last executing test programs: 7.37433122s ago: executing program 3 (id=3214): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002200)=@newtfilter={0xc84, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc44, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15f32}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x5}}, @TCA_FLOW_POLICE={0xc18, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x4ab000, 0x7, 0x4, 0x2, 0xb0, 0xfffffffd, 0x7, 0x9, 0x9, 0xff, 0xc6, 0x1, 0x2, 0xa, 0x2, 0x10001, 0x2, 0x9, 0x7373, 0x9, 0x9, 0x5, 0xff, 0xf, 0x10, 0x9, 0xaa, 0xf, 0x7ff, 0x2, 0x1, 0x5, 0x1, 0x6, 0x8, 0x0, 0x2, 0x3, 0x401, 0xfffffffa, 0xee1, 0x4, 0x6, 0x9, 0x81, 0xfff, 0x8000, 0x5, 0x3, 0xffffffe0, 0x54, 0x8, 0x8, 0x4, 0x8, 0x9, 0x5, 0x0, 0x23, 0x5, 0x1000, 0x36, 0x4, 0xf8e, 0x5a, 0x90a, 0x800, 0x3, 0x8, 0x1, 0x0, 0x101, 0x9c9, 0x6, 0x1, 0x0, 0x6, 0x5, 0x7, 0x3, 0x1, 0x8, 0x6, 0xd0e, 0x4, 0x62e, 0x0, 0x0, 0x7, 0xe48, 0x4, 0x100, 0x101, 0x7, 0x0, 0x3, 0x80000001, 0xe5, 0xffffffff, 0x3, 0x6, 0x4, 0x8, 0x4, 0x5, 0xffff, 0x1, 0x1000, 0x3, 0x7, 0x0, 0xe9, 0x5, 0x40, 0x9, 0x0, 0x8, 0x7f4, 0xa8, 0x4, 0x2, 0x6, 0x0, 0x0, 0x4, 0x7, 0x7, 0x5, 0x7, 0x2, 0x1000000, 0x6, 0x6, 0xf, 0x834, 0x8d, 0x81, 0x3, 0x6e, 0x0, 0x100, 0x0, 0x8, 0x80, 0x1, 0x2, 0x8, 0x1, 0x3, 0xfffffe00, 0x37d, 0x3, 0x7, 0xb0, 0x6, 0x7f58, 0x600, 0x4, 0x8, 0x10, 0x0, 0x200, 0x0, 0x10, 0xec, 0x0, 0x10000, 0x8, 0x9, 0xd6fa, 0x7fff, 0x2, 0x1000, 0x4, 0x3, 0xfffffffd, 0x6, 0x1, 0x8, 0x312, 0xfffffe00, 0x0, 0x81, 0x3, 0x9, 0xc, 0x1, 0x1ff, 0x9, 0x0, 0x27061e4f, 0x5, 0xdb, 0x200, 0xa51, 0x9, 0x9ed9, 0x3ff, 0x1, 0x3, 0x6, 0x6, 0xfff, 0x1, 0x8a, 0x4000000, 0x5b2, 0x4, 0x4, 0x180000, 0x1, 0x55, 0x0, 0x5, 0xf, 0x1, 0x8, 0x5, 0x7, 0x8001, 0x6, 0x8, 0x7, 0x8, 0xffffffff, 0x4fdc560d, 0x3, 0xff, 0x9d, 0x0, 0x0, 0x2, 0xffff, 0x9, 0x0, 0x6, 0x4f03c07c, 0x100, 0x1, 0x5, 0x2d, 0x0, 0x3b, 0x9, 0x10000, 0x8001, 0x8, 0x8, 0x1, 0x101, 0x9, 0xeb62, 0x2, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x60, 0x0, 0x2, 0x8001, 0x6, 0x54e7, 0x9, 0x2, 0x4, 0xff, 0x80000000, 0x2, 0x7, 0x3, 0x0, 0xa970, 0x62, 0x9, 0x7, 0x8, 0x0, 0xcc, 0x6, 0x4, 0x10000, 0x366f, 0xfffffff4, 0x1, 0xfffff09e, 0x601, 0x1, 0x401, 0x50ee9a3, 0x1, 0x40, 0x80, 0x19, 0xc809, 0x8, 0x2, 0x1c4, 0x8, 0x4b, 0x7, 0x4, 0x1, 0x5, 0x3, 0xa, 0x4, 0x3238470c, 0x0, 0x8, 0xe87b, 0x9, 0x4, 0x6027, 0x3, 0xd, 0x77, 0x2, 0x8, 0x0, 0x5, 0x80000001, 0x2, 0x7, 0x6, 0x5, 0x80, 0x31, 0x7fff, 0x2, 0x6, 0x400, 0xff82, 0xfffffffb, 0xff, 0x3ff, 0x1, 0xfc13, 0x7, 0x7, 0x3, 0x1, 0x5, 0x3, 0x7fff, 0x2, 0x8, 0x6, 0x3, 0x6b5, 0x379, 0xca7, 0x5, 0x7, 0x7fff, 0x10, 0x7, 0x6, 0x8, 0x0, 0x40000000, 0x2, 0x53d, 0xe9, 0x9, 0x80000001, 0xb993, 0x3, 0x1, 0x200, 0x4, 0x2, 0x7, 0x5551, 0x5c3c, 0x5, 0xf86a, 0x9, 0x6, 0x9ef3, 0xfffff801, 0x9, 0x7f, 0xb9, 0x9, 0x4, 0x2, 0xfffffff9, 0x5, 0xf, 0x101, 0xffffffff, 0x0, 0x4, 0x10001, 0x7f, 0x56800000, 0x400, 0xfffffa44, 0xc, 0x5, 0x3, 0x2, 0xfffffffe, 0x3, 0x200, 0x9c, 0xa01, 0xfde8, 0x3, 0x979, 0x0, 0x4, 0x1bf42caa, 0x401, 0x6, 0x4, 0xd496, 0xd56a, 0x1, 0x9, 0x1, 0x73, 0x4, 0x4, 0x1, 0x40, 0xfc, 0x2, 0x3, 0xe, 0x800, 0x3, 0x2, 0x10001, 0x351, 0x7ab, 0x4, 0x9, 0x3, 0x213d, 0x5, 0x6, 0x4, 0x2, 0x0, 0x7, 0x8, 0x0, 0x6, 0x4, 0x6, 0x2, 0x9, 0x7, 0x9, 0x7, 0x7, 0x9367, 0x1000, 0x9c19, 0x0, 0x1ff, 0x4, 0x4, 0xfff, 0x401, 0x6, 0x5, 0xffffffff, 0xd2ea, 0x1000, 0x800000, 0x726, 0x6, 0x1ff, 0x1ff, 0x7, 0x0, 0x5, 0xd, 0x3, 0x6, 0x53600000, 0x10, 0x49, 0x4, 0x7f, 0x100, 0x2, 0x3, 0x7, 0x9, 0xce, 0x2, 0x6, 0x6, 0x3, 0x8, 0x1, 0x8, 0xffffde30, 0x8, 0x1, 0x10000, 0xfffffff9, 0x6, 0x3, 0x8, 0x8, 0x3, 0x8, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xbd, 0x2, 0xa, 0xb9, 0xc, 0x1, 0x4, 0x6889, 0xb, 0x20400000, 0x2, 0x4, 0x40, 0x7fffffff, 0x4003, 0x5, 0x0, 0xfffffff9, 0xfffffff3, 0x168, 0x3, 0x1c00000, 0x40, 0x401, 0x7d7a, 0x9, 0x5, 0x2, 0xffff8001, 0x2, 0x3ff, 0x7, 0x6, 0x101, 0x9, 0x5041b6fc, 0x2, 0x0, 0x2, 0x9, 0x8, 0x81, 0x8fd, 0x6, 0x499, 0x5, 0xff, 0x1000, 0x2, 0x0, 0x8, 0x8001, 0xfffffff6, 0xffff0001, 0x2, 0x9, 0x2, 0xbfd, 0x10, 0x7f78, 0xa737, 0x3, 0xffffffff, 0x0, 0x7fffffff, 0x0, 0x3, 0x6, 0x4, 0x0, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x4, 0x3, 0x8, 0x7, 0x1df8, 0x3, 0x80000000, 0x6, 0x2, 0x0, 0x8, 0xffffffed, 0xfcc7, 0x7, 0x200, 0xa1, 0x9, 0x420, 0x612, 0x3, 0x8, 0x4, 0xffffffff, 0xfffffc19, 0x8, 0x0, 0x9, 0x4aa8, 0xf19, 0x3b3, 0x6, 0x2, 0x5, 0x3, 0x8, 0xeb, 0x9, 0x431, 0x4, 0x0, 0x2, 0x1, 0x9, 0x80000001, 0xdf7, 0x23, 0x7fff, 0xe3, 0x7fff, 0x3, 0x2, 0x4, 0x7, 0x1, 0x8, 0x1abed710, 0xa82, 0x5, 0xea4, 0x5, 0xdd, 0x7ff, 0x91fd, 0x4, 0x73, 0x2, 0x9, 0x80000001, 0x7, 0x3, 0x8001, 0x0, 0x8, 0x6, 0x9, 0xe, 0x2, 0x8, 0xffffffff, 0x7ff, 0x9437, 0x3, 0x8, 0x834e, 0x54fa, 0x3, 0x9, 0xfffff95b, 0x5, 0xffffffc0, 0x4, 0xfffffff9, 0x9, 0x6, 0x6, 0xb8a, 0x2, 0x80, 0x4, 0x0, 0x78, 0xc, 0x4, 0x4, 0xac, 0x1, 0x1000, 0x7ff, 0x8, 0xdc, 0x5, 0xe, 0x0, 0x81, 0x0, 0x7, 0xe, 0x2, 0xc8b, 0x6, 0xffff, 0x1, 0x3, 0xffffffff, 0x4, 0x10000, 0x8, 0x5, 0x7, 0x5f, 0xffff7fff, 0x81, 0x9, 0x6, 0x3, 0x101, 0x6, 0x1ff, 0x81, 0x0, 0x7fffffff, 0x0, 0xff, 0x1, 0xffff8000, 0x1, 0x4, 0xffff0001, 0x5, 0x0, 0x4, 0x9, 0x4, 0xb49, 0x3d, 0x1, 0xffffffff, 0x0, 0x7e, 0x101, 0x401, 0x3, 0x2e7e, 0x7, 0x7, 0x10000, 0x51b, 0x5, 0x8, 0x40, 0x7ff, 0x6, 0x8, 0x3ff, 0x6, 0x7fffffff, 0xd, 0x7f, 0x2, 0xffff, 0xd2]}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x100000}]}, 0xc84}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x90f, 0x34) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r2, 0x1, 0x20, 0x6, @local}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)}}], 0x2, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000100)={0x23, 0x7, 0x0, 0x1, 0x0, 0xb, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r6, r6, 0x0, 0x7f03) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x0, 0xfffffffd, 0x5, r8}, 0x10) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000440)="1897ceef5ba3846a501075d0bce84988f7008de5f484bd338df9c0ab43fe0a1f01c9d107a03ecc58cb63fb91e2e02d3a16be652e995e34c8eea84ab698cbb4cc2f512b558373d40045168631fcbfecbc3c6596ad470ada7f4c0b1a49de9dd340a9", 0x61}], 0x1, 0x6, 0x5) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x94}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x5, 0x8, [0xa, 0xfff9, 0x0, 0x5, 0x8, 0x913f, 0x9, 0x7]}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r10, 0x1}, &(0x7f0000000280)=0x8) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 7.281489381s ago: executing program 3 (id=3216): pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x80, 0x0}, 0x20) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x443) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_emit_ethernet(0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="018119c43580c200000317043a73dbde080045000028ceca0000fd0090780a010100ac1414aa0e009078018c0007000000060000000500000000"], 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r12}}]}}) ioctl$USBDEVFS_FORBID_SUSPEND(r10, 0x5521) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000014c0)={{0xa, 0x4e22, 0x7, @private0, 0x1}, {0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0xffffffffffffffff, {[0xe6d, 0x4c3, 0xd6d4, 0xffff, 0x10, 0x5, 0xfffffff8, 0x100]}}, 0x5c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r0, 0xfe473000) splice(r13, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001440)=0x8, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r10) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x13a1) 6.049619188s ago: executing program 1 (id=3221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, 0x0, 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000440)='mm_compaction_kcompactd_sleep\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001000000000000000000020000000000000000000000050019003c00000077a472d6eb9640fa66737f5409da150a0df305c48592b96f84af5b659de500d3f277cd7a22a1023895ac7842b20abcb8c4292b15d2a8f03463"], 0x24}}, 0x48850) mbind(&(0x7f00000d4000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x4, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) 4.721056002s ago: executing program 1 (id=3226): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0xcc, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x9, 0x5, 0x8, 0x1, 0x7f, 0x3, 0x6}}, {0x10, 0x2, [0x3, 0x400, 0x3, 0x4, 0xfffa, 0xc]}}, {{0x1c, 0x1, {0x43, 0xd1, 0x3, 0x5, 0x1, 0x3ff0000, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x80, 0xf, 0xb, 0x9, 0x1, 0x800, 0x2, 0x1}}, {0x6, 0x2, [0x9b7]}}, {{0x1c, 0x1, {0x10, 0x3, 0x3, 0x8001, 0x1, 0xfffffff8, 0x3, 0x8}}, {0x14, 0x2, [0x6, 0x3, 0x6, 0x8, 0x7, 0x7, 0xff81, 0x6]}}]}]}, 0xcc}}, 0x20041054) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x1, 0x0, {0x0, 0x3}, {0x841, 0x400}, @ramp={0x81, 0x93, {0x4, 0x7ff, 0x4, 0x4}}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 4.461827765s ago: executing program 1 (id=3228): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000280)=@assoc_value, &(0x7f0000000140)=0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) io_setup(0x3f, &(0x7f0000000140)=0x0) r3 = timerfd_create(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TIOCSLCKTRMIOS(r1, 0x8925, 0x0) syz_usbip_server_init(0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000010340)=@IORING_OP_WRITEV={0x2, 0x3, 0x4004, @fd_index, 0xf4cf, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.220571792s ago: executing program 3 (id=3230): setfsgid(0xee00) r0 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "1ca081ef3513c98fda46645b61a99bfc3a87a614"}, 0x15, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r8, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced5", 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[], 0x2a) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x14}}, 0x4048010) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x18}) 3.89048266s ago: executing program 1 (id=3231): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f0000002680)=""/4104) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @union={0x3, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x2, 0x1}, {0x0, 0x2, 0x5}]}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x30, 0x5f, 0x30, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000380)=""/12, 0x61, 0xc, 0x1, 0xfffffffa}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) unshare(0x2a020400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffff", 0x46}, {0x0}, {&(0x7f00000001c0)="ee641681c41fd678a13a3a40", 0xc}], 0x3) r5 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x800, 0x0, 0x3, 0x1}, 0x20) 3.45868334s ago: executing program 2 (id=3235): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x4, 0x8cb, 0xddf3c7b600fa3b3d, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x5, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @hyper, 0x0, 0x0, 0x5e}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.277016675s ago: executing program 3 (id=3236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='io_uring_complete\x00', r1}, 0x18) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) r3 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xdf9e, 0x1, 0x0, 0x270, 0x0, r2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d619, 0x2003fb, 0x80000001, 0x6, 0x1000, 0xa, 0xee01, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) 3.094888189s ago: executing program 3 (id=3238): pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x80, 0x0}, 0x20) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x443) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_emit_ethernet(0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="018119c43580c200000317043a73dbde080045000028ceca0000fd0090780a010100ac1414aa0e009078018c0007000000060000000500000000"], 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid={'access', 0x3d, r12}}]}}) ioctl$USBDEVFS_FORBID_SUSPEND(r10, 0x5521) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000014c0)={{0xa, 0x4e22, 0x7, @private0, 0x1}, {0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0xffffffffffffffff, {[0xe6d, 0x4c3, 0xd6d4, 0xffff, 0x10, 0x5, 0xfffffff8, 0x100]}}, 0x5c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r0, 0xfe473000) splice(r13, 0x0, r1, 0x0, 0x6, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001440)=0x8, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r10) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x13a1) 2.981580285s ago: executing program 1 (id=3239): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x8eee, 0x41000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000a927000a4c000000060a0904000000000000000002000000200004801c0001800900010068617368000000000c000280080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8401000010000d04020000000000080000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900010000000800010001000000140035006d6163766c616e"], 0x184}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 2.748791268s ago: executing program 0 (id=3240): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1700000000000000008400000100000010000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000993ce31300000000"], 0x50) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xfffffffffffffdb1, &(0x7f0000000500)={&(0x7f0000000480)={0x6, 0x18, 0xffff, {0x0, 0x2710}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x1d, 0x1, 0x0, 0x0, "e3f21eda2ad06edf6f8c91aa667682bcf464d7c81803614ef928805c6df65ffc93f8c73d0f1483572ac62f5382688ecb422bfde4dfab94a1d66e83f0fb1e6c55"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff060000"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.68436654s ago: executing program 0 (id=3241): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 2.683322533s ago: executing program 0 (id=3242): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x8, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 16) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) 2.33447953s ago: executing program 2 (id=3243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = getpid() syz_pidfd_open(r7, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.224594508s ago: executing program 0 (id=3244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2e, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040094}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) 1.981083637s ago: executing program 1 (id=3245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000041c0)=ANY=[@ANYBLOB="0100000000000000b2000040e4ce7f8817"]) 1.463064421s ago: executing program 2 (id=3246): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x1050c0, 0x0) r0 = io_uring_setup(0x26a5, &(0x7f0000000200)={0x0, 0xb2e9, 0x1000, 0x3, 0xe5}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040), 0x0) 1.443362366s ago: executing program 2 (id=3247): r0 = io_uring_setup(0x26a5, &(0x7f0000000200)={0x0, 0xb2e9, 0x1000, 0x3, 0xe5}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040), 0x0) 1.368760479s ago: executing program 2 (id=3248): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008000f0000000000", 0x24) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) sendmsg(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1000, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) 1.174286083s ago: executing program 0 (id=3249): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1700000000000000008400000100000010000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000993ce31300000000"], 0x50) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xfffffffffffffdb1, &(0x7f0000000500)={&(0x7f0000000480)={0x6, 0x18, 0xffff, {0x0, 0x2710}, {}, {0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x1d, 0x1, 0x0, 0x0, "e3f21eda2ad06edf6f8c91aa667682bcf464d7c81803614ef928805c6df65ffc93f8c73d0f1483572ac62f5382688ecb422bfde4dfab94a1d66e83f0fb1e6c55"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff060000"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.094258753s ago: executing program 0 (id=3250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r8, 0x4068aea3, &(0x7f00000001c0)) 13.134388ms ago: executing program 3 (id=3252): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020000, 0x0) getrlimit(0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 0s ago: executing program 2 (id=3253): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_procfs$namespace(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) kernel console output (not intermixed with test programs): 395][ T843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 499.586386][ T843] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.590352][ T843] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.593633][ T843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.597694][ T843] usb 7-1: config 0 descriptor?? [ 499.684084][ T53] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.686847][ T53] usb 8-1: config 0 has no interface number 0 [ 499.688830][ T53] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 499.694063][ T53] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 499.697518][ T53] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.700360][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.704960][ T53] usb 8-1: config 0 descriptor?? [ 499.707874][T14433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 499.712176][ T53] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 499.876822][T14424] vhci_hcd: connection reset by peer [ 499.879395][ T12] vhci_hcd: stop threads [ 499.881291][ T12] vhci_hcd: release socket [ 499.883381][ T12] vhci_hcd: disconnect device [ 500.005886][T14432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.009891][T14432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.027420][ T843] usbhid 7-1:0.0: can't add hid device: -71 [ 500.030183][ T843] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 500.037095][ T843] usb 7-1: USB disconnect, device number 21 [ 500.493196][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2473'. [ 500.907957][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.911720][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.586151][ T5951] Bluetooth: hci1: unexpected event for opcode 0x080e [ 501.613123][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 501.613134][ T40] audit: type=1800 audit(1760602167.606:6347): pid=14456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2476" name="bus" dev="overlay" ino=200 res=0 errno=0 [ 502.072839][T13937] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 502.156466][ T845] usb 8-1: USB disconnect, device number 16 [ 502.234458][T13937] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.237943][T13937] usb 7-1: config 0 has no interface number 0 [ 502.240360][T13937] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 502.244446][T13937] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 502.247897][T13937] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.250632][T13937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.349395][T13937] usb 7-1: config 0 descriptor?? [ 502.351524][T14467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.359317][T13937] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 502.723979][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2482'. [ 502.860119][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 502.868471][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.870842][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.112207][ T40] audit: type=1800 audit(1760602169.096:6348): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2487" name="bus" dev="overlay" ino=2216 res=0 errno=0 [ 504.413727][ T6105] usb 40-1: device descriptor read/8, error -110 [ 504.478117][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2493'. [ 504.698778][ T8845] usb 7-1: USB disconnect, device number 22 [ 504.709690][ T40] audit: type=1800 audit(1760602170.696:6349): pid=14516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2496" name="bus" dev="overlay" ino=2256 res=0 errno=0 [ 504.813394][ T6105] usb usb40-port1: attempt power cycle [ 505.154932][T14526] ip6t_srh: unknown srh invflags 4000 [ 505.157384][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 505.166506][T14526] bridge0: port 3(vlan2) entered blocking state [ 505.168915][T14526] bridge0: port 3(vlan2) entered disabled state [ 505.171437][T14526] vlan2: entered allmulticast mode [ 505.173728][T14526] bridge0: entered allmulticast mode [ 505.177741][T14526] vlan2: left allmulticast mode [ 505.179674][T14526] bridge0: left allmulticast mode [ 505.354960][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2502'. [ 505.393310][ T6105] usb usb40-port1: unable to enumerate USB device [ 505.817680][ T40] audit: type=1800 audit(1760602171.806:6350): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2505" name="bus" dev="overlay" ino=80 res=0 errno=0 [ 506.493502][T14560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2510'. [ 506.530213][ T8845] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 506.800618][ T8845] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.851542][ T8845] usb 6-1: config 0 has no interface number 0 [ 506.853889][ T8845] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 506.857450][ T8845] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 506.860922][ T8845] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.864094][ T8845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.867938][ T8845] usb 6-1: config 0 descriptor?? [ 506.870192][T14558] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.874379][ T8845] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 506.881620][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 508.069517][ T40] audit: type=1800 audit(1760602174.056:6351): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2517" name="bus" dev="overlay" ino=110 res=0 errno=0 [ 508.170091][ T6105] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 508.173749][ T6105] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.314026][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2519'. [ 508.317932][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2519'. [ 508.703353][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'. [ 509.375950][ T8845] usb 6-1: USB disconnect, device number 27 [ 509.533016][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2525'. [ 509.693938][ T40] audit: type=1800 audit(1760602175.686:6352): pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2527" name="bus" dev="overlay" ino=139 res=0 errno=0 [ 509.934172][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2530'. [ 509.937142][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2530'. [ 510.316945][T14644] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 510.513081][T14650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2533'. [ 510.606088][T14652] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2534'. [ 511.849774][ T40] audit: type=1800 audit(1760602177.836:6353): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2537" name="bus" dev="overlay" ino=282 res=0 errno=0 [ 511.924589][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2536'. [ 511.981471][T14663] comedi comedi3: adq12b: I/O port conflict (0x4f27,16) [ 513.560006][ T40] audit: type=1800 audit(1760602179.526:6354): pid=14693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2547" name="bus" dev="overlay" ino=302 res=0 errno=0 [ 513.590920][T14700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 513.778519][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2552'. [ 513.845208][T14712] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 514.552274][ T5951] Bluetooth: Unexpected continuation frame (len 20) [ 514.588095][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 514.590315][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 514.640236][T14727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 514.923597][T14736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2560'. [ 514.952920][T14736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2560'. [ 515.712626][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 516.550592][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 516.705968][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 517.210061][T14773] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2569'. [ 518.302884][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2574'. [ 519.022359][T14796] FAULT_INJECTION: forcing a failure. [ 519.022359][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 519.027444][T14796] CPU: 0 UID: 0 PID: 14796 Comm: syz.0.2579 Not tainted syzkaller #0 PREEMPT(full) [ 519.027460][T14796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.027467][T14796] Call Trace: [ 519.027471][T14796] [ 519.027476][T14796] dump_stack_lvl+0x16c/0x1f0 [ 519.027497][T14796] should_fail_ex+0x512/0x640 [ 519.027514][T14796] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 519.027530][T14796] should_failslab+0xc2/0x120 [ 519.027541][T14796] kmem_cache_alloc_node_noprof+0x78/0x770 [ 519.027554][T14796] ? __alloc_skb+0x2b2/0x380 [ 519.027619][T14796] ? __alloc_skb+0x2b2/0x380 [ 519.027632][T14796] __alloc_skb+0x2b2/0x380 [ 519.027647][T14796] ? __pfx___alloc_skb+0x10/0x10 [ 519.027662][T14796] ? __pfx_ieee802154_nl_get_dev.isra.0+0x10/0x10 [ 519.027684][T14796] ieee802154_llsec_getparams+0x13d/0x5e0 [ 519.027700][T14796] ? __pfx_ieee802154_llsec_getparams+0x10/0x10 [ 519.027716][T14796] ? rcu_is_watching+0x12/0xc0 [ 519.027736][T14796] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 519.027749][T14796] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 519.027764][T14796] genl_family_rcv_msg_doit+0x209/0x2f0 [ 519.027776][T14796] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 519.027787][T14796] ? rcu_is_watching+0x12/0xc0 [ 519.027806][T14796] ? bpf_lsm_capable+0x9/0x10 [ 519.027816][T14796] ? security_capable+0x7e/0x260 [ 519.027829][T14796] genl_rcv_msg+0x55c/0x800 [ 519.027842][T14796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.027854][T14796] ? __pfx_ieee802154_llsec_getparams+0x10/0x10 [ 519.027871][T14796] ? __lock_acquire+0x622/0x1c90 [ 519.027884][T14796] netlink_rcv_skb+0x158/0x420 [ 519.027893][T14796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.027905][T14796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.027921][T14796] ? netlink_deliver_tap+0x1ae/0xd30 [ 519.027939][T14796] genl_rcv+0x28/0x40 [ 519.027948][T14796] netlink_unicast+0x5aa/0x870 [ 519.027966][T14796] ? __pfx_netlink_unicast+0x10/0x10 [ 519.027983][T14796] ? __pfx___might_resched+0x10/0x10 [ 519.028002][T14796] netlink_sendmsg+0x8c8/0xdd0 [ 519.028021][T14796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.028039][T14796] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 519.028053][T14796] ____sys_sendmsg+0xa98/0xc70 [ 519.028066][T14796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.028078][T14796] ? get_compat_msghdr+0x11a/0x170 [ 519.028100][T14796] ___sys_sendmsg+0x134/0x1d0 [ 519.028116][T14796] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.028139][T14796] ? find_held_lock+0x2b/0x80 [ 519.028162][T14796] __sys_sendmsg+0x16d/0x220 [ 519.028178][T14796] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.028200][T14796] ? rcu_is_watching+0x12/0xc0 [ 519.028216][T14796] __do_fast_syscall_32+0x7c/0x300 [ 519.028234][T14796] do_fast_syscall_32+0x32/0x80 [ 519.028250][T14796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.028263][T14796] RIP: 0023:0xf706d579 [ 519.028272][T14796] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 519.028282][T14796] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 519.028293][T14796] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 519.028299][T14796] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.028305][T14796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.028311][T14796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 519.028317][T14796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.028330][T14796] [ 519.037363][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2577'. [ 519.221688][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2580'. [ 519.261731][T14800] tmpfs: Unknown parameter 'g' [ 519.368203][T14810] tmpfs: Bad value for 'mpol' [ 520.502712][ T61] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 520.658268][ T61] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 520.663429][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.668365][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.672722][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 520.687451][ T61] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 520.691983][ T61] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 520.696052][ T61] usb 8-1: Manufacturer: syz [ 520.718991][ T61] usb 8-1: config 0 descriptor?? [ 521.171247][ T61] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 521.189768][ T61] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 521.244451][T14834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2589'. [ 521.276963][T14838] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 521.568708][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2593'. [ 521.624417][T14844] tmpfs: Unknown parameter 'g' [ 521.791114][T14844] team_slave_0: left promiscuous mode [ 521.801749][T14844] team0 (unregistering): Port device team_slave_0 removed [ 521.804974][T14844] team_slave_1: left promiscuous mode [ 521.818044][T14844] team0 (unregistering): Port device team_slave_1 removed [ 521.821150][T14844] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 521.835000][T14844] team0 (unregistering): Port device netdevsim0 removed [ 521.866608][T14849] 9p: Unknown uid 00000000004294967295 [ 522.593990][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 523.285497][ T61] usb 8-1: USB disconnect, device number 17 [ 523.723142][T14884] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2604'. [ 524.395273][T14891] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2606'. [ 524.549926][ T40] audit: type=1326 audit(1760602190.536:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14892 comm="syz.3.2607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 524.557314][ T40] audit: type=1326 audit(1760602190.536:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14892 comm="syz.3.2607" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 524.565246][ T40] audit: type=1326 audit(1760602190.536:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14892 comm="syz.3.2607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 524.585091][ T40] audit: type=1326 audit(1760602190.536:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14892 comm="syz.3.2607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 526.062742][T13937] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 526.304818][T13937] usb 8-1: config 0 has an invalid interface number: 126 but max is 0 [ 526.307367][T13937] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.310475][T13937] usb 8-1: config 0 has no interface number 0 [ 527.146234][T13937] usb 8-1: config 0 interface 126 has no altsetting 0 [ 527.151470][T13937] usb 8-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 527.154363][T13937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.156874][T13937] usb 8-1: Product: syz [ 527.158221][T13937] usb 8-1: Manufacturer: syz [ 527.159704][T13937] usb 8-1: SerialNumber: syz [ 527.162948][T13937] usb 8-1: config 0 descriptor?? [ 527.165833][T13937] zaurus 8-1:0.126: More than one union descriptor, skipping ... [ 527.168310][T13937] zaurus 8-1:0.126: skipping garbage [ 527.169977][T13937] usb 8-1: bad CDC descriptors [ 528.109327][T14933] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 528.277261][ T40] audit: type=1326 audit(1760602194.266:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 528.285089][ T40] audit: type=1326 audit(1760602194.266:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 528.292961][ T40] audit: type=1326 audit(1760602194.266:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 528.299766][ T40] audit: type=1326 audit(1760602194.266:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 528.473637][T14947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'. [ 528.487436][T14947] tmpfs: Unknown parameter 'g' [ 528.713031][ T34] usb 8-1: USB disconnect, device number 18 [ 528.836509][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2624'. [ 528.839333][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2624'. [ 530.429634][T14976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2628'. [ 530.433167][T14976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2628'. [ 531.129377][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2631'. [ 531.142092][T14980] tmpfs: Unknown parameter 'g' [ 531.441743][ T40] audit: type=1326 audit(1760602197.426:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14986 comm="syz.1.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 531.448525][ T40] audit: type=1326 audit(1760602197.426:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14986 comm="syz.1.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 531.455547][ T40] audit: type=1326 audit(1760602197.426:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14986 comm="syz.1.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 531.462206][ T40] audit: type=1326 audit(1760602197.426:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14986 comm="syz.1.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 531.468799][ T40] audit: type=1326 audit(1760602197.426:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14986 comm="syz.1.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 531.519719][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'. [ 532.173777][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2635'. [ 532.934072][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2639'. [ 533.573026][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2640'. [ 533.803155][ T40] audit: type=1800 audit(1760602199.776:6368): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2641" name="bus" dev="overlay" ino=2435 res=0 errno=0 [ 535.375253][T15050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 535.377419][T15050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 535.380249][T15050] vhci_hcd vhci_hcd.0: Device attached [ 535.643311][ T6003] usb 44-1: SetAddress Request (6) to port 0 [ 535.646124][ T6003] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 535.704912][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 535.953381][T15051] vhci_hcd: connection reset by peer [ 535.960837][ T46] vhci_hcd: stop threads [ 535.962304][ T46] vhci_hcd: release socket [ 535.964206][ T46] vhci_hcd: disconnect device [ 537.406707][T15094] FAULT_INJECTION: forcing a failure. [ 537.406707][T15094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.412094][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.0.2659 Not tainted syzkaller #0 PREEMPT(full) [ 537.412117][T15094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.412127][T15094] Call Trace: [ 537.412134][T15094] [ 537.412141][T15094] dump_stack_lvl+0x16c/0x1f0 [ 537.412170][T15094] should_fail_ex+0x512/0x640 [ 537.412202][T15094] _copy_to_user+0x32/0xd0 [ 537.412223][T15094] simple_read_from_buffer+0xcb/0x170 [ 537.412247][T15094] proc_fail_nth_read+0x197/0x240 [ 537.412274][T15094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 537.412299][T15094] ? rw_verify_area+0xcf/0x6c0 [ 537.412321][T15094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 537.412346][T15094] vfs_read+0x1e4/0xcf0 [ 537.412376][T15094] ? __pfx_vfs_read+0x10/0x10 [ 537.412398][T15094] ? find_held_lock+0x2b/0x80 [ 537.412431][T15094] ? __fget_files+0x20e/0x3c0 [ 537.412462][T15094] ksys_read+0x12a/0x250 [ 537.412485][T15094] ? __pfx_ksys_read+0x10/0x10 [ 537.412510][T15094] ? __secure_computing+0x21c/0x320 [ 537.412534][T15094] __do_fast_syscall_32+0x7c/0x300 [ 537.412570][T15094] do_fast_syscall_32+0x32/0x80 [ 537.412597][T15094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.412619][T15094] RIP: 0023:0xf706d579 [ 537.412646][T15094] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.412662][T15094] RSP: 002b:00000000f545d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 537.412678][T15094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f545d620 [ 537.412688][T15094] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 537.412698][T15094] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 537.412707][T15094] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 537.412717][T15094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.412741][T15094] [ 537.959042][ T40] audit: type=1800 audit(1760602203.946:6369): pid=15103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2661" name="bus" dev="overlay" ino=435 res=0 errno=0 [ 537.972943][ T34] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 538.172781][ T34] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.175424][ T34] usb 7-1: config 0 has no interface number 0 [ 538.177401][ T34] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 538.180879][ T34] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 538.220816][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 538.224724][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.229989][ T34] usb 7-1: config 0 descriptor?? [ 538.295702][T15087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.299835][ T34] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 538.522236][T15115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 538.524962][T15115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 538.528152][T15115] vhci_hcd vhci_hcd.0: Device attached [ 538.864082][ T6105] usb 38-1: SetAddress Request (18) to port 0 [ 538.866511][ T6105] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 539.366327][T15116] vhci_hcd: connection reset by peer [ 539.370235][ T8050] vhci_hcd: stop threads [ 539.372328][ T8050] vhci_hcd: release socket [ 539.375733][ T8050] vhci_hcd: disconnect device [ 539.394648][T15123] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 539.396744][T15123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 539.399669][T15123] vhci_hcd vhci_hcd.0: Device attached [ 539.917801][ T34] usb 7-1: USB disconnect, device number 23 [ 540.197159][T15124] vhci_hcd: connection closed [ 540.197623][ T1144] vhci_hcd: stop threads [ 540.201527][ T1144] vhci_hcd: release socket [ 540.203637][ T1144] vhci_hcd: disconnect device [ 540.729277][ T40] audit: type=1800 audit(1760602206.716:6370): pid=15143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2672" name="bus" dev="overlay" ino=479 res=0 errno=0 [ 540.743045][ T6003] usb 44-1: device descriptor read/8, error -110 [ 541.239889][ T6003] usb usb44-port1: attempt power cycle [ 541.805082][ T6003] usb usb44-port1: unable to enumerate USB device [ 542.027604][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2676'. [ 542.192735][T13937] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 542.226204][ T40] audit: type=1800 audit(1760602208.216:6371): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2681" name="bus" dev="overlay" ino=2495 res=0 errno=0 [ 542.394051][T13937] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 542.396654][T13937] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 542.399170][T13937] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 542.465644][T13937] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 542.470324][T13937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 542.474518][T13937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 542.478494][T13937] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 542.494000][T13937] usb 7-1: string descriptor 0 read error: -22 [ 542.496068][T13937] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 542.498861][T13937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.505318][T13937] usb 7-1: config 0 descriptor?? [ 542.517572][T13937] hub 7-1:0.0: bad descriptor, ignoring hub [ 542.520128][T13937] hub 7-1:0.0: probe with driver hub failed with error -5 [ 542.530347][T13937] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 542.759728][ T843] usb 7-1: USB disconnect, device number 24 [ 543.287079][T15193] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2685'. [ 543.942896][ T6105] usb 38-1: device descriptor read/8, error -110 [ 543.989453][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2688'. [ 543.992392][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2688'. [ 544.233077][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 544.236042][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 544.352691][ T6105] usb usb38-port1: attempt power cycle [ 544.657014][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2693'. [ 544.663881][T15218] tmpfs: Unknown parameter 'g' [ 544.923237][ T6105] usb usb38-port1: unable to enumerate USB device [ 545.333635][ T40] audit: type=1800 audit(1760602211.326:6372): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2697" name="bus" dev="overlay" ino=490 res=0 errno=0 [ 545.427659][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2698'. [ 545.581747][ T40] audit: type=1326 audit(1760602211.566:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 545.592749][ T40] audit: type=1326 audit(1760602211.566:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 545.599654][ T40] audit: type=1326 audit(1760602211.566:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 545.606419][ T40] audit: type=1326 audit(1760602211.566:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 546.686949][ T40] audit: type=1800 audit(1760602212.676:6377): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2706" name="bus" dev="overlay" ino=2519 res=0 errno=0 [ 546.981701][T15272] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 546.984087][T15272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 547.031476][T15277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 547.033427][T15277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 547.036265][T15277] vhci_hcd vhci_hcd.0: Device attached [ 547.308062][T15272] vhci_hcd vhci_hcd.0: Device attached [ 547.942770][ T6105] usb 42-1: SetAddress Request (10) to port 0 [ 547.944597][ T6105] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 547.946821][ T6003] usb 44-1: SetAddress Request (10) to port 0 [ 547.948593][ T6003] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 548.369925][T15273] vhci_hcd: connection reset by peer [ 548.371912][ T46] vhci_hcd: stop threads [ 548.373732][ T46] vhci_hcd: release socket [ 548.375312][ T46] vhci_hcd: disconnect device [ 548.424804][T15278] vhci_hcd: connection reset by peer [ 548.429978][ T103] vhci_hcd: stop threads [ 548.431789][ T103] vhci_hcd: release socket [ 548.433392][ T103] vhci_hcd: disconnect device [ 548.478264][T15298] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2711'. [ 548.936680][ T40] audit: type=1326 audit(1760602214.926:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 548.943881][ T40] audit: type=1326 audit(1760602214.926:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 548.950982][ T40] audit: type=1326 audit(1760602214.926:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2712" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 548.957841][ T40] audit: type=1326 audit(1760602214.926:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 550.416587][T15326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2719'. [ 551.899364][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 551.899380][ T40] audit: type=1326 audit(1760602217.886:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15345 comm="syz.2.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 551.911637][ T40] audit: type=1326 audit(1760602217.886:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15345 comm="syz.2.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 551.926518][ T40] audit: type=1326 audit(1760602217.886:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15345 comm="syz.2.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 551.933758][ T40] audit: type=1326 audit(1760602217.886:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15345 comm="syz.2.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 552.110539][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2728'. [ 552.357454][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2729'. [ 552.972771][ T6105] usb 42-1: device descriptor read/8, error -110 [ 553.052780][ T6003] usb 44-1: device descriptor read/8, error -110 [ 553.743200][ T6003] usb usb44-port1: attempt power cycle [ 553.762331][ T6105] usb usb42-port1: attempt power cycle [ 553.801283][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2733'. [ 553.807794][T15376] tmpfs: Unknown parameter 'g' [ 554.264368][T15376] team0 (unregistering): Port device team_slave_0 removed [ 554.268883][T15376] team0 (unregistering): Port device team_slave_1 removed [ 554.423684][ T6003] usb usb44-port1: unable to enumerate USB device [ 554.425850][ T6105] usb usb42-port1: unable to enumerate USB device [ 554.448895][T15395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2737'. [ 554.821697][T15403] tipc: Enabled bearer , priority 0 [ 554.825440][T15403] syzkaller0: entered promiscuous mode [ 554.827798][T15403] syzkaller0: entered allmulticast mode [ 554.846574][T15403] tipc: Resetting bearer [ 554.851821][T15402] tipc: Resetting bearer [ 554.862230][T15402] tipc: Disabling bearer [ 556.402841][ T843] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 556.576173][ T843] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 556.599697][ T843] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 556.602220][ T843] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 556.605210][ T843] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 556.609008][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 556.613508][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 556.616578][ T843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 556.625139][ T843] usb 8-1: string descriptor 0 read error: -22 [ 556.628033][ T843] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 556.631129][ T843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.643180][ T843] usb 8-1: config 0 descriptor?? [ 556.646596][ T843] hub 8-1:0.0: bad descriptor, ignoring hub [ 556.648928][ T843] hub 8-1:0.0: probe with driver hub failed with error -5 [ 556.653249][ T843] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 556.655849][T15430] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2747'. [ 556.832404][ T40] audit: type=1800 audit(1760602222.816:6387): pid=15434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2749" name="bus" dev="overlay" ino=2592 res=0 errno=0 [ 556.868159][ T843] usb 8-1: USB disconnect, device number 19 [ 556.902798][ T8845] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 557.074480][ T8845] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 557.078351][ T8845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.081768][ T8845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.085556][ T8845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 557.091417][ T8845] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 557.095640][ T8845] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 557.098250][ T8845] usb 7-1: Manufacturer: syz [ 557.100902][ T8845] usb 7-1: config 0 descriptor?? [ 557.423949][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2754'. [ 557.518196][ T8845] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 557.521930][ T8845] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 558.077216][T15460] 9p: Unknown uid 00000000004294967295 [ 559.686912][ T8845] usb 7-1: USB disconnect, device number 25 [ 559.895919][T15483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2763'. [ 561.723930][T15507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 561.726268][T15507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 561.729662][T15507] vhci_hcd vhci_hcd.0: Device attached [ 561.785490][T15510] vhci_hcd: connection closed [ 561.785708][ T46] vhci_hcd: stop threads [ 561.791040][ T46] vhci_hcd: release socket [ 561.793370][ T46] vhci_hcd: disconnect device [ 562.011535][ T40] audit: type=1800 audit(1760602227.996:6388): pid=15515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2771" name="bus" dev="overlay" ino=614 res=0 errno=0 [ 562.067995][T15518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2772'. [ 562.078538][T15518] tmpfs: Unknown parameter 'g' [ 562.311997][ T40] audit: type=1800 audit(1760602228.296:6389): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2773" name="bus" dev="overlay" ino=634 res=0 errno=0 [ 562.336149][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.338962][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.530994][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2780'. [ 563.554117][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2780'. [ 563.992972][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 564.216012][T15554] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2782'. [ 566.143160][T15592] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 566.145393][T15592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 566.148103][T15592] vhci_hcd vhci_hcd.0: Device attached [ 566.642824][ T6003] usb 42-1: SetAddress Request (14) to port 0 [ 566.645134][ T6003] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 567.726795][T15593] vhci_hcd: connection reset by peer [ 567.728894][ T103] vhci_hcd: stop threads [ 567.730308][ T103] vhci_hcd: release socket [ 567.731823][ T103] vhci_hcd: disconnect device [ 567.922811][ T6002] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 568.079103][ T6002] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 568.082197][ T6002] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 568.084868][ T6002] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 568.087702][ T6002] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 568.095972][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 568.099084][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 568.102166][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 568.110293][ T6002] usb 6-1: string descriptor 0 read error: -22 [ 568.112800][ T6002] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 568.115550][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.119653][ T6002] usb 6-1: config 0 descriptor?? [ 568.122151][ T6002] hub 6-1:0.0: bad descriptor, ignoring hub [ 568.124242][ T6002] hub 6-1:0.0: probe with driver hub failed with error -5 [ 568.131291][ T6002] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 568.339450][ T29] usb 6-1: USB disconnect, device number 28 [ 569.512061][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2801'. [ 569.674439][T15645] tmpfs: Unknown parameter 'g' [ 571.057977][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2808'. [ 571.072236][T15664] tmpfs: Unknown parameter 'g' [ 571.287387][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2810'. [ 571.290286][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2810'. [ 571.702781][ T6003] usb 42-1: device descriptor read/8, error -110 [ 572.105879][ T6003] usb usb42-port1: attempt power cycle [ 572.243480][T15682] random: crng reseeded on system resumption [ 572.286236][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.288717][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.291038][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.293929][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.296266][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.299104][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.301539][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.304281][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.306664][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.311633][ T6002] hid-generic 0003:0003:0000.0015: unknown main item tag 0x0 [ 572.321951][ T6002] hid-generic 0003:0003:0000.0015: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 572.684983][ T6003] usb usb42-port1: unable to enumerate USB device [ 573.562283][ T53] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 574.534800][ T53] usb 6-1: device descriptor read/64, error -71 [ 574.693192][T15706] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 574.696019][T15706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 574.699608][T15706] vhci_hcd vhci_hcd.0: Device attached [ 574.792121][ T40] audit: type=1326 audit(1760602240.776:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.2.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 574.801986][ T40] audit: type=1326 audit(1760602240.776:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.2.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 574.808803][ T40] audit: type=1326 audit(1760602240.776:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.2.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 574.815831][ T40] audit: type=1326 audit(1760602240.776:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.2.2819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 574.824418][ T53] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 574.966570][ T53] usb 6-1: device descriptor read/64, error -71 [ 575.064952][ T6105] usb 38-1: SetAddress Request (22) to port 0 [ 575.092371][ T6105] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 575.196988][T15707] vhci_hcd: connection closed [ 575.197207][T15708] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 575.205498][ T53] usb usb6-port1: attempt power cycle [ 575.208181][ T103] vhci_hcd: stop threads [ 575.210957][ T103] vhci_hcd: release socket [ 575.213080][ T103] vhci_hcd: disconnect device [ 575.543672][ T53] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 575.563418][ T53] usb 6-1: device descriptor read/8, error -71 [ 576.042005][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 576.044869][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 576.064580][T15725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 576.067506][T15725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 576.360332][T15731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 576.362471][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 576.365349][T15731] vhci_hcd vhci_hcd.0: Device attached [ 576.642761][ T6003] usb 40-1: SetAddress Request (23) to port 0 [ 576.644768][ T6003] usb 40-1: new SuperSpeed USB device number 23 using vhci_hcd [ 578.039341][T15732] vhci_hcd: connection reset by peer [ 578.046187][ T8037] vhci_hcd: stop threads [ 578.050799][ T8037] vhci_hcd: release socket [ 578.053571][ T8037] vhci_hcd: disconnect device [ 578.198468][T15762] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 578.200570][T15762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 578.203656][T15762] vhci_hcd vhci_hcd.0: Device attached [ 578.512768][ T29] usb 42-1: SetAddress Request (18) to port 0 [ 578.515420][ T29] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 579.095140][T15763] vhci_hcd: connection reset by peer [ 579.097429][ T8049] vhci_hcd: stop threads [ 579.099511][T15783] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 579.102278][T15783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 579.106535][T15783] vhci_hcd vhci_hcd.0: Device attached [ 579.112819][ T8049] vhci_hcd: release socket [ 579.114787][ T8049] vhci_hcd: disconnect device [ 580.478011][ C2] hpet: Lost 1 RTC interrupts [ 580.777326][T15784] vhci_hcd: connection reset by peer [ 580.782099][ T103] vhci_hcd: stop threads [ 580.784058][ T103] vhci_hcd: release socket [ 580.788149][ T103] vhci_hcd: disconnect device [ 580.788240][ T6105] usb 38-1: device descriptor read/8, error -110 [ 581.246604][ T6105] usb usb38-port1: attempt power cycle [ 581.805226][ T6003] usb 40-1: device descriptor read/8, error -110 [ 581.883798][ T6105] usb usb38-port1: unable to enumerate USB device [ 582.312209][ T6003] usb usb40-port1: attempt power cycle [ 583.200564][ T40] audit: type=1326 audit(1760602249.186:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15856 comm="syz.0.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 583.207852][ T40] audit: type=1326 audit(1760602249.196:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15856 comm="syz.0.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 583.214934][ T40] audit: type=1326 audit(1760602249.206:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15856 comm="syz.0.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 583.215236][ T6003] usb usb40-port1: unable to enumerate USB device [ 583.222127][ T40] audit: type=1326 audit(1760602249.206:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15856 comm="syz.0.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 583.233101][ T40] audit: type=1326 audit(1760602249.206:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15856 comm="syz.0.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 583.349114][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 583.353221][T15866] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2852'. [ 583.592760][ T8845] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 583.612893][ T29] usb 42-1: device descriptor read/8, error -110 [ 583.744016][ T8845] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 583.746729][ T8845] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 583.749319][ T8845] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 583.752188][ T8845] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 583.755619][ T8845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 583.758711][ T8845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 583.761756][ T8845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 583.768305][ T8845] usb 8-1: string descriptor 0 read error: -22 [ 583.770391][ T8845] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 583.773595][ T8845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.777453][ T8845] usb 8-1: config 0 descriptor?? [ 583.780230][ T8845] hub 8-1:0.0: bad descriptor, ignoring hub [ 583.782176][ T8845] hub 8-1:0.0: probe with driver hub failed with error -5 [ 583.786181][ T8845] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input16 [ 584.028517][ T53] usb 8-1: USB disconnect, device number 20 [ 584.030165][ T29] usb usb42-port1: attempt power cycle [ 584.199943][T15877] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 584.201979][T15877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 584.204976][T15877] vhci_hcd vhci_hcd.0: Device attached [ 584.308809][ T40] audit: type=1326 audit(1760602250.296:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15875 comm="syz.2.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 584.318748][ T40] audit: type=1326 audit(1760602250.296:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15875 comm="syz.2.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 584.328954][ T40] audit: type=1326 audit(1760602250.296:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15875 comm="syz.2.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 584.338458][ T40] audit: type=1326 audit(1760602250.296:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15875 comm="syz.2.2857" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 584.502980][ T6003] usb 40-1: SetAddress Request (27) to port 0 [ 584.505339][ T6003] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 584.604074][ T29] usb usb42-port1: unable to enumerate USB device [ 584.845930][T15878] vhci_hcd: connection reset by peer [ 584.851274][ T8037] vhci_hcd: stop threads [ 584.853272][ T8037] vhci_hcd: release socket [ 584.855644][ T8037] vhci_hcd: disconnect device [ 586.593056][T15915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 586.595221][T15915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 586.613482][T15915] vhci_hcd vhci_hcd.0: Device attached [ 587.012793][ T6105] usb 42-1: SetAddress Request (22) to port 0 [ 587.015887][ T6105] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 587.246242][T15917] vhci_hcd: connection reset by peer [ 587.250291][ T46] vhci_hcd: stop threads [ 587.254090][ T46] vhci_hcd: release socket [ 587.257116][ T46] vhci_hcd: disconnect device [ 587.556893][T15929] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2868'. [ 587.832751][ T53] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 587.996846][ T53] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 588.007216][ T53] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 588.010571][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 588.018645][ T53] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 588.023179][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 588.027475][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.031505][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 588.041354][ T53] usb 8-1: string descriptor 0 read error: -22 [ 588.044136][ T53] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 588.048020][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.053661][ T53] usb 8-1: config 0 descriptor?? [ 588.057341][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 588.059954][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 588.065156][ T53] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input17 [ 588.305015][ T8845] usb 8-1: USB disconnect, device number 21 [ 589.720085][ T6003] usb 40-1: device descriptor read/8, error -110 [ 589.847449][T15951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 589.849593][T15951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.852250][T15951] vhci_hcd vhci_hcd.0: Device attached [ 590.114339][ T6003] usb usb40-port1: attempt power cycle [ 590.150537][T15964] vhci_hcd: connection closed [ 590.151074][ T8037] vhci_hcd: stop threads [ 590.154894][ T8037] vhci_hcd: release socket [ 590.156801][ T8037] vhci_hcd: disconnect device [ 590.172762][ T29] usb 38-1: enqueue for inactive port 0 [ 590.559492][T15973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 590.561618][T15973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 590.564350][T15973] vhci_hcd vhci_hcd.0: Device attached [ 590.696945][ T29] usb usb38-port1: attempt power cycle [ 590.699497][ T6003] usb usb40-port1: unable to enumerate USB device [ 590.862794][ T6003] usb 44-1: SetAddress Request (14) to port 0 [ 590.869696][ T6003] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 591.375474][ T29] usb usb38-port1: unable to enumerate USB device [ 591.399712][T15979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 591.401753][T15979] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 591.432372][T15979] vhci_hcd vhci_hcd.0: Device attached [ 591.691984][T15974] vhci_hcd: connection reset by peer [ 591.695793][ T46] vhci_hcd: stop threads [ 591.697231][ T46] vhci_hcd: release socket [ 591.698901][ T46] vhci_hcd: disconnect device [ 591.722921][ T60] usb 38-1: SetAddress Request (30) to port 0 [ 591.724799][ T60] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 591.737637][ T40] audit: type=1800 audit(1760602257.726:6403): pid=15987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2883" name="bus" dev="overlay" ino=778 res=0 errno=0 [ 591.759237][T15981] vhci_hcd: connection reset by peer [ 591.761048][ T46] vhci_hcd: stop threads [ 591.765316][ T46] vhci_hcd: release socket [ 591.766845][ T46] vhci_hcd: disconnect device [ 591.864428][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2884'. [ 591.867681][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2884'. [ 592.129510][ T6105] usb 42-1: device descriptor read/8, error -110 [ 592.656672][ T6105] usb usb42-port1: attempt power cycle [ 593.214238][ T6105] usb usb42-port1: unable to enumerate USB device [ 593.663355][T16020] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 593.902749][ T6026] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 594.032804][ T6026] usb 8-1: device descriptor read/64, error -71 [ 594.292790][ T6026] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 594.432744][ T6026] usb 8-1: device descriptor read/64, error -71 [ 594.543785][ T6026] usb usb8-port1: attempt power cycle [ 594.882821][ T6026] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 594.913396][ T6026] usb 8-1: device descriptor read/8, error -71 [ 594.953300][T16029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2895'. [ 595.132826][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 595.152901][ T6026] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 595.173737][ T6026] usb 8-1: device descriptor read/8, error -71 [ 595.293176][ T6026] usb usb8-port1: unable to enumerate USB device [ 596.173044][ T6003] usb 44-1: device descriptor read/8, error -110 [ 596.583672][ T6003] usb usb44-port1: attempt power cycle [ 596.812802][ T60] usb 38-1: device descriptor read/8, error -110 [ 596.912802][ T6026] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 596.942795][ T6105] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 597.064023][ T6026] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 597.066813][ T6026] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 597.069399][ T6026] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 597.072220][ T6026] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 597.075661][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 597.078761][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 597.081820][ T6026] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 597.088402][ T6026] usb 8-1: string descriptor 0 read error: -22 [ 597.090432][ T6026] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 597.093304][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.097098][ T6026] usb 8-1: config 0 descriptor?? [ 597.099697][ T6026] hub 8-1:0.0: bad descriptor, ignoring hub [ 597.101540][ T6026] hub 8-1:0.0: probe with driver hub failed with error -5 [ 597.104210][ T6105] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 597.105427][ T6026] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 597.106976][ T6105] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 597.152726][ T6105] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 597.156372][ T6105] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 597.160711][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 597.166956][ T6003] usb usb44-port1: unable to enumerate USB device [ 597.183134][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 597.187036][ T6105] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 597.194794][ T6105] usb 6-1: string descriptor 0 read error: -22 [ 597.196856][ T6105] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 597.199686][ T6105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.210610][ T6105] usb 6-1: config 0 descriptor?? [ 597.213691][ T6105] hub 6-1:0.0: bad descriptor, ignoring hub [ 597.215716][ T6105] hub 6-1:0.0: probe with driver hub failed with error -5 [ 597.220397][ T6105] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 597.225709][ T60] usb usb38-port1: attempt power cycle [ 597.305808][ T6026] usb 8-1: USB disconnect, device number 26 [ 597.421420][ T845] usb 6-1: USB disconnect, device number 33 [ 597.794093][ T60] usb usb38-port1: unable to enumerate USB device [ 598.008063][ T40] audit: type=1800 audit(1760602263.996:6404): pid=16071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2908" name="bus" dev="overlay" ino=2823 res=0 errno=0 [ 599.142999][T16089] tmpfs: Unknown parameter 'g' [ 599.366083][T16096] FAULT_INJECTION: forcing a failure. [ 599.366083][T16096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.380763][T16096] CPU: 3 UID: 0 PID: 16096 Comm: syz.0.2915 Not tainted syzkaller #0 PREEMPT(full) [ 599.380787][T16096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 599.380797][T16096] Call Trace: [ 599.380803][T16096] [ 599.380810][T16096] dump_stack_lvl+0x16c/0x1f0 [ 599.380840][T16096] should_fail_ex+0x512/0x640 [ 599.380867][T16096] _copy_from_iter+0x29f/0x1720 [ 599.380898][T16096] ? __pfx__copy_from_iter+0x10/0x10 [ 599.380926][T16096] ? rcu_is_watching+0x12/0xc0 [ 599.380949][T16096] ? rcu_is_watching+0x12/0xc0 [ 599.380971][T16096] ? kfree+0x252/0x6d0 [ 599.380988][T16096] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 599.381014][T16096] file_tty_write.constprop.0+0x487/0x9b0 [ 599.381040][T16096] vfs_write+0x7d3/0x11d0 [ 599.381062][T16096] ? __pfx_tty_write+0x10/0x10 [ 599.381081][T16096] ? __pfx_vfs_write+0x10/0x10 [ 599.381100][T16096] ? find_held_lock+0x2b/0x80 [ 599.381137][T16096] ksys_write+0x12a/0x250 [ 599.381158][T16096] ? __pfx_ksys_write+0x10/0x10 [ 599.381181][T16096] ? rcu_is_watching+0x12/0xc0 [ 599.381205][T16096] __do_fast_syscall_32+0x7c/0x300 [ 599.381232][T16096] do_fast_syscall_32+0x32/0x80 [ 599.381255][T16096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.381275][T16096] RIP: 0023:0xf706d579 [ 599.381287][T16096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 599.381302][T16096] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 599.381317][T16096] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001300 [ 599.381327][T16096] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.381336][T16096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.381344][T16096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.381353][T16096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.381376][T16096] [ 601.633133][T16128] tmpfs: Unknown parameter 'g' [ 603.790264][T16168] binder: 16167:16168 unknown command 0 [ 603.791906][T16168] binder: 16167:16168 ioctl c0306201 80000080 returned -22 [ 604.041943][T16178] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 604.044035][T16178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 604.046808][T16178] vhci_hcd vhci_hcd.0: Device attached [ 604.595695][T16179] vhci_hcd: connection closed [ 604.596619][ T8049] vhci_hcd: stop threads [ 604.600552][ T8049] vhci_hcd: release socket [ 604.602177][ T8049] vhci_hcd: disconnect device [ 604.642742][ T60] usb 42-1: enqueue for inactive port 0 [ 605.072724][ T6105] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 605.173667][T16196] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 605.175853][T16196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 605.178820][T16196] vhci_hcd vhci_hcd.0: Device attached [ 605.224252][ T60] usb usb42-port1: attempt power cycle [ 605.251923][ T6105] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 605.541029][ T6105] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.544542][ T6105] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.547574][ T6105] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 605.572733][ T6105] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 605.575614][ T6105] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 605.578092][ T6105] usb 8-1: Manufacturer: syz [ 605.580811][ T6105] usb 8-1: config 0 descriptor?? [ 605.710324][ T40] audit: type=1326 audit(1760602271.696:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16200 comm="syz.0.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 605.712720][ T6003] usb 40-1: SetAddress Request (31) to port 0 [ 605.721046][ T6003] usb 40-1: new SuperSpeed USB device number 31 using vhci_hcd [ 605.724016][ T40] audit: type=1326 audit(1760602271.696:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16200 comm="syz.0.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 605.732959][ T40] audit: type=1326 audit(1760602271.706:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16200 comm="syz.0.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 605.741913][ T40] audit: type=1326 audit(1760602271.706:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16200 comm="syz.0.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 605.750366][ T40] audit: type=1326 audit(1760602271.716:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16200 comm="syz.0.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 605.752717][T16204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2943'. [ 605.894023][T16197] vhci_hcd: connection reset by peer [ 605.896024][ T8049] vhci_hcd: stop threads [ 605.897448][ T8049] vhci_hcd: release socket [ 605.899197][ T8049] vhci_hcd: disconnect device [ 605.995489][ T6105] hid_parser_main: 8 callbacks suppressed [ 605.995501][ T6105] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 606.001713][ T6105] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 606.023284][ T60] usb usb42-port1: unable to enumerate USB device [ 606.555464][T16219] 9p: Unknown uid 00000000004294967295 [ 606.782750][ T61] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 606.944080][ T61] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 606.946669][ T61] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 606.949237][ T61] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 606.951964][ T61] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 606.955463][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 606.958495][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 606.961464][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 606.967700][ T61] usb 6-1: string descriptor 0 read error: -22 [ 606.969703][ T61] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 606.972541][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.976288][ T61] usb 6-1: config 0 descriptor?? [ 606.978886][ T61] hub 6-1:0.0: bad descriptor, ignoring hub [ 606.980755][ T61] hub 6-1:0.0: probe with driver hub failed with error -5 [ 606.984429][ T61] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20 [ 607.092835][ T843] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 607.187854][ T61] usb 6-1: USB disconnect, device number 34 [ 607.244319][ T843] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 607.247012][ T843] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 607.249856][ T843] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 607.253769][ T843] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 607.257334][ T843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 607.261037][ T843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 607.265162][ T843] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 607.274012][ T843] usb 7-1: string descriptor 0 read error: -22 [ 607.276856][ T843] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 607.280587][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.284750][ T843] usb 7-1: config 0 descriptor?? [ 607.287401][ T843] hub 7-1:0.0: bad descriptor, ignoring hub [ 607.289283][ T843] hub 7-1:0.0: probe with driver hub failed with error -5 [ 607.293511][ T843] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input21 [ 607.491541][ T845] usb 7-1: USB disconnect, device number 26 [ 607.716259][ T6026] usb 8-1: USB disconnect, device number 27 [ 607.832908][T16224] infiniband syz1: set active [ 607.834519][T16224] infiniband syz1: added syz_tun [ 607.850949][T16224] RDS/IB: syz1: added [ 607.852894][T16224] smc: adding ib device syz1 with port count 1 [ 607.855575][T16224] smc: ib device syz1 port 1 has no pnetid [ 608.384779][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2951'. [ 608.514239][T16239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2952'. [ 609.602971][T16254] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 609.605345][T16254] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 609.608272][T16254] vhci_hcd vhci_hcd.0: Device attached [ 609.992797][ T60] usb 44-1: SetAddress Request (18) to port 0 [ 609.995231][ T60] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 610.001847][T16268] overlayfs: failed to resolve './bus': -2 [ 610.103606][T16255] vhci_hcd: connection reset by peer [ 610.105551][ T8037] vhci_hcd: stop threads [ 610.106969][ T8037] vhci_hcd: release socket [ 610.108438][ T8037] vhci_hcd: disconnect device [ 611.128841][ T6003] usb 40-1: device descriptor read/8, error -110 [ 611.253158][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2961'. [ 611.828407][ T6003] usb usb40-port1: attempt power cycle [ 612.616967][T16314] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 612.668583][ T6003] usb usb40-port1: unable to enumerate USB device [ 612.781026][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 612.813348][T16318] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 612.816316][T16318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 612.820548][T16318] vhci_hcd vhci_hcd.0: Device attached [ 612.821497][T16317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2972'. [ 613.387446][T16325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'. [ 613.391128][T16325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'. [ 613.738445][T16319] vhci_hcd: connection closed [ 613.738603][ T8049] vhci_hcd: stop threads [ 613.744583][ T8049] vhci_hcd: release socket [ 613.747958][ T8049] vhci_hcd: disconnect device [ 614.545647][T16353] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 614.592734][T13937] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 614.660376][T16350] fuse: Unknown parameter 'ft' [ 614.753929][T13937] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 614.756538][T13937] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 614.759386][T13937] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 614.763052][T13937] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 614.767551][T13937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 614.771583][T13937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 614.775546][T13937] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 614.785717][T13937] usb 8-1: string descriptor 0 read error: -22 [ 614.788380][T13937] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 614.792135][T13937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.797470][T13937] usb 8-1: config 0 descriptor?? [ 614.801519][T13937] hub 8-1:0.0: bad descriptor, ignoring hub [ 614.804117][T13937] hub 8-1:0.0: probe with driver hub failed with error -5 [ 614.810705][T13937] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input22 [ 615.039125][T13937] usb 8-1: USB disconnect, device number 28 [ 615.054316][ T60] usb 44-1: device descriptor read/8, error -110 [ 615.144856][ T40] audit: type=1800 audit(1760602281.136:6410): pid=16360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2984" name="bus" dev="overlay" ino=957 res=0 errno=0 [ 615.182788][T16362] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 615.185099][T16362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 615.188734][T16362] vhci_hcd vhci_hcd.0: Device attached [ 615.452887][ T29] usb 40-1: SetAddress Request (35) to port 0 [ 615.455088][ T29] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd [ 615.457769][ T60] usb usb44-port1: attempt power cycle [ 615.593788][T16375] tmpfs: Unknown parameter 'g' [ 615.623149][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 616.131270][ T60] usb usb44-port1: unable to enumerate USB device [ 616.151843][T16363] vhci_hcd: connection reset by peer [ 616.154683][ T8050] vhci_hcd: stop threads [ 616.156605][ T8050] vhci_hcd: release socket [ 616.158850][ T8050] vhci_hcd: disconnect device [ 617.154617][T16395] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 617.274259][T16398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 617.276408][T16398] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 617.279107][T16398] vhci_hcd vhci_hcd.0: Device attached [ 617.562776][ T60] usb 38-1: SetAddress Request (34) to port 0 [ 617.564844][ T60] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 618.965326][T16400] vhci_hcd: connection reset by peer [ 618.969709][ T12] vhci_hcd: stop threads [ 618.980155][ T12] vhci_hcd: release socket [ 619.004828][ T12] vhci_hcd: disconnect device [ 619.590024][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2998'. [ 620.074836][T16431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 620.077537][T16431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.093946][T16431] vhci_hcd vhci_hcd.0: Device attached [ 620.169454][ T40] audit: type=1326 audit(1760602286.156:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 620.179690][ T40] audit: type=1326 audit(1760602286.156:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3003" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 620.190593][ T40] audit: type=1326 audit(1760602286.156:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 620.199585][ T40] audit: type=1326 audit(1760602286.156:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.1.3003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 620.535277][ T29] usb 40-1: device descriptor read/8, error -110 [ 620.826575][T16432] vhci_hcd: connection closed [ 620.826763][ T8049] vhci_hcd: stop threads [ 620.830772][ T8049] vhci_hcd: release socket [ 620.832891][ T8049] vhci_hcd: disconnect device [ 620.923246][ T29] usb usb40-port1: attempt power cycle [ 621.411021][ T40] audit: type=1800 audit(1760602287.396:6415): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3007" name="bus" dev="overlay" ino=1002 res=0 errno=0 [ 621.515025][ T29] usb usb40-port1: unable to enumerate USB device [ 622.662934][ T60] usb 38-1: device descriptor read/8, error -110 [ 622.962789][ T845] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 622.966248][T13937] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 623.124536][ T845] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 623.128041][ T845] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 623.131363][ T845] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 623.135465][ T845] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 623.139907][ T845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 623.146141][T13937] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 623.149508][T13937] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 623.153145][T13937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 623.173274][ T845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 623.177281][T13937] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 623.181997][ T845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 623.183004][ T60] usb usb38-port1: attempt power cycle [ 623.187421][T13937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 623.194879][T13937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 623.200118][T13937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 623.236772][T13937] usb 6-1: string descriptor 0 read error: -22 [ 623.239508][T13937] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 623.243771][T13937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.250073][T13937] usb 6-1: config 0 descriptor?? [ 623.257227][ T845] usb 7-1: string descriptor 0 read error: -22 [ 623.262180][T13937] hub 6-1:0.0: bad descriptor, ignoring hub [ 623.266929][T13937] hub 6-1:0.0: probe with driver hub failed with error -5 [ 623.272935][ T845] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 623.276628][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.298257][T13937] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 623.339075][ T845] usb 7-1: config 0 descriptor?? [ 623.344298][ T845] hub 7-1:0.0: bad descriptor, ignoring hub [ 623.348711][ T845] hub 7-1:0.0: probe with driver hub failed with error -5 [ 623.354253][ T845] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input24 [ 623.471910][ T845] usb 6-1: USB disconnect, device number 35 [ 623.557297][T13937] usb 7-1: USB disconnect, device number 27 [ 623.763206][ T60] usb usb38-port1: unable to enumerate USB device [ 623.785969][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.788047][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.790422][T16513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 625.793117][T16513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 625.798344][T16513] vhci_hcd vhci_hcd.0: Device attached [ 626.062923][ T29] usb 40-1: SetAddress Request (39) to port 0 [ 626.065651][ T29] usb 40-1: new SuperSpeed USB device number 39 using vhci_hcd [ 626.594024][T16514] vhci_hcd: connection reset by peer [ 626.602743][ T8037] vhci_hcd: stop threads [ 626.604126][ T8037] vhci_hcd: release socket [ 626.608012][ T8037] vhci_hcd: disconnect device [ 627.002751][ T8845] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 627.037688][ T40] audit: type=1800 audit(1760602293.026:6416): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3029" name="bus" dev="overlay" ino=881 res=0 errno=0 [ 627.157244][ T8845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.163604][ T8845] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.171928][ T8845] usb 7-1: config 0 has no interface number 0 [ 627.175686][ T8845] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.181575][ T8845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 627.185690][ T8845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.191250][ T8845] usb 7-1: config 0 descriptor?? [ 627.196529][ T8845] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 627.574014][ T843] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 627.754146][ T843] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 627.757281][ T843] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 627.760303][ T843] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 627.763432][ T843] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 627.767314][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 627.771083][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 627.775235][ T843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 627.784597][ T843] usb 8-1: string descriptor 0 read error: -22 [ 627.787274][ T843] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 627.791035][ T843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.796579][ T843] usb 8-1: config 0 descriptor?? [ 627.801380][ T843] hub 8-1:0.0: bad descriptor, ignoring hub [ 627.803874][ T843] hub 8-1:0.0: probe with driver hub failed with error -5 [ 627.809262][ T843] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input25 [ 628.007788][ T8845] usb 8-1: USB disconnect, device number 29 [ 628.326013][T16546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3033'. [ 628.335332][T16546] tmpfs: Unknown parameter 'g' [ 629.395355][ T843] usb 7-1: USB disconnect, device number 28 [ 629.633066][T16571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'. [ 630.011573][ T40] audit: type=1326 audit(1760602295.996:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 630.021512][ T40] audit: type=1326 audit(1760602295.996:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 630.030116][ T40] audit: type=1326 audit(1760602296.006:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 630.037015][ T40] audit: type=1326 audit(1760602296.006:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 630.043822][ T40] audit: type=1326 audit(1760602296.006:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16575 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 630.890158][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 631.219170][T16590] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 631.490469][ T29] usb 40-1: device descriptor read/8, error -110 [ 632.493766][ T29] usb usb40-port1: attempt power cycle [ 633.206744][ T29] usb usb40-port1: unable to enumerate USB device [ 633.272915][T16619] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 633.275020][T16619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.290335][T16619] vhci_hcd vhci_hcd.0: Device attached [ 633.602950][ T29] usb 42-1: SetAddress Request (30) to port 0 [ 633.605667][ T29] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 633.709288][T16625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 633.712027][T16625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.716634][T16625] vhci_hcd vhci_hcd.0: Device attached [ 633.993023][ T6105] usb 40-1: SetAddress Request (43) to port 0 [ 633.995623][ T6105] usb 40-1: new SuperSpeed USB device number 43 using vhci_hcd [ 634.714158][T16620] vhci_hcd: connection reset by peer [ 634.716793][ T103] vhci_hcd: stop threads [ 634.718715][ T103] vhci_hcd: release socket [ 634.721614][ T103] vhci_hcd: disconnect device [ 635.144468][T16626] vhci_hcd: connection reset by peer [ 635.150583][ T8037] vhci_hcd: stop threads [ 635.153712][ T8037] vhci_hcd: release socket [ 635.155997][ T8037] vhci_hcd: disconnect device [ 636.162748][T13937] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 636.901844][T13937] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 636.907706][T13937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.912135][T13937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.916094][T13937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 636.927024][T13937] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 636.930853][T13937] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 636.934772][T13937] usb 6-1: Manufacturer: syz [ 636.953685][T13937] usb 6-1: config 0 descriptor?? [ 637.407047][T13937] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 637.416212][T13937] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 637.510874][ T40] audit: type=1800 audit(1760602303.496:6422): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3066" name="bus" dev="overlay" ino=964 res=0 errno=0 [ 637.597890][T16681] rdma_rxe: rxe_newlink: failed to add syz_tun [ 637.812797][T13937] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 637.832612][T16688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3070'. [ 637.958076][T16695] 9p: Unknown uid 00000000004294967295 [ 638.142816][T13937] usb 7-1: device descriptor read/64, error -71 [ 638.392818][T13937] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 638.532751][T13937] usb 7-1: device descriptor read/64, error -71 [ 638.730607][ T29] usb 42-1: device descriptor read/8, error -110 [ 638.731112][T13937] usb usb7-port1: attempt power cycle [ 639.073125][T13937] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 639.103204][T13937] usb 7-1: device descriptor read/8, error -71 [ 639.123252][ T29] usb usb42-port1: attempt power cycle [ 639.216123][ T843] usb 6-1: USB disconnect, device number 36 [ 639.372857][ T6105] usb 40-1: device descriptor read/8, error -110 [ 639.392789][T13937] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 639.414115][T13937] usb 7-1: device descriptor read/8, error -71 [ 639.535601][T13937] usb usb7-port1: unable to enumerate USB device [ 639.703556][ T29] usb usb42-port1: unable to enumerate USB device [ 639.783990][ T6105] usb usb40-port1: attempt power cycle [ 639.848292][ T40] audit: type=1326 audit(1760602305.836:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.3.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 639.858363][ T40] audit: type=1326 audit(1760602305.846:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.3.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 639.867835][ T40] audit: type=1326 audit(1760602305.846:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.3.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 639.877077][ T40] audit: type=1326 audit(1760602305.846:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.3.3077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 640.431360][ T6105] usb usb40-port1: unable to enumerate USB device [ 640.588443][T16731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 640.590550][T16731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 640.593725][T16731] vhci_hcd vhci_hcd.0: Device attached [ 640.970620][ T6105] usb 40-1: SetAddress Request (47) to port 0 [ 640.973234][ T6105] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd [ 641.296203][T16732] vhci_hcd: connection reset by peer [ 641.298408][ T103] vhci_hcd: stop threads [ 641.299849][ T103] vhci_hcd: release socket [ 641.301389][ T103] vhci_hcd: disconnect device [ 641.626021][T16747] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 641.953690][T16751] rdma_rxe: rxe_newlink: failed to add syz_tun [ 642.007393][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3086'. [ 642.122772][ T6026] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 642.226664][ T40] audit: type=1800 audit(1760602308.216:6427): pid=16761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3089" name="bus" dev="overlay" ino=1113 res=0 errno=0 [ 642.274532][ T6026] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 642.277162][ T6026] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 642.279678][ T6026] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 642.282512][ T6026] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 642.285967][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 642.288992][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 642.292008][ T6026] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 642.298533][ T6026] usb 8-1: string descriptor 0 read error: -22 [ 642.300528][ T6026] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 642.303592][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.307216][ T6026] usb 8-1: config 0 descriptor?? [ 642.310121][ T6026] hub 8-1:0.0: bad descriptor, ignoring hub [ 642.312042][ T6026] hub 8-1:0.0: probe with driver hub failed with error -5 [ 642.315695][ T6026] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input26 [ 642.517325][ T6026] usb 8-1: USB disconnect, device number 30 [ 644.046676][T16777] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 644.049067][T16777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 644.082062][T16777] vhci_hcd vhci_hcd.0: Device attached [ 644.332294][T16785] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3094'. [ 644.439149][T16787] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3095'. [ 644.525338][T16778] vhci_hcd: connection closed [ 644.546945][ T46] vhci_hcd: stop threads [ 644.550026][ T46] vhci_hcd: release socket [ 644.551376][ T46] vhci_hcd: disconnect device [ 645.127993][T16793] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 645.196932][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3099'. [ 645.320476][ T40] audit: type=1800 audit(1760602311.306:6428): pid=16802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3101" name="bus" dev="overlay" ino=3067 res=0 errno=0 [ 645.665728][T16814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 645.668356][T16814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 645.672571][T16814] vhci_hcd vhci_hcd.0: Device attached [ 646.013633][ T6105] usb 40-1: device descriptor read/8, error -110 [ 646.052813][ T29] usb 44-1: SetAddress Request (22) to port 0 [ 646.071117][ T29] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 646.406057][T16815] vhci_hcd: connection reset by peer [ 646.406632][T16826] syz1: rxe_newlink: already configured on syz_tun [ 646.411117][ T8037] vhci_hcd: stop threads [ 646.412507][ T8037] vhci_hcd: release socket [ 646.414601][ T8037] vhci_hcd: disconnect device [ 646.493534][ T6105] usb usb40-port1: attempt power cycle [ 646.540845][T16833] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 646.592398][T16834] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3109'. [ 647.178098][ T6105] usb usb40-port1: unable to enumerate USB device [ 647.608945][ T40] audit: type=1800 audit(1760602313.596:6429): pid=16853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3115" name="bus" dev="overlay" ino=1174 res=0 errno=0 [ 647.782761][ T8845] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 647.934830][ T8845] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 647.938584][ T8845] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 647.941956][ T8845] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 647.945561][ T8845] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 647.950181][ T8845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 647.954361][ T8845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 647.958488][ T8845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 647.967317][ T8845] usb 6-1: string descriptor 0 read error: -22 [ 647.969921][ T8845] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 647.972790][ T8845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.976655][ T8845] usb 6-1: config 0 descriptor?? [ 647.979330][ T8845] hub 6-1:0.0: bad descriptor, ignoring hub [ 647.981943][ T8845] hub 6-1:0.0: probe with driver hub failed with error -5 [ 647.987056][ T8845] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input27 [ 648.187801][ T6026] usb 6-1: USB disconnect, device number 37 [ 648.824551][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3122'. [ 649.231875][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3127'. [ 649.246719][ T40] audit: type=1800 audit(1760602315.236:6430): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3126" name="bus" dev="overlay" ino=1047 res=0 errno=0 [ 649.582490][T16900] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 649.585128][T16900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 649.591109][T16900] vhci_hcd vhci_hcd.0: Device attached [ 650.727580][T16901] vhci_hcd: connection closed [ 650.727823][ T12] vhci_hcd: stop threads [ 650.732094][ T12] vhci_hcd: release socket [ 650.735554][ T12] vhci_hcd: disconnect device [ 651.319427][ T29] usb 44-1: device descriptor read/8, error -110 [ 651.339652][T16918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 651.342021][T16918] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.345164][T16918] vhci_hcd vhci_hcd.0: Device attached [ 651.612866][ T60] usb 42-1: SetAddress Request (34) to port 0 [ 651.615833][ T60] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 651.693150][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3136'. [ 651.706216][T16928] tmpfs: Unknown parameter 'g' [ 651.772309][ T29] usb usb44-port1: attempt power cycle [ 651.882620][T16933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3137'. [ 652.107213][T16937] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 652.109582][T16937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 652.119750][T16937] vhci_hcd vhci_hcd.0: Device attached [ 652.271455][T16942] bond1: Unable to set up delay as MII monitoring is disabled [ 652.276170][T16942] bond1 (unregistering): Released all slaves [ 652.362946][ T29] usb 44-1: SetAddress Request (25) to port 0 [ 652.365749][ T29] usb 44-1: new SuperSpeed USB device number 25 using vhci_hcd [ 652.511370][T16949] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3140'. [ 652.645914][T16919] vhci_hcd: connection reset by peer [ 652.662895][ T8050] vhci_hcd: stop threads [ 652.664278][ T8050] vhci_hcd: release socket [ 652.665805][ T8050] vhci_hcd: disconnect device [ 652.798827][T16938] vhci_hcd: connection reset by peer [ 652.803217][ T8050] vhci_hcd: stop threads [ 652.804769][ T8050] vhci_hcd: release socket [ 652.806717][ T8050] vhci_hcd: disconnect device [ 652.821483][T16953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 652.824230][T16953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 652.828052][T16953] vhci_hcd vhci_hcd.0: Device attached [ 653.112832][ T6003] usb 40-1: SetAddress Request (51) to port 0 [ 653.115522][ T6003] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 653.393661][T16958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3142'. [ 653.546340][T16954] vhci_hcd: connection reset by peer [ 653.549815][ T8037] vhci_hcd: stop threads [ 653.551680][ T8037] vhci_hcd: release socket [ 653.553355][ T8037] vhci_hcd: disconnect device [ 654.662042][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3146'. [ 654.953477][T16995] 9pnet_fd: Insufficient options for proto=fd [ 655.004597][T16996] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 655.007323][T16996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 655.014797][T16996] vhci_hcd vhci_hcd.0: Device attached [ 655.161101][ T8845] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 655.322925][T15312] usb 38-1: SetAddress Request (38) to port 0 [ 655.326735][T15312] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 655.385254][ T8845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.388913][ T8845] usb 7-1: config 0 has no interface number 0 [ 655.392214][ T8845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 655.551130][ T8845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.555847][ T8845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 655.559630][ T8845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.663479][ T8845] usb 7-1: config 0 descriptor?? [ 655.763488][ T8845] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 655.995185][T16997] vhci_hcd: connection reset by peer [ 655.997423][ T103] vhci_hcd: stop threads [ 655.999159][ T103] vhci_hcd: release socket [ 656.000756][ T103] vhci_hcd: disconnect device [ 656.506994][T17023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3158'. [ 656.652915][ T60] usb 42-1: device descriptor read/8, error -110 [ 657.059888][ T60] usb usb42-port1: attempt power cycle [ 657.375795][T17039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 657.402492][T17039] tmpfs: Unknown parameter 'g' [ 657.470592][ T29] usb 44-1: device descriptor read/8, error -110 [ 657.585851][ T29] usb usb44-port1: unable to enumerate USB device [ 657.634040][ T60] usb usb42-port1: unable to enumerate USB device [ 657.713735][ T6026] usb 7-1: USB disconnect, device number 33 [ 657.731480][T17047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3165'. [ 658.190014][ T6003] usb 40-1: device descriptor read/8, error -110 [ 658.690504][ T6003] usb usb40-port1: attempt power cycle [ 659.363343][ T6003] usb usb40-port1: unable to enumerate USB device [ 659.530696][T17080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3173'. [ 659.548011][T17080] tmpfs: Unknown parameter 'g' [ 660.413273][T15312] usb 38-1: device descriptor read/8, error -110 [ 660.823432][T15312] usb usb38-port1: attempt power cycle [ 661.181023][T17102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3179'. [ 661.383305][T15312] usb usb38-port1: unable to enumerate USB device [ 661.426182][T17109] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3180'. [ 663.104415][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3188'. [ 666.406503][T17155] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3192'. [ 666.487028][T17158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 666.493939][T17158] tmpfs: Unknown parameter 'g' [ 667.813054][T17180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 667.815829][T17180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 667.819853][T17180] vhci_hcd vhci_hcd.0: Device attached [ 668.554016][ T29] usb 44-1: SetAddress Request (26) to port 0 [ 668.556000][ T29] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 668.673895][T17185] vhci_hcd: connection reset by peer [ 668.677557][ T46] vhci_hcd: stop threads [ 668.678946][ T46] vhci_hcd: release socket [ 668.680860][ T46] vhci_hcd: disconnect device [ 669.814246][T17201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 669.817143][T17201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 669.824734][T17201] vhci_hcd vhci_hcd.0: Device attached [ 670.120608][ T40] audit: type=1800 audit(2000000015.389:6431): pid=17209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3205" name="bus" dev="overlay" ino=1275 res=0 errno=0 [ 670.466900][T17215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 670.468902][T17215] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.471635][T17215] vhci_hcd vhci_hcd.0: Device attached [ 670.592803][ T53] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 670.666960][T17202] vhci_hcd: connection closed [ 670.670776][ T8037] vhci_hcd: stop threads [ 670.674372][ T8037] vhci_hcd: release socket [ 670.676421][ T8037] vhci_hcd: disconnect device [ 670.754362][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.758402][ T53] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.762938][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 670.766937][ T53] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 670.770176][ T53] usb 6-1: Manufacturer: syz [ 670.776370][ T53] usb 6-1: config 0 descriptor?? [ 670.833109][ T6003] usb 42-1: SetAddress Request (38) to port 0 [ 670.835189][ T6003] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 670.935174][T17222] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 670.937367][T17222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.940389][T17222] vhci_hcd vhci_hcd.0: Device attached [ 671.383589][T17216] vhci_hcd: connection reset by peer [ 671.386411][ T8037] vhci_hcd: stop threads [ 671.388182][ T8037] vhci_hcd: release socket [ 671.390232][ T8037] vhci_hcd: disconnect device [ 671.423436][T15312] usb 38-1: SetAddress Request (42) to port 0 [ 671.425568][T15312] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 671.561762][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 671.692723][T17223] vhci_hcd: connection reset by peer [ 671.694650][ T8037] vhci_hcd: stop threads [ 671.696462][ T8037] vhci_hcd: release socket [ 671.698495][ T8037] vhci_hcd: disconnect device [ 672.064123][T17241] 9p: Unknown uid 00000000004294967295 [ 672.927170][ T40] audit: type=1800 audit(2000000018.199:6432): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3214" name="bus" dev="overlay" ino=1065 res=0 errno=0 [ 673.232993][ T60] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 673.323241][T13937] usb 6-1: USB disconnect, device number 38 [ 673.384937][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.387964][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 673.395764][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 673.400913][ T60] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 673.404467][ T60] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 673.407299][ T60] usb 8-1: Manufacturer: syz [ 673.410147][ T60] usb 8-1: config 0 descriptor?? [ 673.413750][ T60] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 673.476093][ T40] audit: type=1326 audit(2000000018.749:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.1.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 673.484842][ T40] audit: type=1326 audit(2000000018.749:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.1.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 673.496482][ T40] audit: type=1326 audit(2000000018.749:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.1.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 673.506107][ T40] audit: type=1326 audit(2000000018.749:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.1.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 673.514375][ T40] audit: type=1326 audit(2000000018.779:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17261 comm="syz.0.3218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 673.522530][ T40] audit: type=1326 audit(2000000018.779:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17261 comm="syz.0.3218" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 673.532696][ T40] audit: type=1326 audit(2000000018.779:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17261 comm="syz.0.3218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 673.540438][ T40] audit: type=1326 audit(2000000018.779:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17261 comm="syz.0.3218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 673.612730][ T29] usb 44-1: device descriptor read/8, error -110 [ 674.024722][ T29] usb usb44-port1: attempt power cycle [ 674.644551][ T29] usb usb44-port1: unable to enumerate USB device [ 674.718388][T17287] 9p: Unknown uid 00000000004294967295 [ 675.631074][T17298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3226'. [ 675.794253][T17302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 675.796921][T17302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 675.801795][T17302] vhci_hcd vhci_hcd.0: Device attached [ 675.806432][T17305] vhci_hcd: connection closed [ 675.807036][ T8050] vhci_hcd: stop threads [ 675.810951][ T8050] vhci_hcd: release socket [ 675.815611][ T8050] vhci_hcd: disconnect device [ 675.932980][ T6003] usb 42-1: device descriptor read/8, error -110 [ 676.021249][ T6002] usb 8-1: USB disconnect, device number 31 [ 676.492970][T15312] usb 38-1: device descriptor read/8, error -110 [ 676.540327][ T6003] usb usb42-port1: attempt power cycle [ 676.542427][ T40] audit: type=1326 audit(2000000021.809:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.1.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 676.549962][ T40] audit: type=1326 audit(2000000021.819:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.1.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 676.556829][ T40] audit: type=1326 audit(2000000021.819:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.1.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 676.564363][ T40] audit: type=1326 audit(2000000021.819:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.1.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 676.663319][T17322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 676.675508][T17322] tmpfs: Unknown parameter 'g' [ 676.963625][T15312] usb usb38-port1: attempt power cycle [ 677.150008][ T40] audit: type=1326 audit(2000000022.419:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.162821][ T40] audit: type=1326 audit(2000000022.429:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.170008][ T40] audit: type=1326 audit(2000000022.429:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.173426][ T6003] usb usb42-port1: unable to enumerate USB device [ 677.177489][ T40] audit: type=1326 audit(2000000022.439:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.192820][ T40] audit: type=1326 audit(2000000022.439:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.200205][ T40] audit: type=1326 audit(2000000022.439:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 677.200645][T17335] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 677.229089][T17335] devpts: Bad value for 'max' [ 677.241578][T17335] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 677.244665][T17335] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 677.247363][T17335] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 677.250105][T17335] kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 677.255241][T17335] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 677.266609][T17335] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 677.276376][T17335] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 677.279588][T17335] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 677.282903][T17335] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 677.412731][ T60] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 677.439211][T17345] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3239'. [ 677.534167][T15312] usb usb38-port1: unable to enumerate USB device [ 677.576543][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.581377][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 677.589105][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 677.597467][ T60] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 677.601447][ T60] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 677.604893][ T60] usb 8-1: Manufacturer: syz [ 677.615261][ T60] usb 8-1: config 0 descriptor?? [ 677.624472][ T60] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 677.630357][T17351] syz.0.3242: vmalloc error: size 24576, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 677.639781][T17351] CPU: 3 UID: 0 PID: 17351 Comm: syz.0.3242 Not tainted syzkaller #0 PREEMPT(full) [ 677.639799][T17351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 677.639825][T17351] Call Trace: [ 677.639831][T17351] [ 677.639836][T17351] dump_stack_lvl+0x16c/0x1f0 [ 677.639857][T17351] warn_alloc+0x248/0x3a0 [ 677.639873][T17351] ? __pfx_warn_alloc+0x10/0x10 [ 677.639888][T17351] ? alloc_pages_mpol+0x25a/0x550 [ 677.639900][T17351] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 677.639909][T17351] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 677.639923][T17351] ? trace_kmalloc+0x2b/0xd0 [ 677.639932][T17351] ? __get_vm_area_node+0x1dc/0x330 [ 677.639942][T17351] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 677.639961][T17351] __vmalloc_node_range_noprof+0x119b/0x1480 [ 677.639978][T17351] ? vhost_task_create+0x1d2/0x370 [ 677.639994][T17351] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 677.640009][T17351] ? rcu_is_watching+0x12/0xc0 [ 677.640026][T17351] ? vhost_task_create+0x1d2/0x370 [ 677.640037][T17351] __vmalloc_node_noprof+0xad/0xf0 [ 677.640048][T17351] ? vhost_task_create+0x1d2/0x370 [ 677.640062][T17351] copy_process+0x2c77/0x76a0 [ 677.640085][T17351] ? __pfx_copy_process+0x10/0x10 [ 677.640104][T17351] ? lockdep_init_map_type+0x5c/0x280 [ 677.640117][T17351] ? lockdep_init_map_type+0x5c/0x280 [ 677.640129][T17351] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 677.640141][T17351] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 677.640158][T17351] vhost_task_create+0x1d2/0x370 [ 677.640170][T17351] ? __pfx_vhost_task_create+0x10/0x10 [ 677.640186][T17351] ? __pfx_vhost_task_fn+0x10/0x10 [ 677.640207][T17351] kvm_mmu_post_init_vm+0x1b7/0x380 [ 677.640223][T17351] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 677.640239][T17351] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 677.640253][T17351] kvm_vcpu_ioctl+0x5eb/0x1690 [ 677.640266][T17351] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 677.640277][T17351] ? tomoyo_path_number_perm+0x18d/0x580 [ 677.640293][T17351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.640311][T17351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 677.640326][T17351] ? do_vfs_ioctl+0x128/0x14f0 [ 677.640339][T17351] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 677.640357][T17351] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 677.640369][T17351] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 677.640381][T17351] ? __fget_files+0x20e/0x3c0 [ 677.640398][T17351] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 677.640410][T17351] __ia32_compat_sys_ioctl+0x242/0x370 [ 677.640424][T17351] __do_fast_syscall_32+0x7c/0x300 [ 677.640443][T17351] do_fast_syscall_32+0x32/0x80 [ 677.640459][T17351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.640473][T17351] RIP: 0023:0xf706d579 [ 677.640482][T17351] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 677.640492][T17351] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 677.640503][T17351] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 677.640510][T17351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.640516][T17351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.640521][T17351] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 677.640527][T17351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.640542][T17351] [ 677.640711][T17351] Mem-Info: [ 677.751271][T17351] active_anon:7811 inactive_anon:12 isolated_anon:0 [ 677.751271][T17351] active_file:15625 inactive_file:25953 isolated_file:0 [ 677.751271][T17351] unevictable:1768 dirty:524 writeback:0 [ 677.751271][T17351] slab_reclaimable:6710 slab_unreclaimable:56785 [ 677.751271][T17351] mapped:27297 shmem:5185 pagetables:1100 [ 677.751271][T17351] sec_pagetables:327 bounce:0 [ 677.751271][T17351] kernel_misc_reclaimable:0 [ 677.751271][T17351] free:43039 free_pcp:14614 free_cma:0 [ 677.766548][T17351] Node 0 active_anon:4072kB inactive_anon:12kB active_file:0kB inactive_file:152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5108kB dirty:8kB writeback:0kB shmem:7552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8164kB pagetables:1324kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB [ 677.776755][T17351] Node 1 active_anon:27172kB inactive_anon:36kB active_file:62500kB inactive_file:103660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100880kB dirty:2088kB writeback:0kB shmem:13188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4972kB pagetables:3076kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB [ 677.786270][T17351] Node 0 DMA free:2108kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:592kB local_pcp:124kB free_cma:0kB [ 677.796113][T17351] lowmem_reserve[]: 0 292 292 292 292 [ 677.798191][T17351] Node 0 DMA32 free:16672kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4072kB inactive_anon:12kB active_file:0kB inactive_file:152kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:299668kB mlocked:0kB bounce:0kB free_pcp:10788kB local_pcp:2672kB free_cma:0kB [ 677.808611][T17351] lowmem_reserve[]: 0 0 0 0 0 [ 677.810144][T17351] Node 1 DMA32 free:157476kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24472kB inactive_anon:36kB active_file:62500kB inactive_file:103660kB unevictable:3536kB writepending:2088kB zspages:1156kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:45864kB local_pcp:7308kB free_cma:0kB [ 677.821869][T17351] lowmem_reserve[]: 0 0 0 0 0 [ 677.823956][T17351] Node 0 DMA: 35*4kB (UE) 8*8kB (UE) 3*16kB (UE) 4*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2108kB [ 677.829868][T17351] Node 0 DMA32: 818*4kB (UME) 212*8kB (UME) 6*16kB (UME) 70*32kB (UM) 64*64kB (UM) 34*128kB (UM) 9*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18568kB [ 677.836023][T17351] Node 1 DMA32: 471*4kB (UME) 360*8kB (UME) 666*16kB (UME) 377*32kB (UME) 281*64kB (UME) 181*128kB (UME) 57*256kB (UME) 23*512kB (ME) 25*1024kB (UME) 12*2048kB (UM) 3*4096kB (UM) = 157468kB [ 677.843642][T17351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.847473][T17351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.851081][T17351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.854907][T17351] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 677.858701][T17351] 44100 total pagecache pages [ 677.860652][T17351] 179 pages in swap cache [ 677.862813][T17351] Free swap = 122784kB [ 677.864940][T17351] Total swap = 124996kB [ 677.866647][T17351] 524155 pages RAM [ 677.868261][T17351] 0 pages HighMem/MovableOnly [ 677.870453][T17351] 208343 pages reserved [ 677.872324][T17351] 0 pages cma reserved [ 678.716067][T17373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 678.718189][T17373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 678.721088][T17373] vhci_hcd vhci_hcd.0: Device attached [ 678.900872][T17380] 9p: Unknown uid 00000000004294967295 [ 679.023356][ T60] usb 40-1: SetAddress Request (55) to port 0 [ 679.042286][ T60] usb 40-1: new SuperSpeed USB device number 55 using vhci_hcd [ 679.222819][ T34] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 679.273905][T17374] vhci_hcd: connection reset by peer [ 679.276289][ T103] vhci_hcd: stop threads [ 679.277948][ T103] vhci_hcd: release socket [ 679.279695][ T103] vhci_hcd: disconnect device [ 679.412047][ T34] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 679.414678][ T34] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 679.417426][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 679.422224][ T34] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 679.423167][T17390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 679.428926][T17390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 679.432429][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 679.432575][T17390] vhci_hcd vhci_hcd.0: Device attached [ 679.442588][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 679.452934][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 679.484461][ T34] usb 7-1: string descriptor 0 read error: -22 [ 679.486683][ T34] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 679.489565][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.494356][ T34] usb 7-1: config 0 descriptor?? [ 679.498329][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 679.500258][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 679.504234][ T34] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 679.702950][T15312] usb 38-1: SetAddress Request (46) to port 0 [ 679.705162][T15312] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 679.708642][ T53] usb 7-1: USB disconnect, device number 34 [ 680.001129][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 680.012389][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 680.012715][ T12] smc: removing ib device syz1 [ 680.017530][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 680.020517][T13937] syz1: Port: 1 Link DOWN [ 680.021439][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 680.025739][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 680.135592][T17391] vhci_hcd: connection reset by peer [ 680.138048][ T46] vhci_hcd: stop threads [ 680.139394][ T46] vhci_hcd: release socket [ 680.140906][ T46] vhci_hcd: disconnect device [ 680.185738][ T53] usb 8-1: USB disconnect, device number 32 [ 680.330026][T17394] chnl_net:caif_netlink_parms(): no params data found [ 680.474926][ T12] ------------[ cut here ]------------ [ 680.476856][ T12] GID entry ref leak for dev syz1 index 2 ref=1 [ 680.480406][ T12] WARNING: CPU: 3 PID: 12 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x387/0x4b0 [ 680.484472][ T12] Modules linked in: [ 680.487117][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 680.491514][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 680.495080][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 680.496954][ T12] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 680.498880][ T12] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 51 62 59 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 e0 19 98 8c e8 9a e6 17 f9 90 <0f> 0b 90 90 e9 6e fe ff ff e8 2b 62 59 f9 48 8d bd 78 07 00 00 48 [ 680.505007][ T12] RSP: 0018:ffffc900001e7b40 EFLAGS: 00010282 [ 680.506926][ T12] RAX: 0000000000000000 RBX: ffff88804fb7e600 RCX: ffffffff817b2e58 [ 680.509384][ T12] RDX: ffff88801d6e4900 RSI: ffffffff817b2e65 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 680.511878][ T12] RBP: ffff88802458c000 R08: 0000000000000001 R09: 0000000000000000 [ 680.514493][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1009f6fcdb [ 680.517031][ T12] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000 [ 680.519483][ T12] FS: 0000000000000000(0000) GS:ffff888097ae1000(0000) knlGS:0000000000000000 [ 680.522238][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.524394][ T12] CR2: 000000008000b3ed CR3: 00000000708c5000 CR4: 0000000000352ef0 [ 680.527179][ T12] Call Trace: [ 680.528243][ T12] [ 680.529204][ T12] ib_device_release+0xef/0x1e0 [ 680.530735][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 680.532466][ T12] device_release+0xa4/0x240 [ 680.534334][ T12] kobject_put+0x1e7/0x5a0 [ 680.535789][ T12] put_device+0x1f/0x30 [ 680.537128][ T12] process_one_work+0x9cf/0x1b70 [ 680.538688][ T12] ? __pfx_process_one_work+0x10/0x10 [ 680.540372][ T12] ? assign_work+0x1a0/0x250 [ 680.541812][ T12] worker_thread+0x6c8/0xf10 [ 680.543349][ T12] ? __pfx_worker_thread+0x10/0x10 [ 680.544969][ T12] kthread+0x3c5/0x780 [ 680.546246][ T12] ? __pfx_kthread+0x10/0x10 [ 680.547701][ T12] ? rcu_is_watching+0x12/0xc0 [ 680.549199][ T12] ? __pfx_kthread+0x10/0x10 [ 680.550613][ T12] ret_from_fork+0x675/0x7d0 [ 680.552043][ T12] ? __pfx_kthread+0x10/0x10 [ 680.553581][ T12] ret_from_fork_asm+0x1a/0x30 [ 680.555147][ T12] [ 680.556106][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 680.558304][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 680.561091][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 680.564426][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 680.566306][ T12] Call Trace: [ 680.567346][ T12] [ 680.568259][ T12] dump_stack_lvl+0x3d/0x1f0 [ 680.569707][ T12] vpanic+0x640/0x6f0 [ 680.570819][ T12] ? gid_table_release_one+0x387/0x4b0 [ 680.572442][ T12] panic+0xca/0xd0 [ 680.573666][ T12] ? __pfx_panic+0x10/0x10 [ 680.575097][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 680.576636][ T12] check_panic_on_warn+0xab/0xb0 [ 680.578146][ T12] __warn+0xf6/0x3c0 [ 680.579370][ T12] ? preempt_schedule_notrace+0x62/0xe0 [ 680.581100][ T12] ? gid_table_release_one+0x387/0x4b0 [ 680.582788][ T12] report_bug+0x3c3/0x580 [ 680.584136][ T12] ? gid_table_release_one+0x387/0x4b0 [ 680.585842][ T12] handle_bug+0x184/0x210 [ 680.587186][ T12] exc_invalid_op+0x17/0x50 [ 680.588578][ T12] asm_exc_invalid_op+0x1a/0x20 [ 680.590099][ T12] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 680.591988][ T12] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 51 62 59 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 e0 19 98 8c e8 9a e6 17 f9 90 <0f> 0b 90 90 e9 6e fe ff ff e8 2b 62 59 f9 48 8d bd 78 07 00 00 48 [ 680.597978][ T12] RSP: 0018:ffffc900001e7b40 EFLAGS: 00010282 [ 680.600016][ T12] RAX: 0000000000000000 RBX: ffff88804fb7e600 RCX: ffffffff817b2e58 [ 680.602439][ T12] RDX: ffff88801d6e4900 RSI: ffffffff817b2e65 RDI: 0000000000000001 [ 680.604891][ T12] RBP: ffff88802458c000 R08: 0000000000000001 R09: 0000000000000000 [ 680.607320][ T12] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1009f6fcdb [ 680.609728][ T12] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000 [ 680.612193][ T12] ? __warn_printk+0x198/0x350 [ 680.613788][ T12] ? __warn_printk+0x1a5/0x350 [ 680.615439][ T12] ib_device_release+0xef/0x1e0 [ 680.617048][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 680.618935][ T12] device_release+0xa4/0x240 [ 680.620404][ T12] kobject_put+0x1e7/0x5a0 [ 680.621849][ T12] put_device+0x1f/0x30 [ 680.623173][ T12] process_one_work+0x9cf/0x1b70 [ 680.624849][ T12] ? __pfx_process_one_work+0x10/0x10 [ 680.626903][ T12] ? assign_work+0x1a0/0x250 [ 680.628831][ T12] worker_thread+0x6c8/0xf10 [ 680.630645][ T12] ? __pfx_worker_thread+0x10/0x10 [ 680.632406][ T12] kthread+0x3c5/0x780 [ 680.633726][ T12] ? __pfx_kthread+0x10/0x10 [ 680.635558][ T12] ? rcu_is_watching+0x12/0xc0 [ 680.637480][ T12] ? __pfx_kthread+0x10/0x10 [ 680.639313][ T12] ret_from_fork+0x675/0x7d0 [ 680.641238][ T12] ? __pfx_kthread+0x10/0x10 [ 680.643079][ T12] ret_from_fork_asm+0x1a/0x30 [ 680.644771][ T12] [ 680.646488][ T12] Kernel Offset: disabled [ 680.647875][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:12:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000d8ed2d RBX=0000000000000000 RCX=ffffffff8b6302a9 RDX=0000000000000000 RSI=ffffffff8db0015c RDI=ffffffff8bf1e8c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908363d0 R15=0000000000000000 RIP=ffffffff8b62ed5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6a0c1f1e9c CR3=000000005d0ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888025cc1d00 RCX=ffffffff8183a4d7 RDX=ffff88802473c900 RSI=0000000000000008 RDI=0000000000000005 RBP=ffff888026b8b080 RSP=ffffc9000f1e7c50 R8 =0000000000000005 R9 =0000000000000007 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffffffff90839434 R15=ffffc9000f1e7d00 RIP=ffffffff8183a4f5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7436285 CR3=00000000708c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000064e800000000 0000027e00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000d38561 RBX=0000000000000002 RCX=ffffffff8b6302a9 RDX=0000000000000000 RSI=ffffffff8db0015c RDI=ffffffff8bf1e8c0 RBP=ffffed1003b5d920 RSP=ffffc9000047fde8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801daec900 R14=ffffffff908363d0 R15=0000000000000000 RIP=ffffffff8b62ed5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034b0bff8 CR3=000000005d0ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000064e800000000 0000027e00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852db455 RDI=ffffffff9adf1e40 RBP=ffffffff9adf1e00 RSP=ffffc900001e74b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf1e00 R15=ffffffff852db3f0 RIP=ffffffff852db47f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000b3ed CR3=00000000708c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000