last executing test programs: 8.010732848s ago: executing program 0 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x9, 0xbdd, 0x8001, 0x40, 0x0, 0x5, 0x583}, &(0x7f0000000240)={0x1917, 0x2, 0x3ff, 0xff, 0x6, 0x3}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xb38, 0x8]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000c428681d22ddc6347989726d000000070000000900010073797a30000000003c00b4a9fb11fe8bb325107fcbaf9d820000090a000000000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000005c0003805800008054000b805000018008000100667764004400028008000340000000000800024000000000080003400000000008000340000000000800034000000002080002400000000008000140000000000010000100000000fd3dcc88b5aca646a9f827477e8ae6f55a20de8edf1f1c2a0816ec2a04e834e19ba9f909b6e1ef4a671d608c8bacfe2b6d477a52acd81c46a1673c00"/340], 0x10c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000540)="ebeeb39297527fda8085b02fb8a58aaac4d4c0fb259777bd42139b07105601d1ad24c6d9c2563854569dfa8db64fc37aeb483e1a631282e8f784b4d9cb51a3c7f5b9e4e83c00bbf0bc3dc7257d2991f50b66ef5ad0497c6f3dffc5e54bde8a9f428e0daa7ecf2113ce7f400ba04635bd6f470c42a6fe34392449653cdb1395f5adab2eb26df20110fb1002a5dd3de1c9314da2174e0dcfc1f0528366fb37281ed4bd44e4e3b5c282b1a480bf11868ad3d3c3d994ca9c482e6916cfd6b9e6e05666264ce088", &(0x7f0000000080)=""/65, 0x0, 0x0, 0x6, r2, 0x4}, 0x38) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket$inet(0x2, 0x3, 0x2) ioperm(0x0, 0x0, 0x3f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) symlink(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000085396d86033eebb3c66a2bd1317a5085b1d1f68c2d853854db6aea9185f457c97dcb779cf900cc84f3ead0bdf936e2a1c5fe6b0c70fc98ee41269ac1bdda717d52094598e8282df1840caad05451f571de527a5ecb83e63604f43148c1ae2a9ca8a68dff2aa8fe3c5894a643b9c291344a9ddb61412b0c2540b53690466aee0996fdf8d8670a108929432f1f7b3c543cc828110210641a", @ANYBLOB="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"], 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x8000) close(r0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.96570452s ago: executing program 0 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x7, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x7, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 6.740704543s ago: executing program 0 (id=180): bpf$MAP_CREATE(0x3f00, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.740475637s ago: executing program 0 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x2) fcntl$setpipe(r4, 0x407, 0x0) 4.070804775s ago: executing program 3 (id=190): pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183a0000020000000000000000000000180000000800000000000000010000001862000002000000000000000700000095000000000000002551e0ff04000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000004f00b70500000800000085000000a5000000"], &(0x7f0000000100)='syzkaller\x00', 0x101, 0xf, &(0x7f0000000140)=""/15, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x5, 0x8, 0x9}, {0x2, 0x5, 0xc, 0x8}, {0x5, 0x7, 0xa, 0xb}], 0x10, 0x7, @void, @value}, 0x94) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80, 0x2) fcntl$setpipe(r3, 0x407, 0x0) write(r0, 0x0, 0x0) 3.950127623s ago: executing program 1 (id=191): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, &(0x7f0000001b80)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee4, 0x13, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x0, 0x3}) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) (async) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffff"], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x400440) pipe2$9p(&(0x7f0000000440), 0x4080) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000580)="2665b684c3bc4306c089c293d9651f142cffa92a4963ffffffffabd6e0d2514db4ac9e18866abcb9929b33ee563644", 0x2f) (async) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x8]}}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000000000000000a00000000000000002100000400"], 0x28}}, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/95) dup3(r5, r2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000480)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x7e}, 0x18) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom1\x00', 0x0, 0x0) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000180)=0xe3b) 3.949947536s ago: executing program 3 (id=192): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x20002eae) 3.898372579s ago: executing program 1 (id=193): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) unshare(0x22020600) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') 3.898123864s ago: executing program 3 (id=194): r0 = socket(0x840000000002, 0x3, 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000680)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x4ee70, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000007ffff"], 0x13) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7264539af3e8", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',noextend,\x00']) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) fallocate(r11, 0x0, 0x9000000, 0x2353) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r12) 3.898069797s ago: executing program 1 (id=195): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 6) 3.760686756s ago: executing program 1 (id=196): r0 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='ext4_mballoc_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc240, 0x0) socket$kcm(0x10, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0xb) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="000000000000000000002e00ffe205002e00001f1904e5a7a66b7670616e3100000005002b00000000000a0001007770616e30000000"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.700262632s ago: executing program 0 (id=197): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000df00)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x810) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/46, 0x2e}], 0x1}, 0x5}], 0x2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/187, 0xbb}], 0x1) fchdir(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) 3.62998445s ago: executing program 1 (id=198): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000df00)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x810) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/46, 0x2e}], 0x1}, 0x5}], 0x2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/187, 0xbb}], 0x1) fchdir(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) 3.060220373s ago: executing program 3 (id=199): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x18}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000023c0)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000008480)=""/87, 0x57}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x80}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f0000002480)=""/207, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_WRITE(r0, &(0x7f0000002380)={0x18, 0x0, r2, {0x6}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000240), 0x157, 0xa800) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3]) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r6 = socket(0x2b, 0xa, 0x2009) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 2.060637129s ago: executing program 2 (id=202): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1014}}, 0x1006) 1.960615099s ago: executing program 2 (id=203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x101802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x14) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) pselect6(0x40, &(0x7f0000000900)={0x0, 0x0, 0x200040000000, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 1.892974145s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xedc0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB]) 1.820147076s ago: executing program 3 (id=205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x2) fcntl$setpipe(r4, 0x407, 0x0) 1.080011745s ago: executing program 2 (id=206): r0 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='ext4_mballoc_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc240, 0x0) socket$kcm(0x10, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0xb) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="000000000000000000002e00ffe205002e00001f1904e5a7a66b7670616e3100000005002b00000000000a0001007770616e30000000"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 997.813014ms ago: executing program 2 (id=207): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="39957200606e11a84cd0", 0xa) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x64) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x100000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="800000000000000015"]) 553.196681ms ago: executing program 0 (id=208): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f000000df00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x810) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/46, 0x2e}], 0x1}, 0x5}], 0x2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) readv(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/187, 0xbb}], 0x1) fchdir(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) 546.282809ms ago: executing program 1 (id=209): r0 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x28}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000080)='#! '], 0x1517f}) 169.600384ms ago: executing program 2 (id=210): pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183a0000020000000000000000000000180000000800000000000000010000001862000002000000000000000700000095000000000000002551e0ff04000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000004f00b70500000800000085000000a5000000"], &(0x7f0000000100)='syzkaller\x00', 0x101, 0xf, &(0x7f0000000140)=""/15, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x5, 0x8, 0x9}, {0x2, 0x5, 0xc, 0x8}, {0x5, 0x7, 0xa, 0xb}], 0x10, 0x7, @void, @value}, 0x94) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80, 0x2) fcntl$setpipe(r3, 0x407, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 2 (id=211): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003df0000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x80000) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000001040)={0x2e, 0x6, 0x0, {0x6, 0x3, 0x5, 0x0, '!{/j-'}}, 0x2e) kernel console output (not intermixed with test programs): . [ 39.486248][ T5355] veth0_macvtap: entered promiscuous mode [ 39.494447][ T5350] veth0_macvtap: entered promiscuous mode [ 39.508026][ T5350] veth1_macvtap: entered promiscuous mode [ 39.510460][ T5355] veth1_macvtap: entered promiscuous mode [ 39.515764][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.517812][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.522937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.525284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.527518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.530061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.537410][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.540348][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.543914][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.546632][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.550179][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.552867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.555636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.557189][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.558044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.560865][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.560875][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.569389][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.571923][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.574778][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.578127][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.612699][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.615478][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.618159][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.621770][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.627017][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.634004][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.636858][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.639518][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.642010][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.642125][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.647918][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.650879][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.654856][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.661029][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.665872][ T5350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668422][ T5350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.670788][ T5350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.673555][ T5350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693423][ T5358] Bluetooth: hci0: command tx timeout [ 39.729200][ T5355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.731579][ T5355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.734086][ T5355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.736663][ T5355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.762478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.764749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.773260][ T5358] Bluetooth: hci1: command tx timeout [ 39.775009][ T5352] Bluetooth: hci3: command tx timeout [ 39.782449][ T5352] Bluetooth: hci2: command tx timeout [ 39.965905][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.969284][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.972953][ T978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.006878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.009060][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.029674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.047750][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.055879][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.084906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.090349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.146621][ T978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.149404][ T978] usb 8-1: config 0 has no interfaces? [ 40.150920][ T978] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.153896][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.164583][ T978] usb 8-1: config 0 descriptor?? [ 40.469725][ T5421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.490811][ T5421] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.782425][ T5413] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.848540][ T978] usb 8-1: string descriptor 0 read error: -71 [ 40.857074][ T978] usb 8-1: USB disconnect, device number 2 [ 40.987060][ T5413] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.989769][ T5413] usb 7-1: config 0 has no interfaces? [ 40.991284][ T5413] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.993704][ T5413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.998824][ T5413] usb 7-1: config 0 descriptor?? [ 41.212550][ T1292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.374567][ T1292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.377212][ T1292] usb 6-1: config 0 has no interfaces? [ 41.378650][ T1292] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.380983][ T1292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.390312][ T1292] usb 6-1: config 0 descriptor?? [ 41.552344][ T5390] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.702151][ T5413] usb 7-1: string descriptor 0 read error: -71 [ 41.705774][ T5413] usb 7-1: USB disconnect, device number 2 [ 41.718851][ T5390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.721546][ T5390] usb 5-1: config 0 has no interfaces? [ 41.723199][ T5390] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.725523][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.728589][ T5390] usb 5-1: config 0 descriptor?? [ 41.783099][ T5352] Bluetooth: hci0: command tx timeout [ 41.852466][ T5352] Bluetooth: hci1: command tx timeout [ 41.862913][ T5352] Bluetooth: hci2: command tx timeout [ 41.863585][ T5358] Bluetooth: hci3: command tx timeout [ 42.968246][ T1292] usb 6-1: string descriptor 0 read error: -71 [ 42.976674][ T1292] usb 6-1: USB disconnect, device number 2 [ 43.002382][ T63] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 43.139580][ T39] audit: type=1326 audit(1728967279.743:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.161006][ T39] audit: type=1326 audit(1728967279.743:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.174053][ T63] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.175949][ T39] audit: type=1326 audit(1728967279.743:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.176688][ T63] usb 8-1: config 0 has no interfaces? [ 43.190033][ T63] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.196525][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.196852][ T39] audit: type=1326 audit(1728967279.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.203133][ T63] usb 8-1: config 0 descriptor?? [ 43.206760][ T39] audit: type=1326 audit(1728967279.753:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.212212][ T39] audit: type=1326 audit(1728967279.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.219091][ T39] audit: type=1326 audit(1728967279.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.225184][ T39] audit: type=1326 audit(1728967279.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.230941][ T39] audit: type=1326 audit(1728967279.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.236709][ T39] audit: type=1326 audit(1728967279.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.2.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 43.451429][ T63] usb 8-1: string descriptor 0 read error: -71 [ 43.453568][ T63] usb 8-1: USB disconnect, device number 3 [ 43.807536][ T5390] usb 5-1: string descriptor 0 read error: -71 [ 43.810810][ T5390] usb 5-1: USB disconnect, device number 2 [ 43.853075][ T5358] Bluetooth: hci0: command tx timeout [ 43.932610][ T5358] Bluetooth: hci2: command tx timeout [ 43.932962][ T5352] Bluetooth: hci1: command tx timeout [ 43.942418][ T5352] Bluetooth: hci3: command tx timeout [ 44.323602][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.475721][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.481112][ T35] usb 5-1: config 0 has no interfaces? [ 44.482799][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.486104][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.495744][ T35] usb 5-1: config 0 descriptor?? [ 44.752445][ T978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.764800][ T35] usb 5-1: string descriptor 0 read error: -71 [ 44.770885][ T35] usb 5-1: USB disconnect, device number 3 [ 44.904254][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.906924][ T978] usb 6-1: config 0 has no interfaces? [ 44.908332][ T978] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.910688][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.913993][ T978] usb 6-1: config 0 descriptor?? [ 45.154023][ T978] usb 6-1: string descriptor 0 read error: -71 [ 45.159285][ T978] usb 6-1: USB disconnect, device number 3 [ 45.781453][ T5463] syz.3.11 (5463): drop_caches: 2 [ 45.942391][ T5352] Bluetooth: hci0: command tx timeout [ 46.022493][ T5352] Bluetooth: hci3: command tx timeout [ 46.022556][ T5358] Bluetooth: hci2: command tx timeout [ 46.117684][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.216060][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.249093][ T5352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.252877][ T5352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.255609][ T5352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.258373][ T5352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.262222][ T5352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.264421][ T5352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.264565][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.331206][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.345266][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 46.415328][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.417238][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.419099][ T5471] bridge_slave_0: entered allmulticast mode [ 46.422056][ T5471] bridge_slave_0: entered promiscuous mode [ 46.433328][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.440878][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.443674][ T5471] bridge_slave_1: entered allmulticast mode [ 46.445987][ T5471] bridge_slave_1: entered promiscuous mode [ 46.483513][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.487136][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.551743][ T5471] team0: Port device team_slave_0 added [ 46.554022][ T11] bridge_slave_1: left allmulticast mode [ 46.555973][ T11] bridge_slave_1: left promiscuous mode [ 46.558036][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.566343][ T11] bridge_slave_0: left allmulticast mode [ 46.568038][ T11] bridge_slave_0: left promiscuous mode [ 46.569852][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.790767][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.795710][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.799637][ T11] bond0 (unregistering): Released all slaves [ 46.813007][ T5471] team0: Port device team_slave_1 added [ 46.843551][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.845453][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.852037][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.859263][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.861135][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.867789][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.935735][ T5471] hsr_slave_0: entered promiscuous mode [ 46.938009][ T5471] hsr_slave_1: entered promiscuous mode [ 46.939898][ T5471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.941904][ T5471] Cannot create hsr debugfs directory [ 47.077447][ T11] hsr_slave_0: left promiscuous mode [ 47.079365][ T11] hsr_slave_1: left promiscuous mode [ 47.081366][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.083376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.088525][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.090529][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.110672][ T11] veth1_macvtap: left promiscuous mode [ 47.112252][ T11] veth0_macvtap: left promiscuous mode [ 47.114711][ T11] veth1_vlan: left promiscuous mode [ 47.116215][ T11] veth0_vlan: left promiscuous mode [ 47.532362][ T5441] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.698680][ T5441] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.701453][ T5441] usb 6-1: config 0 has no interfaces? [ 47.704299][ T5441] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.707008][ T5441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.717398][ T5441] usb 6-1: config 0 descriptor?? [ 47.799367][ T11] team0 (unregistering): Port device team_slave_1 removed [ 47.878229][ T11] team0 (unregistering): Port device team_slave_0 removed [ 48.242542][ T5385] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 48.332467][ T5352] Bluetooth: hci1: command tx timeout [ 48.396152][ T5385] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.408721][ T5385] usb 7-1: config 0 has no interfaces? [ 48.410249][ T5385] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.413935][ T5385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.418770][ T5385] usb 7-1: config 0 descriptor?? [ 49.172364][ T5390] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.311253][ T5441] usb 6-1: string descriptor 0 read error: -71 [ 49.314598][ T5441] usb 6-1: USB disconnect, device number 4 [ 49.331866][ T5385] usb 7-1: string descriptor 0 read error: -71 [ 49.342035][ T5385] usb 7-1: USB disconnect, device number 3 [ 49.353058][ T5390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.355670][ T5390] usb 5-1: config 0 has no interfaces? [ 49.357091][ T5390] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.360924][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.363032][ T5471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.365778][ T5390] usb 5-1: config 0 descriptor?? [ 49.369563][ T5471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.374344][ T5471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.377819][ T5471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.418390][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.430172][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.434921][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.436819][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.441984][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.444204][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.529035][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.545840][ T5471] veth0_vlan: entered promiscuous mode [ 49.550236][ T5471] veth1_vlan: entered promiscuous mode [ 49.564858][ T5471] veth0_macvtap: entered promiscuous mode [ 49.569728][ T5471] veth1_macvtap: entered promiscuous mode [ 49.578803][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.583033][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.586371][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.589533][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.592166][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.594966][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.598775][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.602426][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.605071][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.607533][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.610189][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.612587][ T5390] usb 5-1: string descriptor 0 read error: -71 [ 49.613032][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.615496][ T5390] usb 5-1: USB disconnect, device number 4 [ 49.617099][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.622248][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.625944][ T5471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.628231][ T5471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.630541][ T5471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.633151][ T5471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.663949][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.666062][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.676228][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.678559][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.422414][ T5352] Bluetooth: hci1: command tx timeout [ 50.494535][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 50.494549][ T39] audit: type=1326 audit(1728967287.103:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.543198][ T39] audit: type=1326 audit(1728967287.143:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.548348][ T39] audit: type=1326 audit(1728967287.143:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.554612][ T39] audit: type=1326 audit(1728967287.143:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.560016][ T39] audit: type=1326 audit(1728967287.143:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.585765][ T39] audit: type=1326 audit(1728967287.163:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.591176][ T39] audit: type=1326 audit(1728967287.163:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.597183][ T39] audit: type=1326 audit(1728967287.163:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.604673][ T39] audit: type=1326 audit(1728967287.213:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.610080][ T39] audit: type=1326 audit(1728967287.213:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.20" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 50.642463][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 50.813672][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.816453][ T8] usb 8-1: config 0 has no interfaces? [ 50.818017][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.820382][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.824826][ T8] usb 8-1: config 0 descriptor?? [ 51.092599][ T8] usb 8-1: string descriptor 0 read error: -71 [ 51.102690][ T8] usb 8-1: USB disconnect, device number 4 [ 51.433112][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.615296][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.624341][ T57] usb 7-1: config 0 has no interfaces? [ 51.630973][ T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.644238][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.647173][ T57] usb 7-1: config 0 descriptor?? [ 51.896515][ T57] usb 7-1: string descriptor 0 read error: -71 [ 51.902022][ T57] usb 7-1: USB disconnect, device number 4 [ 52.002474][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.213963][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.217294][ T8] usb 5-1: config 0 has no interfaces? [ 52.219047][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.221655][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.225430][ T8] usb 5-1: config 0 descriptor?? [ 52.482660][ T8] usb 5-1: string descriptor 0 read error: -71 [ 52.488452][ T8] usb 5-1: USB disconnect, device number 5 [ 52.502416][ T5352] Bluetooth: hci1: command tx timeout [ 53.004124][ T5511] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 53.187421][ T5511] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 53.189737][ T5511] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.191756][ T5511] usb 8-1: Product: syz [ 53.192906][ T5511] usb 8-1: Manufacturer: syz [ 53.194091][ T5511] usb 8-1: SerialNumber: syz [ 53.196649][ T5511] usb 8-1: config 0 descriptor?? [ 53.429668][ T5385] usb 8-1: USB disconnect, device number 5 [ 53.619705][ T63] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.650832][ T5535] Invalid option length (1031570) for dns_resolver key [ 53.794544][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.797943][ T63] usb 5-1: config 0 has no interfaces? [ 53.799856][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.803209][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.807376][ T63] usb 5-1: config 0 descriptor?? [ 53.953754][ T5548] FAULT_INJECTION: forcing a failure. [ 53.953754][ T5548] name failslab, interval 1, probability 0, space 0, times 1 [ 53.957213][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.2.28 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 53.959917][ T5548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.962719][ T5548] Call Trace: [ 53.963602][ T5548] [ 53.964384][ T5548] dump_stack_lvl+0x16c/0x1f0 [ 53.965641][ T5548] should_fail_ex+0x497/0x5b0 [ 53.966882][ T5548] ? fs_reclaim_acquire+0xae/0x150 [ 53.968234][ T5548] should_failslab+0xc2/0x120 [ 53.969503][ T5548] __kmalloc_cache_noprof+0x6b/0x310 [ 53.970892][ T5548] ? krealloc_noprof+0x7c/0x130 [ 53.972166][ T5548] ? copy_verifier_state+0xabe/0xeb0 [ 53.973565][ T5548] copy_verifier_state+0xabe/0xeb0 [ 53.974916][ T5548] ? kasan_save_track+0x14/0x30 [ 53.976232][ T5548] push_stack+0x1d9/0x550 [ 53.977381][ T5548] check_cond_jmp_op+0xda7/0x8110 [ 53.978707][ T5548] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 53.980134][ T5548] ? check_alu_op+0x793/0x40c0 [ 53.981399][ T5548] do_check_common+0x8a5f/0xd610 [ 53.982699][ T5548] ? sk_reuseport_func_proto+0x47/0xa0 [ 53.984131][ T5548] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 53.985857][ T5548] ? __pfx_do_check_common+0x10/0x10 [ 53.987243][ T5548] ? kvfree+0x47/0x50 [ 53.988295][ T5548] ? check_cfg+0x400/0x840 [ 53.989495][ T5548] bpf_check+0x7737/0xc7c0 [ 53.990671][ T5548] ? __pfx_bpf_check+0x10/0x10 [ 53.991927][ T5548] ? find_held_lock+0x2d/0x110 [ 53.993291][ T5548] ? ktime_get_with_offset+0x13a/0x240 [ 53.994769][ T5548] ? trace_lock_acquire+0x14a/0x1d0 [ 53.996167][ T5548] ? ktime_get_with_offset+0x13a/0x240 [ 53.997593][ T5548] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 53.999067][ T5548] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.000429][ T5548] ? bpf_obj_name_cpy+0x156/0x1b0 [ 54.001763][ T5548] bpf_prog_load+0xe3f/0x2670 [ 54.002997][ T5548] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.004334][ T5548] ? find_held_lock+0x2d/0x110 [ 54.005610][ T5548] __sys_bpf+0x4c8c/0x5780 [ 54.006787][ T5548] ? ksys_write+0x21e/0x260 [ 54.007976][ T5548] ? __pfx___sys_bpf+0x10/0x10 [ 54.009254][ T5548] ? vfs_write+0x14d/0x1140 [ 54.010447][ T5548] ? __mutex_unlock_slowpath+0x164/0x650 [ 54.011918][ T5548] ? fput+0x30/0x390 [ 54.012960][ T5548] ? ksys_write+0x1ad/0x260 [ 54.014154][ T5548] ? __pfx_ksys_write+0x10/0x10 [ 54.015434][ T5548] __ia32_sys_bpf+0x76/0xe0 [ 54.016716][ T5548] __do_fast_syscall_32+0x73/0x120 [ 54.018063][ T5548] do_fast_syscall_32+0x32/0x80 [ 54.019341][ T5548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.021004][ T5548] RIP: 0023:0xf7f55579 [ 54.022075][ T5548] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.027075][ T5548] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 54.029268][ T5548] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 54.031318][ T5548] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.033384][ T5548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.035434][ T5548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 54.037531][ T5548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.039582][ T5548] [ 54.492656][ T5441] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 54.572365][ T5352] Bluetooth: hci1: command tx timeout [ 54.647750][ T5441] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.664959][ T5441] usb 7-1: config 0 has no interfaces? [ 54.668081][ T5441] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.675726][ T5441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.793824][ T5441] usb 7-1: config 0 descriptor?? [ 54.954466][ T1284] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 55.103805][ T1284] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.106805][ T1284] usb 8-1: config 0 has no interfaces? [ 55.108295][ T1284] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.110906][ T1284] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.122055][ T1284] usb 8-1: config 0 descriptor?? [ 56.039389][ T63] usb 5-1: string descriptor 0 read error: -71 [ 56.046346][ T63] usb 5-1: USB disconnect, device number 6 [ 56.051856][ T5441] usb 7-1: string descriptor 0 read error: -71 [ 56.056024][ T1284] usb 8-1: string descriptor 0 read error: -71 [ 56.059541][ T5441] usb 7-1: USB disconnect, device number 5 [ 56.061202][ T1284] usb 8-1: USB disconnect, device number 6 [ 56.246058][ T5567] 9pnet_fd: Insufficient options for proto=fd [ 56.512536][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.618181][ T5575] overlayfs: missing 'lowerdir' [ 56.666345][ T35] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 56.669067][ T35] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 56.672111][ T35] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 56.677905][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.686424][ T5577] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.688638][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.842412][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 57.057311][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.060026][ T8] usb 6-1: config 0 has no interfaces? [ 57.061510][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.064733][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.069079][ T8] usb 6-1: config 0 descriptor?? [ 57.159232][ T5587] tipc: Invalid UDP bearer configuration [ 57.159253][ T5587] tipc: Enabling of bearer rejected, failed to enable media [ 57.278588][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.418130][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.492630][ T8] usb 6-1: string descriptor 0 read error: -71 [ 57.504078][ T8] usb 6-1: USB disconnect, device number 5 [ 57.798184][ T5595] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 57.803456][ T5595] ======================================================= [ 57.803456][ T5595] WARNING: The mand mount option has been deprecated and [ 57.803456][ T5595] and is ignored by this kernel. Remove the mand [ 57.803456][ T5595] option from the mount to silence this warning. [ 57.803456][ T5595] ======================================================= [ 58.166308][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 58.325217][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.328348][ T35] usb 8-1: config 0 has no interfaces? [ 58.330189][ T35] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.334948][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.344469][ T35] usb 8-1: config 0 descriptor?? [ 58.592490][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.743746][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.746407][ T8] usb 7-1: config 0 has no interfaces? [ 58.747848][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.750338][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.753318][ T8] usb 7-1: config 0 descriptor?? [ 58.872224][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 58.872235][ T39] audit: type=1326 audit(1728967295.473:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.879626][ T39] audit: type=1326 audit(1728967295.483:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.886931][ T39] audit: type=1326 audit(1728967295.483:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.893232][ T39] audit: type=1326 audit(1728967295.483:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.898691][ T39] audit: type=1326 audit(1728967295.483:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.905846][ T39] audit: type=1326 audit(1728967295.483:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.911263][ T39] audit: type=1326 audit(1728967295.483:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.916698][ T39] audit: type=1326 audit(1728967295.483:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.922109][ T39] audit: type=1326 audit(1728967295.483:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 58.928980][ T39] audit: type=1326 audit(1728967295.483:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.1.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 59.333537][ T9] usb 5-1: USB disconnect, device number 7 [ 59.842365][ T5413] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.994091][ T5413] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.997014][ T5413] usb 5-1: config 0 has no interfaces? [ 59.998582][ T5413] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.001111][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.004407][ T5413] usb 5-1: config 0 descriptor?? [ 60.530052][ T35] usb 8-1: string descriptor 0 read error: -71 [ 60.535829][ T35] usb 8-1: USB disconnect, device number 7 [ 60.539338][ T8] usb 7-1: string descriptor 0 read error: -71 [ 60.547741][ T5413] usb 5-1: string descriptor 0 read error: -71 [ 60.548418][ T8] usb 7-1: USB disconnect, device number 6 [ 60.550407][ T5413] usb 5-1: USB disconnect, device number 8 [ 61.092452][ T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 61.244468][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.247095][ T8] usb 8-1: config 0 has no interfaces? [ 61.248526][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.250965][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.253964][ T8] usb 8-1: config 0 descriptor?? [ 62.112537][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.276462][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.291227][ T35] usb 7-1: config 0 has no interfaces? [ 62.340715][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.352229][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.378006][ T35] usb 7-1: config 0 descriptor?? [ 63.579393][ T8] usb 8-1: string descriptor 0 read error: -71 [ 63.583002][ T8] usb 8-1: USB disconnect, device number 8 [ 63.608890][ T35] usb 7-1: string descriptor 0 read error: -71 [ 63.611194][ T35] usb 7-1: USB disconnect, device number 7 [ 63.622434][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 63.775244][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.777956][ T9] usb 5-1: config 0 has no interfaces? [ 63.779401][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.781824][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.786619][ T9] usb 5-1: config 0 descriptor?? [ 63.992463][ T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 64.021168][ T9] usb 5-1: string descriptor 0 read error: -71 [ 64.024555][ T9] usb 5-1: USB disconnect, device number 9 [ 64.154373][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.157774][ T8] usb 8-1: config 0 has no interfaces? [ 64.159780][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.162167][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.166557][ T8] usb 8-1: config 0 descriptor?? [ 64.529993][ T8] usb 8-1: string descriptor 0 read error: -71 [ 64.534850][ T8] usb 8-1: USB disconnect, device number 9 [ 65.100454][ T5652] FAULT_INJECTION: forcing a failure. [ 65.100454][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.104847][ T5652] CPU: 3 UID: 0 PID: 5652 Comm: syz.1.52 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 65.108263][ T5652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.111854][ T5652] Call Trace: [ 65.113011][ T5652] [ 65.114005][ T5652] dump_stack_lvl+0x16c/0x1f0 [ 65.115596][ T5652] should_fail_ex+0x497/0x5b0 [ 65.117188][ T5652] _copy_from_iter+0x29b/0x13e0 [ 65.118830][ T5652] ? __pfx__copy_from_iter+0x10/0x10 [ 65.120594][ T5652] ? __virt_addr_valid+0x1a4/0x590 [ 65.122309][ T5652] ? __virt_addr_valid+0x5e/0x590 [ 65.123930][ T5652] ? __phys_addr_symbol+0x30/0x80 [ 65.125612][ T5652] ? __check_object_size+0x488/0x710 [ 65.127270][ T5652] netlink_sendmsg+0x813/0xd70 [ 65.128886][ T5652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.130667][ T5652] ? lock_acquire+0x2f/0xb0 [ 65.132203][ T5652] ____sys_sendmsg+0x9ae/0xb40 [ 65.133949][ T5652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.135707][ T5652] ? get_compat_msghdr+0x11b/0x170 [ 65.137449][ T5652] ? __pfx___lock_acquire+0x10/0x10 [ 65.139200][ T5652] ___sys_sendmsg+0x135/0x1e0 [ 65.140797][ T5652] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.142576][ T5652] ? lock_acquire+0x2f/0xb0 [ 65.144108][ T5652] ? __fget_files+0x40/0x3f0 [ 65.145682][ T5652] ? fdget+0x176/0x210 [ 65.147047][ T5652] __sys_sendmsg+0x117/0x1f0 [ 65.148623][ T5652] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.150355][ T5652] ? __fget_files+0x244/0x3f0 [ 65.151965][ T5652] __do_fast_syscall_32+0x73/0x120 [ 65.153709][ T5652] do_fast_syscall_32+0x32/0x80 [ 65.155351][ T5652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.157479][ T5652] RIP: 0023:0xf7f81579 [ 65.158857][ T5652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.165234][ T5652] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 65.167996][ T5652] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000ac0 [ 65.170649][ T5652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.173276][ T5652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.175905][ T5652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.178538][ T5652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.181178][ T5652] [ 65.280993][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 65.281006][ T39] audit: type=1326 audit(1728967301.883:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.290060][ T39] audit: type=1326 audit(1728967301.893:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.298162][ T39] audit: type=1326 audit(1728967301.903:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.305361][ T39] audit: type=1326 audit(1728967301.903:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.310837][ T39] audit: type=1326 audit(1728967301.903:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.316384][ T39] audit: type=1326 audit(1728967301.903:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.321772][ T39] audit: type=1326 audit(1728967301.903:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.327534][ T39] audit: type=1326 audit(1728967301.903:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.333066][ T39] audit: type=1326 audit(1728967301.903:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.338427][ T39] audit: type=1326 audit(1728967301.903:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5656 comm="syz.1.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 65.527912][ T5662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.772380][ T1431] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 65.922414][ T1431] usb 5-1: Using ep0 maxpacket: 8 [ 65.924984][ T1431] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 65.927246][ T1431] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 65.929164][ T1431] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 65.931499][ T1431] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 65.935008][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 65.938018][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 65.940819][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.944307][ T1431] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 65.946564][ T1431] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 65.948470][ T1431] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 65.950816][ T1431] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 65.953888][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 65.956744][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 65.959546][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.962858][ T1431] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 65.965117][ T1431] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 65.966999][ T1431] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 65.969338][ T1431] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 65.972386][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 65.975235][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 65.978054][ T1431] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 65.982772][ T1431] usb 5-1: string descriptor 0 read error: -22 [ 65.984409][ T1431] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.986740][ T1431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.995241][ T1431] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 66.301671][ T5664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.652789][ T5352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.872349][ T978] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 67.022390][ T978] usb 8-1: Using ep0 maxpacket: 32 [ 67.025412][ T978] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.027628][ T978] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.029890][ T978] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.032236][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.035003][ T978] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.037497][ T978] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.040841][ T978] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.043270][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.046131][ T978] usb 8-1: config 0 descriptor?? [ 68.263631][ T978] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.269884][ T978] usb 8-1: USB disconnect, device number 10 [ 68.270271][ T5681] @: renamed from vlan0 (while UP) [ 68.274248][ T978] usblp1: removed [ 69.043941][ T63] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.192326][ T63] usb 6-1: Using ep0 maxpacket: 32 [ 69.195356][ T63] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.197554][ T63] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.199791][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.202177][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.204644][ T63] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.207096][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.210345][ T63] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.212706][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.216069][ T63] usb 6-1: config 0 descriptor?? [ 69.281808][ T1431] usb 5-1: USB disconnect, device number 10 [ 69.434864][ T63] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.502347][ T63] usb 6-1: USB disconnect, device number 6 [ 69.575876][ T63] usblp0: removed [ 69.762402][ T1431] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.913120][ T5695] input: syz0 as /devices/virtual/input/input5 [ 69.945139][ T1431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.952618][ T1431] usb 5-1: config 0 has no interfaces? [ 69.954819][ T1431] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.958251][ T1431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.970257][ T1431] usb 5-1: config 0 descriptor?? [ 70.232463][ T1431] usb 5-1: string descriptor 0 read error: -71 [ 70.237609][ T1431] usb 5-1: USB disconnect, device number 11 [ 70.572364][ T5413] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.656093][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.657879][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.760325][ T5413] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.763085][ T5413] usb 6-1: config 0 has no interfaces? [ 70.764608][ T5413] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.766947][ T5413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.771168][ T5413] usb 6-1: config 0 descriptor?? [ 71.008699][ T5413] usb 6-1: string descriptor 0 read error: -71 [ 71.011954][ T5413] usb 6-1: USB disconnect, device number 7 [ 71.795493][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 71.911765][ T5716] fuse: Unknown parameter 'L:Ò†*Ù•³9' [ 71.943484][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.946132][ T8] usb 7-1: config 0 has no interfaces? [ 71.947557][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.949994][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.955935][ T8] usb 7-1: config 0 descriptor?? [ 72.102034][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 72.107617][ T39] audit: type=1326 audit(1728967308.703:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.132809][ T39] audit: type=1326 audit(1728967308.713:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.138183][ T39] audit: type=1326 audit(1728967308.743:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.143477][ T39] audit: type=1326 audit(1728967308.743:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.192548][ T39] audit: type=1326 audit(1728967308.793:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.198548][ T39] audit: type=1326 audit(1728967308.793:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.204393][ T39] audit: type=1326 audit(1728967308.793:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.209876][ T39] audit: type=1326 audit(1728967308.793:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.217159][ T39] audit: type=1326 audit(1728967308.823:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.222890][ T39] audit: type=1326 audit(1728967308.823:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5719 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 72.582405][ T5385] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.742456][ T5385] usb 5-1: Using ep0 maxpacket: 32 [ 72.745594][ T5385] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.747792][ T5385] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.750054][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.752872][ T5385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.755378][ T5385] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.757881][ T5385] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.761233][ T5385] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.764090][ T5385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.767195][ T5385] usb 5-1: config 0 descriptor?? [ 72.972852][ T5385] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.986962][ T1431] usb 5-1: USB disconnect, device number 12 [ 72.990655][ T1431] usblp0: removed [ 73.613796][ T5441] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 73.659290][ T5738] FAULT_INJECTION: forcing a failure. [ 73.659290][ T5738] name failslab, interval 1, probability 0, space 0, times 0 [ 73.662694][ T5738] CPU: 2 UID: 0 PID: 5738 Comm: syz.0.77 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 73.665365][ T5738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.668106][ T5738] Call Trace: [ 73.668996][ T5738] [ 73.669769][ T5738] dump_stack_lvl+0x16c/0x1f0 [ 73.671003][ T5738] should_fail_ex+0x497/0x5b0 [ 73.672248][ T5738] should_failslab+0xc2/0x120 [ 73.673498][ T5738] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 73.674891][ T5738] ? skb_clone+0x190/0x3f0 [ 73.676067][ T5738] skb_clone+0x190/0x3f0 [ 73.677183][ T5738] netlink_deliver_tap+0xb26/0xcf0 [ 73.678515][ T5738] netlink_unicast+0x5e1/0x7f0 [ 73.679762][ T5738] ? __pfx_netlink_unicast+0x10/0x10 [ 73.681133][ T5738] ? __phys_addr_symbol+0x30/0x80 [ 73.682442][ T5738] ? __check_object_size+0x488/0x710 [ 73.683814][ T5738] netlink_sendmsg+0x8b8/0xd70 [ 73.685067][ T5738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.686436][ T5738] __sys_sendto+0x479/0x4d0 [ 73.687619][ T5738] ? __pfx___sys_sendto+0x10/0x10 [ 73.688949][ T5738] ? __might_fault+0x13b/0x190 [ 73.690195][ T5738] ? __pfx_lock_release+0x10/0x10 [ 73.691515][ T5738] __do_compat_sys_socketcall+0x5e2/0x700 [ 73.692995][ T5738] ? __fget_files+0x244/0x3f0 [ 73.694216][ T5738] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 73.695829][ T5738] ? fput+0x30/0x390 [ 73.696865][ T5738] __do_fast_syscall_32+0x73/0x120 [ 73.698192][ T5738] do_fast_syscall_32+0x32/0x80 [ 73.699466][ T5738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.701112][ T5738] RIP: 0023:0xf749e579 [ 73.702175][ T5738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.707109][ T5738] RSP: 002b:00000000f5785400 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 73.709252][ T5738] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5785414 [ 73.711285][ T5738] RDX: 0000000000000000 RSI: 00000000f5785560 RDI: 00000000f748bff4 [ 73.713337][ T5738] RBP: 00000000f5785560 R08: 0000000000000000 R09: 0000000000000000 [ 73.715368][ T5738] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 73.717363][ T5738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.719414][ T5738] [ 73.807775][ T5441] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.810448][ T5441] usb 6-1: config 0 has no interfaces? [ 73.811835][ T5441] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.814651][ T5441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.822591][ T5441] usb 6-1: config 0 descriptor?? [ 74.111677][ T5441] usb 6-1: string descriptor 0 read error: -71 [ 74.113775][ T5441] usb 6-1: USB disconnect, device number 8 [ 74.324229][ T8] usb 7-1: string descriptor 0 read error: -71 [ 74.329803][ T8] usb 7-1: USB disconnect, device number 8 [ 75.462491][ T978] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 75.623577][ T978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.626241][ T978] usb 8-1: config 0 has no interfaces? [ 75.627791][ T978] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.630176][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.634837][ T978] usb 8-1: config 0 descriptor?? [ 75.774267][ T25] cfg80211: failed to load regulatory.db [ 76.339673][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 76.778879][ T5774] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 76.791005][ T5774] Zero length message leads to an empty skb [ 77.396748][ T5774] syz.1.87 (5774) used greatest stack depth: 20736 bytes left [ 77.627182][ T5794] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 77.629737][ T5794] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 77.632012][ T5794] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 77.677393][ T5789] netlink: 328 bytes leftover after parsing attributes in process `syz.1.92'. [ 78.036557][ T978] usb 8-1: string descriptor 0 read error: -71 [ 78.040002][ T978] usb 8-1: USB disconnect, device number 11 [ 78.077429][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.129680][ T39] kauditd_printk_skb: 57 callbacks suppressed [ 78.129691][ T39] audit: type=1326 audit(1728967314.733:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.137131][ T39] audit: type=1326 audit(1728967314.733:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.142887][ T39] audit: type=1326 audit(1728967314.733:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.148391][ T39] audit: type=1326 audit(1728967314.733:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.154176][ T39] audit: type=1326 audit(1728967314.733:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.159654][ T39] audit: type=1326 audit(1728967314.743:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.165219][ T39] audit: type=1326 audit(1728967314.743:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.170738][ T39] audit: type=1326 audit(1728967314.743:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.176444][ T39] audit: type=1326 audit(1728967314.743:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.181996][ T39] audit: type=1326 audit(1728967314.743:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.0.97" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 78.372438][ T978] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 78.384903][ T5810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.522622][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 78.533129][ T978] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.536151][ T978] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 78.538678][ T978] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.541774][ T978] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.545882][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.549597][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.553882][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.558881][ T978] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.561155][ T978] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 78.563160][ T978] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.565510][ T978] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.568583][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.571450][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.574491][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.578115][ T978] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.581258][ T978] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 78.583799][ T978] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.586166][ T978] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.589911][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.593734][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.597354][ T978] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.604781][ T978] usb 8-1: string descriptor 0 read error: -22 [ 78.606901][ T978] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.609640][ T978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.617892][ T978] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 78.642332][ T1431] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 78.812452][ T1431] usb 6-1: Using ep0 maxpacket: 8 [ 78.815512][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.817954][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 78.819914][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.822589][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.825665][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.828655][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.831489][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.834833][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.837116][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 78.839209][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.841571][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.844680][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.847568][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.850414][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.853826][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.856138][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 78.858078][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.860464][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.863755][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.866666][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.869525][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.874499][ T1431] usb 6-1: string descriptor 0 read error: -22 [ 78.876150][ T1431] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.878504][ T1431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.930252][ T5817] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.190938][ T5819] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.894370][ T1431] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 80.897708][ T63] usb 8-1: USB disconnect, device number 12 [ 81.923353][ T63] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.059580][ T5385] usb 6-1: USB disconnect, device number 9 [ 82.097069][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.106258][ T63] usb 5-1: config 0 has no interfaces? [ 82.109799][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.113668][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.136506][ T63] usb 5-1: config 0 descriptor?? [ 82.303188][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 82.454764][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.458190][ T35] usb 8-1: config 0 has no interfaces? [ 82.461253][ T35] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.464786][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.473734][ T35] usb 8-1: config 0 descriptor?? [ 82.686122][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.844006][ T5875] vlan2: entered allmulticast mode [ 82.845780][ T5875] vlan1: entered allmulticast mode [ 82.847524][ T5875] veth0_vlan: entered allmulticast mode [ 82.850465][ T5875] bridge0: port 3(vlan2) entered blocking state [ 82.852839][ T5875] bridge0: port 3(vlan2) entered disabled state [ 82.855815][ T5875] vlan2: entered promiscuous mode [ 82.857256][ T5875] vlan1: entered promiscuous mode [ 82.860235][ T5875] bridge0: port 3(vlan2) entered blocking state [ 82.862841][ T5875] bridge0: port 3(vlan2) entered forwarding state [ 82.900994][ T5875] bridge0: port 3(vlan2) entered disabled state [ 82.903187][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.906253][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.942747][ T5390] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 82.967972][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.974651][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.002752][ T5875] veth0_vlan: left allmulticast mode [ 83.007197][ T5875] vlan1: left allmulticast mode [ 83.008929][ T5875] vlan1: left promiscuous mode [ 83.029355][ T5875] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.031707][ T5875] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.034202][ T5875] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.036723][ T5875] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.065427][ T5876] bridge_slave_0: left allmulticast mode [ 83.067032][ T5876] bridge_slave_0: left promiscuous mode [ 83.071012][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.074644][ T5876] bridge_slave_1: left allmulticast mode [ 83.076163][ T5876] bridge_slave_1: left promiscuous mode [ 83.077762][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.081679][ T5876] bond0: (slave bond_slave_0): Releasing backup interface [ 83.085624][ T5876] bond0: (slave bond_slave_1): Releasing backup interface [ 83.090290][ T5876] team0: Port device team_slave_0 removed [ 83.093864][ T5876] team0: Port device team_slave_1 removed [ 83.095578][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.098073][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.100467][ T5876] vlan2: left promiscuous mode [ 83.101841][ T5876] bridge0: port 3(vlan2) entered disabled state [ 83.102363][ T5390] usb 6-1: Using ep0 maxpacket: 8 [ 83.107774][ T5390] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 83.110072][ T5390] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 83.111981][ T5390] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 83.114454][ T5390] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 83.117411][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 83.120265][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 83.123397][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.126690][ T5390] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 83.128974][ T5390] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 83.130876][ T5390] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 83.133658][ T5390] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 83.136641][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 83.139506][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 83.142377][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.145673][ T5390] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 83.147936][ T5390] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 83.149872][ T5390] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 83.152228][ T5390] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 83.155305][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 83.158180][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 83.160992][ T5390] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.166368][ T5390] usb 6-1: string descriptor 0 read error: -22 [ 83.168494][ T5390] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.170844][ T5390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.176705][ T5390] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 83.481142][ T5881] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.454724][ T63] usb 5-1: string descriptor 0 read error: -71 [ 84.459091][ T63] usb 5-1: USB disconnect, device number 13 [ 84.464439][ T35] usb 8-1: string descriptor 0 read error: -71 [ 84.466713][ T35] usb 8-1: USB disconnect, device number 13 [ 85.002456][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 85.154070][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.156710][ T978] usb 5-1: config 0 has no interfaces? [ 85.158128][ T978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.160438][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.163797][ T978] usb 5-1: config 0 descriptor?? [ 85.394953][ T978] usb 5-1: string descriptor 0 read error: -71 [ 85.401390][ T978] usb 5-1: USB disconnect, device number 14 [ 86.142407][ T978] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 86.281783][ T5903] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 86.284557][ T5903] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 86.286760][ T5903] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 86.296434][ T978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.299034][ T978] usb 8-1: config 0 has no interfaces? [ 86.300533][ T978] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.303484][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.306877][ T978] usb 8-1: config 0 descriptor?? [ 86.334271][ T5901] netlink: 328 bytes leftover after parsing attributes in process `syz.2.120'. [ 86.481425][ T5413] usb 6-1: USB disconnect, device number 10 [ 86.547966][ T978] usb 8-1: string descriptor 0 read error: -71 [ 86.550808][ T978] usb 8-1: USB disconnect, device number 14 [ 86.583338][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.952405][ T5413] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 87.112388][ T5413] usb 6-1: Using ep0 maxpacket: 8 [ 87.116071][ T5413] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.118249][ T5413] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.120179][ T5413] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.122433][ T5413] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.125097][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.127871][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.130635][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.134562][ T5413] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.136678][ T5413] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.138641][ T5413] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.140942][ T5413] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.143775][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.146625][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.149513][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.153042][ T5413] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.155345][ T5413] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.157273][ T5413] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.159744][ T5413] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.162911][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.165770][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.168600][ T5413] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.173423][ T5413] usb 6-1: string descriptor 0 read error: -22 [ 87.175064][ T5413] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.177398][ T5413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.182136][ T5413] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 87.487904][ T5914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.392365][ T978] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.543978][ T978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.546590][ T978] usb 7-1: config 0 has no interfaces? [ 88.547998][ T978] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.550318][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.553420][ T978] usb 7-1: config 0 descriptor?? [ 88.749717][ T5929] overlayfs: overlapping lowerdir path [ 88.758338][ T978] usb 7-1: string descriptor 0 read error: -71 [ 88.760422][ T978] usb 7-1: USB disconnect, device number 9 [ 88.834452][ T5933] vivid-007: disconnect [ 88.939032][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 88.939042][ T39] audit: type=1326 audit(1728967325.543:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.958533][ T39] audit: type=1326 audit(1728967325.563:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.964171][ T39] audit: type=1326 audit(1728967325.563:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.969841][ T39] audit: type=1326 audit(1728967325.563:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.973041][ T5934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.975868][ T39] audit: type=1326 audit(1728967325.563:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.980423][ T5934] FAULT_INJECTION: forcing a failure. [ 88.980423][ T5934] name failslab, interval 1, probability 0, space 0, times 0 [ 88.984327][ T39] audit: type=1326 audit(1728967325.563:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.987654][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.3.126 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 88.994624][ T39] audit: type=1326 audit(1728967325.563:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 88.995504][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.000910][ T39] audit: type=1326 audit(1728967325.563:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 89.003641][ T5934] Call Trace: [ 89.003649][ T5934] [ 89.003654][ T5934] dump_stack_lvl+0x16c/0x1f0 [ 89.003673][ T5934] should_fail_ex+0x497/0x5b0 [ 89.003687][ T5934] ? fs_reclaim_acquire+0xae/0x150 [ 89.009576][ T39] audit: type=1326 audit(1728967325.563:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 89.009989][ T5934] should_failslab+0xc2/0x120 [ 89.010768][ T39] audit: type=1326 audit(1728967325.563:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.127" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 89.011984][ T5934] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 89.028533][ T5934] ? __d_alloc+0x35/0x8c0 [ 89.029675][ T5934] __d_alloc+0x35/0x8c0 [ 89.030771][ T5934] d_alloc+0x4a/0x1e0 [ 89.031829][ T5934] d_alloc_parallel+0xe9/0x12b0 [ 89.033138][ T5934] ? __pfx_d_alloc_parallel+0x10/0x10 [ 89.034540][ T5934] ? lockdep_init_map_type+0x16d/0x7d0 [ 89.035960][ T5934] ? mark_lock+0xb5/0xc60 [ 89.037184][ T5934] ? lockdep_init_map_type+0x16d/0x7d0 [ 89.038881][ T5934] __lookup_slow+0x194/0x460 [ 89.040447][ T5934] ? __pfx___lookup_slow+0x10/0x10 [ 89.041796][ T5934] ? lookup_one_unlocked+0x133/0x160 [ 89.043187][ T5934] ? d_lookup+0xe9/0x180 [ 89.044328][ T5934] lookup_one_unlocked+0x142/0x160 [ 89.045670][ T5934] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 89.047141][ T5934] ovl_lookup_single+0x201/0xf60 [ 89.048467][ T5934] ? __pfx_ovl_lookup_single+0x10/0x10 [ 89.049893][ T5934] ovl_lookup_layer+0x3a9/0x4a0 [ 89.051174][ T5934] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 89.052650][ T5934] ? trace_kmalloc+0x2d/0xe0 [ 89.053935][ T5934] ? __kmalloc_noprof+0x207/0x410 [ 89.055259][ T5934] ovl_lookup+0x13a9/0x21f0 [ 89.056472][ T5934] ? __pfx_ovl_lookup+0x10/0x10 [ 89.057752][ T5934] ? __pfx_d_alloc_parallel+0x10/0x10 [ 89.059152][ T5934] ? __d_lookup+0x266/0x4a0 [ 89.060361][ T5934] ? __pfx_ovl_lookup+0x10/0x10 [ 89.061984][ T5934] lookup_open.isra.0+0x92d/0x14c0 [ 89.063708][ T5934] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 89.065574][ T5934] ? path_openat+0x88a/0x2d60 [ 89.067177][ T5934] ? lookup_fast+0x155/0x540 [ 89.068747][ T5934] path_openat+0x904/0x2d60 [ 89.070290][ T5934] ? __pfx_path_openat+0x10/0x10 [ 89.071942][ T5934] ? __pfx___lock_acquire+0x10/0x10 [ 89.073698][ T5934] do_filp_open+0x1dc/0x430 [ 89.075226][ T5934] ? __pfx_do_filp_open+0x10/0x10 [ 89.076941][ T5934] ? _raw_spin_unlock+0x28/0x50 [ 89.078574][ T5934] ? alloc_fd+0x2d7/0x6c0 [ 89.080029][ T5934] do_sys_openat2+0x17a/0x1e0 [ 89.081616][ T5934] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.083355][ T5934] ? __fget_files+0x244/0x3f0 [ 89.084948][ T5934] __ia32_compat_sys_open+0x147/0x1e0 [ 89.086742][ T5934] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 89.088741][ T5934] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 89.090931][ T5934] __do_fast_syscall_32+0x73/0x120 [ 89.092660][ T5934] do_fast_syscall_32+0x32/0x80 [ 89.094299][ T5934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.096424][ T5934] RIP: 0023:0xf7f25579 [ 89.097791][ T5934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.104159][ T5934] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 89.106943][ T5934] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000000000 [ 89.109607][ T5934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.112248][ T5934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.114907][ T5934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.117552][ T5934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.120192][ T5934] [ 89.671976][ T5932] vivid-007: reconnect [ 90.452462][ T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 90.479445][ T5413] usb 6-1: USB disconnect, device number 11 [ 90.501084][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 90.502937][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.506465][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 90.509180][ T5951] vhci_hcd: connection closed [ 90.510585][ T12] vhci_hcd: stop threads [ 90.515663][ T12] vhci_hcd: release socket [ 90.516915][ T12] vhci_hcd: disconnect device [ 90.615091][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.617638][ T8] usb 8-1: config 0 has no interfaces? [ 90.619014][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.621206][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.624337][ T8] usb 8-1: config 0 descriptor?? [ 90.831071][ T8] usb 8-1: string descriptor 0 read error: -71 [ 90.844442][ T8] usb 8-1: USB disconnect, device number 15 [ 90.925956][ T5954] Bluetooth: MGMT ver 1.23 [ 92.404382][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 92.554763][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.560871][ T8] usb 5-1: config 0 has no interfaces? [ 92.573103][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.575535][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.597597][ T8] usb 5-1: config 0 descriptor?? [ 93.243986][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 93.324959][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.362467][ T1431] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.425896][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.428728][ T25] usb 7-1: config 0 has no interfaces? [ 93.430294][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.433873][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.459801][ T25] usb 7-1: config 0 descriptor?? [ 93.538016][ T1431] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.540656][ T1431] usb 6-1: config 0 has no interfaces? [ 93.542082][ T1431] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.544495][ T1431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.548183][ T1431] usb 6-1: config 0 descriptor?? [ 93.592369][ T5390] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 93.739426][ T8] usb 5-1: string descriptor 0 read error: -71 [ 93.745034][ T8] usb 5-1: USB disconnect, device number 15 [ 93.752424][ T5390] usb 8-1: Using ep0 maxpacket: 8 [ 93.756187][ T5390] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 93.758707][ T5390] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 93.760765][ T5390] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 93.763250][ T5390] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 93.766830][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 93.771306][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 93.774302][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.778430][ T5390] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 93.780815][ T5390] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 93.782870][ T5390] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 93.785322][ T5390] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 93.788821][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 93.791769][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 93.795346][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.798851][ T5390] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 93.801226][ T5390] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 93.803192][ T5390] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 93.805530][ T5390] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 93.808441][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 93.811347][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 93.814159][ T5390] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.817116][ T1431] usb 6-1: string descriptor 0 read error: -71 [ 93.823088][ T1431] usb 6-1: USB disconnect, device number 12 [ 93.832892][ T5390] usb 8-1: string descriptor 0 read error: -22 [ 93.834525][ T5390] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 93.836834][ T5390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.845687][ T5390] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 94.053899][ T25] usb 7-1: string descriptor 0 read error: -71 [ 94.057089][ T25] usb 7-1: USB disconnect, device number 10 [ 94.148488][ T5986] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.961087][ T5988] vivid-007: disconnect [ 95.636957][ T5987] vivid-007: reconnect [ 95.764450][ T5995] syz.1.145: attempt to access beyond end of device [ 95.764450][ T5995] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 95.877827][ T6003] overlayfs: overlapping lowerdir path [ 96.022353][ T1431] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 96.095842][ T8] usb 8-1: USB disconnect, device number 16 [ 96.173773][ T1431] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.176420][ T1431] usb 7-1: config 0 has no interfaces? [ 96.177873][ T1431] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.180161][ T1431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.183069][ T1431] usb 7-1: config 0 descriptor?? [ 97.102374][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 97.122366][ T5390] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 97.254085][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.256736][ T25] usb 8-1: config 0 has no interfaces? [ 97.258172][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.260500][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.263399][ T25] usb 8-1: config 0 descriptor?? [ 97.284748][ T5390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.287416][ T5390] usb 5-1: config 0 has no interfaces? [ 97.288921][ T5390] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.291285][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.294567][ T5390] usb 5-1: config 0 descriptor?? [ 97.731794][ T5390] usb 5-1: string descriptor 0 read error: -71 [ 97.736489][ T5390] usb 5-1: USB disconnect, device number 16 [ 98.501933][ T1431] usb 7-1: string descriptor 0 read error: -71 [ 98.506449][ T25] usb 8-1: string descriptor 0 read error: -71 [ 98.508579][ T1431] usb 7-1: USB disconnect, device number 11 [ 98.512563][ T25] usb 8-1: USB disconnect, device number 17 [ 99.462397][ T5390] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 99.613744][ T5390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.616424][ T5390] usb 6-1: config 0 has no interfaces? [ 99.617886][ T5390] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.620473][ T5390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.627549][ T5390] usb 6-1: config 0 descriptor?? [ 99.632359][ T5413] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 99.784489][ T5413] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.787154][ T5413] usb 7-1: config 0 has no interfaces? [ 99.788746][ T5413] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.791201][ T5413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.804017][ T5413] usb 7-1: config 0 descriptor?? [ 99.858427][ T6043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.078520][ T5390] usb 6-1: string descriptor 0 read error: -71 [ 100.081175][ T5390] usb 6-1: USB disconnect, device number 13 [ 100.085201][ T5413] usb 7-1: string descriptor 0 read error: -71 [ 100.088858][ T5413] usb 7-1: USB disconnect, device number 12 [ 100.112617][ T1431] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 100.152901][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 100.152911][ T39] audit: type=1800 audit(1728967336.763:323): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.159" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 100.262888][ T1431] usb 8-1: Using ep0 maxpacket: 8 [ 100.270926][ T1431] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 100.273333][ T1431] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 100.275250][ T1431] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 100.277986][ T1431] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 100.281025][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 100.283927][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.286730][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.289998][ T1431] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 100.292422][ T1431] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 100.294333][ T1431] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 100.296685][ T1431] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 100.299484][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 100.302761][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.305606][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.308742][ T1431] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 100.311017][ T1431] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 100.313089][ T1431] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 100.315435][ T1431] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 100.318626][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 100.321479][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.324673][ T1431] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.329257][ T1431] usb 8-1: string descriptor 0 read error: -22 [ 100.331201][ T1431] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.334066][ T1431] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.338606][ T6055] netlink: 'syz.0.160': attribute type 4 has an invalid length. [ 100.338677][ T1431] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 100.392596][ T6055] netlink: 'syz.0.160': attribute type 4 has an invalid length. [ 100.643381][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.035537][ T39] audit: type=1326 audit(1728967338.643:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.042153][ T39] audit: type=1326 audit(1728967338.643:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.049352][ T39] audit: type=1326 audit(1728967338.643:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.055269][ T39] audit: type=1326 audit(1728967338.643:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.060677][ T39] audit: type=1326 audit(1728967338.643:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.066264][ T39] audit: type=1326 audit(1728967338.643:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.071681][ T39] audit: type=1326 audit(1728967338.643:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.077304][ T39] audit: type=1326 audit(1728967338.643:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.082834][ T39] audit: type=1326 audit(1728967338.643:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 102.092693][ T6065] openvswitch: netlink: Missing valid actions attribute. [ 102.095464][ T6065] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.472974][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 102.573956][ T9] usb 8-1: USB disconnect, device number 18 [ 102.633293][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.636061][ T25] usb 7-1: config 0 has no interfaces? [ 102.637508][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.639921][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.644120][ T25] usb 7-1: config 0 descriptor?? [ 102.850446][ T25] usb 7-1: string descriptor 0 read error: -71 [ 102.853742][ T25] usb 7-1: USB disconnect, device number 13 [ 103.290562][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 103.299195][ T6090] FAULT_INJECTION: forcing a failure. [ 103.299195][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 103.302574][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.1.170 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 103.305311][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.308083][ T6090] Call Trace: [ 103.308962][ T6090] [ 103.309750][ T6090] dump_stack_lvl+0x16c/0x1f0 [ 103.310997][ T6090] should_fail_ex+0x497/0x5b0 [ 103.312247][ T6090] ? fs_reclaim_acquire+0xae/0x150 [ 103.313589][ T6090] should_failslab+0xc2/0x120 [ 103.314827][ T6090] __kmalloc_node_noprof+0xd1/0x440 [ 103.316200][ T6090] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 103.317625][ T6090] __kvmalloc_node_noprof+0xad/0x1a0 [ 103.319009][ T6090] bpf_test_run_xdp_live+0x170/0x500 [ 103.320400][ T6090] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.321956][ T6090] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 103.323705][ T6090] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.325261][ T6090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.326834][ T6090] ? 0xffffffffa00045c0 [ 103.327958][ T6090] ? 0xffffffffa00045c0 [ 103.329061][ T6090] ? 0xffffffffa00045c0 [ 103.330155][ T6090] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 103.331703][ T6090] bpf_prog_test_run_xdp+0x827/0x1580 [ 103.333131][ T6090] ? lock_acquire+0x2f/0xb0 [ 103.334332][ T6090] ? __fget_files+0x40/0x3f0 [ 103.335548][ T6090] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.337086][ T6090] ? fput+0x30/0x390 [ 103.338127][ T6090] ? __bpf_prog_get+0xa0/0x290 [ 103.339391][ T6090] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.340933][ T6090] __sys_bpf+0x1921/0x5780 [ 103.342116][ T6090] ? ksys_write+0x21e/0x260 [ 103.343334][ T6090] ? __pfx___sys_bpf+0x10/0x10 [ 103.344604][ T6090] ? vfs_write+0x14d/0x1140 [ 103.345803][ T6090] ? __mutex_unlock_slowpath+0x164/0x650 [ 103.347283][ T6090] ? fput+0x30/0x390 [ 103.348341][ T6090] ? ksys_write+0x1ad/0x260 [ 103.349541][ T6090] ? __pfx_ksys_write+0x10/0x10 [ 103.350824][ T6090] __ia32_sys_bpf+0x76/0xe0 [ 103.351993][ T6090] __do_fast_syscall_32+0x73/0x120 [ 103.353314][ T6090] do_fast_syscall_32+0x32/0x80 [ 103.354598][ T6090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.356194][ T6090] RIP: 0023:0xf7f81579 [ 103.357262][ T6090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.362232][ T6090] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 103.364401][ T6090] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000240 [ 103.366453][ T6090] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.368520][ T6090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.370566][ T6090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.372614][ T6090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.374663][ T6090] [ 103.525446][ T6094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.902353][ T57] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 104.053450][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.056015][ T57] usb 8-1: config 0 has no interfaces? [ 104.057443][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.059768][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.080014][ T57] usb 8-1: config 0 descriptor?? [ 104.423180][ T6101] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 104.430846][ T6103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.456981][ T6101] team0: Port device wlan1 added [ 104.498272][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.742357][ T1431] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 104.902362][ T1431] usb 6-1: Using ep0 maxpacket: 8 [ 104.904998][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.907287][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.909248][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.911664][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.915418][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.919948][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.923283][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.936274][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.938653][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.940622][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.943044][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.946234][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.949237][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.952154][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.966931][ T1431] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.969251][ T1431] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.971165][ T1431] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.975843][ T1431] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.978935][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.981855][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.984783][ T1431] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.990510][ T1431] usb 6-1: string descriptor 0 read error: -22 [ 104.992210][ T1431] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.994678][ T1431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.000430][ T1431] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 105.176436][ T6107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.314052][ T6117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.412773][ T57] usb 8-1: string descriptor 0 read error: -71 [ 105.415501][ T57] usb 8-1: USB disconnect, device number 19 [ 106.868099][ T6146] syz.3.186: vmalloc error: size 8192, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.874246][ T6146] CPU: 2 UID: 0 PID: 6146 Comm: syz.3.186 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 106.877224][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.880004][ T6146] Call Trace: [ 106.880898][ T6146] [ 106.881684][ T6146] dump_stack_lvl+0x16c/0x1f0 [ 106.882930][ T6146] warn_alloc+0x24d/0x3a0 [ 106.884078][ T6146] ? __pfx_warn_alloc+0x10/0x10 [ 106.885369][ T6146] ? policy_nodemask+0xea/0x4e0 [ 106.886654][ T6146] ? alloc_pages_mpol_noprof+0x315/0x610 [ 106.888157][ T6146] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 106.889735][ T6146] ? __pfx___might_resched+0x10/0x10 [ 106.891126][ T6146] __vmalloc_node_range_noprof+0x1326/0x15a0 [ 106.892710][ T6146] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 106.894266][ T6146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.895917][ T6146] ? __pfx_lock_release+0x10/0x10 [ 106.897258][ T6146] ? trace_lock_acquire+0x14a/0x1d0 [ 106.898630][ T6146] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 106.900200][ T6146] vmalloc_noprof+0x6b/0x90 [ 106.901401][ T6146] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 106.902947][ T6146] hashlimit_mt_check_common+0x8b0/0x1450 [ 106.904443][ T6146] hashlimit_mt_check_v1+0x2fe/0x370 [ 106.905830][ T6146] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 106.907358][ T6146] ? rcu_is_watching+0x12/0xc0 [ 106.908639][ T6146] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 106.910168][ T6146] xt_check_match+0x284/0xa50 [ 106.911406][ T6146] ? __pfx_xt_check_match+0x10/0x10 [ 106.912772][ T6146] ? rcu_is_watching+0x12/0xc0 [ 106.914033][ T6146] ? pcpu_alloc_noprof+0x1f5/0x1660 [ 106.915397][ T6146] ? xt_find_match.part.0+0x1b6/0x250 [ 106.916820][ T6146] find_check_entry.constprop.0+0x325/0x9c0 [ 106.918378][ T6146] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 106.920062][ T6146] ? kfree+0x14f/0x4b0 [ 106.921152][ T6146] ? kvfree+0x47/0x50 [ 106.922214][ T6146] translate_table+0xc88/0x1730 [ 106.923499][ T6146] ? __pfx_translate_table+0x10/0x10 [ 106.924892][ T6146] translate_compat_table+0x13d9/0x18c0 [ 106.926350][ T6146] ? __pfx_translate_compat_table+0x10/0x10 [ 106.927907][ T6146] ? __might_fault+0x13b/0x190 [ 106.929171][ T6146] ? __pfx_lock_release+0x10/0x10 [ 106.930500][ T6146] compat_do_replace+0x35d/0x500 [ 106.931805][ T6146] ? __pfx_compat_do_replace+0x10/0x10 [ 106.933250][ T6146] ? aa_get_newest_label+0x376/0x680 [ 106.934641][ T6146] ? __pfx_aa_get_newest_label+0x10/0x10 [ 106.936116][ T6146] ? bpf_lsm_capable+0x9/0x10 [ 106.937371][ T6146] ? security_capable+0x7e/0x260 [ 106.938675][ T6146] do_ipt_set_ctl+0x686/0xc10 [ 106.939914][ T6146] ? trace_contention_end+0xea/0x140 [ 106.941309][ T6146] ? __mutex_lock+0x1a6/0x9c0 [ 106.942552][ T6146] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 106.943926][ T6146] ? __pfx___mutex_lock+0x10/0x10 [ 106.945256][ T6146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.946830][ T6146] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 106.948258][ T6146] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 106.949830][ T6146] nf_setsockopt+0x8a/0xf0 [ 106.951014][ T6146] ip_setsockopt+0xcb/0xf0 [ 106.952202][ T6146] udp_setsockopt+0x7d/0xd0 [ 106.953403][ T6146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.954955][ T6146] do_sock_setsockopt+0x222/0x480 [ 106.956285][ T6146] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.957728][ T6146] ? fdget+0x176/0x210 [ 106.958805][ T6146] __sys_setsockopt+0x1a4/0x270 [ 106.960091][ T6146] ? __pfx___sys_setsockopt+0x10/0x10 [ 106.961512][ T6146] ? fput+0x30/0x390 [ 106.962552][ T6146] ? ksys_write+0x1ad/0x260 [ 106.963746][ T6146] ? __pfx_ksys_write+0x10/0x10 [ 106.965030][ T6146] __ia32_sys_setsockopt+0xbc/0x160 [ 106.966392][ T6146] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.967749][ T6146] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 106.969430][ T6146] __do_fast_syscall_32+0x73/0x120 [ 106.970769][ T6146] do_fast_syscall_32+0x32/0x80 [ 106.972051][ T6146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.973702][ T6146] RIP: 0023:0xf7f25579 [ 106.974774][ T6146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.979742][ T6146] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 106.981917][ T6146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 106.983965][ T6146] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000578 [ 106.986031][ T6146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.988091][ T6146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.990145][ T6146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.992193][ T6146] [ 106.995285][ T6146] Mem-Info: [ 106.996388][ T6146] active_anon:2580 inactive_anon:15 isolated_anon:0 [ 106.996388][ T6146] active_file:3559 inactive_file:31017 isolated_file:0 [ 106.996388][ T6146] unevictable:768 dirty:128 writeback:0 [ 106.996388][ T6146] slab_reclaimable:4603 slab_unreclaimable:51929 [ 106.996388][ T6146] mapped:17779 shmem:870 pagetables:677 [ 106.996388][ T6146] sec_pagetables:313 bounce:0 [ 106.996388][ T6146] kernel_misc_reclaimable:0 [ 106.996388][ T6146] free:103753 free_pcp:865 free_cma:0 [ 107.008799][ T6146] Node 0 active_anon:0kB inactive_anon:44kB active_file:0kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:3356kB dirty:20kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10052kB pagetables:1400kB sec_pagetables:1212kB all_unreclaimable? no [ 107.016922][ T6146] Node 1 active_anon:10332kB inactive_anon:16kB active_file:14236kB inactive_file:124032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:67760kB dirty:492kB writeback:0kB shmem:1936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1584kB pagetables:1308kB sec_pagetables:40kB all_unreclaimable? no [ 107.026730][ T6146] Node 0 DMA free:912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 107.033667][ T6146] lowmem_reserve[]: 0 273 0 0 0 [ 107.034976][ T6146] Node 0 DMA32 free:21200kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:44kB active_file:0kB inactive_file:36kB unevictable:1536kB writepending:20kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1208kB local_pcp:204kB free_cma:0kB [ 107.043961][ T6146] lowmem_reserve[]: 0 0 0 0 0 [ 107.045218][ T6146] Node 1 DMA32 free:393512kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:10332kB inactive_anon:16kB active_file:14236kB inactive_file:124032kB unevictable:1536kB writepending:492kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:1992kB local_pcp:8kB free_cma:0kB [ 107.052897][ T6146] lowmem_reserve[]: 0 0 0 0 0 [ 107.054272][ T6146] Node 0 DMA: 14*4kB (U) 40*8kB (U) 35*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 936kB [ 107.057536][ T6146] Node 0 DMA32: 439*4kB (UMH) 64*8kB (UMEH) 32*16kB (UMEH) 26*32kB (UMH) 35*64kB (UMEH) 24*128kB (UMEH) 9*256kB (UMEH) 10*512kB (UMH) 3*1024kB (MH) 1*2048kB (M) 0*4096kB = 21468kB [ 107.062140][ T6146] Node 1 DMA32: 142*4kB (UM) 81*8kB (UE) 31*16kB (UME) 77*32kB (UME) 34*64kB (UME) 34*128kB (UME) 19*256kB (UM) 18*512kB (UME) 10*1024kB (UME) 9*2048kB (UME) 83*4096kB (ME) = 393424kB [ 107.070034][ T6146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.072577][ T6146] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 107.074951][ T6146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.078379][ T6146] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.081182][ T6146] 36134 total pagecache pages [ 107.084062][ T6146] 686 pages in swap cache [ 107.085475][ T6146] Free swap = 113204kB [ 107.086575][ T6146] Total swap = 124996kB [ 107.087735][ T6146] 524155 pages RAM [ 107.088762][ T6146] 0 pages HighMem/MovableOnly [ 107.090296][ T6146] 206681 pages reserved [ 107.091392][ T6146] 0 pages cma reserved [ 107.132378][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 107.294944][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.297634][ T9] usb 7-1: config 0 has no interfaces? [ 107.299138][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.301487][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.304599][ T9] usb 7-1: config 0 descriptor?? [ 107.517042][ T9] usb 7-1: string descriptor 0 read error: -71 [ 107.519116][ T9] usb 7-1: USB disconnect, device number 14 [ 108.239141][ T1431] usb 6-1: USB disconnect, device number 14 [ 108.310471][ T6170] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 108.315263][ T6170] Error parsing options; rc = [-22] [ 108.346958][ T6175] FAULT_INJECTION: forcing a failure. [ 108.346958][ T6175] name failslab, interval 1, probability 0, space 0, times 0 [ 108.350080][ T6175] CPU: 3 UID: 0 PID: 6175 Comm: syz.1.195 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 108.352753][ T6175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.355511][ T6175] Call Trace: [ 108.356397][ T6175] [ 108.357177][ T6175] dump_stack_lvl+0x16c/0x1f0 [ 108.358412][ T6175] should_fail_ex+0x497/0x5b0 [ 108.359641][ T6175] ? fs_reclaim_acquire+0xae/0x150 [ 108.360984][ T6175] should_failslab+0xc2/0x120 [ 108.362216][ T6175] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 108.363615][ T6175] ? security_file_alloc+0x34/0x2b0 [ 108.364984][ T6175] security_file_alloc+0x34/0x2b0 [ 108.366303][ T6175] init_file+0x93/0x230 [ 108.367396][ T6175] alloc_empty_file+0x91/0x1e0 [ 108.368676][ T6175] alloc_file_pseudo+0x13d/0x200 [ 108.369968][ T6175] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 108.371385][ T6175] ? do_raw_spin_lock+0x12d/0x2c0 [ 108.372703][ T6175] __anon_inode_getfile+0x136/0x3c0 [ 108.374073][ T6175] ? __pfx___anon_inode_getfile+0x10/0x10 [ 108.375547][ T6175] ? alloc_fd+0x2d7/0x6c0 [ 108.376687][ T6175] anon_inode_getfd+0x52/0xb0 [ 108.377931][ T6175] map_create+0xd6b/0x1ed0 [ 108.379323][ T6175] ? __pfx_lock_release+0x10/0x10 [ 108.380666][ T6175] ? trace_lock_acquire+0x14a/0x1d0 [ 108.382016][ T6175] ? __pfx_map_create+0x10/0x10 [ 108.383288][ T6175] ? lock_acquire+0x2f/0xb0 [ 108.384533][ T6175] ? __might_fault+0xe3/0x190 [ 108.385762][ T6175] ? __might_fault+0xe3/0x190 [ 108.386993][ T6175] __sys_bpf+0x506a/0x5780 [ 108.388411][ T6175] ? ksys_write+0x21e/0x260 [ 108.389635][ T6175] ? __pfx___sys_bpf+0x10/0x10 [ 108.390912][ T6175] ? vfs_write+0x14d/0x1140 [ 108.392066][ T6175] ? __mutex_unlock_slowpath+0x164/0x650 [ 108.393548][ T6175] ? fput+0x30/0x390 [ 108.394557][ T6175] ? ksys_write+0x1ad/0x260 [ 108.395670][ T6175] ? __pfx_ksys_write+0x10/0x10 [ 108.396921][ T6175] __ia32_sys_bpf+0x76/0xe0 [ 108.398039][ T6175] __do_fast_syscall_32+0x73/0x120 [ 108.399320][ T6175] do_fast_syscall_32+0x32/0x80 [ 108.400552][ T6175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.402115][ T6175] RIP: 0023:0xf7f81579 [ 108.403137][ T6175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.407857][ T6175] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 108.409966][ T6175] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200002c0 [ 108.411934][ T6175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.413833][ T6175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.415751][ T6175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.417691][ T6175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.419697][ T6175] [ 108.424774][ T6172] 9pnet_fd: Insufficient options for proto=fd [ 108.862437][ T57] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 109.014376][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.017188][ T57] usb 5-1: config 0 has no interfaces? [ 109.018609][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.020781][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.028210][ T57] usb 5-1: config 0 descriptor?? [ 109.162401][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 109.334637][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.337945][ T25] usb 6-1: config 0 has no interfaces? [ 109.339806][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.342876][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.348908][ T25] usb 6-1: config 0 descriptor?? [ 109.451613][ T6196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.200'. [ 109.455598][ T6198] random: crng reseeded on system resumption [ 109.459773][ T6196] netlink: 'syz.2.200': attribute type 5 has an invalid length. [ 109.461801][ T6196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'. [ 109.613462][ T57] usb 5-1: string descriptor 0 read error: -71 [ 109.625612][ T57] usb 5-1: USB disconnect, device number 17 [ 109.968353][ T25] usb 6-1: string descriptor 0 read error: -71 [ 109.973815][ T25] usb 6-1: USB disconnect, device number 15 [ 111.404511][ T6248] program syz.2.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.821005][ T6257] process 'syz.1.209' launched './file0' with NULL argv: empty string added [ 112.092577][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 112.244388][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.244403][ T9] usb 5-1: config 0 has no interfaces? [ 112.244415][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.244426][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.245227][ T9] usb 5-1: config 0 descriptor?? SYZFAIL: bad allocate request allocated=0 size=4294966814/4294966816 (errno 9: Bad file descriptor) [ 112.673438][ T9] usb 5-1: string descriptor 0 read error: -71 [ 112.677295][ T9] usb 5-1: USB disconnect, device number 18 [ 112.869572][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.931761][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.993963][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.051169][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.135828][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.237897][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.322000][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.382726][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.794217][ T45] bridge_slave_1: left allmulticast mode [ 113.795747][ T45] bridge_slave_1: left promiscuous mode [ 113.797313][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.800305][ T45] bridge_slave_0: left allmulticast mode [ 113.801811][ T45] bridge_slave_0: left promiscuous mode [ 113.804174][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.808156][ T45] bridge_slave_1: left allmulticast mode [ 113.809654][ T45] bridge_slave_1: left promiscuous mode [ 113.811162][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.815950][ T45] bridge_slave_0: left allmulticast mode [ 113.817474][ T45] bridge_slave_0: left promiscuous mode [ 113.818991][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.386903][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.390500][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.394055][ T45] bond0 (unregistering): Released all slaves [ 114.448631][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.452239][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.455665][ T45] bond0 (unregistering): Released all slaves [ 114.519456][ T45] bond0 (unregistering): Released all slaves [ 115.142494][ T45] hsr_slave_0: left promiscuous mode [ 115.144416][ T45] hsr_slave_1: left promiscuous mode [ 115.146178][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.148099][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.150225][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.152133][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.158360][ T45] hsr_slave_0: left promiscuous mode [ 115.160139][ T45] hsr_slave_1: left promiscuous mode [ 115.162033][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.164263][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.166510][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.168496][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.173289][ T45] hsr_slave_0: left promiscuous mode [ 115.175736][ T45] hsr_slave_1: left promiscuous mode [ 115.214965][ T45] veth1_macvtap: left promiscuous mode [ 115.216461][ T45] veth0_macvtap: left promiscuous mode [ 115.217912][ T45] veth1_vlan: left promiscuous mode [ 115.219286][ T45] veth0_vlan: left promiscuous mode [ 115.221338][ T45] veth1_macvtap: left promiscuous mode [ 115.222837][ T45] veth0_macvtap: left promiscuous mode [ 115.224292][ T45] veth1_vlan: left promiscuous mode [ 115.225648][ T45] veth0_vlan: left promiscuous mode [ 115.724812][ T45] team0 (unregistering): Port device team_slave_1 removed [ 115.781455][ T45] team0 (unregistering): Port device team_slave_0 removed [ 116.675603][ T45] team0 (unregistering): Port device team_slave_1 removed [ 116.737287][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 04:42:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffffffff1b40fb6 RCX=ffffffff813a4ed5 RDX=ffffffff8da957c0 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffffff8da07d98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802b400000 R13=0000000000000001 R14=0000000000000000 R15=0000000000028380 RIP=ffffffff818cb910 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffbc1000 CR3=000000005d6e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027000000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff2d31b88 RBX=fffffbfff2d31b89 RCX=ffffffff816a0168 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff9698dc40 RBP=fffffbfff2d31b88 RSP=ffffc900003d78b8 R8 =0000000000000000 R9 =fffffbfff2d31b88 R10=ffffffff9698dc47 R11=0000000000000002 R12=dffffc0000000000 R13=ffff88801d2b2f70 R14=0000000000000004 R15=ffff88801d2b2440 RIP=ffffffff81edf954 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d1da8 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff92000657f01 RCX=ffffffff813e9204 RDX=ffff888025162440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900032bf800 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888000f189b0 R13=0000000000000000 R14=ffffc900032bf9a8 R15=ffffea00012a6680 RIP=ffffffff818cb9d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ddde182000 CR3=000000005a7b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff920003f5ee0 RCX=ffffffff81cb0467 RDX=ffff88801f5e4880 RSI=0000000000000008 RDI=ffffffff8ddb7800 RBP=0000000000000003 RSP=ffffc90001faf6f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8ddb7800 R13=dffffc0000000000 R14=000000000003dbcc R15=ffff8880404de000 RIP=ffffffff816a356c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7269510 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027000000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000