524da201af98b40a873b57027e312d0922769dbb1b6b4f5fd8d64ce63900540141b9c0d3ae7cee36b5b79c939e83b27aea2be199aa3b1c8d75e1c301c2dc07274eff11a2ddaa88f26bc11d898d549f48c32f3bd09000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r9, 0x25, 0x0, @val=@tcx}, 0x40) r13 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r13, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) 26.336029226s ago: executing program 3 (id=1210): sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7081e00000300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800008c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000003c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0f85403, &(0x7f0000000340)={0x3}) bind$nfc_llcp(r4, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c816d24e8f7415cdea8e715a7b3af9d8803ada46ec68707f8dcf8ca333580aafbfffc19f7387547c2fe8e03af62af54348e303e41010f1ce6a3d334c89e855"}, 0x58) bind$nfc_llcp(r4, &(0x7f00000003c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a42bd7709bdd4ca775007de056c289611b750d5f81eac84246337a8c5216f6412d5db11cb49e9c4438a73b5785087daccd8567761cf15052f33cf3faf37a73"}, 0x58) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) userfaultfd(0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 24.498830814s ago: executing program 3 (id=1214): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x6, @sliced}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000400000000000000000000f3cbc6615d0000000001200100"/40], 0x28) sendto$inet6(r1, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x90) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x4, 0x400, 0x8, 0x80}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000280000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000097000/0x4000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23.632936703s ago: executing program 0 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x7fdb, &(0x7f0000000080)) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="f8a11ee0c5fb8f0eff0291b2d0a99ede5bb5b0759f11dec256b0cfde0ea3e194aae8f826f5da98e4c3ca9bab161cf0c00426f1f82aa2032f9fe381e049792dfb0fd259bb4ed885cbdfb7e9e7fff1a6ee98b6dd58b1a74f155a94cf952fe604a187702882c69e83cd04347d39", 0x6c}, {&(0x7f00000003c0)="b256de28794f789c743783624b494bd88dcb7c98f27430c5914bee0a9ad658b8d11461e662b19383041557858e6a2db01a172e35e8621762ca1284d7136164e4ea43a87b60358311151fe717a5b134801a34d486bcad8a8142f7af30a2328ffc2c401500bd79e3e01ed0441fd6677e9d95f17a07ffa39cd16d80a1ab648b1fee3bd286e1d7484c502cc1dd53ee30290fd74efab476152d34c9e605c95c9351d698b0f5c9d5af2bc06516d9a29a58cd75576df3238ed556c6d8e4304adc13f62af0b0e175d6dfcf6aa01bdb5e4e147090c1", 0xd1}, {&(0x7f00000004c0)="82275a1d974e0c2c6e52cf87b972106e7bf48b9d937ddd4d2cd0fb829e1e06e0461197a9ac087a0b57442a647fb9a0eac9d4ff1088128fcec5e9811c6a256affd71b3971c71e56b7d31e3cc653ebce03cdd3e03d8b4568cdb482b2b20299b26f2434b00d15e43df70545ad46fba8313378756fb06f3f851e940581ca78a6055cfd698199c0b4f87703bdd3788b746fb20ca041428391a950ff202d68ac420776a3cf1960ce6951331e205443b564ba6064c66b7db58b88f2e629191488c944ecb9d28b98c6be3cd164dbec37433eafda4d452d409154c33842b8a1fb68fcb552ab4cc96712b92e6b06bbd42a2a7c85c43f8e7b", 0xf3}], 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x1418}, 0x2400c080) r4 = shmget$private(0x0, 0x400000, 0x54001800, &(0x7f0000005000/0x400000)=nil) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000001a40)) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) listen(r3, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) 23.474506892s ago: executing program 0 (id=1217): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x167) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x4000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r7, 0x0) 23.313224278s ago: executing program 3 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="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", 0x1ee}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r3, 0x10e, 0xb, &(0x7f0000000100)="00000002", 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x30, r4, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r5 = syz_io_uring_setup(0x14e6, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/175, 0xaf}], 0x5, 0x2, 0xea) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0x4c}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f80)={0x14, r8, 0x4, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x0) 22.624758545s ago: executing program 0 (id=1220): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x7fdb, &(0x7f0000000080)) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x6, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="f8a11ee0c5fb8f0eff0291b2d0a99ede5bb5b0759f11dec256b0cfde0ea3e194aae8f826f5da98e4c3ca9bab161cf0c00426f1f82aa2032f9fe381e049792dfb0fd259bb4ed885cbdfb7e9e7fff1a6ee98b6dd58b1a74f155a94cf952fe604a187702882c69e83cd04347d39", 0x6c}, {&(0x7f00000003c0)="b256de28794f789c743783624b494bd88dcb7c98f27430c5914bee0a9ad658b8d11461e662b19383041557858e6a2db01a172e35e8621762ca1284d7136164e4ea43a87b60358311151fe717a5b134801a34d486bcad8a8142f7af30a2328ffc2c401500bd79e3e01ed0441fd6677e9d95f17a07ffa39cd16d80a1ab648b1fee3bd286e1d7484c502cc1dd53ee30290fd74efab476152d34c9e605c95c9351d698b0f5c9d5af2bc06516d9a29a58cd75576df3238ed556c6d8e4304adc13f62af0b0e175d6dfcf6aa01bdb5e4e147090c1", 0xd1}, {&(0x7f00000004c0)="82275a1d974e0c2c6e52cf87b972106e7bf48b9d937ddd4d2cd0fb829e1e06e0461197a9ac087a0b57442a647fb9a0eac9d4ff1088128fcec5e9811c6a256affd71b3971c71e56b7d31e3cc653ebce03cdd3e03d8b4568cdb482b2b20299b26f2434b00d15e43df70545ad46fba8313378756fb06f3f851e940581ca78a6055cfd698199c0b4f87703bdd3788b746fb20ca041428391a950ff202d68ac420776a3cf1960ce6951331e205443b564ba6064c66b7db58b88f2e629191488c944ecb9d28b98c6be3cd164dbec37433eafda4d452d409154c33842b8a1fb68fcb552ab4cc96712b92e6b06bbd42a2a7c85c43f8e7b", 0xf3}], 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x1418}, 0x2400c080) r4 = shmget$private(0x0, 0x400000, 0x54001800, &(0x7f0000005000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000001a40)) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) listen(r3, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) 22.422836478s ago: executing program 0 (id=1222): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r8 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22.195599615s ago: executing program 3 (id=1223): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x6, @sliced}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000400000000000000000000f3cbc6615d0000000001200100"/40], 0x28) sendto$inet6(r1, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x4, 0x400, 0x8, 0x80}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000280000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000097000/0x4000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f00008b1000/0x14000)=nil, 0x14000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0xfffff000) socket$inet6_tcp(0xa, 0x1, 0x0) 21.546578951s ago: executing program 0 (id=1224): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x6, @sliced}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000400000000000000000000f3cbc6615d0000000001200100"/40], 0x28) sendto$inet6(r1, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x4, 0x400, 0x8, 0x80}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000280000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000097000/0x4000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 9.539333635s ago: executing program 2 (id=1238): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={0x0, 0x4a, 0xf5}, 0x0, &(0x7f0000000140)="2f2f936bc68df96b6dde70b0845a7dcf66801970feab3ef7c7597b34088bcfe64792aa4a1f07b7108e8bcc22c2b8bf4e560f22ee382e6e0bda4b559fe0302eed4d667ee70799f6734a54", &(0x7f0000000480)=""/245) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0x10, 0x0, 0x8}}) r1 = socket$kcm(0x29, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f00000023c0)=[{{&(0x7f0000001580)=@can, 0x80, 0x0}}, {{&(0x7f0000001b80)=@can, 0x80, 0x0}}], 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xa4, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}}, 0x20000008) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r3, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010115dd57b30008002600205e0a3f2d753882384f0cf51338882dc59dba57aac7ac90b723e0839c6fadb75456f72337598f5b63a082b5c5998c658a4f5dd8a996e3ad4ba2089d54fa0ab78d2779e7204608201c41072c84dc1e19daffe001b8360e773f9ffae24e3b25b0ae852ef6d7ab88f6539e8fa7756c13e254efb40df18dfec899a34714bcdfa665eb5d17397a59a5ad8e4f06c8c0e3d990b0bc7e50739e264f5a4940031738c181cd5ec36bf08e3e5625b0e4ac0a06f2"], 0x30}}, 0x0) 9.305419977s ago: executing program 2 (id=1240): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000004c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)='P', 0x1}]) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0x541b, 0x0) syz_usbip_server_init(0x5) r5 = syz_usbip_server_init(0x2) write$usbip_server(r5, &(0x7f0000000600)=ANY=[], 0xf1d) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 8.589379633s ago: executing program 1 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x167) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x4000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r7, 0x0) 7.511562187s ago: executing program 1 (id=1242): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="000000030000000700000000000000010000000100010000000001370000010700000000000000020000000000000000d9ea674cb745f1030ee2135d07ef8da5916b1a3650a15dec672c3b254efc6809b973000000004486f8331acde30b7866643ed73955b6949f82a021c7c678c7b5b9f27eb889dfd6de034c7862365a09005c199e680c6b32929cfb93a21f710354bd1dd8124f4660d6179a4dce7c5a9fc05fad3451e852ac0747da2c25508c0db13eefa3d6da1f42a44bbdaaec8841151e5af587790101e3a77a9a60b0417788e765f42a8652406f6174bd9a076e9f0c973006406aff127de33767fae5b580847ee4fcd3f80439c5dfb1264c0490b1f07aa319c90e9b6604b30673342756214e0735a2a0be4fa30ef1f091ae7a8949a7e07dae51b2b1950c00af71e7b18f3da5f521a32bed4ac614c44c949973439d0549ff06c8b4862efd160e154da3aad424e98b2173649b09f9c97b6e321c0dc51d6581a0719ebc9d28"], 0x167) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x4000004) setrlimit(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r7, 0x0) 7.402025576s ago: executing program 2 (id=1243): sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7081e00000300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800008c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000c90000c74b57df0e1f9ffc783fbc39d93817000000001c00"], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000003c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0f85403, &(0x7f0000000340)={0x3}) bind$nfc_llcp(r4, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c816d24e8f7415cdea8e715a7b3af9d8803ada46ec68707f8dcf8ca333580aafbfffc19f7387547c2fe8e03af62af54348e303e41010f1ce6a3d334c89e855"}, 0x58) bind$nfc_llcp(r4, &(0x7f00000003c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a42bd7709bdd4ca775007de056c289611b750d5f81eac84246337a8c5216f6412d5db11cb49e9c4438a73b5785087daccd8567761cf15052f33cf3faf37a73"}, 0x58) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) userfaultfd(0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 6.728473707s ago: executing program 1 (id=1244): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x167) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x4000004) setrlimit(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x1e, 0x0, &(0x7f0000000140)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r7, 0x0) 5.730768029s ago: executing program 1 (id=1245): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000004c0)) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0x541b, 0x0) syz_usbip_server_init(0x5) syz_usbip_server_init(0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 4.119026758s ago: executing program 1 (id=1246): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x6, @sliced}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000400000000000000000000f3cbc6615d0000000001200100"/40], 0x28) sendto$inet6(r1, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2, 0x0, 0x0, 0x4, 0x400, 0x8, 0x80}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000280000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000097000/0x4000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f00008b1000/0x14000)=nil, 0x14000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0xfffff000) socket$inet6_tcp(0xa, 0x1, 0x0) 3.853869658s ago: executing program 2 (id=1247): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000002700)=""/102386, 0x18ff2}], 0x1, 0x4, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x81a800, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0cff0900000000"], 0x7) ptrace(0x10, r3) r4 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x3, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x380) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0xfffffffd}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB='N-N:5/', @ANYRESDEC=r8], 0x6a) socket$inet(0x2, 0x0, 0x5) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r11, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.806180425s ago: executing program 2 (id=1248): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000004c0)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)='P', 0x1}]) syz_usbip_server_init(0x5) syz_usbip_server_init(0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 713.842541ms ago: executing program 2 (id=1249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000080)="bd", 0x1) tee(r5, r1, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) 0s ago: executing program 1 (id=1250): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socketpair(0xa, 0x1, 0x100, &(0x7f0000000080)) (fail_nth: 8) kernel console output (not intermixed with test programs): 0x8B has invalid maxpacket 32 [ 220.850723][ T1664] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.856616][ T1664] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.860525][ T1664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.123281][ T1664] usb 6-1: usb_control_msg returned -71 [ 221.125353][ T1664] usbtmc 6-1:16.0: can't read capabilities [ 221.138048][ T1664] usb 6-1: USB disconnect, device number 8 [ 221.275769][ T39] audit: type=1326 audit(1721354876.854:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.897" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x0 [ 221.581461][ T8042] 9pnet_fd: Insufficient options for proto=fd [ 221.756243][ T7765] vhci_hcd: vhci_device speed not set [ 221.909645][ T8046] usb usb8: usbfs: process 8046 (syz.3.897) did not claim interface 0 before use [ 222.194047][ T5281] usb usb14-port1: attempt power cycle [ 222.530997][ T8053] netlink: 'syz.0.901': attribute type 29 has an invalid length. [ 222.538048][ T8053] netlink: 'syz.0.901': attribute type 29 has an invalid length. [ 222.857228][ T5281] usb usb14-port1: unable to enumerate USB device [ 222.880084][ T39] audit: type=1800 audit(1721354878.464:270): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.904" name="SYSV00000000" dev="hugetlbfs" ino=28 res=0 errno=0 [ 222.914499][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 222.936653][ T8062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 222.939667][ T8062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.955491][ T8062] vhci_hcd vhci_hcd.0: Device attached [ 222.965965][ T8063] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 222.971501][ T64] vhci_hcd: stop threads [ 222.973442][ T64] vhci_hcd: release socket [ 222.984604][ T64] vhci_hcd: disconnect device [ 223.126485][ T9] usb usb18-port1: attempt power cycle [ 223.337100][ T8070] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 223.340366][ T8070] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.353026][ T8070] vhci_hcd vhci_hcd.0: Device attached [ 223.533412][ T5261] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.675716][ T825] usb 20-1: SetAddress Request (10) to port 0 [ 223.678418][ T825] usb 20-1: new SuperSpeed USB device number 10 using vhci_hcd [ 223.715459][ T5261] usb 5-1: Using ep0 maxpacket: 8 [ 223.719868][ T5261] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.724615][ T5261] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.729415][ T5261] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.733884][ T5261] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.735603][ T8082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 223.740009][ T5261] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.742070][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.746453][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.755580][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 223.774351][ T8082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 223.777043][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.781600][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 223.794891][ T8075] vhci_hcd: connection reset by peer [ 223.799181][ T11] vhci_hcd: stop threads [ 223.800659][ T11] vhci_hcd: release socket [ 223.805616][ T11] vhci_hcd: disconnect device [ 223.865557][ T9] usb 18-1: SetAddress Request (13) to port 0 [ 223.868151][ T9] usb 18-1: new SuperSpeed USB device number 13 using vhci_hcd [ 223.983326][ T5261] usb 5-1: usb_control_msg returned -71 [ 223.988685][ T5261] usbtmc 5-1:16.0: can't read capabilities [ 224.009620][ T5261] usb 5-1: USB disconnect, device number 6 [ 224.285921][ T8087] vhci_hcd: connection closed [ 224.285993][ T8084] vhci_hcd: connection reset by peer [ 224.290481][ T83] vhci_hcd: stop threads [ 224.292233][ T83] vhci_hcd: release socket [ 224.295288][ T83] vhci_hcd: disconnect device [ 224.300776][ T83] vhci_hcd: stop threads [ 224.302575][ T83] vhci_hcd: release socket [ 224.304428][ T83] vhci_hcd: disconnect device [ 224.629030][ T8095] FAULT_INJECTION: forcing a failure. [ 224.629030][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 224.634649][ T8095] CPU: 2 PID: 8095 Comm: syz.1.913 Not tainted 6.10.0-syzkaller-08047-gf2f6a8e88717 #0 [ 224.638853][ T8095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.643023][ T8095] Call Trace: [ 224.644391][ T8095] [ 224.645462][ T8095] dump_stack_lvl+0x16c/0x1f0 [ 224.647251][ T8095] should_fail_ex+0x497/0x5b0 [ 224.649354][ T8095] should_failslab+0x9/0x20 [ 224.651443][ T8095] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 224.653743][ T8095] ? skb_clone+0x190/0x3f0 [ 224.655567][ T8095] skb_clone+0x190/0x3f0 [ 224.657319][ T8095] netlink_deliver_tap+0xb26/0xcf0 [ 224.659168][ T8095] netlink_unicast+0x6c2/0x830 [ 224.661095][ T8095] ? __pfx_netlink_unicast+0x10/0x10 [ 224.663171][ T8095] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 224.665161][ T8095] netlink_ack+0x6a5/0xb20 [ 224.666852][ T8095] netlink_rcv_skb+0x327/0x410 [ 224.668790][ T8095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.670839][ T8095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.672854][ T8095] ? netlink_deliver_tap+0x1ae/0xcf0 [ 224.675064][ T8095] netlink_unicast+0x544/0x830 [ 224.677097][ T8095] ? __pfx_netlink_unicast+0x10/0x10 [ 224.679356][ T8095] ? __phys_addr_symbol+0x30/0x80 [ 224.681510][ T8095] ? __check_object_size+0x48e/0x720 [ 224.683853][ T8095] netlink_sendmsg+0x8b8/0xd70 [ 224.686006][ T8095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.688213][ T8095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.690522][ T8095] ____sys_sendmsg+0x9b4/0xb50 [ 224.692620][ T8095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.694850][ T8095] ? get_compat_msghdr+0x11b/0x170 [ 224.696987][ T8095] ? __pfx___lock_acquire+0x10/0x10 [ 224.699164][ T8095] ___sys_sendmsg+0x135/0x1e0 [ 224.701126][ T8095] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.703335][ T8095] ? __pfx_lock_release+0x10/0x10 [ 224.705315][ T8095] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 224.707291][ T8095] ? __fget_light+0x173/0x210 [ 224.709287][ T8095] __sys_sendmmsg+0x2a5/0x450 [ 224.711245][ T8095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.713219][ T8095] ? vfs_write+0x14d/0x1140 [ 224.715120][ T8095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.717512][ T8095] ? fput+0x32/0x390 [ 224.718953][ T8095] ? ksys_write+0x1ab/0x260 [ 224.720827][ T8095] ? __pfx_ksys_write+0x10/0x10 [ 224.722830][ T8095] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 224.724729][ T8095] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 224.726946][ T8095] __do_fast_syscall_32+0x73/0x120 [ 224.728958][ T8095] do_fast_syscall_32+0x32/0x80 [ 224.730955][ T8095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.733198][ T8095] RIP: 0023:0xf7f20579 [ 224.734618][ T8095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.742891][ T8095] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 224.746343][ T8095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 224.749434][ T8095] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.752536][ T8095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.756001][ T8095] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 224.758861][ T8095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.762195][ T8095] [ 224.769838][ T39] audit: type=1326 audit(1721354880.354:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.912" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x0 [ 224.816796][ T39] audit: type=1800 audit(1721354880.404:272): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.914" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 225.352257][ T8107] usb usb8: usbfs: process 8107 (syz.3.912) did not claim interface 0 before use [ 226.439509][ T969] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 226.585535][ T8121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 226.588080][ T8121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 226.595754][ T8121] vhci_hcd vhci_hcd.0: Device attached [ 226.625593][ T969] usb 8-1: Using ep0 maxpacket: 8 [ 226.629933][ T8121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 226.630781][ T969] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.632500][ T8121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.632664][ T8121] vhci_hcd vhci_hcd.0: Device attached [ 226.645626][ T969] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.650650][ T969] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.654970][ T969] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.675461][ T969] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.679767][ T969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.683902][ T8124] usbip_core: unknown command [ 226.686180][ T8124] vhci_hcd: unknown pdu 0 [ 226.688080][ T8124] usbip_core: unknown command [ 226.695769][ T64] vhci_hcd: stop threads [ 226.697670][ T64] vhci_hcd: release socket [ 226.716989][ T64] vhci_hcd: disconnect device [ 226.812376][ T8122] vhci_hcd: connection closed [ 226.817460][ T64] vhci_hcd: stop threads [ 226.822185][ T64] vhci_hcd: release socket [ 226.824234][ T64] vhci_hcd: disconnect device [ 226.959869][ T969] usb 8-1: usb_control_msg returned -71 [ 226.962328][ T969] usbtmc 8-1:16.0: can't read capabilities [ 226.981340][ T969] usb 8-1: USB disconnect, device number 12 [ 227.607663][ T8135] 9pnet_fd: Insufficient options for proto=fd [ 227.878071][ T8143] 9pnet_fd: Insufficient options for proto=fd [ 228.425791][ T8151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 228.428574][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.432861][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 228.455514][ T8151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 228.458077][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.465454][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 228.805755][ T825] usb 20-1: device descriptor read/8, error -110 [ 228.866883][ T8155] vhci_hcd: connection closed [ 228.869687][ T8153] vhci_hcd: connection closed [ 228.869709][ T83] vhci_hcd: stop threads [ 228.881658][ T83] vhci_hcd: release socket [ 228.886189][ T83] vhci_hcd: disconnect device [ 228.889922][ T83] vhci_hcd: stop threads [ 228.893510][ T83] vhci_hcd: release socket [ 228.897424][ T83] vhci_hcd: disconnect device [ 228.965656][ T9] usb 18-1: device descriptor read/8, error -110 [ 229.095856][ T9] usb usb18-port1: unable to enumerate USB device [ 229.185589][ T5262] vhci_hcd: vhci_device speed not set [ 229.246224][ T825] usb usb20-port1: attempt power cycle [ 229.739890][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 229.765693][ T8176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 229.768658][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.775772][ T8176] vhci_hcd vhci_hcd.0: Device attached [ 229.797452][ T8177] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 229.805985][ T11] vhci_hcd: stop threads [ 229.807929][ T11] vhci_hcd: release socket [ 229.815800][ T11] vhci_hcd: disconnect device [ 229.917360][ T825] usb usb20-port1: unable to enumerate USB device [ 232.958339][ T39] audit: type=1800 audit(1721354888.544:273): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.944" name="SYSV00000000" dev="hugetlbfs" ino=30 res=0 errno=0 [ 234.714195][ T8236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.759671][ T8236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.190183][ T39] audit: type=1800 audit(1721354891.774:274): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.951" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 236.762470][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 236.775862][ T8246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 236.778347][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 236.785291][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 236.795671][ T8247] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 236.800483][ T64] vhci_hcd: stop threads [ 236.802367][ T64] vhci_hcd: release socket [ 236.804306][ T64] vhci_hcd: disconnect device [ 236.969619][ T8253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 236.972456][ T8253] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.976617][ T8253] vhci_hcd vhci_hcd.0: Device attached [ 236.988897][ T8253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 236.991642][ T8253] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.996027][ T8253] vhci_hcd vhci_hcd.0: Device attached [ 237.001457][ T8256] usbip_core: unknown command [ 237.003403][ T8256] vhci_hcd: unknown pdu 0 [ 237.005183][ T8256] usbip_core: unknown command [ 237.017322][ T11] vhci_hcd: stop threads [ 237.019327][ T11] vhci_hcd: release socket [ 237.021415][ T11] vhci_hcd: disconnect device [ 237.159389][ T8254] vhci_hcd: connection closed [ 237.161260][ T64] vhci_hcd: stop threads [ 237.165099][ T64] vhci_hcd: release socket [ 237.175520][ T64] vhci_hcd: disconnect device [ 238.104025][ T39] audit: type=1326 audit(1721354893.684:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.957" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 238.208609][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.232718][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.685852][ T8273] usb usb8: usbfs: process 8273 (syz.1.957) did not claim interface 0 before use [ 238.915644][ T39] audit: type=1800 audit(1721354894.494:276): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.960" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 239.011415][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.022998][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.035869][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.036818][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 239.041913][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.048347][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 239.051875][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.076438][ T66] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.079255][ T8287] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 239.082407][ T8287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.086787][ T66] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.090826][ T66] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.095065][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.096244][ T8287] vhci_hcd vhci_hcd.0: Device attached [ 239.102996][ T66] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 239.107857][ T66] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.124786][ T8290] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 239.151606][ T64] vhci_hcd: stop threads [ 239.153526][ T64] vhci_hcd: release socket [ 239.156369][ T64] vhci_hcd: disconnect device [ 239.554857][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 239.822568][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.829214][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.845634][ T8284] bridge_slave_0: entered allmulticast mode [ 239.849357][ T8284] bridge_slave_0: entered promiscuous mode [ 239.854790][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.858732][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.862105][ T8284] bridge_slave_1: entered allmulticast mode [ 239.866441][ T8284] bridge_slave_1: entered promiscuous mode [ 239.957215][ T8308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 239.960588][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 239.965736][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 239.979678][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.994704][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.004363][ T8308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 240.007193][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 240.023377][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 240.056495][ T8313] usbip_core: unknown command [ 240.059273][ T8313] vhci_hcd: unknown pdu 0 [ 240.061182][ T8313] usbip_core: unknown command [ 240.090205][ T11] vhci_hcd: stop threads [ 240.091965][ T11] vhci_hcd: release socket [ 240.093768][ T11] vhci_hcd: disconnect device [ 240.099441][ T8284] team0: Port device team_slave_0 added [ 240.104647][ T8284] team0: Port device team_slave_1 added [ 240.177740][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.180495][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.196356][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.202215][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.205199][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.227704][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.275539][ T57] usb 16-1: SetAddress Request (18) to port 0 [ 240.278544][ T57] usb 16-1: new SuperSpeed USB device number 18 using vhci_hcd [ 240.300200][ T8311] vhci_hcd: connection closed [ 240.300523][ T12] vhci_hcd: stop threads [ 240.304542][ T12] vhci_hcd: release socket [ 240.315933][ T12] vhci_hcd: disconnect device [ 240.325308][ T8284] hsr_slave_0: entered promiscuous mode [ 240.332918][ T8284] hsr_slave_1: entered promiscuous mode [ 240.341406][ T8284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.348237][ T8284] Cannot create hsr debugfs directory [ 240.624566][ T8284] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.819985][ T8284] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.903104][ T8284] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.001040][ T8284] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.195549][ T5222] Bluetooth: hci5: command tx timeout [ 241.224501][ T8284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.235963][ T8284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.241852][ T8284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.251816][ T8284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.367141][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.397793][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.407110][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.410182][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.435628][ T39] audit: type=1326 audit(1721354897.004:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.2.967" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 241.457615][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.460627][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.592601][ T8322] usb usb8: usbfs: process 8322 (syz.2.967) did not claim interface 0 before use [ 241.877344][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.963779][ T8284] veth0_vlan: entered promiscuous mode [ 241.985696][ T8284] veth1_vlan: entered promiscuous mode [ 242.033633][ T8284] veth0_macvtap: entered promiscuous mode [ 242.043619][ T8284] veth1_macvtap: entered promiscuous mode [ 242.074197][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.081573][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.086538][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.091223][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.095997][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.100698][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.105096][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.110432][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.114876][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.119590][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.126565][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.137094][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.141672][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.147621][ T825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.153768][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.158796][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.163182][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.168242][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.172705][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.177294][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.181212][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.186375][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.193238][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.205955][ T8284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.209892][ T8284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.213711][ T8284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.219129][ T8284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.333307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.347662][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.355531][ T825] usb 6-1: Using ep0 maxpacket: 8 [ 242.361987][ T825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.375438][ T825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.379948][ T825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.384106][ T825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.418221][ T825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.420242][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.423428][ T825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.425223][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.507777][ T39] audit: type=1800 audit(1721354898.084:278): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.970" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 [ 242.712635][ T825] usb 6-1: usb_control_msg returned -71 [ 242.715118][ T825] usbtmc 6-1:16.0: can't read capabilities [ 242.751165][ T825] usb 6-1: USB disconnect, device number 9 [ 242.818735][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 242.837022][ T8345] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 242.839938][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.848572][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 242.860273][ T8346] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 242.866099][ T12] vhci_hcd: stop threads [ 242.867941][ T12] vhci_hcd: release socket [ 242.869934][ T12] vhci_hcd: disconnect device [ 243.130932][ T8351] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 243.133761][ T8351] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.147364][ T8351] vhci_hcd vhci_hcd.0: Device attached [ 243.163562][ T8352] usbip_core: unknown command [ 243.165935][ T8352] vhci_hcd: unknown pdu 0 [ 243.167875][ T8352] usbip_core: unknown command [ 243.181067][ T83] vhci_hcd: stop threads [ 243.182915][ T83] vhci_hcd: release socket [ 243.184896][ T83] vhci_hcd: disconnect device [ 243.278224][ T5222] Bluetooth: hci5: command tx timeout [ 243.360992][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 243.370574][ T8359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 243.372947][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.382967][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 243.395209][ T8360] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 1 [ 243.404315][ T1123] vhci_hcd: stop threads [ 243.409927][ T1123] vhci_hcd: release socket [ 243.411912][ T1123] vhci_hcd: disconnect device [ 244.334866][ T8373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 244.337658][ T8373] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 244.341137][ T8373] vhci_hcd vhci_hcd.0: Device attached [ 244.367578][ T8373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 244.370943][ T8373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.382586][ T8373] vhci_hcd vhci_hcd.0: Device attached [ 244.454962][ T8377] usbip_core: unknown command [ 244.458153][ T8377] vhci_hcd: unknown pdu 0 [ 244.460492][ T8377] usbip_core: unknown command [ 244.475945][ T1123] vhci_hcd: stop threads [ 244.477852][ T1123] vhci_hcd: release socket [ 244.479828][ T1123] vhci_hcd: disconnect device [ 244.509192][ T39] audit: type=1800 audit(1721354900.094:279): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.979" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 244.525492][ T39] audit: type=1804 audit(1721354900.094:280): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.979" name="SYSV00000000" dev="hugetlbfs" ino=0 res=1 errno=0 [ 244.538595][ T39] audit: type=1804 audit(1721354900.094:281): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.979" name="SYSV00000000" dev="hugetlbfs" ino=0 res=1 errno=0 [ 244.584460][ T8375] vhci_hcd: connection closed [ 244.584916][ T11] vhci_hcd: stop threads [ 244.588967][ T11] vhci_hcd: release socket [ 244.598056][ T11] vhci_hcd: disconnect device [ 245.355885][ T5222] Bluetooth: hci5: command tx timeout [ 245.371901][ T57] usb 16-1: device descriptor read/8, error -110 [ 245.618350][ T8394] 9pnet_fd: Insufficient options for proto=fd [ 245.796599][ T57] usb usb16-port1: attempt power cycle [ 245.805630][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 245.985686][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 245.998329][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.010993][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.014716][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.021049][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.031851][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.039491][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.040591][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 246.064708][ T8398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 246.067233][ T8398] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.077977][ T8398] vhci_hcd vhci_hcd.0: Device attached [ 246.095120][ T8399] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 1 [ 246.105925][ T83] vhci_hcd: stop threads [ 246.107838][ T83] vhci_hcd: release socket [ 246.109931][ T83] vhci_hcd: disconnect device [ 246.285548][ T9] usb 8-1: usb_control_msg returned -71 [ 246.287918][ T9] usbtmc 8-1:16.0: can't read capabilities [ 246.305486][ T9] usb 8-1: USB disconnect, device number 13 [ 246.410449][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 246.434564][ T8409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 246.437487][ T8409] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.457200][ T8409] vhci_hcd vhci_hcd.0: Device attached [ 246.469718][ T57] usb usb16-port1: unable to enumerate USB device [ 246.486528][ T8410] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 246.495937][ T64] vhci_hcd: stop threads [ 246.497779][ T64] vhci_hcd: release socket [ 246.505867][ T64] vhci_hcd: disconnect device [ 246.655894][ T8415] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 246.658420][ T8415] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 246.662601][ T8415] vhci_hcd vhci_hcd.0: Device attached [ 246.675769][ T8415] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 246.678350][ T8415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.683378][ T8415] vhci_hcd vhci_hcd.0: Device attached [ 246.841720][ T39] audit: type=1800 audit(1721354902.424:282): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.989" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 246.895675][ T5261] vhci_hcd: vhci_device speed not set [ 246.965666][ T5261] usb 15-1: new high-speed USB device number 5 using vhci_hcd [ 247.173351][ T8427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 247.176806][ T8427] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.186984][ T8427] vhci_hcd vhci_hcd.0: Device attached [ 247.190005][ T8418] vhci_hcd: connection reset by peer [ 247.200334][ T8416] vhci_hcd: connection closed [ 247.203169][ T83] vhci_hcd: stop threads [ 247.212492][ T83] vhci_hcd: release socket [ 247.214587][ T83] vhci_hcd: disconnect device [ 247.219158][ T83] vhci_hcd: stop threads [ 247.222505][ T83] vhci_hcd: release socket [ 247.225179][ T8428] usbip_core: unknown command [ 247.230779][ T83] vhci_hcd: disconnect device [ 247.233321][ T8428] vhci_hcd: unknown pdu 0 [ 247.238571][ T8428] usbip_core: unknown command [ 247.246455][ T83] vhci_hcd: stop threads [ 247.248311][ T83] vhci_hcd: release socket [ 247.253040][ T83] vhci_hcd: disconnect device [ 247.445791][ T5222] Bluetooth: hci5: command tx timeout [ 248.605540][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 248.637943][ T8446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 248.640703][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.649588][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 248.671315][ T8447] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 248.689624][ T83] vhci_hcd: stop threads [ 248.691525][ T83] vhci_hcd: release socket [ 248.693473][ T83] vhci_hcd: disconnect device [ 248.723064][ T8444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 248.726035][ T8444] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.755035][ T8444] vhci_hcd vhci_hcd.0: Device attached [ 248.776921][ T8455] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 248.779666][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.784650][ T8455] vhci_hcd vhci_hcd.0: Device attached [ 248.842253][ T8456] usbip_core: unknown command [ 248.844355][ T8456] vhci_hcd: unknown pdu 0 [ 248.846339][ T8456] usbip_core: unknown command [ 248.957357][ T11] vhci_hcd: stop threads [ 248.961016][ T11] vhci_hcd: release socket [ 248.963932][ T11] vhci_hcd: disconnect device [ 248.969267][ T8452] vhci_hcd: connection closed [ 248.969545][ T64] vhci_hcd: stop threads [ 248.973459][ T64] vhci_hcd: release socket [ 248.975823][ T5264] vhci_hcd: vhci_device speed not set [ 248.975902][ T64] vhci_hcd: disconnect device [ 249.265553][ T5384] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 249.394528][ T39] audit: type=1800 audit(1721354904.974:283): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.999" name="SYSV00000000" dev="hugetlbfs" ino=32 res=0 errno=0 [ 249.475595][ T5384] usb 7-1: Using ep0 maxpacket: 8 [ 249.479845][ T5384] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 249.484437][ T5384] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 249.499041][ T5384] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.502785][ T5384] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.516692][ T5384] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.525546][ T5384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.614051][ T8464] 9pnet_fd: Insufficient options for proto=fd [ 249.778169][ T5384] usb 7-1: usb_control_msg returned -71 [ 249.780971][ T5384] usbtmc 7-1:16.0: can't read capabilities [ 249.814954][ T5384] usb 7-1: USB disconnect, device number 8 [ 250.346716][ T825] usb usb14-port1: attempt power cycle [ 251.021542][ T825] usb usb14-port1: unable to enumerate USB device [ 251.483514][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 251.492916][ T8483] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 251.495015][ T8483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.498591][ T8483] vhci_hcd vhci_hcd.0: Device attached [ 251.521127][ T8484] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 251.538291][ T64] vhci_hcd: stop threads [ 251.540000][ T64] vhci_hcd: release socket [ 251.542835][ T64] vhci_hcd: disconnect device [ 251.560125][ T39] audit: type=1326 audit(1721354907.144:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.2.1005" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 251.645844][ T8478] usb usb8: usbfs: process 8478 (syz.2.1005) did not claim interface 0 before use [ 252.076935][ T5261] vhci_hcd: vhci_device speed not set [ 252.236159][ T39] audit: type=1800 audit(1721354907.814:285): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1008" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 [ 252.417053][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.453627][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.585653][ T825] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.765490][ T825] usb 6-1: Using ep0 maxpacket: 8 [ 252.769888][ T825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.774124][ T825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.780724][ T825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.785213][ T825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.793227][ T825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.797510][ T825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.045032][ T825] usb 6-1: usb_control_msg returned -71 [ 253.048067][ T825] usbtmc 6-1:16.0: can't read capabilities [ 253.099763][ T825] usb 6-1: USB disconnect, device number 10 [ 253.436659][ T1388] usb usb16-port1: attempt power cycle [ 253.535962][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 253.563649][ T8508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 253.566296][ T8508] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.586055][ T8508] vhci_hcd vhci_hcd.0: Device attached [ 253.597822][ T8509] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 253.604538][ T1123] vhci_hcd: stop threads [ 253.608458][ T1123] vhci_hcd: release socket [ 253.610427][ T1123] vhci_hcd: disconnect device [ 254.079156][ T1388] usb usb16-port1: unable to enumerate USB device [ 254.096960][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 254.102944][ T8518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 254.105771][ T8518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.112448][ T8518] vhci_hcd vhci_hcd.0: Device attached [ 254.118150][ T8519] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 1 [ 254.123417][ T83] vhci_hcd: stop threads [ 254.125286][ T83] vhci_hcd: release socket [ 254.127310][ T83] vhci_hcd: disconnect device [ 254.646452][ T39] audit: type=1326 audit(1721354910.224:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.1.1019" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 254.727138][ T8531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 254.729665][ T8531] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 254.743336][ T8531] vhci_hcd vhci_hcd.0: Device attached [ 254.754156][ T8531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 254.756874][ T8531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.765514][ T8531] vhci_hcd vhci_hcd.0: Device attached [ 254.778313][ T8535] usbip_core: unknown command [ 254.781538][ T8535] vhci_hcd: unknown pdu 0 [ 254.783165][ T8535] usbip_core: unknown command [ 254.785224][ T12] vhci_hcd: stop threads [ 254.795583][ T12] vhci_hcd: release socket [ 254.798794][ T12] vhci_hcd: disconnect device [ 254.898064][ T39] audit: type=1800 audit(1721354910.484:287): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1020" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 255.035362][ T39] audit: type=1800 audit(1721354910.614:288): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1021" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 255.065625][ T5264] usb 20-1: SetAddress Request (15) to port 0 [ 255.068594][ T5264] usb 20-1: new SuperSpeed USB device number 15 using vhci_hcd [ 255.227916][ T8530] usb usb8: usbfs: process 8530 (syz.1.1019) did not claim interface 0 before use [ 255.235508][ T8533] vhci_hcd: connection reset by peer [ 255.242101][ T11] vhci_hcd: stop threads [ 255.244027][ T11] vhci_hcd: release socket [ 255.252447][ T11] vhci_hcd: disconnect device [ 255.641080][ T8544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 255.643841][ T8544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 255.650282][ T8544] vhci_hcd vhci_hcd.0: Device attached [ 255.654403][ T8544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 255.656833][ T8544] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 255.661395][ T8544] vhci_hcd vhci_hcd.0: Device attached [ 255.865524][ T1388] vhci_hcd: vhci_device speed not set [ 255.875656][ T825] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 255.949803][ T1388] usb 13-1: new high-speed USB device number 9 using vhci_hcd [ 256.018505][ T8548] vhci_hcd: connection reset by peer [ 256.018627][ T8546] vhci_hcd: connection closed [ 256.028802][ T12] vhci_hcd: stop threads [ 256.032680][ T12] vhci_hcd: release socket [ 256.044809][ T12] vhci_hcd: disconnect device [ 256.050187][ T12] vhci_hcd: stop threads [ 256.051990][ T12] vhci_hcd: release socket [ 256.053990][ T12] vhci_hcd: disconnect device [ 256.069113][ T825] usb 7-1: Using ep0 maxpacket: 8 [ 256.073123][ T825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 256.077981][ T825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 256.084837][ T825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.105074][ T825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.110938][ T825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.114764][ T825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.382726][ T825] usb 7-1: usb_control_msg returned -71 [ 256.385261][ T825] usbtmc 7-1:16.0: can't read capabilities [ 256.399664][ T825] usb 7-1: USB disconnect, device number 9 [ 256.432089][ T8555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 256.434543][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 256.455497][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 256.460781][ T8555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 256.463599][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.467840][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 256.473483][ T8558] usbip_core: unknown command [ 256.475416][ T8558] vhci_hcd: unknown pdu 0 [ 256.477373][ T8558] usbip_core: unknown command [ 256.484426][ T1123] vhci_hcd: stop threads [ 256.488550][ T1123] vhci_hcd: release socket [ 256.490635][ T1123] vhci_hcd: disconnect device [ 256.856239][ T8556] vhci_hcd: connection closed [ 256.865819][ T83] vhci_hcd: stop threads [ 256.870088][ T83] vhci_hcd: release socket [ 256.872242][ T83] vhci_hcd: disconnect device [ 256.878199][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 256.884509][ T8563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 256.887596][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.892423][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 256.904780][ T8564] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 256.909882][ T83] vhci_hcd: stop threads [ 256.911748][ T83] vhci_hcd: release socket [ 256.913761][ T83] vhci_hcd: disconnect device [ 257.701347][ T39] audit: type=1800 audit(1721354913.284:289): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1030" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 errno=0 [ 257.904814][ T39] audit: type=1326 audit(1721354913.484:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.1.1032" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 258.528513][ T8582] usb usb8: usbfs: process 8582 (syz.1.1032) did not claim interface 0 before use [ 259.655661][ T7765] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.731458][ T8599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 259.734378][ T8599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 259.751077][ T8599] vhci_hcd vhci_hcd.0: Device attached [ 259.781440][ T8599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 259.784290][ T8599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 259.815667][ T8599] vhci_hcd vhci_hcd.0: Device attached [ 259.845583][ T7765] usb 6-1: Using ep0 maxpacket: 8 [ 259.851730][ T7765] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.859669][ T7765] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.865917][ T7765] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.872534][ T7765] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.884997][ T7765] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.889090][ T7765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.939301][ T8600] vhci_hcd: connection closed [ 259.940729][ T8603] vhci_hcd: connection closed [ 259.940760][ T12] vhci_hcd: stop threads [ 259.950823][ T12] vhci_hcd: release socket [ 259.952985][ T12] vhci_hcd: disconnect device [ 259.959773][ T12] vhci_hcd: stop threads [ 259.961903][ T12] vhci_hcd: release socket [ 259.965127][ T12] vhci_hcd: disconnect device [ 260.165912][ T5264] usb 20-1: device descriptor read/8, error -110 [ 260.196068][ T7765] usb 6-1: usb_control_msg returned -71 [ 260.200578][ T7765] usbtmc 6-1:16.0: can't read capabilities [ 260.226212][ T7765] usb 6-1: USB disconnect, device number 11 [ 260.686371][ T5264] usb usb20-port1: attempt power cycle [ 260.815610][ T969] vhci_hcd: vhci_device speed not set [ 260.979436][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 260.999887][ T8613] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 261.002687][ T8613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 261.016487][ T8613] vhci_hcd vhci_hcd.0: Device attached [ 261.033768][ T8614] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 261.046109][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.048999][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.053740][ T1123] vhci_hcd: stop threads [ 261.055718][ T1123] vhci_hcd: release socket [ 261.057811][ T1123] vhci_hcd: disconnect device [ 261.115612][ T1388] vhci_hcd: vhci_device speed not set [ 261.356806][ T5264] usb usb20-port1: unable to enumerate USB device [ 261.444686][ T8619] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 261.447537][ T8619] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.462811][ T8619] vhci_hcd vhci_hcd.0: Device attached [ 261.479206][ T8619] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 261.482207][ T8619] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.487806][ T8619] vhci_hcd vhci_hcd.0: Device attached [ 261.495495][ T8622] usbip_core: unknown command [ 261.497541][ T8622] vhci_hcd: unknown pdu 0 [ 261.499376][ T8622] usbip_core: unknown command [ 261.502727][ T83] vhci_hcd: stop threads [ 261.514004][ T83] vhci_hcd: release socket [ 261.520209][ T83] vhci_hcd: disconnect device [ 261.622611][ T8620] vhci_hcd: connection closed [ 261.624121][ T83] vhci_hcd: stop threads [ 261.630065][ T83] vhci_hcd: release socket [ 261.642476][ T83] vhci_hcd: disconnect device [ 262.218680][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 262.370163][ T39] audit: type=1326 audit(1721354917.954:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.1044" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x0 [ 262.473289][ T5261] usb usb14-port1: attempt power cycle [ 262.979944][ T8644] usb usb8: usbfs: process 8644 (syz.3.1044) did not claim interface 0 before use [ 263.146435][ T5261] usb usb14-port1: unable to enumerate USB device [ 263.305491][ T7765] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 263.495485][ T7765] usb 7-1: Using ep0 maxpacket: 8 [ 263.499894][ T7765] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 263.504526][ T7765] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.515490][ T7765] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.519561][ T7765] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.524728][ T7765] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.535997][ T7765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.566671][ T8650] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 263.569825][ T8650] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.573552][ T8650] vhci_hcd vhci_hcd.0: Device attached [ 263.584614][ T8650] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 263.587710][ T8650] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.595518][ T8650] vhci_hcd vhci_hcd.0: Device attached [ 263.765652][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 263.782285][ T8656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 263.785211][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.799735][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 263.805751][ T30] vhci_hcd: vhci_device speed not set [ 263.812212][ T7765] usb 7-1: usb_control_msg returned -71 [ 263.814510][ T7765] usbtmc 7-1:16.0: can't read capabilities [ 263.815933][ T8658] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 263.825010][ T1123] vhci_hcd: stop threads [ 263.827363][ T1123] vhci_hcd: release socket [ 263.829591][ T1123] vhci_hcd: disconnect device [ 263.835735][ T7765] usb 7-1: USB disconnect, device number 10 [ 263.868567][ T8657] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 263.871293][ T8657] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.885542][ T8657] vhci_hcd vhci_hcd.0: Device attached [ 263.885643][ T30] usb 15-1: new high-speed USB device number 6 using vhci_hcd [ 263.913749][ T8657] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 263.916796][ T8657] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.929520][ T8657] vhci_hcd vhci_hcd.0: Device attached [ 263.940909][ T8665] usbip_core: unknown command [ 263.942973][ T8665] vhci_hcd: unknown pdu 0 [ 263.944865][ T8665] usbip_core: unknown command [ 263.947771][ T12] vhci_hcd: stop threads [ 263.949625][ T12] vhci_hcd: release socket [ 263.951673][ T12] vhci_hcd: disconnect device [ 264.000130][ T8653] vhci_hcd: connection reset by peer [ 264.000244][ T8651] vhci_hcd: connection closed [ 264.002855][ T1123] vhci_hcd: stop threads [ 264.009029][ T1123] vhci_hcd: release socket [ 264.012199][ T1123] vhci_hcd: disconnect device [ 264.016146][ T1123] vhci_hcd: stop threads [ 264.017629][ T1123] vhci_hcd: release socket [ 264.019331][ T1123] vhci_hcd: disconnect device [ 264.196508][ T5261] usb 14-1: SetAddress Request (22) to port 0 [ 264.199100][ T5261] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd [ 264.210128][ T8663] vhci_hcd: connection closed [ 264.211586][ T12] vhci_hcd: stop threads [ 264.216400][ T12] vhci_hcd: release socket [ 264.218639][ T12] vhci_hcd: disconnect device [ 264.225895][ T5261] usb 14-1: enqueue for inactive port 0 [ 264.676306][ T5261] usb usb14-port1: attempt power cycle [ 265.034813][ T8675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 265.037754][ T8675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.044915][ T8675] vhci_hcd vhci_hcd.0: Device attached [ 265.065359][ T8675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 265.068080][ T8675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 265.085303][ T8675] vhci_hcd vhci_hcd.0: Device attached [ 265.295514][ T5384] vhci_hcd: vhci_device speed not set [ 265.328986][ T8680] vhci_hcd: connection closed [ 265.329107][ T8677] vhci_hcd: connection closed [ 265.331054][ T11] vhci_hcd: stop threads [ 265.334724][ T11] vhci_hcd: release socket [ 265.339497][ T11] vhci_hcd: disconnect device [ 265.346435][ T5261] usb usb14-port1: unable to enumerate USB device [ 265.352469][ T11] vhci_hcd: stop threads [ 265.354707][ T11] vhci_hcd: release socket [ 265.362515][ T11] vhci_hcd: disconnect device [ 265.375477][ T5384] usb 19-1: new high-speed USB device number 5 using vhci_hcd [ 265.378760][ T5384] usb 19-1: enqueue for inactive port 0 [ 265.465625][ T5384] vhci_hcd: vhci_device speed not set [ 265.793921][ T8687] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 265.797345][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.804423][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 265.840879][ T8687] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 265.843719][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 265.849204][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 265.853202][ T8690] usbip_core: unknown command [ 265.855277][ T8690] vhci_hcd: unknown pdu 0 [ 265.857248][ T8690] usbip_core: unknown command [ 265.859567][ T64] vhci_hcd: stop threads [ 265.878525][ T64] vhci_hcd: release socket [ 265.880835][ T64] vhci_hcd: disconnect device [ 265.999245][ T8688] vhci_hcd: connection closed [ 265.999973][ T11] vhci_hcd: stop threads [ 266.005877][ T11] vhci_hcd: release socket [ 266.015419][ T11] vhci_hcd: disconnect device [ 266.826639][ T1388] usb usb20-port1: attempt power cycle [ 267.158299][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 267.168117][ T8704] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 267.170691][ T8704] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 267.180278][ T8704] vhci_hcd vhci_hcd.0: Device attached [ 267.189251][ T8705] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 267.195023][ T64] vhci_hcd: stop threads [ 267.204684][ T64] vhci_hcd: release socket [ 267.208944][ T64] vhci_hcd: disconnect device [ 267.385552][ T5281] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 267.476540][ T1388] usb usb20-port1: unable to enumerate USB device [ 267.586105][ T5281] usb 7-1: Using ep0 maxpacket: 8 [ 267.635533][ T5281] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.639905][ T5281] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.643808][ T5281] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.648810][ T5281] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.654172][ T5281] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.665470][ T5281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.765560][ T8714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 267.768636][ T8714] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 267.791928][ T8714] vhci_hcd vhci_hcd.0: Device attached [ 267.806267][ T8714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 267.809263][ T8714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 267.828442][ T8714] vhci_hcd vhci_hcd.0: Device attached [ 267.935496][ T5281] usb 7-1: usb_control_msg returned -71 [ 267.938036][ T5281] usbtmc 7-1:16.0: can't read capabilities [ 267.955751][ T5281] usb 7-1: USB disconnect, device number 11 [ 268.095534][ T5384] usb 14-1: SetAddress Request (26) to port 0 [ 268.098326][ T5384] usb 14-1: new SuperSpeed USB device number 26 using vhci_hcd [ 268.156252][ T8718] vhci_hcd: connection closed [ 268.158545][ T1123] vhci_hcd: stop threads [ 268.163531][ T1123] vhci_hcd: release socket [ 268.165432][ T8715] vhci_hcd: connection reset by peer [ 268.165930][ T1123] vhci_hcd: disconnect device [ 268.173664][ T1123] vhci_hcd: stop threads [ 268.183793][ T1123] vhci_hcd: release socket [ 268.194256][ T1123] vhci_hcd: disconnect device [ 268.570156][ T8726] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 268.572986][ T8726] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.578374][ T8726] vhci_hcd vhci_hcd.0: Device attached [ 268.589159][ T8726] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 268.591835][ T8726] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.594910][ T8726] vhci_hcd vhci_hcd.0: Device attached [ 268.602109][ T8731] usbip_core: unknown command [ 268.604122][ T8731] vhci_hcd: unknown pdu 0 [ 268.613396][ T8731] usbip_core: unknown command [ 268.617154][ T64] vhci_hcd: stop threads [ 268.619129][ T64] vhci_hcd: release socket [ 268.621130][ T64] vhci_hcd: disconnect device [ 269.047153][ T30] vhci_hcd: vhci_device speed not set [ 269.057854][ T8729] vhci_hcd: connection closed [ 269.060422][ T64] vhci_hcd: stop threads [ 269.064485][ T64] vhci_hcd: release socket [ 269.075497][ T64] vhci_hcd: disconnect device [ 269.171931][ T8735] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 269.174882][ T8735] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.185533][ T8735] vhci_hcd vhci_hcd.0: Device attached [ 269.195825][ T8735] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 269.198771][ T8735] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.203990][ T8735] vhci_hcd vhci_hcd.0: Device attached [ 269.208699][ T8741] usbip_core: unknown command [ 269.210780][ T8741] vhci_hcd: unknown pdu 0 [ 269.212684][ T8741] usbip_core: unknown command [ 269.220196][ T8736] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 269.223084][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.231194][ T64] vhci_hcd: stop threads [ 269.233056][ T64] vhci_hcd: release socket [ 269.235035][ T64] vhci_hcd: disconnect device [ 269.240569][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 269.253593][ T8736] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 269.256259][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.260935][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 269.377670][ T8746] vhci_hcd: connection closed [ 269.378015][ T64] vhci_hcd: stop threads [ 269.381767][ T64] vhci_hcd: release socket [ 269.384436][ T64] vhci_hcd: disconnect device [ 269.384965][ T8743] vhci_hcd: connection closed [ 269.395159][ T64] vhci_hcd: stop threads [ 269.404010][ T64] vhci_hcd: release socket [ 269.406959][ T64] vhci_hcd: disconnect device [ 269.455951][ T5261] vhci_hcd: vhci_device speed not set [ 269.505653][ T9] usb 20-1: SetAddress Request (23) to port 0 [ 269.508379][ T9] usb 20-1: new SuperSpeed USB device number 23 using vhci_hcd [ 269.579219][ T8739] vhci_hcd: connection reset by peer [ 269.582596][ T64] vhci_hcd: stop threads [ 269.584493][ T64] vhci_hcd: release socket [ 269.586704][ T64] vhci_hcd: disconnect device [ 269.856303][ T8754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.890818][ T8754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.416484][ T5264] usb usb16-port1: attempt power cycle [ 270.751219][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 270.774078][ T8767] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 270.776640][ T8767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.805534][ T5261] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 270.810019][ T1388] usb usb18-port1: attempt power cycle [ 270.811453][ T8767] vhci_hcd vhci_hcd.0: Device attached [ 270.829010][ T8768] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 270.842876][ T11] vhci_hcd: stop threads [ 270.844881][ T11] vhci_hcd: release socket [ 270.849288][ T11] vhci_hcd: disconnect device [ 270.985504][ T5261] usb 6-1: Using ep0 maxpacket: 8 [ 270.990737][ T5261] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.005488][ T5261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.011275][ T5261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.025480][ T5261] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.032304][ T5261] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.045529][ T5261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.117203][ T5264] usb usb16-port1: unable to enumerate USB device [ 271.206230][ T8776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 271.209175][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 271.212651][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 271.229316][ T8776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 271.232115][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.240059][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 271.312755][ T5261] usb 6-1: usb_control_msg returned -71 [ 271.315093][ T5261] usbtmc 6-1:16.0: can't read capabilities [ 271.333494][ T5261] usb 6-1: USB disconnect, device number 12 [ 271.447605][ T1388] usb usb18-port1: unable to enumerate USB device [ 271.639222][ T8779] vhci_hcd: connection closed [ 271.639542][ T11] vhci_hcd: stop threads [ 271.645443][ T8777] vhci_hcd: connection closed [ 271.647940][ T11] vhci_hcd: release socket [ 271.653798][ T11] vhci_hcd: disconnect device [ 271.668652][ T11] vhci_hcd: stop threads [ 271.670537][ T11] vhci_hcd: release socket [ 271.673050][ T11] vhci_hcd: disconnect device [ 272.749021][ T8796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.830843][ T8796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.111629][ T8800] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 273.113617][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 273.116935][ T8800] vhci_hcd vhci_hcd.0: Device attached [ 273.126852][ T8800] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 273.128834][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.131650][ T8800] vhci_hcd vhci_hcd.0: Device attached [ 273.135485][ T8803] usbip_core: unknown command [ 273.137157][ T8803] vhci_hcd: unknown pdu 0 [ 273.139061][ T8803] usbip_core: unknown command [ 273.141333][ T11] vhci_hcd: stop threads [ 273.144417][ T11] vhci_hcd: release socket [ 273.150073][ T11] vhci_hcd: disconnect device [ 273.195798][ T5384] usb 14-1: device descriptor read/8, error -110 [ 273.395516][ T7765] vhci_hcd: vhci_device speed not set [ 273.485671][ T8801] vhci_hcd: connection closed [ 273.487701][ T11] vhci_hcd: stop threads [ 273.493012][ T11] vhci_hcd: release socket [ 273.502954][ T11] vhci_hcd: disconnect device [ 273.872594][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 273.906152][ T8811] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 273.908716][ T8811] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.912096][ T8811] vhci_hcd vhci_hcd.0: Device attached [ 273.938801][ T8813] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 273.942258][ T1123] vhci_hcd: stop threads [ 273.944177][ T1123] vhci_hcd: release socket [ 273.946475][ T1123] vhci_hcd: disconnect device [ 274.145550][ T7765] vhci_hcd: vhci_device speed not set [ 274.232914][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 274.235155][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.245552][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 274.255060][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 274.257568][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.265574][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 274.465610][ T5261] vhci_hcd: vhci_device speed not set [ 274.536439][ T5261] usb 15-1: new full-speed USB device number 7 using vhci_hcd [ 274.565568][ T9] usb 20-1: device descriptor read/8, error -110 [ 274.785620][ T5264] vhci_hcd: vhci_device speed not set [ 274.791490][ T8826] vhci_hcd: connection reset by peer [ 274.793849][ T8824] vhci_hcd: connection closed [ 274.794099][ T11] vhci_hcd: stop threads [ 274.801776][ T11] vhci_hcd: release socket [ 274.805077][ T11] vhci_hcd: disconnect device [ 274.808683][ T11] vhci_hcd: stop threads [ 274.811757][ T11] vhci_hcd: release socket [ 274.814954][ T11] vhci_hcd: disconnect device [ 274.973568][ T8836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 274.976323][ T8836] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.985161][ T8836] vhci_hcd vhci_hcd.0: Device attached [ 275.000346][ T8836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 275.003366][ T8836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.007208][ T8836] vhci_hcd vhci_hcd.0: Device attached [ 275.127035][ T5384] usb usb14-port1: attempt power cycle [ 275.216292][ T30] vhci_hcd: vhci_device speed not set [ 275.285820][ T30] usb 17-1: new high-speed USB device number 8 using vhci_hcd [ 275.387820][ T8837] vhci_hcd: connection closed [ 275.388046][ T11] vhci_hcd: stop threads [ 275.388306][ T8839] vhci_hcd: connection reset by peer [ 275.390155][ T11] vhci_hcd: release socket [ 275.416415][ T11] vhci_hcd: disconnect device [ 275.418826][ T11] vhci_hcd: stop threads [ 275.420745][ T11] vhci_hcd: release socket [ 275.423205][ T11] vhci_hcd: disconnect device [ 275.460248][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.558099][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.775518][ T5384] usb usb14-port1: unable to enumerate USB device [ 275.866517][ T9] usb usb20-port1: attempt power cycle [ 276.546661][ T9] usb usb20-port1: unable to enumerate USB device [ 276.874503][ T8858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 276.877423][ T8858] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.888205][ T8858] vhci_hcd vhci_hcd.0: Device attached [ 276.906957][ T8858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 276.909823][ T8858] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.919667][ T8858] vhci_hcd vhci_hcd.0: Device attached [ 276.929816][ T8863] usbip_core: unknown command [ 276.931857][ T8863] vhci_hcd: unknown pdu 0 [ 276.933701][ T8863] usbip_core: unknown command [ 276.940903][ T11] vhci_hcd: stop threads [ 276.942604][ T11] vhci_hcd: release socket [ 276.949530][ T11] vhci_hcd: disconnect device [ 277.375263][ T8861] vhci_hcd: connection closed [ 277.395525][ T1123] vhci_hcd: stop threads [ 277.399790][ T1123] vhci_hcd: release socket [ 277.402333][ T1123] vhci_hcd: disconnect device [ 277.809437][ T8875] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 277.812300][ T8875] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.815994][ T8875] vhci_hcd vhci_hcd.0: Device attached [ 277.938197][ T8879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.006985][ T8879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.119475][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 278.126747][ T8882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 278.129549][ T8882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.132941][ T8882] vhci_hcd vhci_hcd.0: Device attached [ 278.141284][ T8883] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 278.145803][ T83] vhci_hcd: stop threads [ 278.148547][ T83] vhci_hcd: release socket [ 278.155447][ T83] vhci_hcd: disconnect device [ 278.347126][ T8876] vhci_hcd: connection closed [ 278.347413][ T1123] vhci_hcd: stop threads [ 278.352767][ T1123] vhci_hcd: release socket [ 278.355838][ T1123] vhci_hcd: disconnect device [ 279.513348][ T8900] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 279.516340][ T8900] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 279.520947][ T8900] vhci_hcd vhci_hcd.0: Device attached [ 279.530375][ T8900] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 279.533305][ T8900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.538013][ T8900] vhci_hcd vhci_hcd.0: Device attached [ 279.545102][ T8905] usbip_core: unknown command [ 279.550759][ T8905] vhci_hcd: unknown pdu 0 [ 279.552958][ T8905] usbip_core: unknown command [ 279.559347][ T1123] vhci_hcd: stop threads [ 279.561189][ T1123] vhci_hcd: release socket [ 279.568417][ T1123] vhci_hcd: disconnect device [ 279.685666][ T5261] vhci_hcd: vhci_device speed not set [ 280.003757][ T8903] vhci_hcd: connection closed [ 280.006073][ T64] vhci_hcd: stop threads [ 280.010025][ T64] vhci_hcd: release socket [ 280.024210][ T64] vhci_hcd: disconnect device [ 280.114106][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.165048][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.405577][ T30] vhci_hcd: vhci_device speed not set [ 280.455501][ T8916] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 280.458033][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.461600][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 280.469964][ T8916] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 280.472350][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 280.477909][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 280.480779][ T8919] usbip_core: unknown command [ 280.482825][ T8919] vhci_hcd: unknown pdu 0 [ 280.484734][ T8919] usbip_core: unknown command [ 280.487374][ T64] vhci_hcd: stop threads [ 280.488979][ T64] vhci_hcd: release socket [ 280.490725][ T64] vhci_hcd: disconnect device [ 280.765558][ T5263] usb 14-1: SetAddress Request (30) to port 0 [ 280.770788][ T5263] usb 14-1: new SuperSpeed USB device number 30 using vhci_hcd [ 280.867729][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 280.879506][ T8917] vhci_hcd: connection reset by peer [ 280.882205][ T64] vhci_hcd: stop threads [ 280.883957][ T64] vhci_hcd: release socket [ 280.885972][ T64] vhci_hcd: disconnect device [ 280.905692][ T8926] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 280.908636][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 280.923542][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 280.937161][ T8927] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 280.946203][ T1123] vhci_hcd: stop threads [ 280.947955][ T1123] vhci_hcd: release socket [ 280.950645][ T1123] vhci_hcd: disconnect device [ 281.056660][ T1388] usb usb16-port1: attempt power cycle [ 281.145518][ T30] vhci_hcd: vhci_device speed not set [ 281.717026][ T1388] usb usb16-port1: unable to enumerate USB device [ 282.132813][ T8935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 282.135798][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.138993][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 282.275490][ T825] usb 18-1: SetAddress Request (22) to port 0 [ 282.280528][ T825] usb 18-1: new SuperSpeed USB device number 22 using vhci_hcd [ 282.377821][ T969] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.502391][ T8945] vhci_hcd: connection reset by peer [ 282.512582][ T11] vhci_hcd: stop threads [ 282.514551][ T11] vhci_hcd: release socket [ 282.519444][ T11] vhci_hcd: disconnect device [ 282.525541][ T969] usb 5-1: device descriptor read/64, error -71 [ 282.805615][ T969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.965483][ T969] usb 5-1: device descriptor read/64, error -71 [ 283.097354][ T969] usb usb5-port1: attempt power cycle [ 283.447257][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.482172][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.526007][ T969] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 283.556294][ T969] usb 5-1: device descriptor read/8, error -71 [ 283.825705][ T969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 283.856503][ T969] usb 5-1: device descriptor read/8, error -71 [ 283.977870][ T969] usb usb5-port1: unable to enumerate USB device [ 284.443984][ T8962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 284.446925][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 284.453826][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 284.463962][ T8962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 284.466851][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.480413][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 284.484230][ T8965] usbip_core: unknown command [ 284.489005][ T8965] vhci_hcd: unknown pdu 0 [ 284.491092][ T8965] usbip_core: unknown command [ 284.493801][ T11] vhci_hcd: stop threads [ 284.497543][ T11] vhci_hcd: release socket [ 284.499650][ T11] vhci_hcd: disconnect device [ 284.755511][ T7670] usb 16-1: SetAddress Request (35) to port 0 [ 284.759141][ T7670] usb 16-1: new SuperSpeed USB device number 35 using vhci_hcd [ 284.926103][ T8963] vhci_hcd: connection reset by peer [ 284.931429][ T11] vhci_hcd: stop threads [ 284.933325][ T11] vhci_hcd: release socket [ 284.939312][ T11] vhci_hcd: disconnect device [ 285.376228][ T66] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.381182][ T66] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.385579][ T66] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.390521][ T66] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.394859][ T66] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.402449][ T66] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.728881][ T8972] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 285.732252][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 285.738894][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 285.777450][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 285.786275][ T8980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 285.789181][ T8980] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.804503][ T8980] vhci_hcd vhci_hcd.0: Device attached [ 285.875898][ T8981] usbip_core: unknown command [ 285.877646][ T8981] vhci_hcd: unknown pdu 0 [ 285.879468][ T8981] usbip_core: unknown command [ 285.892737][ T64] vhci_hcd: stop threads [ 285.894353][ T64] vhci_hcd: release socket [ 285.897864][ T64] vhci_hcd: disconnect device [ 285.958899][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.962327][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.966263][ T8970] bridge_slave_0: entered allmulticast mode [ 285.970495][ T8970] bridge_slave_0: entered promiscuous mode [ 285.976381][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.979802][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.983949][ T8970] bridge_slave_1: entered allmulticast mode [ 285.989829][ T8970] bridge_slave_1: entered promiscuous mode [ 286.003833][ T8978] vhci_hcd: connection reset by peer [ 286.011140][ T64] vhci_hcd: stop threads [ 286.012997][ T64] vhci_hcd: release socket [ 286.018888][ T5263] usb 14-1: device descriptor read/8, error -110 [ 286.021807][ T64] vhci_hcd: disconnect device [ 286.126186][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.131739][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.327575][ T8970] team0: Port device team_slave_0 added [ 286.331772][ T8970] team0: Port device team_slave_1 added [ 286.466123][ T5263] usb usb14-port1: attempt power cycle [ 286.583059][ T39] audit: type=1800 audit(1721354942.164:292): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1129" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [ 287.019862][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.022810][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.031276][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.055481][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.070863][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.073784][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.095488][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.137068][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.147110][ T5263] usb usb14-port1: unable to enumerate USB device [ 287.270306][ T8970] hsr_slave_0: entered promiscuous mode [ 287.273999][ T8970] hsr_slave_1: entered promiscuous mode [ 287.279426][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.283931][ T8970] Cannot create hsr debugfs directory [ 287.370198][ T825] usb 18-1: device descriptor read/8, error -110 [ 287.435574][ T5222] Bluetooth: hci6: command tx timeout [ 287.488320][ T825] usb usb18-port1: attempt power cycle [ 287.601550][ T8970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.698842][ T8970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.787779][ T8970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.873135][ T8970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.080962][ T8970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.100314][ T8970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.113955][ T8970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.129513][ T8970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.156240][ T825] usb usb18-port1: unable to enumerate USB device [ 288.216436][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.237578][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.250716][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.253277][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.264820][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.268669][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.334287][ T8970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.522487][ T39] audit: type=1800 audit(1721354944.104:293): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1135" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 errno=0 [ 288.628514][ T9020] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 288.631238][ T9020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.632419][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.651531][ T9020] vhci_hcd vhci_hcd.0: Device attached [ 288.676210][ T9020] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 288.679281][ T9020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 288.689808][ T8970] veth0_vlan: entered promiscuous mode [ 288.699313][ T9020] vhci_hcd vhci_hcd.0: Device attached [ 288.704796][ T8970] veth1_vlan: entered promiscuous mode [ 288.715013][ T9025] usbip_core: unknown command [ 288.717486][ T9025] vhci_hcd: unknown pdu 0 [ 288.719315][ T9025] usbip_core: unknown command [ 288.721491][ T64] vhci_hcd: stop threads [ 288.723359][ T64] vhci_hcd: release socket [ 288.725349][ T64] vhci_hcd: disconnect device [ 288.751031][ T8970] veth0_macvtap: entered promiscuous mode [ 288.761793][ T8970] veth1_macvtap: entered promiscuous mode [ 288.777396][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.782163][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.787567][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.791964][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.807689][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.812104][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.816637][ T9022] vhci_hcd: connection closed [ 288.817697][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.824135][ T83] vhci_hcd: stop threads [ 288.826141][ T83] vhci_hcd: release socket [ 288.828161][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.832253][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.836764][ T83] vhci_hcd: disconnect device [ 288.845793][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.849902][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.854208][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.867202][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.880201][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.884812][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.889438][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.893781][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.899614][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.903986][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.911944][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.916626][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.920991][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.930860][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.935044][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.939880][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.946700][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.958281][ T8970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.962100][ T8970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.966847][ T8970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.970642][ T8970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.044452][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.055476][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.092014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.105613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.522889][ T5222] Bluetooth: hci6: command tx timeout [ 289.705583][ T39] audit: type=1800 audit(1721354945.284:294): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1138" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 errno=0 [ 289.847671][ T7670] usb 16-1: device descriptor read/8, error -110 [ 290.296669][ T7670] usb usb16-port1: attempt power cycle [ 290.906573][ T39] audit: type=1800 audit(1721354946.484:295): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1143" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 290.976771][ T7670] usb usb16-port1: unable to enumerate USB device [ 291.595587][ T5222] Bluetooth: hci6: command tx timeout [ 291.734267][ T9068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 291.737268][ T9068] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 291.755557][ T9068] vhci_hcd vhci_hcd.0: Device attached [ 291.775561][ T9068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 291.778485][ T9068] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.811129][ T9068] vhci_hcd vhci_hcd.0: Device attached [ 291.825143][ T9071] usbip_core: unknown command [ 291.827300][ T9071] vhci_hcd: unknown pdu 0 [ 291.829292][ T9071] usbip_core: unknown command [ 291.867084][ T83] vhci_hcd: stop threads [ 291.868926][ T83] vhci_hcd: release socket [ 291.870760][ T83] vhci_hcd: disconnect device [ 292.095684][ T5261] usb 20-1: SetAddress Request (27) to port 0 [ 292.103524][ T5261] usb 20-1: new SuperSpeed USB device number 27 using vhci_hcd [ 292.115204][ T9069] vhci_hcd: connection closed [ 292.116491][ T83] vhci_hcd: stop threads [ 292.120886][ T83] vhci_hcd: release socket [ 292.122920][ T83] vhci_hcd: disconnect device [ 292.147108][ T5261] usb 20-1: enqueue for inactive port 0 [ 292.576126][ T5261] usb usb20-port1: attempt power cycle [ 293.257930][ T5261] usb usb20-port1: unable to enumerate USB device [ 293.675614][ T5222] Bluetooth: hci6: command tx timeout [ 295.129901][ T39] audit: type=1800 audit(1721354950.714:296): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1153" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [ 295.344275][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 295.373218][ T9096] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 295.376047][ T9096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.400279][ T9096] vhci_hcd vhci_hcd.0: Device attached [ 295.456061][ T9097] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 295.459510][ T11] vhci_hcd: stop threads [ 295.461319][ T11] vhci_hcd: release socket [ 295.463252][ T11] vhci_hcd: disconnect device [ 296.655520][ T1388] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 296.855482][ T1388] usb 8-1: Using ep0 maxpacket: 8 [ 296.863119][ T1388] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.871905][ T1388] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.882031][ T1388] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.895447][ T1388] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.901169][ T1388] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.910930][ T9118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 296.913867][ T9118] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.915437][ T1388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.918499][ T9118] vhci_hcd vhci_hcd.0: Device attached [ 296.957770][ T9118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 296.960630][ T9118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.966789][ T9118] vhci_hcd vhci_hcd.0: Device attached [ 296.974404][ T9121] usbip_core: unknown command [ 296.976686][ T9121] vhci_hcd: unknown pdu 0 [ 296.978601][ T9121] usbip_core: unknown command [ 296.981040][ T83] vhci_hcd: stop threads [ 296.984217][ T83] vhci_hcd: release socket [ 296.989021][ T83] vhci_hcd: disconnect device [ 297.195679][ T9119] vhci_hcd: connection closed [ 297.200388][ T1123] vhci_hcd: stop threads [ 297.204730][ T1123] vhci_hcd: release socket [ 297.209670][ T1123] vhci_hcd: disconnect device [ 297.226327][ T825] usb 14-1: enqueue for inactive port 0 [ 297.315044][ T1388] usb 8-1: usb_control_msg returned -71 [ 297.325461][ T1388] usbtmc 8-1:16.0: can't read capabilities [ 297.338969][ T1388] usb 8-1: USB disconnect, device number 14 [ 297.758497][ T825] usb usb14-port1: attempt power cycle [ 298.032621][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 298.092068][ T9127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 298.094527][ T9127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.137729][ T9127] vhci_hcd vhci_hcd.0: Device attached [ 298.209450][ T39] audit: type=1800 audit(1721354953.794:297): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1162" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 298.405618][ T7765] usb 19-1: new high-speed USB device number 7 using vhci_hcd [ 298.410285][ T825] usb usb14-port1: unable to enumerate USB device [ 298.552317][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 298.589666][ T9139] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 298.592597][ T9139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.610676][ T9139] vhci_hcd vhci_hcd.0: Device attached [ 298.648599][ T9140] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 298.651953][ T1123] vhci_hcd: stop threads [ 298.653893][ T1123] vhci_hcd: release socket [ 298.665559][ T1123] vhci_hcd: disconnect device [ 298.908416][ T9128] vhci_hcd: connection reset by peer [ 298.925872][ T1123] vhci_hcd: stop threads [ 298.927732][ T1123] vhci_hcd: release socket [ 298.930212][ T1123] vhci_hcd: disconnect device [ 299.005981][ T9148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.132976][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.150043][ T9164] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 300.153013][ T9164] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 300.167228][ T9164] vhci_hcd vhci_hcd.0: Device attached [ 300.183955][ T39] audit: type=1800 audit(1721354955.764:298): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1171" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 [ 300.206769][ T9164] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 300.209481][ T9164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 300.224015][ T9164] vhci_hcd vhci_hcd.0: Device attached [ 300.247318][ T9170] usbip_core: unknown command [ 300.249338][ T9170] vhci_hcd: unknown pdu 0 [ 300.251172][ T9170] usbip_core: unknown command [ 300.253559][ T11] vhci_hcd: stop threads [ 300.255506][ T11] vhci_hcd: release socket [ 300.257021][ T11] vhci_hcd: disconnect device [ 300.377861][ T9166] vhci_hcd: connection closed [ 300.378226][ T64] vhci_hcd: stop threads [ 300.382672][ T64] vhci_hcd: release socket [ 300.384895][ T64] vhci_hcd: disconnect device [ 300.481302][ T9175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 300.483711][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 300.493177][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 300.500791][ T9175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 300.503704][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 300.540540][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 300.544956][ T9179] usbip_core: unknown command [ 300.549212][ T9179] vhci_hcd: unknown pdu 0 [ 300.551090][ T9179] usbip_core: unknown command [ 300.554523][ T64] vhci_hcd: stop threads [ 300.559802][ T64] vhci_hcd: release socket [ 300.563603][ T64] vhci_hcd: disconnect device [ 300.825033][ T9177] vhci_hcd: connection closed [ 300.825345][ T64] vhci_hcd: stop threads [ 300.835585][ T64] vhci_hcd: release socket [ 300.837820][ T64] vhci_hcd: disconnect device [ 301.465537][ T9188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 301.468058][ T9188] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 301.475709][ T9188] vhci_hcd vhci_hcd.0: Device attached [ 301.508861][ T9188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 301.511220][ T9188] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.515588][ T9188] vhci_hcd vhci_hcd.0: Device attached [ 301.525354][ T9195] usbip_core: unknown command [ 301.527513][ T9195] vhci_hcd: unknown pdu 0 [ 301.529392][ T9195] usbip_core: unknown command [ 301.536513][ T64] vhci_hcd: stop threads [ 301.538165][ T64] vhci_hcd: release socket [ 301.539864][ T64] vhci_hcd: disconnect device [ 301.696013][ T9193] vhci_hcd: connection closed [ 301.699408][ T64] vhci_hcd: stop threads [ 301.703816][ T64] vhci_hcd: release socket [ 301.719552][ T64] vhci_hcd: disconnect device [ 301.785729][ T969] usb 18-1: enqueue for inactive port 0 [ 302.306849][ T969] usb usb18-port1: attempt power cycle [ 302.312597][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.405921][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.956639][ T969] usb usb18-port1: unable to enumerate USB device [ 303.456938][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 303.485284][ T9216] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 303.488182][ T9216] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.506985][ T9216] vhci_hcd vhci_hcd.0: Device attached [ 303.527741][ T7765] vhci_hcd: vhci_device speed not set [ 303.550031][ T9218] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 303.568846][ T1123] vhci_hcd: stop threads [ 303.570676][ T1123] vhci_hcd: release socket [ 303.572609][ T1123] vhci_hcd: disconnect device [ 304.166985][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.274890][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.907881][ T25] usb usb20-port1: attempt power cycle [ 305.556601][ T25] usb usb20-port1: unable to enumerate USB device [ 305.847453][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 305.865931][ T9234] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 305.868518][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.885759][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 305.897510][ T9235] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 5 [ 305.903180][ T64] vhci_hcd: stop threads [ 305.905220][ T64] vhci_hcd: release socket [ 305.918406][ T64] vhci_hcd: disconnect device [ 306.576039][ T9241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 306.578936][ T9241] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.593771][ T9241] vhci_hcd vhci_hcd.0: Device attached [ 306.697960][ T9241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 306.700963][ T9241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.711143][ T9241] vhci_hcd vhci_hcd.0: Device attached [ 306.811808][ T9246] vhci_hcd: connection closed [ 306.811903][ T9242] vhci_hcd: connection closed [ 306.814677][ T64] vhci_hcd: stop threads [ 306.819093][ T64] vhci_hcd: release socket [ 306.820968][ T64] vhci_hcd: disconnect device [ 306.834844][ T64] vhci_hcd: stop threads [ 306.837308][ T64] vhci_hcd: release socket [ 306.845617][ T64] vhci_hcd: disconnect device [ 306.896658][ T825] usb 18-1: enqueue for inactive port 0 [ 306.919220][ T39] audit: type=1800 audit(1721354962.504:299): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1189" name="SYSV00000000" dev="hugetlbfs" ino=27 res=0 errno=0 [ 307.418683][ T825] usb usb18-port1: attempt power cycle [ 308.098262][ T825] usb usb18-port1: unable to enumerate USB device [ 308.533923][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.731156][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.572801][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 309.600371][ T9273] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 309.603643][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.625887][ T9273] vhci_hcd vhci_hcd.0: Device attached [ 309.635233][ T9275] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 309.640820][ T83] vhci_hcd: stop threads [ 309.642544][ T83] vhci_hcd: release socket [ 309.644477][ T83] vhci_hcd: disconnect device [ 309.818534][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 309.888394][ T39] audit: type=1800 audit(1721354965.464:300): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1198" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 errno=0 [ 310.828683][ T9293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 310.831687][ T9293] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 310.836518][ T9293] vhci_hcd vhci_hcd.0: Device attached [ 310.848878][ T9293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 310.851507][ T9293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 310.875543][ T9293] vhci_hcd vhci_hcd.0: Device attached [ 311.089958][ T56] vhci_hcd: vhci_device speed not set [ 311.165696][ T56] usb 19-1: new high-speed USB device number 8 using vhci_hcd [ 311.184880][ T9299] vhci_hcd: connection closed [ 311.191098][ T9301] vhci_hcd: connection reset by peer [ 311.197345][ T12] vhci_hcd: stop threads [ 311.206464][ T12] vhci_hcd: release socket [ 311.216743][ T12] vhci_hcd: disconnect device [ 311.219045][ T12] vhci_hcd: stop threads [ 311.220987][ T12] vhci_hcd: release socket [ 311.225467][ T12] vhci_hcd: disconnect device [ 312.246324][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 312.357546][ T39] audit: type=1800 audit(1721354967.924:301): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1207" name="SYSV00000000" dev="hugetlbfs" ino=29 res=0 errno=0 [ 312.382964][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 312.395491][ T9320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 312.398238][ T9320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.403001][ T9320] vhci_hcd vhci_hcd.0: Device attached [ 312.411167][ T9321] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 5 [ 312.418208][ T11] vhci_hcd: stop threads [ 312.420307][ T11] vhci_hcd: release socket [ 312.428838][ T11] vhci_hcd: disconnect device [ 313.436153][ T39] audit: type=1326 audit(1721354969.024:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.3.1210" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 313.861423][ T9332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 313.864783][ T9332] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 313.868618][ T9332] vhci_hcd vhci_hcd.0: Device attached [ 313.891647][ T9332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 313.894510][ T9332] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 313.907293][ T9332] vhci_hcd vhci_hcd.0: Device attached [ 313.921332][ T9337] usbip_core: unknown command [ 313.923423][ T9337] vhci_hcd: unknown pdu 0 [ 313.925342][ T9337] usbip_core: unknown command [ 313.941291][ T64] vhci_hcd: stop threads [ 313.943115][ T64] vhci_hcd: release socket [ 313.945040][ T64] vhci_hcd: disconnect device [ 314.051164][ T9335] vhci_hcd: connection closed [ 314.062218][ T64] vhci_hcd: stop threads [ 314.066435][ T64] vhci_hcd: release socket [ 314.071315][ T64] vhci_hcd: disconnect device [ 314.203269][ T9329] usb usb8: usbfs: process 9329 (syz.3.1210) did not claim interface 0 before use [ 315.856615][ T9354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 315.859118][ T9354] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.863677][ T9354] vhci_hcd vhci_hcd.0: Device attached [ 315.878025][ T9354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 315.880856][ T9354] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.911246][ T39] audit: type=1800 audit(1721354971.494:303): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1216" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 315.918987][ T9354] vhci_hcd vhci_hcd.0: Device attached [ 316.043777][ T9358] vhci_hcd: connection closed [ 316.043873][ T9355] vhci_hcd: connection closed [ 316.052951][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 316.055868][ T64] vhci_hcd: stop threads [ 316.060440][ T64] vhci_hcd: release socket [ 316.062513][ T64] vhci_hcd: disconnect device [ 316.064972][ T64] vhci_hcd: stop threads [ 316.065550][ T9362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 316.069702][ T9362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.073305][ T64] vhci_hcd: release socket [ 316.075309][ T64] vhci_hcd: disconnect device [ 316.079665][ T9362] vhci_hcd vhci_hcd.0: Device attached [ 316.103397][ T9363] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 2 [ 316.106635][ T64] vhci_hcd: stop threads [ 316.108478][ T64] vhci_hcd: release socket [ 316.110279][ T64] vhci_hcd: disconnect device [ 316.334238][ T56] vhci_hcd: vhci_device speed not set [ 316.925587][ T969] vhci_hcd: vhci_device speed not set [ 316.931534][ T39] audit: type=1800 audit(1721354972.514:304): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1220" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 317.082996][ T9383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.244041][ T9383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.706567][ T1388] usb usb20-port1: attempt power cycle [ 318.006463][ T9388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 318.009321][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 318.025613][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 318.074013][ T9388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 318.076928][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.098646][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 318.251241][ T9393] vhci_hcd: connection closed [ 318.251661][ T9391] vhci_hcd: connection closed [ 318.258379][ T12] vhci_hcd: stop threads [ 318.262511][ T12] vhci_hcd: release socket [ 318.269814][ T12] vhci_hcd: disconnect device [ 318.274912][ T12] vhci_hcd: stop threads [ 318.285052][ T12] vhci_hcd: release socket [ 318.287505][ T12] vhci_hcd: disconnect device [ 318.336523][ T5261] usb 18-1: enqueue for inactive port 0 [ 318.356435][ T1388] usb usb20-port1: unable to enumerate USB device [ 318.866605][ T5261] usb usb18-port1: attempt power cycle [ 318.956134][ T56] vhci_hcd: vhci_device speed not set [ 319.144734][ T39] audit: type=1800 audit(1721354974.724:305): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1225" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 [ 319.272949][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.336128][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.307113][ T5261] usb usb18-port1: unable to enumerate USB device [ 321.345618][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 321.375569][ T9407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 321.378519][ T9407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 321.393546][ T9407] vhci_hcd vhci_hcd.0: Device attached [ 321.399232][ T9408] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 321.406220][ T64] vhci_hcd: stop threads [ 321.408071][ T64] vhci_hcd: release socket [ 321.410062][ T64] vhci_hcd: disconnect device [ 322.269107][ T39] audit: type=1800 audit(1721354977.854:306): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1230" name="SYSV00000000" dev="hugetlbfs" ino=31 res=0 errno=0 [ 322.480101][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.483015][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.664218][ T9416] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 323.667186][ T9416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 323.675605][ T9416] vhci_hcd vhci_hcd.0: Device attached [ 323.741393][ T9424] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 323.744548][ T9424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.763069][ T9424] vhci_hcd vhci_hcd.0: Device attached [ 323.940481][ T9425] vhci_hcd: connection closed [ 323.940582][ T9422] vhci_hcd: connection closed [ 323.943101][ T64] vhci_hcd: stop threads [ 323.958051][ T64] vhci_hcd: release socket [ 323.965427][ T64] vhci_hcd: disconnect device [ 323.967626][ T64] vhci_hcd: stop threads [ 323.975727][ T64] vhci_hcd: release socket [ 323.978520][ T64] vhci_hcd: disconnect device [ 323.985575][ T825] usb 18-1: enqueue for inactive port 0 [ 324.287202][ T56] vhci_hcd: vhci_device speed not set [ 325.265515][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.375652][ T825] usb usb18-port1: attempt power cycle [ 325.407178][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.127829][ T825] usb usb18-port1: unable to enumerate USB device [ 326.167416][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 326.192361][ T9434] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 326.195728][ T9434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.205464][ T9434] vhci_hcd vhci_hcd.0: Device attached [ 326.216780][ T9435] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 3 [ 326.223185][ T11] vhci_hcd: stop threads [ 326.225054][ T11] vhci_hcd: release socket [ 326.275707][ T11] vhci_hcd: disconnect device [ 327.271843][ T39] audit: type=1326 audit(1721354982.854:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.2.1234" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 327.730628][ T66] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.737818][ T66] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.742909][ T66] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.749484][ T66] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.754715][ T66] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.766788][ T66] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.869319][ T9445] usb usb8: usbfs: process 9445 (syz.2.1234) did not claim interface 0 before use [ 328.097674][ T9447] chnl_net:caif_netlink_parms(): no params data found [ 328.484976][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.487809][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.490584][ T9447] bridge_slave_0: entered allmulticast mode [ 328.494098][ T9447] bridge_slave_0: entered promiscuous mode [ 328.516918][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.519738][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.522559][ T9447] bridge_slave_1: entered allmulticast mode [ 328.536798][ T9447] bridge_slave_1: entered promiscuous mode [ 328.638664][ T9447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.645366][ T9447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.808845][ T9447] team0: Port device team_slave_0 added [ 328.814833][ T9447] team0: Port device team_slave_1 added [ 328.872197][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.946618][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.950390][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.986915][ T9447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.001506][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.014690][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.036448][ T9447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.177700][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.249775][ T9447] hsr_slave_0: entered promiscuous mode [ 329.262593][ T9447] hsr_slave_1: entered promiscuous mode [ 329.278344][ T9447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.281762][ T9447] Cannot create hsr debugfs directory [ 329.373300][ T66] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 329.389356][ T66] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 329.393632][ T66] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 329.400530][ T66] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 329.410394][ T66] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 329.415007][ T66] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 329.835857][ T66] Bluetooth: hci7: command tx timeout [ 329.951782][ T9447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.253097][ T9447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.435854][ T9447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.460510][ T9458] chnl_net:caif_netlink_parms(): no params data found [ 330.600971][ T9447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.741609][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.749676][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.761217][ T9458] bridge_slave_0: entered allmulticast mode [ 330.769138][ T9458] bridge_slave_0: entered promiscuous mode [ 330.782100][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.785322][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.794439][ T9458] bridge_slave_1: entered allmulticast mode [ 330.803619][ T9458] bridge_slave_1: entered promiscuous mode [ 330.944819][ T9474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 330.947859][ T9474] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 330.955640][ T9474] vhci_hcd vhci_hcd.0: Device attached [ 330.961250][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.972170][ T11] bridge_slave_1: left allmulticast mode [ 330.979156][ T11] bridge_slave_1: left promiscuous mode [ 330.981782][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.988360][ T9474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 330.991274][ T9474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.002746][ T11] bridge_slave_0: left allmulticast mode [ 331.007162][ T9474] vhci_hcd vhci_hcd.0: Device attached [ 331.016120][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 331.017373][ T11] bridge_slave_0: left promiscuous mode [ 331.017386][ T9479] usbip_core: unknown command [ 331.017580][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.035654][ T9478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 331.038185][ T9478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 331.042944][ T9479] vhci_hcd: unknown pdu 0 [ 331.044816][ T9479] usbip_core: unknown command [ 331.053032][ T9478] vhci_hcd vhci_hcd.0: Device attached [ 331.055892][ T12] vhci_hcd: stop threads [ 331.057801][ T12] vhci_hcd: release socket [ 331.059714][ T12] vhci_hcd: disconnect device [ 331.101410][ T9481] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 5 [ 331.104936][ T12] vhci_hcd: stop threads [ 331.109621][ T12] vhci_hcd: release socket [ 331.111162][ T12] vhci_hcd: disconnect device [ 331.198436][ T9476] vhci_hcd: connection closed [ 331.198723][ T12] vhci_hcd: stop threads [ 331.202970][ T12] vhci_hcd: release socket [ 331.206468][ T12] vhci_hcd: disconnect device [ 331.265518][ T56] usb 18-1: enqueue for inactive port 0 [ 331.525621][ T66] Bluetooth: hci8: command tx timeout [ 331.574199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.582984][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.594440][ T11] bond0 (unregistering): Released all slaves [ 331.626686][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.786900][ T56] usb usb18-port1: attempt power cycle [ 331.824828][ T9458] team0: Port device team_slave_0 added [ 331.864771][ T9458] team0: Port device team_slave_1 added [ 331.935688][ T66] Bluetooth: hci7: command tx timeout [ 331.959105][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 331.977308][ T9447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.980457][ T9488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 331.983347][ T9488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.007430][ T9488] vhci_hcd vhci_hcd.0: Device attached [ 332.026322][ T9489] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 5 [ 332.031107][ T1093] vhci_hcd: stop threads [ 332.033858][ T1093] vhci_hcd: release socket [ 332.047356][ T1093] vhci_hcd: disconnect device [ 332.093674][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.105534][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.117733][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.122964][ T9447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.215149][ T11] hsr_slave_0: left promiscuous mode [ 332.219946][ T11] hsr_slave_1: left promiscuous mode [ 332.223184][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.226891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.230761][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.233812][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.273943][ T39] audit: type=1326 audit(1721354987.854:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.2.1243" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 332.295644][ T11] veth1_macvtap: left promiscuous mode [ 332.297981][ T11] veth0_macvtap: left promiscuous mode [ 332.300498][ T11] veth1_vlan: left promiscuous mode [ 332.302948][ T11] veth0_vlan: left promiscuous mode [ 332.436607][ T56] usb usb18-port1: unable to enumerate USB device [ 332.827667][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 332.862131][ T9498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 332.865378][ T9498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.875558][ T9498] vhci_hcd vhci_hcd.0: Device attached [ 332.902040][ T9496] usb usb8: usbfs: process 9496 (syz.2.1243) did not claim interface 0 before use [ 332.931563][ T9499] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 5 [ 332.935297][ T83] vhci_hcd: stop threads [ 332.938235][ T83] vhci_hcd: release socket [ 332.940252][ T83] vhci_hcd: disconnect device [ 333.605507][ T66] Bluetooth: hci8: command tx timeout [ 333.744628][ T11] team0 (unregistering): Port device team_slave_1 removed [ 333.917140][ T11] team0 (unregistering): Port device team_slave_0 removed [ 333.995806][ T66] Bluetooth: hci7: command tx timeout [ 334.135124][ T9507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 334.137763][ T9507] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 334.146046][ T9507] vhci_hcd vhci_hcd.0: Device attached [ 334.171180][ T9507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 334.174074][ T9507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 334.184294][ T9507] vhci_hcd vhci_hcd.0: Device attached [ 334.387234][ T7670] vhci_hcd: vhci_device speed not set [ 334.460724][ T7670] usb 15-1: new high-speed USB device number 8 using vhci_hcd [ 334.534189][ T9510] vhci_hcd: connection reset by peer [ 334.542722][ T9508] vhci_hcd: connection closed [ 334.543150][ T1093] vhci_hcd: stop threads [ 334.548998][ T1093] vhci_hcd: release socket [ 334.551116][ T1093] vhci_hcd: disconnect device [ 334.553434][ T1093] vhci_hcd: stop threads [ 334.564008][ T1093] vhci_hcd: release socket [ 334.567260][ T1093] vhci_hcd: disconnect device [ 335.420401][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.423470][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.445839][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.451477][ T9447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.535187][ T9447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.675544][ T66] Bluetooth: hci8: command tx timeout [ 335.738914][ T9458] hsr_slave_0: entered promiscuous mode [ 335.753080][ T9458] hsr_slave_1: entered promiscuous mode [ 335.764986][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.775158][ T9458] Cannot create hsr debugfs directory [ 336.075574][ T66] Bluetooth: hci7: command tx timeout [ 336.300698][ T9458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.377744][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.405233][ T9458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.462283][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.548761][ T9458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.563749][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.566874][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.586759][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.589799][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.660013][ T9458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.708894][ T9447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.784895][ T11] bridge_slave_1: left allmulticast mode [ 336.788053][ T11] bridge_slave_1: left promiscuous mode [ 336.790767][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.796442][ T11] bridge_slave_0: left allmulticast mode [ 336.798711][ T11] bridge_slave_0: left promiscuous mode [ 336.800860][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.268670][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.287659][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.293831][ T11] bond0 (unregistering): Released all slaves [ 337.579840][ T9527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 337.582780][ T9527] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 337.590334][ T9527] vhci_hcd vhci_hcd.0: Device attached [ 337.591619][ T9530] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 337.595153][ T9530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 337.625566][ T9530] vhci_hcd vhci_hcd.0: Device attached [ 337.661841][ T9458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.692647][ T9458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.719440][ T9458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.755606][ T66] Bluetooth: hci8: command tx timeout [ 337.760690][ T9458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.783057][ T9447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.789691][ T9534] vhci_hcd: connection closed [ 337.794467][ T9531] vhci_hcd: connection closed [ 337.797108][ T12] vhci_hcd: stop threads [ 337.801149][ T12] vhci_hcd: release socket [ 337.805905][ T12] vhci_hcd: disconnect device [ 337.815818][ T12] vhci_hcd: stop threads [ 337.817513][ T12] vhci_hcd: release socket [ 337.823352][ T12] vhci_hcd: disconnect device [ 337.825559][ T57] vhci_hcd: vhci_device speed not set [ 337.868768][ T11] hsr_slave_0: left promiscuous mode [ 337.887221][ T11] hsr_slave_1: left promiscuous mode [ 337.890931][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.894293][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.906385][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.909804][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.979295][ T11] veth1_macvtap: left promiscuous mode [ 337.981237][ T11] veth0_macvtap: left promiscuous mode [ 337.983432][ T11] veth1_vlan: left promiscuous mode [ 337.985806][ T11] veth0_vlan: left promiscuous mode [ 339.206496][ T7019] usb usb18-port1: attempt power cycle [ 339.531920][ T9540] FAULT_INJECTION: forcing a failure. [ 339.531920][ T9540] name failslab, interval 1, probability 0, space 0, times 0 [ 339.540474][ T9540] CPU: 3 PID: 9540 Comm: syz.1.1250 Not tainted 6.10.0-syzkaller-08047-gf2f6a8e88717 #0 [ 339.544498][ T9540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.549012][ T9540] Call Trace: [ 339.550488][ T9540] [ 339.551856][ T9540] dump_stack_lvl+0x16c/0x1f0 [ 339.554009][ T9540] should_fail_ex+0x497/0x5b0 [ 339.556175][ T9540] should_failslab+0x9/0x20 [ 339.558260][ T9540] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 339.560844][ T9540] ? sock_alloc_inode+0x25/0x1c0 [ 339.563007][ T9540] ? __pfx_sock_alloc_inode+0x10/0x10 [ 339.565240][ T9540] sock_alloc_inode+0x25/0x1c0 [ 339.567143][ T9540] alloc_inode+0x5d/0x230 [ 339.568901][ T9540] sock_alloc+0x40/0x280 [ 339.570315][ T9540] __sock_create+0xc0/0x800 [ 339.571701][ T9540] smc_create_clcsk+0x39/0x200 [ 339.573183][ T9540] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 339.574839][ T9540] inet6_create+0xb53/0x12e0 [ 339.576280][ T9540] ? inet6_create+0x5d/0x12e0 [ 339.577729][ T9540] __sock_create+0x32e/0x800 [ 339.579274][ T9540] __sys_socketpair+0x1d9/0x5a0 [ 339.581467][ T9540] ? __pfx___sys_socketpair+0x10/0x10 [ 339.583518][ T9540] ? fput+0x32/0x390 [ 339.584956][ T9540] ? __pfx_ksys_write+0x10/0x10 [ 339.586796][ T9540] __ia32_sys_socketpair+0x95/0x100 [ 339.589087][ T9540] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 339.591993][ T9540] __do_fast_syscall_32+0x73/0x120 [ 339.593792][ T9540] do_fast_syscall_32+0x32/0x80 [ 339.595500][ T9540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.597482][ T7670] vhci_hcd: vhci_device speed not set [ 339.598143][ T9540] RIP: 0023:0xf7f20579 [ 339.602037][ T9540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.609108][ T9540] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 339.612815][ T9540] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 339.616337][ T9540] RDX: 0000000000000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 339.619866][ T9540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.623337][ T9540] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 339.626812][ T9540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.630128][ T9540] [ 339.655107][ T9540] socket: no more sockets [ 339.657535][ T9540] ------------[ cut here ]------------ [ 339.660020][ T9540] refcount_t: underflow; use-after-free. [ 339.665835][ T9540] WARNING: CPU: 3 PID: 9540 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 339.669881][ T9540] Modules linked in: [ 339.671442][ T9540] CPU: 3 PID: 9540 Comm: syz.1.1250 Not tainted 6.10.0-syzkaller-08047-gf2f6a8e88717 #0 [ 339.678901][ T9540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.684064][ T9540] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 339.687362][ T9540] Code: ff 89 de e8 58 4e 0e fd 84 db 0f 85 66 ff ff ff e8 ab 53 0e fd c6 05 07 cd 4d 0b 01 90 48 c7 c7 c0 d2 8f 8b e8 47 02 d1 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 53 0e fd 0f b6 1d e2 cc 4d 0b 31 [ 339.696345][ T9540] RSP: 0018:ffffc90003c1fd10 EFLAGS: 00010286 [ 339.699628][ T9540] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815116f9 [ 339.703406][ T9540] RDX: ffff88802107c880 RSI: ffffffff81511706 RDI: 0000000000000001 [ 339.707272][ T9540] RBP: ffff888073178080 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.710830][ T9540] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 339.714763][ T9540] R13: ffff888073178080 R14: ffff888073178013 R15: ffff88807317800e [ 339.718596][ T9540] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5cd6b40 [ 339.722372][ T9540] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 339.724966][ T9540] CR2: 00000000f5cd5fbc CR3: 000000007229a000 CR4: 0000000000350ef0 [ 339.728199][ T9540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.731589][ T9540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.735015][ T9540] Call Trace: [ 339.736751][ T9540] [ 339.738151][ T9540] ? show_regs+0x8c/0xa0 [ 339.740139][ T9540] ? __warn+0xe5/0x3c0 [ 339.741963][ T9540] ? refcount_warn_saturate+0x14a/0x210 [ 339.744456][ T9540] ? report_bug+0x3c0/0x580 [ 339.746559][ T9540] ? handle_bug+0x3d/0x70 [ 339.748515][ T9540] ? exc_invalid_op+0x17/0x50 [ 339.750550][ T9540] ? asm_exc_invalid_op+0x1a/0x20 [ 339.752851][ T9540] ? __warn_printk+0x199/0x350 [ 339.755017][ T9540] ? __warn_printk+0x1a6/0x350 [ 339.757261][ T9540] ? refcount_warn_saturate+0x14a/0x210 [ 339.759719][ T9540] sk_common_release+0x2ec/0x420 [ 339.761970][ T9540] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 339.764425][ T9540] inet6_create+0xef5/0x12e0 [ 339.766666][ T9540] ? inet6_create+0x5d/0x12e0 [ 339.768851][ T9540] __sock_create+0x32e/0x800 [ 339.770994][ T9540] __sys_socketpair+0x1d9/0x5a0 [ 339.773197][ T9540] ? __pfx___sys_socketpair+0x10/0x10 [ 339.775646][ T9540] ? fput+0x32/0x390 [ 339.777374][ T9540] ? __pfx_ksys_write+0x10/0x10 [ 339.779589][ T9540] __ia32_sys_socketpair+0x95/0x100 [ 339.781780][ T9540] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 339.783780][ T9540] __do_fast_syscall_32+0x73/0x120 [ 339.785364][ T9540] do_fast_syscall_32+0x32/0x80 [ 339.787273][ T9540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.789569][ T9540] RIP: 0023:0xf7f20579 [ 339.791132][ T9540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.791233][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 339.799085][ T9540] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 339.799109][ T9540] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 339.799128][ T9540] RDX: 0000000000000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 339.813137][ T9540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.816664][ T9540] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 339.820090][ T9540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.823196][ T9540] [ 339.824453][ T9540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 339.827277][ T9540] CPU: 3 PID: 9540 Comm: syz.1.1250 Not tainted 6.10.0-syzkaller-08047-gf2f6a8e88717 #0 [ 339.831713][ T9540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.835882][ T9540] Call Trace: [ 339.837398][ T9540] [ 339.838686][ T9540] dump_stack_lvl+0x3d/0x1f0 [ 339.840647][ T9540] panic+0x6f5/0x7a0 [ 339.842196][ T9540] ? __pfx_panic+0x10/0x10 [ 339.843951][ T9540] ? show_trace_log_lvl+0x363/0x500 [ 339.846281][ T9540] ? check_panic_on_warn+0x1f/0xb0 [ 339.848538][ T9540] ? refcount_warn_saturate+0x14a/0x210 [ 339.850978][ T9540] check_panic_on_warn+0xab/0xb0 [ 339.853172][ T9540] __warn+0xf1/0x3c0 [ 339.854919][ T9540] ? refcount_warn_saturate+0x14a/0x210 [ 339.857222][ T9540] report_bug+0x3c0/0x580 [ 339.859150][ T9540] handle_bug+0x3d/0x70 [ 339.861019][ T9540] exc_invalid_op+0x17/0x50 [ 339.863038][ T9540] asm_exc_invalid_op+0x1a/0x20 [ 339.864995][ T9540] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 339.867395][ T9540] Code: ff 89 de e8 58 4e 0e fd 84 db 0f 85 66 ff ff ff e8 ab 53 0e fd c6 05 07 cd 4d 0b 01 90 48 c7 c7 c0 d2 8f 8b e8 47 02 d1 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 53 0e fd 0f b6 1d e2 cc 4d 0b 31 [ 339.875088][ T9540] RSP: 0018:ffffc90003c1fd10 EFLAGS: 00010286 [ 339.877860][ T9540] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815116f9 [ 339.881252][ T9540] RDX: ffff88802107c880 RSI: ffffffff81511706 RDI: 0000000000000001 [ 339.884806][ T9540] RBP: ffff888073178080 R08: 0000000000000001 R09: 0000000000000000 [ 339.888087][ T9540] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 339.891895][ T9540] R13: ffff888073178080 R14: ffff888073178013 R15: ffff88807317800e [ 339.896091][ T9540] ? __warn_printk+0x199/0x350 [ 339.898229][ T9540] ? __warn_printk+0x1a6/0x350 [ 339.900116][ T9540] sk_common_release+0x2ec/0x420 [ 339.902091][ T9540] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 339.904417][ T9540] inet6_create+0xef5/0x12e0 [ 339.906158][ T9540] ? inet6_create+0x5d/0x12e0 [ 339.907863][ T9540] __sock_create+0x32e/0x800 [ 339.909672][ T9540] __sys_socketpair+0x1d9/0x5a0 [ 339.911343][ T9540] ? __pfx___sys_socketpair+0x10/0x10 [ 339.913232][ T9540] ? fput+0x32/0x390 [ 339.914748][ T9540] ? __pfx_ksys_write+0x10/0x10 [ 339.916795][ T9540] __ia32_sys_socketpair+0x95/0x100 [ 339.918827][ T9540] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 339.921527][ T9540] __do_fast_syscall_32+0x73/0x120 [ 339.923492][ T9540] do_fast_syscall_32+0x32/0x80 [ 339.925404][ T9540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.927953][ T9540] RIP: 0023:0xf7f20579 [ 339.929711][ T9540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.938216][ T9540] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 339.941940][ T9540] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 339.945483][ T9540] RDX: 0000000000000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 339.949354][ T9540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.952736][ T9540] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 339.956110][ T9540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.959703][ T9540] [ 339.961956][ T9540] Kernel Offset: disabled [ 339.964316][ T9540] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:06:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=f4121a87c0279846 RCX=ffffc9000e4b7b80 RDX=1ffff1100387ea6a RSI=ffffffff8b2cc320 RDI=ffffffff8b902d40 RBP=1ffff92001c96f68 RSP=ffffc9000e4b7b30 R8 =0000000000000000 R9 =fffffbfff1fc8efb R10=ffffffff8fe477df R11=0000000000000001 R12=0000000000000001 R13=0000000000000002 R14=ffff88801c3f5358 R15=ffff88801c3f4880 RIP=ffffffff816c7cb5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffdfa50000 CR3=00000000547d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001200000 Opmask01=0000000000030000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc14501570 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d6f612020666c 2066206120730000 0a6b72207074206e 2020534820676220 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffffff2894a57 RBX=ffffffff944a5288 RCX=1ffffffff271ec15 RDX=00000000000003fd RSI=1ffffffff271ec9a RDI=ffffffff944a52b8 RBP=ffffffff94501728 RSP=ffffc90002b96b20 R8 =0000000000000000 R9 =ffffffff942794d8 R10=0000000000000002 R11=0000000000000086 R12=ffffffff816b81e0 R13=ffffffff94501748 R14=dffffc0000000000 R15=ffffffff94501718 RIP=ffffffff816bcf11 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6a82d07d00 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f443908000 CR3=000000001e248000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=93573f2093573f20 93573f2093573f20 93573f2093573f20 93573f2093573f20 93573f2093573f20 93573f2093573f20 93573f2093573f20 93573f2093573f20 ZMM22=9421049294210492 9421049294210492 9421049294210492 9421049294210492 9421049294210492 9421049294210492 9421049294210492 9421049294210492 ZMM23=e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 e61993d4e61993d4 ZMM24=7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 7c262a237c262a23 ZMM25=dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b dc1ab43bdc1ab43b ZMM26=2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 2ad301302ad30130 ZMM27=27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 27fdf7c427fdf7c4 ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5010000050100000 5010000050100000 5010000050100000 5010000050100000 5010000050100000 5010000050100000 5010000050100000 5010000050100000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81d22186 RDX=ffff88801b638000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000e5f710 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00000000ffffffff R13=ffff8880176e6000 R14=0000000000000000 R15=ffffc90000e5f8e0 RIP=ffffffff81d22186 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=00000000201be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000002000000000 Opmask01=0000000000000020 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc14501570 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a555043203a474e 494e524157205d30 34353954205b5d35 33383536362e3933 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323a502e203a474e 494e52412f205d30 2035392020343535 2038353636203320 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f61343178302b 6574617275746173 5f6e7261775f746e 756f636665722038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020313420303020 3030203030203030 2030302030302030 3020000a30312038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84faa375 RDI=ffffffff94d9cf80 RBP=ffffffff94d9cf40 RSP=ffffc90003c1f700 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000074 R14=ffffffff84faa310 R15=0000000000000000 RIP=ffffffff84faa39f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5cd5fbc CR3=000000007229a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001f000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000