last executing test programs: 8.185846507s ago: executing program 1 (id=660): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = io_uring_setup(0x5c01, &(0x7f0000000100)={0x0, 0x0, 0x800}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x6}]}}}]}, 0x40}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYBLOB="abb7ceb78b29188506c42b1f935a359d7d6746f071e1ffffff52ed97f5acc54c8af7b589f532e31fbcfc73d4ac7dfc02b432d0b0056b614cbc26419e7a1a309a6a7a63ff655b7264842f5e9914bbe7527f"], 0x3c}}, 0x48087) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x0, 0xae, 0xed, 0x6, 0x5e, @remote, @mcast1, 0x1, 0x8000, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r13) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r12, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}]}, 0x38}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x706, 0x50b1458a, 0x4}}) r18 = socket$netlink(0x10, 0x3, 0x0) (async) r19 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r20}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f0000000ac0)={0x90c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff9b3b}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x6, 0x80}, {0x81, 0x4, 0x4, 0x7fffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x0, 0xc7}, {0x3, 0x2, 0x0, 0x9b800000}, {0x8, 0x9, 0x7, 0x29dcebfa}, {0x6, 0x3f, 0x7, 0x3}, {0xcb51, 0x6, 0x0, 0x9}, {0x1, 0x8d}]}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r14}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd, 0x2, 0x8, 0x6}, {0x8, 0x7, 0x10, 0x7}, {0x3, 0x1a, 0x6, 0x9}, {0x6, 0x9, 0xa, 0x7}, {0x88a, 0x3, 0x5c, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x90c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 8.185572266s ago: executing program 1 (id=661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="c744240024000000c744240200800000ff1c240f94ac512e000000c744240013010000c74424020b000100ff2c24b8010000000f01d9c4a3f9222f62440f017300c4e3fd7c780800c4811972d5a9440f01df66400f01df", 0x57}], 0x1, 0x4, &(0x7f0000000340)=[@flags={0x3, 0x1800}], 0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x9000) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) dup(r4) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]}) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) lseek(r7, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r2, 0x40047452, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) 8.078975989s ago: executing program 1 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x108}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="d0"]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20000000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x9, 0x800000}}}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000018c0)}, 0x4004840) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 5.053088963s ago: executing program 1 (id=678): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4a) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='h$}\'.&\x00', 0x5) ftruncate(r3, 0x40) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x4}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x2}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.374340578s ago: executing program 2 (id=680): sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) nanosleep(&(0x7f0000000340), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000001, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x22, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/413]}, 0x1ed) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000008c0)=@nullb, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x22c480, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r3 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @thr={&(0x7f0000000a40)="ad304218b8210ab933d90fdfe54b41c3abf3b23fd81768d909daa8fcf5bf80ecf84e0cfb87b88a245e497c3102c8482a558adff55ce5f3d6552fc1cb5b5c80369b523a420fa60df7efda6f79a1a85a903105436212a8b4ed618e8ebd07732bfd4dbbec9a829cec3226a9a0bdb4e2005b08c9afd94554b3074b118e3fb250b789448772e799cac611a146830833d0f4ba57dd2c02d4aedf9541d1cd4bca2d7ba263091ce51fee7c56bf58db7becf1998082dc5fa948a7cf190f646d3c40c34527f7408cd1cce99c1346dc0354b8b0ffe1e49145be861d", &(0x7f0000000880)="11f01184aa9adeca27d660321ac8425a67cc4f1ce96add076496cbfce203578c117366a9b4ff4dcc0be12da5a65a12"}}, &(0x7f0000000900)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x804, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r3) syz_open_procfs(0x0, &(0x7f0000000940)='smaps\x00') r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) socket$xdp(0x2c, 0x3, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x2, 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x36c, 0x198, 0x2b8, 0x0, 0x198, 0x6000000, 0x2a4, 0x3a8, 0x3a8, 0x2a4, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x198, 0x0, {0xd2030000}, [@common=@unspec=@rateest={{0x68}, {'veth0_virt_wifi\x00', 'veth0\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) 4.030043082s ago: executing program 0 (id=681): syz_open_dev$midi(&(0x7f0000000000), 0x7ff, 0x107000) r0 = syz_open_dev$midi(&(0x7f0000000040), 0x10001, 0x20400) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000080)={0x0, 0x5f, 0x6, 0x1, 0x4000000}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/185, 0xb9}], 0x4, 0x0, 0x0, 0x1}, 0x10) r1 = openat$full(0xffffff9c, &(0x7f0000000440), 0x900e6d69f7cad5e0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x1410, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c7) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000580)={0x39, 0x11, 0xf, 0xf, 0x6, 0x0, 0x2, 0x13d}) r2 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x0, 0x600482) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f0000000600)={0x0, 0x10001, 0xaaa2, 0x1, 0x9}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000640), 0x100, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000680)={0x2c, 0x1e, 0x17, 0x5, 0xa, 0xa82, 0x1, 0x32}) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="58d305b9d22432497cf2c4", 0xb}, {&(0x7f0000000700)="1e738b6efeefbe11b8fec18804a3f69fda653b8378aa3e214f73ab292be4fc4635c49232d9e86aaf7b6b1e683d43b72597dd869a33cc50cb97f2e0a03431a3ce687bd27077e4d5a36e782cb728f3c68ae6abc6fd1a634c7f708335e3c37ebd798096b0e8789134566db015898d00a9825931c13d3fb6ca2c0edff81eb113e6481bc71bd1e591f9d08f26522c2be8e24cad7ec186be1683627c340ac65e31b31ab38a7065f88737d70ed97a9622306ff6aa87c66aaeb9a2e4fe68b1fbeaadd9194e0739d06aceab541ebb697011ff5b1f0937f985f8dd2c24534606fed33d3e21ec8e9782825b6e0ae0a4029c976a45fbd454ef968d01b2c1", 0xf8}, {&(0x7f0000000800)="d9ae0a84a7cd603264a26255cca85cdeba4441dce083c4877bd819e1c7d19181016ccf", 0x23}, {&(0x7f0000000840)="57b003eb76832693d19bef17a01c3e69f0c39867c47713ec8c6c1233", 0x1c}, {&(0x7f0000000880)="833054b87fc890a6ce3f43ad098e20cfd99b6d6d3335e0eed33d71bc76b4e83b80394f4390bf1eff66c2982fcc34c576f13f009d0ee17b4d0eb7159f1c1c0fcc3b28f3a64e11dc4e37488238e48c01b0746fbab5a27dee3903a400961b5cb2cbf62729c375c2b49d01a8a0608499a84509", 0x71}], 0x5}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0xfffffff5, @private2, 0x6}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000980)="3269ba673568ecf43bb3e8336c0c24086365b659972ee57a22a741547a946ffb73dd5f059ff1492ee0cc7958713fa3173a3c3ef450263bb491125a2efbb35aace60ac4468e8766859e9252c34df4e22a1b9569464508f1192f663f964971d0ea55a669122b1fdb", 0x67}, {&(0x7f0000000a00)="60dd02", 0x3}, {&(0x7f0000000a40)="aaee20a1cabd7773bbbd", 0xa}, {&(0x7f0000000a80)="dc03597152ecc3f04a3208ea57863f4264096c5df14699ec94c676606d54c3a1bcbdc7edcfe06d7211ebc314c87bfb3b8471d9857991f6b82c2052e2d441a6aac1c226739fdd744118e9b769885b6a2c46df319977215cb22f5c2889e1e69876bc244327c1422521368c64df421329dbba248bcc02bd7ae60d413f6b68", 0x7d}, {&(0x7f0000000b00)="c20735537d3f2cdabf273994ca1fff85a5bae1f82b3a4a8e879517dd1eff95b12e92e21fe7c7328ea2f444acd6c2f5dfebfa6782abb46ede19876c5f4fc223df37a951d0dd203d5d022226626a2ba8353584c57b915fe302f7f77785fab15bfa467ada0847babc8c4c06c4576e872c24e1f35346c3b149b62dbc73cba0ff3531f2eb510c5caf1cbeed97267d4065f3d1af40a5bcc71e951fce04764ac6370a04c9dfe2853eb9", 0xa6}, {&(0x7f0000000bc0)="96324683cc701a52bfa93d71f6743e0e0002633007e5ebfe1cd99efd8c7d83253f53c8a945c5d6fe7a42ee0345abb384c6f3458a57350599b413677a66f59a24ecd2dd721c67d1c6ffb50245c1a8e7b9655899a4b90468db57336d474fcc32fbad5e5c7a350f11996955462fcc77", 0x6e}, {&(0x7f0000000c40)="0cc6967b936e3f5a5c5fe7653def8e1eb0748fe9f5bcdaf107a5d385c9db2f0278de551bcb32f225c7cf8fe1ac26908446bdefc4c4edd6d45c64efd9e746e58306fe4628b590319cb62e36f9954cefec332b6d2d1d671e4fde40bea151ea72c7296c99c302c094dc6730a6c9503a005c9c3f44f87174d409268e4b510043faa12838d76e61a62c5b26b0800dac1c8554a3089c8985ffe6f4fb78ef84ff201b88c599851916e2eb3d154fa78321931a6f5a06c40d0a3ab009c7c7bf9f563afa98fb11ed19c2a1da58eb94dbc735f6e58db04accc99a9a0f051105ae13538a609a4c403135be248f8ded85e3b233b9d27d7a2115a0f488dab5", 0xf8}, {&(0x7f0000000d40)="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", 0xfe}, {&(0x7f0000000e40)="f042bad5e1aa28fa8cf3a5b453db387bc12d39a616397863f8de4a16aee13ad0579156515aebeb5607418e61d86e3a76df3b591e941aaec2fa26b296205d8a90e06065c02c8774f5e7d2dd8aeb3919593bc368c62d69e4", 0x57}, {&(0x7f0000000ec0)="f04b5257a6", 0x5}], 0xa, &(0x7f0000000f80)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x7fffffff}}, @dstopts={{0x2c, 0x29, 0x37, {0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xf9}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1]}}}], 0x3c}}], 0x2, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$snapshot(0xffffff9c, &(0x7f0000001000), 0x2e00, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) r5 = openat$snapshot(0xffffff9c, &(0x7f0000001040), 0x200000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001080)={0x0, 0x2}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001100)={0x0, 0xfffb, 0x0, 0xe, 0xf, 0x8, 0x4, 0x2, r6}, &(0x7f0000001140)=0x20) bind$inet(r1, &(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = openat$binderfs(0xffffff9c, &(0x7f00000011c0)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001400)={0x5c, 0x0, &(0x7f00000012c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x9, 0x0, 0x1}, @fda={0x66646185, 0x7, 0x2, 0x3}}, &(0x7f0000001280)={0x0, 0x1c, 0x38}}, 0x1000}, @clear_death], 0x9d, 0x0, &(0x7f0000001340)="3d3d9068735be9c8c3888d39c391065a985349a9235aa48a1d09ac1478753b87517c079a112ccd3350533f4abceda869d8cfe6cb1f8c3ae1503fe9257a8478e98cbd6e4e6eb209a5c03ff9d005a26a323b1f6c84d34f7454b89d26e60a0e3a2a1a4d18261c5a7ad1d289621ced3b98ec0fe19ff82e5b3e1390f3edd7d288dddc702fe53eaee7514be95efc8f74c29af67e1efe82e96a09d3ef254dbf50"}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000014c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000001540)={r8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001580)={{0x1, 0x1, 0x18, r0, {0x11ad}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f00000015c0)={0x1, 0x0, {0x81, 0x9, 0x6, 0xffffff2b}}) sendto$llc(r9, &(0x7f0000001600)="7a84abf7d21589953c7a9d06c5aa2dd7b8bafff0963347d67f24a19429b272e4aacf95e9937806f7cc27efa7760f9d21bc6a1e5f87a311718af8f098e9fc74db8e579927666b03580e0d35a7cf74056b0c2fb78236ca1a076d567cef80e1aabf8afbcc61ff6b7e25d43641e0744dc4e333199b07001f5f90eddbcac449f1e134460cb2196465433b72f05990f2ed10fd1bf516c0ec2c85ae3455d8f381fe58eb0e906409dda8a27f4ece7cbbcabe98456ae0721136294d3d8105742553fcc41368ce3117d56087f0fbf16e19d8e8b58804c291ad6402d360cd30e70cd783f8aef567cae0c6", 0xe5, 0x4000800, &(0x7f0000001700)={0x1a, 0x18, 0x7c, 0x3c, 0x0, 0x68, @remote}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r10, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 3.46821629s ago: executing program 2 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r1) 3.410605829s ago: executing program 2 (id=683): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001400b59500020700000000000a00000083377f0754b5268bb11727d912101a1505b467", @ANYRES32=0x0], 0x18}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0xc}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r2, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xabc74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0xfffffffe, @mcast2}, 0x1c) 2.840320084s ago: executing program 0 (id=685): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x12, 0xf5ff, 0x0, 0x0}], 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000}) io_submit(0x0, 0x0, &(0x7f0000000700)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r0], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000877c, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000400)=0x63f, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00', 0x10) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, r7, 0x5, 0xfffffffffffffffc) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 2.543256831s ago: executing program 2 (id=686): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x30) 2.465063204s ago: executing program 1 (id=687): clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100)) r2 = epoll_create(0x10000) epoll_pwait2(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, &(0x7f0000000180), &(0x7f00000001c0)={[0x0, 0x81]}, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_disconnect={0x98b}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) read$msr(r3, &(0x7f0000000280)=""/121, 0x79) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r4, 0x21, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) rt_sigtimedwait(&(0x7f0000000380)={[0xff, 0x3]}, &(0x7f00000003c0), &(0x7f0000000440)={0x77359400}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffff9c, &(0x7f0000000480), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x5) r7 = openat$vnet(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000500)={0x2}) epoll_pwait2(r2, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600)={[0x5, 0x9]}, 0x8) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000640)) r8 = syz_io_uring_setup(0x2fc6, &(0x7f0000000680)={0x0, 0xdf83, 0x200, 0x1, 0x1d3}, &(0x7f0000000700), &(0x7f0000000740)) r9 = syz_open_dev$vcsu(&(0x7f0000000780), 0x8, 0x2200) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000007c0)=[r6, r9], 0x2) ioctl$FITHAW(r3, 0xc0045878) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40046607, &(0x7f0000000800)=0x1) r10 = socket(0x8, 0x6, 0x6) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), r10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) chdir(&(0x7f00000009c0)='./file0\x00') r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r10) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r12, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3844a36f06"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e2f522f4611bd2b2c0177aff04"}, @NL80211_KEY_IDX={0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40044) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x4) 2.36745112s ago: executing program 2 (id=688): mknod(&(0x7f0000000180)='./file0\x00', 0x20, 0x9) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='udf\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3e) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}]}, 0x20}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) quotactl$Q_QUOTAON(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.306718861s ago: executing program 0 (id=689): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) nanosleep(&(0x7f0000000300), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102386, 0x18ff2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004}, 0x0) r1 = syz_io_uring_setup(0x52c3, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000140)=[@ioring_restriction_register_op={0x0, 0x12}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd1be0ffff00fe3321632f77fbac14140be000031762079f4b4d2f87e5feca6aab845013f2325f1a392c050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef7712", 0x0, 0x3, 0x60000000, 0xd6, 0x0, &(0x7f0000000440)="d82616b49ff1abb2e0be3e98714339842f0423dfa2895bc2b5dbfd14d4c1361fff9086e7fb2c556316b83e36b97eb37b7ada76fac525cf0b85bc3cf42b5dd5c91699742676e0bf8357e0f9098e2e2001ef7cb4889b1cb68e87ee92b667e1e19e9a7916edc327bf78c912755f20c5d4fc20f165238aad3a85aa32070882c4f2ca9fd38d82a36f2960270288310cf319554989cc7160a38309a3a102ba3df86388c187242d553fc1ead1d4d2700359eb5db2800c855e13f0b1385ca597569b99f9dbfeb3738edfc56218b079ab02a4d4a303c75571335f", 0x0}, 0x4c) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/413]}, 0x1ed) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000008c0)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x22c480, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) gettid() 1.809293102s ago: executing program 3 (id=692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r1) 1.808759179s ago: executing program 3 (id=693): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x80000, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x1000, "340b31b8e6790400008fad9187ffe93bbabd18cf501922d1974a2700"}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000259fb0d8bc0e03e300000000000095000000000000002cc41f0a9a9d08e3bb55010001deae6e456cd466db16dae3229eccc33a30a304aa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {r8}}, './file1\x00'}) mknodat$loop(r7, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) 1.541990449s ago: executing program 1 (id=694): mknod(&(0x7f0000000180)='./file0\x00', 0x20, 0x9) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='udf\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="02040002040000000000000000000000020001000053cab530e00000000000040000000000"], 0x20}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) quotactl$Q_QUOTAON(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.521438728s ago: executing program 3 (id=695): io_setup(0x8, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x56b, &(0x7f0000000580)={0x0, 0x0, 0x13090, 0x0, 0x3d7}, &(0x7f0000000100), &(0x7f0000000380)) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.370880837s ago: executing program 0 (id=696): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) nanosleep(&(0x7f0000000300)={0x77359400}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000002, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) mount(&(0x7f00000008c0)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) gettid() openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) ioprio_set$pid(0x1, 0x0, 0x2000) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001200977b00"/56, @ANYRES32=0x0, @ANYBLOB="00000000000009dcbadbb7d8a1960000180001"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x4400) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x804, 0x0) 1.047661806s ago: executing program 3 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x200000000000029e, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x200000000000029e, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x200000) 970.041349ms ago: executing program 3 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x102, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r6]) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r7, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r8 = syz_open_pts(r6, 0x20) r9 = dup3(r8, r7, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x15b10c8e, 0x51cc, 0x10001, 0x1, 0x1b, "06f2b484f5d4adf49d20ff5c0dcd4f119dde42"}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES8=r5, @ANYRESDEC=r5, @ANYBLOB="d0210ebea50562eadbe19e51e102f194d43b1dd2fd5bab28f2fb54bcc8be16277062f567f1afe87735353227fb494ad2c7e259b940320bc438e9ba935a7b5844279333ee3932", @ANYRES16=r6, @ANYRES16=r5, @ANYRES64]) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x38}}, 0x10000) process_madvise(r6, &(0x7f0000000380)=[{&(0x7f0000000400)="de5b1452af57df2c7dffc200663799dbee310d281807d197848fa64a2cf597b68305152220bff8a0188f92abf341ae45e751b2462567ec0e6171984d09f24f03f7318c6f228c80eae62f7e7be2548c9a2c5fbd5618f9fe8a4b3bc454ec1de524787eb84a4cee2b12ad8ff6637df9a704289f1b478d521d8d2eefc43f29d1fc8405dfc9c02eeeb0cf75a1ac86c75845c4ee06e54c396d9035200e48e509ee8534ad07998512051256dc0d95724574ac387462650f6859e7f7c738566369d332ccf11c647fb2b078e13b6d965f", 0xcc}, {&(0x7f00000001c0)="c5102aa3ed4e5fc443d2bbcb2f0db18e3434b9f0a42efe3a0d1917b21d70221482a095464ac2426a93e69aa2c84bfd0264e99b68ca5b3d812d7251b46a47d2cad02f570e02c88fc749ccb16a57301d56feb139", 0x53}, {&(0x7f0000000500)="f3e4968afcd6c95e2c9b6a3d5269a1ed9cc5c19070bd59a2c9312a125b182ef4a875a57476b79a19874a3b3efb9c20c234f54209a4c4ce9224b12d272f597067071fc869369625b6deb525069558e3e77d3570531c8b2ff25a5455051e88398b015a5ccecb32364c2be5f4557f8461fdfc22bf0ef30361e18b2af6cac028abba1b1ca769203a53c1ef8c024a78707eb72dbdb6ee7e92ad4fcdf9132c7d48d398b7f324a85b7382ac476b020a10d6fcfe9225c8f74ddce1", 0xb7}, {&(0x7f00000005c0)="f72a3c27041c9cc88a8281b9f115e59ded2f17c291b6e34e78ea1fe0491263206362231140f39841ebb34e71323b330b0f18ce832f478f9d6294172910cd4a0ab2a729f169bdc2d5d816bfaf5a82af4315b7748f500a6993852ebfa1195b02", 0x5f}, {&(0x7f0000000280)="f16864d76586188e399aba394adcbf0b09c272e91a94429503fc542997534d4b77a2", 0x22}, {&(0x7f0000000640)="cba42b052c009f5f34577177399ea3581080c31b4d94382b1bb779a3df1e4effe5c87f70a19f3ba7b864ada0770fbcce66183c299b2edd25e2efa7ee7de708ef8d", 0x41}, {&(0x7f00000006c0)="6d265755881741a4b8a568e32d752671a614048102c3bd6ce2406b45e4e20fa6f7d122b248c4d525b64421146d9a9d53a9cb70e1d3d004eaaf629b69a3d4a33a8f0d51fe0f896171add2e999cb66c2df9a194af5c99dd597c8392b857f9125bdbe9b95c5c8327a99da8f092409b2db056d00fd2b7c4d35e0bf71d8cf2a771f08200f1add4a1640c98106a893e1eebc0b11e477cea819bd4f4577ac9ce1dc123c7085684c1c484a655bfc4b72084e648c3bfea4d4b3a7", 0xb6}], 0x7, 0x1f, 0x0) 545.846336ms ago: executing program 2 (id=699): io_setup(0x8, &(0x7f0000001440)) syz_io_uring_setup(0x56b, &(0x7f0000000580)={0x0, 0x0, 0x13090, 0x0, 0x3d7}, &(0x7f0000000100), &(0x7f0000000380)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r2, 0x8, 0xffffffffffffffff) pipe(&(0x7f0000000040)) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') write(r4, &(0x7f0000000300)="6f88fd1c73b4a1823e5b29b953fee0952f4ab1db10bb50c892914c93340b5f74a3816d6861568b7a497a6f927cfc498076193e0d26a420414a79047e31619f1589a14d0b063fec7b66c416b5f9ada19a90ddd2724d61b975c0475b518fc0e534ef865cfef9cca5407c9a06b31727122040188c8d4dafe8580db0", 0x7a) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x8004587d, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r5, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 540.846648ms ago: executing program 0 (id=700): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)) write$sndseq(r0, 0x0, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000040)) poll(0x0, 0x0, 0x100) r2 = syz_open_dev$audion(&(0x7f0000000280), 0x600000, 0x80000) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315842}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a060007000000000000000700000005001a00fc000000000000000000000000000000ff02000000000000000000000000000100633587"], 0x38}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) 220.530417ms ago: executing program 0 (id=701): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x0, 0x1}, 0x1c) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r2, 0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mknod(0x0, 0x1000, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x20000000000000a2, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r5 = socket$inet(0x2, 0x3, 0x6) connect$inet(r5, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}}) lstat(0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r5, &(0x7f0000001300)=[{{0x0, 0xe, 0x0}}], 0x300, 0x0) r8 = getpid() fcntl$setown(r4, 0x8, r8) 0s ago: executing program 3 (id=702): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0xf29}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): e 0x0406 failed: -4 [ 99.520179][ T6876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.522580][ T6876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.523053][ T6045] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 99.529821][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.530245][ T6876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.533370][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.538585][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.543186][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.546238][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.549970][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.551025][ T6876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.552805][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.553569][ T6876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.556527][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.562936][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.566218][ T6876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.566549][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.571603][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.575679][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.579113][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.582653][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.586645][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.591388][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.594789][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.598594][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.601962][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.604951][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.607765][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.610469][ T6045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.614043][ T6045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.616953][ T6045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.620424][ T6045] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.623129][ T6045] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.625405][ T6045] usb 7-1: Product: syz [ 99.626560][ T6045] usb 7-1: Manufacturer: syz [ 99.627898][ T6045] usb 7-1: SerialNumber: syz [ 99.630033][ T6045] usb 7-1: config 0 descriptor?? [ 99.633921][ T6045] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 99.653955][ T6884] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.657748][ T6884] FAULT_INJECTION: forcing a failure. [ 99.657748][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 99.665131][ T6884] CPU: 2 UID: 0 PID: 6884 Comm: syz.3.305 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 99.668773][ T6884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.672480][ T6884] Call Trace: [ 99.673669][ T6884] [ 99.674710][ T6884] dump_stack_lvl+0x16c/0x1f0 [ 99.676367][ T6884] should_fail_ex+0x497/0x5b0 [ 99.678030][ T6884] ? fs_reclaim_acquire+0xae/0x150 [ 99.679833][ T6884] should_failslab+0xc2/0x120 [ 99.681133][ T6884] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 99.682864][ T6884] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 99.684495][ T6884] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 99.686114][ T6884] mmu_topup_memory_caches+0x22/0xd0 [ 99.687533][ T6884] kvm_mmu_load+0xda/0x20d0 [ 99.688758][ T6884] ? kvm_apic_has_interrupt+0xb6/0x190 [ 99.690227][ T6884] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 99.691807][ T6884] ? vmx_get_rflags+0x90/0x1c0 [ 99.693112][ T6884] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 99.694633][ T6884] ? __pfx_kvm_mmu_load+0x10/0x10 [ 99.696006][ T6884] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 99.697617][ T6884] ? kvm_check_and_inject_events+0x57f/0x12e0 [ 99.699740][ T6884] vcpu_run+0x2e22/0x4c90 [ 99.701280][ T6884] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 99.702971][ T6884] ? __pfx_vcpu_run+0x10/0x10 [ 99.704228][ T6884] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 99.705739][ T6884] ? rcu_watching_snap_stopped_since+0x80/0x110 [ 99.707402][ T6884] ? trace_lock_acquire+0x14a/0x1d0 [ 99.708791][ T6884] ? __local_bh_enable_ip+0xa4/0x120 [ 99.710228][ T6884] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 99.711754][ T6884] ? lock_acquire+0x2f/0xb0 [ 99.712995][ T6884] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 99.714526][ T6884] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 99.716006][ T6884] kvm_vcpu_ioctl+0x6c7/0x1510 [ 99.717320][ T6884] ? tomoyo_path_number_perm+0x467/0x5b0 [ 99.718808][ T6884] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.720213][ T6884] ? tomoyo_path_number_perm+0x190/0x5b0 [ 99.721732][ T6884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.723339][ T6884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.724888][ T6884] ? do_vfs_ioctl+0x513/0x1950 [ 99.726208][ T6884] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.727576][ T6884] ? trace_lock_acquire+0x14a/0x1d0 [ 99.728975][ T6884] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 99.730395][ T6884] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 99.731948][ T6884] ? __fget_files+0x244/0x3f0 [ 99.733231][ T6884] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 99.734788][ T6884] __do_compat_sys_ioctl+0x259/0x2b0 [ 99.736190][ T6884] __do_fast_syscall_32+0x73/0x120 [ 99.737540][ T6884] do_fast_syscall_32+0x32/0x80 [ 99.738857][ T6884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.740512][ T6884] RIP: 0023:0xf7f43579 [ 99.741635][ T6884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.746742][ T6884] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 99.748969][ T6884] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 99.751089][ T6884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.753211][ T6884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.755316][ T6884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.757435][ T6884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.759558][ T6884] [ 99.904558][ T6887] netlink: 'syz.2.299': attribute type 21 has an invalid length. [ 99.917054][ T6889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.930561][ T40] audit: type=1800 audit(1729003582.947:566): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.306" name="file0" dev="overlay" ino=36701797 res=0 errno=0 [ 99.930737][ T6889] evm: overlay not supported [ 100.305836][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.308524][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.312622][ T6898] bridge0: entered allmulticast mode [ 100.316319][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.318355][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.325873][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.327736][ T6898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.329927][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.331781][ T6898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.335049][ T6898] bridge0: entered promiscuous mode [ 100.465733][ T6903] FAULT_INJECTION: forcing a failure. [ 100.465733][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 100.469196][ T6903] CPU: 2 UID: 0 PID: 6903 Comm: syz.1.310 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 100.471913][ T6903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.474714][ T6903] Call Trace: [ 100.475601][ T6903] [ 100.476389][ T6903] dump_stack_lvl+0x16c/0x1f0 [ 100.477672][ T6903] should_fail_ex+0x497/0x5b0 [ 100.478898][ T6903] ? fs_reclaim_acquire+0xae/0x150 [ 100.480243][ T6903] should_failslab+0xc2/0x120 [ 100.481541][ T6903] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 100.483005][ T6903] ? xas_split_alloc+0x158/0x4f0 [ 100.484410][ T6903] ? __pfx___lock_acquire+0x10/0x10 [ 100.485778][ T6903] xas_split_alloc+0x158/0x4f0 [ 100.487037][ T6903] split_huge_page_to_list_to_order+0xb9a/0x4ef0 [ 100.488664][ T6903] ? __pfx_split_huge_page_to_list_to_order+0x10/0x10 [ 100.490435][ T6903] ? __pfx___might_resched+0x10/0x10 [ 100.491803][ T6903] split_folio_to_list+0x9b/0x180 [ 100.493114][ T6903] truncate_inode_partial_folio+0x3c6/0x860 [ 100.494646][ T6903] shmem_undo_range+0x6e9/0x1170 [ 100.495945][ T6903] ? __pfx_shmem_undo_range+0x10/0x10 [ 100.497484][ T6903] ? __pfx_lock_release+0x10/0x10 [ 100.498796][ T6903] ? uprobe_munmap+0x20/0x5c0 [ 100.500040][ T6903] ? find_held_lock+0x2d/0x110 [ 100.501309][ T6903] ? __pfx_unmap_mapping_range+0x10/0x10 [ 100.502759][ T6903] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.504206][ T6903] ? lock_acquire+0x2f/0xb0 [ 100.505411][ T6903] ? shmem_fallocate+0x9b9/0xfb0 [ 100.506700][ T6903] shmem_fallocate+0xa35/0xfb0 [ 100.507949][ T6903] ? hlock_class+0x4e/0x130 [ 100.509150][ T6903] ? __lock_acquire+0x163e/0x3ce0 [ 100.510475][ T6903] ? __pfx_shmem_fallocate+0x10/0x10 [ 100.511855][ T6903] ? __pfx___lock_acquire+0x10/0x10 [ 100.513250][ T6903] ? __pfx_shmem_fallocate+0x10/0x10 [ 100.514625][ T6903] vfs_fallocate+0x459/0xf90 [ 100.515842][ T6903] madvise_vma_behavior+0x180f/0x19e0 [ 100.517267][ T6903] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 100.518756][ T6903] ? find_vma_prev+0xdb/0x160 [ 100.519990][ T6903] ? __pfx_find_vma_prev+0x10/0x10 [ 100.521347][ T6903] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 100.522793][ T6903] ? do_madvise+0x41a/0x760 [ 100.523989][ T6903] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 100.525495][ T6903] madvise_walk_vmas+0x1cf/0x2c0 [ 100.526805][ T6903] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 100.528239][ T6903] ? __mutex_unlock_slowpath+0x164/0x650 [ 100.529737][ T6903] do_madvise+0x2e1/0x760 [ 100.530870][ T6903] ? __pfx_do_madvise+0x10/0x10 [ 100.532145][ T6903] ? ksys_write+0x1ad/0x260 [ 100.533347][ T6903] ? __pfx_ksys_write+0x10/0x10 [ 100.534622][ T6903] __ia32_sys_madvise+0xa7/0x110 [ 100.535929][ T6903] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 100.537731][ T6903] __do_fast_syscall_32+0x73/0x120 [ 100.539076][ T6903] do_fast_syscall_32+0x32/0x80 [ 100.540359][ T6903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.542023][ T6903] RIP: 0023:0xf7fb0579 [ 100.543090][ T6903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.548065][ T6903] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 100.550236][ T6903] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000600002 [ 100.552282][ T6903] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.554335][ T6903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.556381][ T6903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.558458][ T6903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.560530][ T6903] [ 100.695252][ T6922] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.923352][ T6929] FAULT_INJECTION: forcing a failure. [ 100.923352][ T6929] name failslab, interval 1, probability 0, space 0, times 0 [ 100.926826][ T6929] CPU: 2 UID: 0 PID: 6929 Comm: syz.0.319 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 100.929567][ T6929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.932347][ T6929] Call Trace: [ 100.933253][ T6929] [ 100.934043][ T6929] dump_stack_lvl+0x16c/0x1f0 [ 100.935405][ T6929] should_fail_ex+0x497/0x5b0 [ 100.936683][ T6929] should_failslab+0xc2/0x120 [ 100.937960][ T6929] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 100.939368][ T6929] ? skb_clone+0x190/0x3f0 [ 100.940750][ T6929] skb_clone+0x190/0x3f0 [ 100.942126][ T6929] netlink_deliver_tap+0xb26/0xcf0 [ 100.943540][ T6929] netlink_unicast+0x6b4/0x7f0 [ 100.945171][ T6929] ? __pfx_netlink_unicast+0x10/0x10 [ 100.946843][ T6929] netlink_ack+0x6a5/0xb20 [ 100.948017][ T6929] netlink_rcv_skb+0x327/0x410 [ 100.949283][ T6929] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.950698][ T6929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.952072][ T6929] ? __pfx_aa_get_newest_label+0x10/0x10 [ 100.953711][ T6929] ? bpf_lsm_capable+0x9/0x10 [ 100.954952][ T6929] ? security_capable+0x7e/0x260 [ 100.956248][ T6929] ? ns_capable+0xd7/0x110 [ 100.957544][ T6929] nfnetlink_rcv+0x1b4/0x430 [ 100.958823][ T6929] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 100.960152][ T6929] ? netlink_deliver_tap+0x1ae/0xcf0 [ 100.961558][ T6929] netlink_unicast+0x53c/0x7f0 [ 100.962836][ T6929] ? __pfx_netlink_unicast+0x10/0x10 [ 100.964270][ T6929] ? __phys_addr_symbol+0x30/0x80 [ 100.965614][ T6929] ? __check_object_size+0x488/0x710 [ 100.967032][ T6929] netlink_sendmsg+0x8b8/0xd70 [ 100.968298][ T6929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.969708][ T6929] ? lock_acquire+0x2f/0xb0 [ 100.970899][ T6929] ____sys_sendmsg+0x9ae/0xb40 [ 100.972155][ T6929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.973548][ T6929] ? get_compat_msghdr+0x11b/0x170 [ 100.974882][ T6929] ? __pfx___lock_acquire+0x10/0x10 [ 100.976251][ T6929] ___sys_sendmsg+0x135/0x1e0 [ 100.977529][ T6929] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.978888][ T6929] ? lock_acquire+0x2f/0xb0 [ 100.980074][ T6929] ? __fget_files+0x40/0x3f0 [ 100.981306][ T6929] ? fdget+0x176/0x210 [ 100.982391][ T6929] __sys_sendmsg+0x117/0x1f0 [ 100.983594][ T6929] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.984863][ T6929] ? __fget_files+0x244/0x3f0 [ 100.986225][ T6929] __do_fast_syscall_32+0x73/0x120 [ 100.987623][ T6929] do_fast_syscall_32+0x32/0x80 [ 100.989010][ T6929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.990679][ T6929] RIP: 0023:0xf7fa6579 [ 100.991756][ T6929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.996811][ T6929] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 100.999096][ T6929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 101.001165][ T6929] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.003217][ T6929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.005293][ T6929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.007407][ T6929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.009467][ T6929] [ 101.184224][ T67] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.432010][ T4786] Bluetooth: hci0: command 0x0406 tx timeout [ 101.511968][ T4786] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.592048][ T5355] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.594128][ T4786] Bluetooth: hci3: command 0x040f tx timeout [ 101.879803][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 101.883031][ T6944] FAULT_INJECTION: forcing a failure. [ 101.883031][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 101.886231][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.1.324 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 101.888973][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.891991][ T6944] Call Trace: [ 101.893123][ T6944] [ 101.893947][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 101.895653][ T6944] should_fail_ex+0x497/0x5b0 [ 101.897319][ T6944] ? fs_reclaim_acquire+0xae/0x150 [ 101.899065][ T6944] should_failslab+0xc2/0x120 [ 101.900689][ T6944] __kmalloc_node_noprof+0xd1/0x440 [ 101.902579][ T6944] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 101.904519][ T6944] __kvmalloc_node_noprof+0xad/0x1a0 [ 101.906391][ T6944] alloc_netdev_mqs+0xc9/0x12a0 [ 101.908064][ T6944] ? __pfx_macsec_setup+0x10/0x10 [ 101.909677][ T6944] rtnl_create_link+0xbed/0xf10 [ 101.910942][ T6944] __rtnl_newlink+0x10b3/0x1920 [ 101.912212][ T6944] ? __pfx___rtnl_newlink+0x10/0x10 [ 101.913735][ T6944] rtnl_newlink+0x67/0xa0 [ 101.914905][ T6944] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.916239][ T6944] rtnetlink_rcv_msg+0x3c7/0xea0 [ 101.917576][ T6944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.919018][ T6944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.920433][ T6944] netlink_rcv_skb+0x165/0x410 [ 101.921700][ T6944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.923128][ T6944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.924515][ T6944] ? netlink_deliver_tap+0x1ae/0xcf0 [ 101.925909][ T6944] netlink_unicast+0x53c/0x7f0 [ 101.927167][ T6944] ? __pfx_netlink_unicast+0x10/0x10 [ 101.928546][ T6944] ? __phys_addr_symbol+0x30/0x80 [ 101.929871][ T6944] ? __check_object_size+0x488/0x710 [ 101.931261][ T6944] netlink_sendmsg+0x8b8/0xd70 [ 101.932514][ T6944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.933898][ T6944] ? lock_acquire+0x2f/0xb0 [ 101.935096][ T6944] ____sys_sendmsg+0x9ae/0xb40 [ 101.936361][ T6944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.937757][ T6944] ? get_compat_msghdr+0x11b/0x170 [ 101.939105][ T6944] ? __pfx___lock_acquire+0x10/0x10 [ 101.940462][ T6944] ___sys_sendmsg+0x135/0x1e0 [ 101.941712][ T6944] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.943145][ T6944] ? lock_acquire+0x2f/0xb0 [ 101.944338][ T6944] ? __fget_files+0x40/0x3f0 [ 101.945571][ T6944] ? fdget+0x176/0x210 [ 101.946651][ T6944] __sys_sendmmsg+0x2a5/0x450 [ 101.947888][ T6944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.949261][ T6944] ? vfs_write+0x14d/0x1140 [ 101.950460][ T6944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.952023][ T6944] ? fput+0x30/0x390 [ 101.953067][ T6944] ? ksys_write+0x1ad/0x260 [ 101.954267][ T6944] ? __pfx_ksys_write+0x10/0x10 [ 101.955551][ T6944] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 101.957027][ T6944] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 101.958747][ T6944] __do_fast_syscall_32+0x73/0x120 [ 101.960089][ T6944] do_fast_syscall_32+0x32/0x80 [ 101.961381][ T6944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.963029][ T6944] RIP: 0023:0xf7fb0579 [ 101.964101][ T6944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.969285][ T6944] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 101.971451][ T6944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 101.973525][ T6944] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 101.975587][ T6944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.977753][ T6944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.979823][ T6944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.981916][ T6944] [ 101.983439][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 101.988325][ T6045] usb 7-1: USB disconnect, device number 7 [ 101.994271][ T6045] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 102.741783][ T6963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.060527][ T6975] 9pnet_virtio: no channels available for device syz [ 103.192036][ T4786] Bluetooth: hci4: command 0x1003 tx timeout [ 103.192062][ T5349] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.292614][ T40] audit: type=1326 audit(1729003586.317:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.3.332" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 103.512224][ T5349] Bluetooth: hci0: command 0x0406 tx timeout [ 103.593445][ T5349] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.671961][ T5349] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.672581][ T4786] Bluetooth: hci3: command 0x040f tx timeout [ 104.796226][ T7009] binder: 7008:7009 ioctl c0306201 0 returned -14 [ 104.936009][ T40] audit: type=1326 audit(1729003587.957:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.943970][ T40] audit: type=1326 audit(1729003587.957:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.951406][ T40] audit: type=1326 audit(1729003587.957:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.959178][ T40] audit: type=1326 audit(1729003587.957:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.965940][ T40] audit: type=1326 audit(1729003587.957:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.971423][ T40] audit: type=1326 audit(1729003587.957:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.981360][ T40] audit: type=1326 audit(1729003587.987:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.988919][ T40] audit: type=1326 audit(1729003587.987:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 104.996554][ T40] audit: type=1326 audit(1729003587.997:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 105.001783][ T40] audit: type=1326 audit(1729003587.997:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 105.023795][ T7025] FAULT_INJECTION: forcing a failure. [ 105.023795][ T7025] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 105.027307][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.2.343 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 105.030010][ T7025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.032813][ T7025] Call Trace: [ 105.033698][ T7025] [ 105.034474][ T7025] dump_stack_lvl+0x16c/0x1f0 [ 105.035704][ T7025] should_fail_ex+0x497/0x5b0 [ 105.036944][ T7025] ? fs_reclaim_acquire+0xae/0x150 [ 105.038291][ T7025] should_fail_alloc_page+0xe7/0x130 [ 105.039667][ T7025] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 105.041264][ T7025] ? __pfx_mark_lock+0x10/0x10 [ 105.042513][ T7025] __alloc_pages_noprof+0x190/0x25a0 [ 105.043884][ T7025] ? mark_lock+0xb5/0xc60 [ 105.044997][ T7025] ? __pfx_mark_lock+0x10/0x10 [ 105.046255][ T7025] ? lock_acquire.part.0+0x11b/0x380 [ 105.047623][ T7025] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 105.049122][ T7025] ? hlock_class+0x4e/0x130 [ 105.050304][ T7025] ? __lock_acquire+0xbdd/0x3ce0 [ 105.051589][ T7025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.053118][ T7025] ? policy_nodemask+0xea/0x4e0 [ 105.054393][ T7025] alloc_pages_mpol_noprof+0x2c9/0x610 [ 105.055798][ T7025] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 105.057329][ T7025] ? find_held_lock+0x2d/0x110 [ 105.058570][ T7025] folio_alloc_mpol_noprof+0x36/0xd0 [ 105.059945][ T7025] shmem_alloc_folio+0x135/0x160 [ 105.061229][ T7025] shmem_alloc_and_add_folio+0x48b/0xc00 [ 105.062677][ T7025] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 105.064281][ T7025] ? shmem_allowable_huge_orders+0x208/0x440 [ 105.065946][ T7025] shmem_get_folio_gfp+0x689/0x1530 [ 105.067410][ T7025] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 105.068891][ T7025] ? preempt_count_add+0x76/0x150 [ 105.070230][ T7025] ? copy_page_from_iter_atomic+0x32a/0x1440 [ 105.071806][ T7025] shmem_write_begin+0x161/0x300 [ 105.073124][ T7025] ? __pfx_shmem_write_begin+0x10/0x10 [ 105.074548][ T7025] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 105.076313][ T7025] generic_perform_write+0x2ba/0x920 [ 105.077771][ T7025] ? __pfx_generic_perform_write+0x10/0x10 [ 105.079308][ T7025] ? __pfx_generic_write_checks+0x10/0x10 [ 105.080772][ T7025] shmem_file_write_iter+0x10e/0x140 [ 105.082142][ T7025] iter_file_splice_write+0x90f/0x10b0 [ 105.083578][ T7025] ? find_held_lock+0x2d/0x110 [ 105.084824][ T7025] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.086367][ T7025] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 105.087830][ T7025] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.089379][ T7025] do_splice+0x145c/0x1f60 [ 105.090558][ T7025] ? find_held_lock+0x2d/0x110 [ 105.091801][ T7025] ? __pfx_do_splice+0x10/0x10 [ 105.093051][ T7025] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 105.094453][ T7025] ? trace_lock_acquire+0x14a/0x1d0 [ 105.095797][ T7025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.097349][ T7025] __do_splice+0x327/0x360 [ 105.098510][ T7025] ? __pfx___do_splice+0x10/0x10 [ 105.099793][ T7025] __ia32_sys_splice+0x1ce/0x270 [ 105.101091][ T7025] __do_fast_syscall_32+0x73/0x120 [ 105.102420][ T7025] do_fast_syscall_32+0x32/0x80 [ 105.103683][ T7025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.105323][ T7025] RIP: 0023:0xf7f44579 [ 105.106481][ T7025] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.111706][ T7025] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 105.113830][ T7025] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 105.115859][ T7025] RDX: 000000000000000a RSI: 0000000000000000 RDI: 000000000000f336 [ 105.117897][ T7025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.119924][ T7025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.121945][ T7025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.123898][ T7025] [ 105.214568][ T7033] team0: Port device team_slave_0 removed [ 105.217056][ T7033] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 105.287694][ T7038] FAULT_INJECTION: forcing a failure. [ 105.287694][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.296904][ T7038] CPU: 0 UID: 0 PID: 7038 Comm: syz.3.348 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 105.300368][ T7038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.303998][ T7038] Call Trace: [ 105.305167][ T7038] [ 105.306196][ T7038] dump_stack_lvl+0x16c/0x1f0 [ 105.307816][ T7038] should_fail_ex+0x497/0x5b0 [ 105.309451][ T7038] _copy_from_user+0x30/0xf0 [ 105.310998][ T7038] cec_ioctl+0xf01/0x2800 [ 105.312516][ T7038] ? __pfx_cec_ioctl+0x10/0x10 [ 105.314183][ T7038] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.316248][ T7038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.318304][ T7038] ? do_vfs_ioctl+0x513/0x1950 [ 105.319967][ T7038] ? trace_lock_acquire+0x14a/0x1d0 [ 105.321774][ T7038] ? __fget_files+0x244/0x3f0 [ 105.323540][ T7038] ? __pfx_cec_ioctl+0x10/0x10 [ 105.325289][ T7038] __do_compat_sys_ioctl+0x259/0x2b0 [ 105.326834][ T7038] __do_fast_syscall_32+0x73/0x120 [ 105.328149][ T7038] do_fast_syscall_32+0x32/0x80 [ 105.329366][ T7038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.330913][ T7038] RIP: 0023:0xf7f43579 [ 105.331959][ T7038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.336870][ T7038] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 105.339106][ T7038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0386105 [ 105.341144][ T7038] RDX: 0000000020000d40 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.343176][ T7038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.345208][ T7038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.347229][ T7038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.349274][ T7038] [ 105.427571][ T7043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.349'. [ 105.439088][ T7048] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 105.442262][ T7048] hsr0: entered promiscuous mode [ 105.445230][ T7048] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.448439][ T7048] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.451249][ T7048] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 105.454558][ T7048] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 105.662369][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 105.667534][ T7057] vlan2: entered allmulticast mode [ 105.668993][ T7057] bridge0: entered allmulticast mode [ 105.682006][ T4786] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.752102][ T4786] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.752111][ T5349] Bluetooth: hci3: command 0x040f tx timeout [ 106.160407][ T7072] netlink: 'syz.2.361': attribute type 13 has an invalid length. [ 106.587428][ T7083] openvswitch: : Dropping previously announced user features [ 107.043322][ T7092] netlink: 'syz.3.368': attribute type 4 has an invalid length. [ 107.145452][ T7094] openvswitch: : Dropping previously announced user features [ 107.376524][ T7096] netlink: 'syz.0.370': attribute type 13 has an invalid length. [ 107.776088][ T7112] FAULT_INJECTION: forcing a failure. [ 107.776088][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.780441][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.2.375 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 107.783182][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.785946][ T7112] Call Trace: [ 107.786815][ T7112] [ 107.787585][ T7112] dump_stack_lvl+0x16c/0x1f0 [ 107.788789][ T7112] should_fail_ex+0x497/0x5b0 [ 107.790023][ T7112] _copy_from_iter+0x29b/0x13e0 [ 107.791282][ T7112] ? __pfx__copy_from_iter+0x10/0x10 [ 107.792643][ T7112] ? __virt_addr_valid+0x1a4/0x590 [ 107.793979][ T7112] ? __virt_addr_valid+0x5e/0x590 [ 107.795279][ T7112] ? __phys_addr_symbol+0x30/0x80 [ 107.796583][ T7112] ? __check_object_size+0x488/0x710 [ 107.797974][ T7112] netlink_sendmsg+0x813/0xd70 [ 107.799219][ T7112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.800585][ T7112] ? lock_acquire+0x2f/0xb0 [ 107.801732][ T7112] ____sys_sendmsg+0x9ae/0xb40 [ 107.802951][ T7112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.804323][ T7112] ? get_compat_msghdr+0x11b/0x170 [ 107.805656][ T7112] ? __pfx___lock_acquire+0x10/0x10 [ 107.807094][ T7112] ___sys_sendmsg+0x135/0x1e0 [ 107.808398][ T7112] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.809747][ T7112] ? lock_acquire+0x2f/0xb0 [ 107.810929][ T7112] ? __fget_files+0x40/0x3f0 [ 107.812125][ T7112] ? fdget+0x176/0x210 [ 107.813171][ T7112] __sys_sendmsg+0x117/0x1f0 [ 107.814361][ T7112] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.815669][ T7112] ? __fget_files+0x244/0x3f0 [ 107.816894][ T7112] __do_fast_syscall_32+0x73/0x120 [ 107.818188][ T7112] do_fast_syscall_32+0x32/0x80 [ 107.819457][ T7112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.821108][ T7112] RIP: 0023:0xf7f44579 [ 107.822262][ T7112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.827214][ T7112] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 107.829360][ T7112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 107.831406][ T7112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.833452][ T7112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.835493][ T7112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.837595][ T7112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.839687][ T7112] [ 108.031972][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 108.192192][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 108.202565][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 108.204804][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.207256][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.209729][ T30] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.212782][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.216117][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.218548][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.227224][ T30] usbtmc 6-1:16.0: bulk endpoints not found [ 108.290970][ T7127] netlink: 'syz.3.380': attribute type 13 has an invalid length. [ 108.911372][ T7142] 9pnet_fd: Insufficient options for proto=fd [ 108.965776][ T7147] 9pnet_fd: Insufficient options for proto=fd [ 108.968815][ T7147] netlink: 'syz.0.385': attribute type 5 has an invalid length. [ 108.973239][ T7147] openvswitch: : Dropping previously announced user features [ 110.161634][ T4786] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 110.183195][ T7177] netlink: 100 bytes leftover after parsing attributes in process `syz.3.394'. [ 111.017996][ T7188] 9pnet_fd: Insufficient options for proto=fd [ 111.095042][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 111.098374][ T5401] usb 6-1: USB disconnect, device number 4 [ 111.109518][ T7193] netlink: 'syz.2.397': attribute type 5 has an invalid length. [ 111.115712][ T7193] openvswitch: : Dropping previously announced user features [ 111.349689][ T7200] FAULT_INJECTION: forcing a failure. [ 111.349689][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.355799][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.1.400 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 111.358560][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.361342][ T7200] Call Trace: [ 111.362224][ T7200] [ 111.363008][ T7200] dump_stack_lvl+0x16c/0x1f0 [ 111.364245][ T7200] should_fail_ex+0x497/0x5b0 [ 111.365504][ T7200] _copy_from_user+0x30/0xf0 [ 111.366717][ T7200] get_compat_msghdr+0xa8/0x170 [ 111.367993][ T7200] ? __pfx_get_compat_msghdr+0x10/0x10 [ 111.369426][ T7200] ? __pfx___lock_acquire+0x10/0x10 [ 111.370790][ T7200] ___sys_sendmsg+0x1b0/0x1e0 [ 111.372028][ T7200] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.373415][ T7200] ? lock_acquire+0x2f/0xb0 [ 111.374599][ T7200] ? __fget_files+0x40/0x3f0 [ 111.375813][ T7200] ? fdget+0x176/0x210 [ 111.376894][ T7200] __sys_sendmsg+0x117/0x1f0 [ 111.378120][ T7200] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.379456][ T7200] ? __fget_files+0x244/0x3f0 [ 111.380689][ T7200] __do_fast_syscall_32+0x73/0x120 [ 111.382044][ T7200] do_fast_syscall_32+0x32/0x80 [ 111.383301][ T7200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.384945][ T7200] RIP: 0023:0xf7fb0579 [ 111.386051][ T7200] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.390985][ T7200] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 111.393151][ T7200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 111.395197][ T7200] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.397274][ T7200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.399320][ T7200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.401535][ T7200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.403628][ T7200] [ 112.342378][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 112.342387][ T40] audit: type=1326 audit(1729069360.362:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.350100][ T7220] FAULT_INJECTION: forcing a failure. [ 112.350100][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 112.353486][ T7220] CPU: 2 UID: 0 PID: 7220 Comm: syz.2.407 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 112.356183][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.358970][ T7220] Call Trace: [ 112.359852][ T7220] [ 112.360647][ T7220] dump_stack_lvl+0x16c/0x1f0 [ 112.361911][ T7220] should_fail_ex+0x497/0x5b0 [ 112.363146][ T7220] ? fs_reclaim_acquire+0xae/0x150 [ 112.364778][ T7220] should_failslab+0xc2/0x120 [ 112.366422][ T7220] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 112.368017][ T7220] ? audit_log_start+0x2bc/0x7e0 [ 112.369348][ T7220] audit_log_start+0x2bc/0x7e0 [ 112.370673][ T7220] ? __pfx_audit_log_start+0x10/0x10 [ 112.371945][ T40] audit: type=1326 audit(1729069360.362:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.372056][ T7220] ? __pfx_vfs_statx+0x10/0x10 [ 112.377655][ T40] audit: type=1326 audit(1729069360.362:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.378926][ T7220] ? migrate_enable+0x1ef/0x260 [ 112.385632][ T7220] ? __pfx_migrate_enable+0x10/0x10 [ 112.387033][ T7220] audit_seccomp+0x61/0x280 [ 112.388231][ T7220] __seccomp_filter+0x816/0xf40 [ 112.389516][ T7220] ? __pfx___seccomp_filter+0x10/0x10 [ 112.390924][ T7220] ? getname_flags.part.0+0x1c5/0x550 [ 112.392340][ T7220] ? ksys_write+0x1ad/0x260 [ 112.393546][ T7220] __secure_computing+0x26c/0x3f0 [ 112.394873][ T7220] syscall_trace_enter+0x8b/0x240 [ 112.395249][ T40] audit: type=1326 audit(1729069360.362:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.396192][ T7220] __do_fast_syscall_32+0xc2/0x120 [ 112.401501][ T40] audit: type=1326 audit(1729069360.362:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.402791][ T7220] do_fast_syscall_32+0x32/0x80 [ 112.402810][ T7220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.402824][ T7220] RIP: 0023:0xf7f44579 [ 112.402834][ T7220] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.417051][ T7220] RSP: 002b:00000000f56c65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 112.419237][ T7220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56c6620 [ 112.421279][ T7220] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 112.423338][ T7220] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 112.425388][ T7220] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 112.427423][ T7220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.429478][ T7220] [ 112.445522][ T7220] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 112.447498][ T7220] audit: out of memory in audit_log_start [ 112.450495][ T40] audit: type=1326 audit(1729069360.462:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.456593][ T40] audit: type=1326 audit(1729069360.472:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.463992][ T40] audit: type=1326 audit(1729069360.482:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 112.709912][ T7218] fuse: Unknown parameter 'ûd¡' [ 113.153165][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.985754][ T67] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.994533][ T67] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 116.281948][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 116.432083][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 116.438041][ T35] usb 8-1: config 0 has no interfaces? [ 116.441630][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.444454][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.446640][ T35] usb 8-1: Product: syz [ 116.447774][ T35] usb 8-1: Manufacturer: syz [ 116.449199][ T35] usb 8-1: SerialNumber: syz [ 116.451289][ T35] usb 8-1: config 0 descriptor?? [ 116.880036][ T8] usb 8-1: USB disconnect, device number 7 [ 117.043261][ T4786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.044535][ T5355] Bluetooth: hci4: command 0x1003 tx timeout [ 117.512186][ T7304] random: crng reseeded on system resumption [ 117.521368][ T7304] Restarting kernel threads ... done. [ 117.752314][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.902825][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 117.913884][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.916042][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.918524][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.921417][ T8] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.928138][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.931853][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.934519][ T7307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.934650][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.945538][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 118.210189][ T7295] delete_channel: no stack [ 118.393050][ T7309] netlink: 'syz.1.431': attribute type 13 has an invalid length. [ 118.476853][ T7315] capability: warning: `syz.2.432' uses 32-bit capabilities (legacy support in use) [ 119.156381][ T7319] bridge_slave_1: left allmulticast mode [ 119.190195][ T7319] bridge_slave_1: left promiscuous mode [ 119.202080][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.803303][ T7352] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.159810][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 121.162433][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 121.295139][ T30] usb 5-1: USB disconnect, device number 5 [ 121.431731][ T7360] bond1: entered promiscuous mode [ 121.433356][ T7360] bond1: entered allmulticast mode [ 121.434943][ T7360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.608204][ T7367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.760418][ T7369] /dev/sg0: Can't lookup blockdev [ 121.842703][ T7375] netlink: 'syz.2.449': attribute type 13 has an invalid length. [ 122.005331][ T7380] FAULT_INJECTION: forcing a failure. [ 122.005331][ T7380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.009455][ T7380] CPU: 2 UID: 0 PID: 7380 Comm: syz.2.450 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 122.012496][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.015593][ T7380] Call Trace: [ 122.016686][ T7380] [ 122.017643][ T7380] dump_stack_lvl+0x16c/0x1f0 [ 122.019043][ T7380] should_fail_ex+0x497/0x5b0 [ 122.020508][ T7380] _copy_to_user+0x30/0xc0 [ 122.021921][ T7380] simple_read_from_buffer+0xd0/0x160 [ 122.023588][ T7380] proc_fail_nth_read+0x198/0x270 [ 122.025148][ T7380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.026862][ T7380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.028574][ T7380] vfs_read+0x1ce/0xbd0 [ 122.029881][ T7380] ? __fget_files+0x23a/0x3f0 [ 122.031342][ T7380] ? fdget_pos+0x24c/0x360 [ 122.032735][ T7380] ? __pfx_lock_release+0x10/0x10 [ 122.034298][ T7380] ? trace_lock_acquire+0x14a/0x1d0 [ 122.035915][ T7380] ? __pfx_vfs_read+0x10/0x10 [ 122.037276][ T7380] ? __pfx___mutex_lock+0x10/0x10 [ 122.038758][ T7380] ? __fget_files+0x244/0x3f0 [ 122.040113][ T7380] ksys_read+0x12f/0x260 [ 122.041333][ T7380] ? __pfx_ksys_read+0x10/0x10 [ 122.042706][ T7380] __do_fast_syscall_32+0x73/0x120 [ 122.044149][ T7380] do_fast_syscall_32+0x32/0x80 [ 122.045562][ T7380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.047394][ T7380] RIP: 0023:0xf7f44579 [ 122.048668][ T7380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.054065][ T7380] RSP: 002b:00000000f56c65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 122.056201][ T7380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56c6620 [ 122.058262][ T7380] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 122.060287][ T7380] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 122.062485][ T7380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 122.064524][ T7380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.066535][ T7380] [ 122.090693][ T7384] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 122.111973][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.137897][ T7390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.140633][ T7390] IPv6: NLM_F_CREATE should be set when creating new route [ 122.163502][ T7391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.272727][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 122.277070][ T30] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 122.279884][ T30] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 122.284207][ T30] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 122.287429][ T30] usb 5-1: config 250 has no interface number 0 [ 122.289677][ T30] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 122.294969][ T30] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 122.298688][ T30] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.305544][ T30] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.309429][ T30] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 122.315153][ T30] usb 5-1: config 250 interface 228 has no altsetting 0 [ 122.318994][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 122.325555][ T30] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 122.328423][ T30] usb 5-1: Product: syz [ 122.329888][ T30] usb 5-1: SerialNumber: syz [ 122.341722][ T30] hub 5-1:250.228: bad descriptor, ignoring hub [ 122.347504][ T30] hub 5-1:250.228: probe with driver hub failed with error -5 [ 122.547623][ T30] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 122.576211][ T7397] 9pnet_fd: Insufficient options for proto=fd [ 122.633475][ T7402] 9pnet_fd: Insufficient options for proto=fd [ 122.635421][ T7402] netlink: 'syz.3.456': attribute type 5 has an invalid length. [ 122.637674][ T7402] openvswitch: : Dropping previously announced user features [ 122.851032][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 123.072057][ T5408] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 123.162229][ T5401] usb 5-1: USB disconnect, device number 6 [ 123.165720][ T5401] usblp0: removed [ 123.222030][ T5408] usb 7-1: Using ep0 maxpacket: 32 [ 123.225310][ T5408] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.227809][ T5408] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.230340][ T5408] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.233127][ T5408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.235987][ T5408] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.239168][ T5408] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.243222][ T5408] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.245683][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.248717][ T5408] usb 7-1: config 0 descriptor?? [ 123.294303][ T7406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.387167][ T7410] netlink: 'syz.1.458': attribute type 13 has an invalid length. [ 123.458154][ T5408] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 123.464149][ T5408] usb 7-1: USB disconnect, device number 8 [ 123.468415][ T5408] usblp0: removed [ 123.752490][ T7415] Cannot find map_set index 0 as target [ 123.921955][ T5408] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 124.073125][ T5408] usb 7-1: Using ep0 maxpacket: 32 [ 124.076185][ T5408] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.078801][ T5408] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.081174][ T5408] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.084869][ T5408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.088018][ T5408] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.091214][ T5408] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.094617][ T5408] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.096866][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.099759][ T5408] usb 7-1: config 0 descriptor?? [ 124.324721][ T5408] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.329409][ T5408] usb 7-1: USB disconnect, device number 9 [ 124.332880][ T5408] usblp0: removed [ 124.902064][ T7440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.296969][ T7449] 9pnet_fd: Insufficient options for proto=fd [ 125.371231][ T7456] 9pnet_fd: Insufficient options for proto=fd [ 125.373371][ T7456] netlink: 'syz.0.467': attribute type 5 has an invalid length. [ 125.375739][ T7456] openvswitch: : Dropping previously announced user features [ 125.426578][ T7458] netlink: 9 bytes leftover after parsing attributes in process `syz.2.469'. [ 125.430840][ T7458] gretap0: entered promiscuous mode [ 125.440393][ T7458] netlink: 5 bytes leftover after parsing attributes in process `syz.2.469'. [ 125.442828][ T7458] 0ªX¹¦D: renamed from gretap0 [ 125.444935][ T7458] 0ªX¹¦D: left promiscuous mode [ 125.446234][ T7458] 0ªX¹¦D: entered allmulticast mode [ 125.448443][ T7458] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 125.567817][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 125.567826][ T40] audit: type=1326 audit(1729069373.582:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 125.569621][ T7458] syz.2.469 (7458) used greatest stack depth: 21424 bytes left [ 125.680381][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.145831][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 126.148022][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.149968][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.152132][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.154278][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.156460][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.158407][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 126.160306][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.163270][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 126.165472][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.167497][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.169415][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.171374][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.173387][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 126.175635][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.177763][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.179816][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.183554][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.185505][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.187420][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.189345][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.191268][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.193290][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.195214][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.197146][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.199072][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.201007][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.204589][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.206525][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.208418][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.210396][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.212401][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.214854][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.216800][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.218736][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.220658][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.222938][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.224860][ T5408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.230571][ T5408] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 127.369733][ T7494] team0: Port device team_slave_0 removed [ 127.374456][ T7494] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 127.403121][ T7493] team0: Port device team_slave_0 removed [ 127.406028][ T7493] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 128.505880][ T7524] FAULT_INJECTION: forcing a failure. [ 128.505880][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 128.515467][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.0.486 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 128.519224][ T7524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.522946][ T7524] Call Trace: [ 128.524159][ T7524] [ 128.525254][ T7524] dump_stack_lvl+0x16c/0x1f0 [ 128.526971][ T7524] should_fail_ex+0x497/0x5b0 [ 128.528622][ T7524] ? fs_reclaim_acquire+0xae/0x150 [ 128.530491][ T7524] should_failslab+0xc2/0x120 [ 128.532209][ T7524] __kmalloc_node_noprof+0xd1/0x440 [ 128.534105][ T7524] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 128.536083][ T7524] __kvmalloc_node_noprof+0xad/0x1a0 [ 128.538078][ T7524] v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 128.540124][ T7524] vicodec_open+0x1b3/0xfc0 [ 128.541722][ T7524] v4l2_open+0x222/0x490 [ 128.543275][ T7524] ? __pfx_v4l2_open+0x10/0x10 [ 128.545038][ T7524] chrdev_open+0x237/0x6a0 [ 128.546820][ T7524] ? __pfx_chrdev_open+0x10/0x10 [ 128.548626][ T7524] ? security_file_open+0x62a/0x9d0 [ 128.550475][ T7524] do_dentry_open+0x6ca/0x1530 [ 128.552151][ T7524] ? __pfx_chrdev_open+0x10/0x10 [ 128.554102][ T7524] ? inode_permission+0xdd/0x5f0 [ 128.556093][ T7524] vfs_open+0x82/0x3f0 [ 128.557632][ T7524] ? may_open+0x1f2/0x400 [ 128.559287][ T7524] path_openat+0x1e6a/0x2d60 [ 128.561079][ T7524] ? __pfx_path_openat+0x10/0x10 [ 128.562903][ T7524] ? __pfx___lock_acquire+0x10/0x10 [ 128.564816][ T7524] do_filp_open+0x1dc/0x430 [ 128.566484][ T7524] ? __pfx_do_filp_open+0x10/0x10 [ 128.568308][ T7524] ? find_held_lock+0x2d/0x110 [ 128.570085][ T7524] ? _raw_spin_unlock+0x28/0x50 [ 128.571859][ T7524] ? alloc_fd+0x2d7/0x6c0 [ 128.573452][ T7524] do_sys_openat2+0x17a/0x1e0 [ 128.575177][ T7524] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.577034][ T7524] ? __fget_files+0x244/0x3f0 [ 128.578298][ T7524] __ia32_compat_sys_openat+0x16e/0x210 [ 128.579727][ T7524] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 128.581281][ T7524] ? ksys_write+0x1ad/0x260 [ 128.582422][ T7524] __do_fast_syscall_32+0x73/0x120 [ 128.583707][ T7524] do_fast_syscall_32+0x32/0x80 [ 128.584977][ T7524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.586596][ T7524] RIP: 0023:0xf7fa6579 [ 128.587626][ T7524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 128.592511][ T7524] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 128.594623][ T7524] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000280 [ 128.596668][ T7524] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.598712][ T7524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.600750][ T7524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.602768][ T7524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.604805][ T7524] [ 128.608260][ T7524] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 129.401268][ T7532] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 129.524009][ T7536] kvm: kvm [7535]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x21 [ 129.817997][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.491'. [ 129.825563][ T7539] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 129.828248][ T7539] netlink: 224 bytes leftover after parsing attributes in process `syz.2.491'. [ 129.890658][ T7542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.814088][ T7574] netlink: 'syz.3.500': attribute type 4 has an invalid length. [ 131.072219][ T7576] bridge_slave_1: left allmulticast mode [ 131.073931][ T7576] bridge_slave_1: left promiscuous mode [ 131.075756][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.106880][ T7576] bridge_slave_0: left allmulticast mode [ 131.108911][ T7576] bridge_slave_0: left promiscuous mode [ 131.111155][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.139227][ T7576] bridge0: left allmulticast mode [ 131.238835][ T7580] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 131.461259][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 131.471912][ T7586] loop7: detected capacity change from 0 to 16384 [ 131.602156][ T7591] Invalid logical block size (1) [ 131.752151][ T5380] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.922649][ T5380] usb 5-1: Using ep0 maxpacket: 8 [ 131.929801][ T5380] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.932319][ T5380] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.934823][ T5380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.937316][ T5380] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.939809][ T5380] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 131.942659][ T5380] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.946577][ T5380] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.949726][ T5380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.963543][ T5380] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 132.079467][ T7604] syz.3.509: attempt to access beyond end of device [ 132.079467][ T7604] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 132.083346][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.092387][ T7604] EXT4-fs (loop3): unable to read superblock [ 132.171370][ T5401] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 132.322086][ T5401] usb 7-1: Using ep0 maxpacket: 8 [ 132.338662][ T5401] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 132.341093][ T5401] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.344208][ T5401] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.346967][ T5401] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 132.349682][ T5401] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 132.354457][ T5401] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.357908][ T5401] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.360439][ T5401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.367386][ T5401] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 133.651300][ T40] audit: type=1326 audit(1729069381.662:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.656974][ T40] audit: type=1326 audit(1729069381.662:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.662410][ T40] audit: type=1326 audit(1729069381.672:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.668109][ T40] audit: type=1326 audit(1729069381.672:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.677371][ T40] audit: type=1326 audit(1729069381.672:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.688438][ T40] audit: type=1326 audit(1729069381.682:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.700955][ T40] audit: type=1326 audit(1729069381.682:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.706738][ T40] audit: type=1326 audit(1729069381.682:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.712813][ T40] audit: type=1326 audit(1729069381.682:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 133.718404][ T40] audit: type=1326 audit(1729069381.682:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 134.297319][ T7619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.596854][ T7624] FAULT_INJECTION: forcing a failure. [ 134.596854][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.601082][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.1.514 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 134.604692][ T7624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.608165][ T7624] Call Trace: [ 134.609336][ T7624] [ 134.610362][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 134.611995][ T7624] should_fail_ex+0x497/0x5b0 [ 134.613681][ T7624] _copy_from_user+0x30/0xf0 [ 134.615284][ T7624] io_uring_setup+0xa2/0x3750 [ 134.616901][ T7624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.618497][ T7624] ? __pfx_io_uring_setup+0x10/0x10 [ 134.620102][ T7624] ? __fget_files+0x244/0x3f0 [ 134.621628][ T7624] ? ksys_write+0x1ad/0x260 [ 134.623187][ T7624] ? __pfx_ksys_write+0x10/0x10 [ 134.624875][ T7624] __ia32_sys_io_uring_setup+0x97/0x140 [ 134.626733][ T7624] __do_fast_syscall_32+0x73/0x120 [ 134.628451][ T7624] do_fast_syscall_32+0x32/0x80 [ 134.630127][ T7624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.632161][ T7624] RIP: 0023:0xf7fb0579 [ 134.633592][ T7624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 134.639803][ T7624] RSP: 002b:00000000f573651c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 134.642546][ T7624] RAX: ffffffffffffffda RBX: 0000000000006ebf RCX: 0000000020000180 [ 134.645158][ T7624] RDX: 00000000f728d2f4 RSI: 0000000000000001 RDI: 00000000f573657c [ 134.647685][ T7624] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.650023][ T7624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 134.652635][ T7624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.655225][ T7624] [ 135.158319][ T7643] vlan0: entered allmulticast mode [ 135.159932][ T7643] vlan1: entered allmulticast mode [ 135.161518][ T7643] veth0_vlan: entered allmulticast mode [ 135.166126][ T7643] bridge0: port 2(vlan0) entered blocking state [ 135.168141][ T7643] bridge0: port 2(vlan0) entered disabled state [ 135.170710][ T7643] vlan0: entered promiscuous mode [ 135.172213][ T7643] vlan1: entered promiscuous mode [ 135.173958][ T7643] bridge0: port 2(vlan0) entered blocking state [ 135.175703][ T7643] bridge0: port 2(vlan0) entered forwarding state [ 135.321236][ T7650] netlink: 'syz.1.523': attribute type 4 has an invalid length. [ 135.424189][ T8] usb 5-1: USB disconnect, device number 7 [ 135.676936][ T5408] usb 7-1: USB disconnect, device number 10 [ 135.976861][ T7661] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 136.705855][ T7677] FAULT_INJECTION: forcing a failure. [ 136.705855][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.710828][ T7677] CPU: 3 UID: 0 PID: 7677 Comm: syz.0.531 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 136.714597][ T7677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.717611][ T7677] Call Trace: [ 136.719301][ T7677] [ 136.720733][ T7677] dump_stack_lvl+0x16c/0x1f0 [ 136.722689][ T7677] should_fail_ex+0x497/0x5b0 [ 136.723837][ T7677] _copy_from_user+0x30/0xf0 [ 136.725010][ T7677] ia32_restore_sigcontext+0xc4/0x5d0 [ 136.726335][ T7677] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 136.728135][ T7677] ? __pfx_lock_release+0x10/0x10 [ 136.729505][ T7677] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.730730][ T7677] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.731970][ T7677] __do_compat_sys_rt_sigreturn+0x116/0x1f0 [ 136.733377][ T7677] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 136.735102][ T7677] do_int80_emulation+0x104/0x200 [ 136.736343][ T7677] asm_int80_emulation+0x1a/0x20 [ 136.737894][ T7677] RIP: 0023:0xf7fa65a7 [ 136.739682][ T7677] Code: 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 58 b8 77 00 00 00 cd 80 90 8d b4 26 00 00 00 00 b8 ad 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 90 55 89 e5 57 56 8d 3d 2c cc ff ff 53 e8 [ 136.747901][ T7677] RSP: 002b:00000000f5704940 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 136.749902][ T7677] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f57049cc [ 136.752004][ T7677] RDX: 00000000f570494c RSI: 0000000000000000 RDI: 0000000000000000 [ 136.754013][ T7677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.756016][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.758305][ T7677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.761582][ T7677] [ 137.161985][ T5408] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 137.321974][ T5408] usb 7-1: Using ep0 maxpacket: 8 [ 137.324421][ T5408] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 137.326823][ T5408] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.329223][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.331607][ T5408] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 137.334377][ T5408] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 137.336815][ T5408] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.339944][ T5408] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.342386][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.351250][ T5408] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 138.751353][ T7676] syz.0.531 (7676) used greatest stack depth: 20944 bytes left [ 139.246221][ T7724] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 139.248469][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.253369][ T7724] vhci_hcd vhci_hcd.0: Device attached [ 139.259566][ T7725] vhci_hcd: cannot find the pending unlink 5 [ 139.264996][ T7725] usbip_core: unknown command [ 139.266647][ T7725] vhci_hcd: unknown pdu 589373450 [ 139.268377][ T7725] usbip_core: unknown command [ 139.274157][ T67] vhci_hcd: stop threads [ 139.276635][ T67] vhci_hcd: release socket [ 139.278961][ T67] vhci_hcd: disconnect device [ 139.853107][ T7736] 9pnet_fd: Insufficient options for proto=fd [ 139.930937][ T7730] 9pnet_fd: Insufficient options for proto=fd [ 139.938522][ T7730] netlink: 'syz.1.542': attribute type 5 has an invalid length. [ 139.944948][ T7730] openvswitch: : Dropping previously announced user features [ 140.700199][ T6045] usb 7-1: USB disconnect, device number 11 [ 140.887741][ T7758] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 140.894698][ T7746] bond_slave_0: entered promiscuous mode [ 140.896305][ T7746] bond_slave_1: entered promiscuous mode [ 140.897840][ T7746] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 140.949118][ T7746] bond_slave_0: left promiscuous mode [ 140.951105][ T7746] bond_slave_1: left promiscuous mode [ 140.953091][ T7746] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 141.201960][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 141.332038][ T30] usb 8-1: device descriptor read/64, error -71 [ 141.581968][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 141.732080][ T30] usb 8-1: device descriptor read/64, error -71 [ 141.745011][ T7782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.844630][ T30] usb usb8-port1: attempt power cycle [ 142.181957][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 142.202792][ T30] usb 8-1: device descriptor read/8, error -71 [ 142.461951][ T30] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 142.482727][ T30] usb 8-1: device descriptor read/8, error -71 [ 142.592735][ T30] usb usb8-port1: unable to enumerate USB device [ 143.762619][ T7796] Invalid ELF header magic: != ELF [ 143.884506][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 143.884595][ T40] audit: type=1326 audit(1729069391.902:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.900603][ T40] audit: type=1326 audit(1729069391.902:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.906385][ T40] audit: type=1326 audit(1729069391.902:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.912756][ T40] audit: type=1326 audit(1729069391.902:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.918386][ T40] audit: type=1326 audit(1729069391.902:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.921723][ T7803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.924188][ T40] audit: type=1326 audit(1729069391.912:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.932765][ T40] audit: type=1326 audit(1729069391.912:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.938732][ T40] audit: type=1326 audit(1729069391.912:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.944543][ T40] audit: type=1326 audit(1729069391.922:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 143.950113][ T40] audit: type=1326 audit(1729069391.922:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.3.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 144.318079][ T7822] 9pnet_fd: Insufficient options for proto=fd [ 144.344215][ T7824] FAULT_INJECTION: forcing a failure. [ 144.344215][ T7824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.348921][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.2.562 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 144.352727][ T7824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.356700][ T7824] Call Trace: [ 144.357941][ T7824] [ 144.359019][ T7824] dump_stack_lvl+0x16c/0x1f0 [ 144.360707][ T7824] should_fail_ex+0x497/0x5b0 [ 144.362411][ T7824] _copy_to_user+0x30/0xc0 [ 144.364008][ T7824] simple_read_from_buffer+0xd0/0x160 [ 144.365832][ T7824] proc_fail_nth_read+0x198/0x270 [ 144.367178][ T7824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.369008][ T7824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.370464][ T7824] vfs_read+0x1ce/0xbd0 [ 144.371768][ T7824] ? __fget_files+0x23a/0x3f0 [ 144.373036][ T7824] ? fdget_pos+0x24c/0x360 [ 144.374184][ T7824] ? __pfx_lock_release+0x10/0x10 [ 144.375480][ T7824] ? trace_lock_acquire+0x14a/0x1d0 [ 144.376829][ T7824] ? __pfx_vfs_read+0x10/0x10 [ 144.378053][ T7824] ? __pfx___mutex_lock+0x10/0x10 [ 144.379368][ T7824] ? __fget_files+0x244/0x3f0 [ 144.380595][ T7824] ksys_read+0x12f/0x260 [ 144.381788][ T7824] ? __pfx_ksys_read+0x10/0x10 [ 144.383363][ T7824] __do_fast_syscall_32+0x73/0x120 [ 144.384828][ T7824] do_fast_syscall_32+0x32/0x80 [ 144.386137][ T7824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.387781][ T7824] RIP: 0023:0xf7f44579 [ 144.388842][ T7824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.393898][ T7824] RSP: 002b:00000000f56c65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 144.396110][ T7824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56c6620 [ 144.398161][ T7824] RDX: 000000000000000f RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 144.400200][ T7824] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 144.402228][ T7824] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 144.404257][ T7824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.406317][ T7824] [ 145.252521][ T5380] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 145.413561][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.416738][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.420197][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.424840][ T5380] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 145.427261][ T5380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.436095][ T5380] usb 6-1: config 0 descriptor?? [ 145.473934][ T7841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.850380][ T5380] usbhid 6-1:0.0: can't add hid device: -71 [ 145.854440][ T5380] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 145.864600][ T5380] usb 6-1: USB disconnect, device number 5 [ 147.364755][ T7878] netlink: 'syz.3.576': attribute type 13 has an invalid length. [ 147.461543][ T7884] FAULT_INJECTION: forcing a failure. [ 147.461543][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 147.470581][ T7884] CPU: 3 UID: 0 PID: 7884 Comm: syz.2.578 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 147.473356][ T7884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.476103][ T7884] Call Trace: [ 147.477000][ T7884] [ 147.477774][ T7884] dump_stack_lvl+0x16c/0x1f0 [ 147.478951][ T7884] should_fail_ex+0x497/0x5b0 [ 147.480170][ T7884] should_failslab+0xc2/0x120 [ 147.481495][ T7884] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 147.482886][ T7884] ? skb_clone+0x190/0x3f0 [ 147.484052][ T7884] skb_clone+0x190/0x3f0 [ 147.485174][ T7884] netlink_deliver_tap+0xb26/0xcf0 [ 147.486505][ T7884] netlink_unicast+0x6b4/0x7f0 [ 147.487752][ T7884] ? __pfx_netlink_unicast+0x10/0x10 [ 147.489138][ T7884] netlink_ack+0x6a5/0xb20 [ 147.490298][ T7884] netlink_rcv_skb+0x327/0x410 [ 147.491538][ T7884] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.492980][ T7884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.494339][ T7884] ? __pfx_aa_get_newest_label+0x10/0x10 [ 147.495799][ T7884] ? bpf_lsm_capable+0x9/0x10 [ 147.497046][ T7884] ? security_capable+0x7e/0x260 [ 147.498329][ T7884] ? ns_capable+0xd7/0x110 [ 147.499494][ T7884] nfnetlink_rcv+0x1b4/0x430 [ 147.500704][ T7884] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.502039][ T7884] ? netlink_deliver_tap+0x1ae/0xcf0 [ 147.503399][ T7884] netlink_unicast+0x53c/0x7f0 [ 147.504654][ T7884] ? __pfx_netlink_unicast+0x10/0x10 [ 147.506021][ T7884] ? __phys_addr_symbol+0x30/0x80 [ 147.507328][ T7884] ? __check_object_size+0x488/0x710 [ 147.508722][ T7884] netlink_sendmsg+0x8b8/0xd70 [ 147.509970][ T7884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.511334][ T7884] ? lock_acquire+0x2f/0xb0 [ 147.512521][ T7884] ____sys_sendmsg+0x9ae/0xb40 [ 147.513774][ T7884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.515134][ T7884] ? get_compat_msghdr+0x11b/0x170 [ 147.516471][ T7884] ? __pfx___lock_acquire+0x10/0x10 [ 147.517844][ T7884] ___sys_sendmsg+0x135/0x1e0 [ 147.519071][ T7884] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.520426][ T7884] ? lock_acquire+0x2f/0xb0 [ 147.521626][ T7884] ? __fget_files+0x40/0x3f0 [ 147.522900][ T7884] ? fdget+0x176/0x210 [ 147.523965][ T7884] __sys_sendmsg+0x117/0x1f0 [ 147.525183][ T7884] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.526508][ T7884] ? __fget_files+0x244/0x3f0 [ 147.527770][ T7884] __do_fast_syscall_32+0x73/0x120 [ 147.529114][ T7884] do_fast_syscall_32+0x32/0x80 [ 147.530387][ T7884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.532021][ T7884] RIP: 0023:0xf7f44579 [ 147.533087][ T7884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.537968][ T7884] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 147.540739][ T7884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 147.543390][ T7884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.546042][ T7884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.548271][ T7884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 147.550273][ T7884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.552326][ T7884] [ 147.767456][ T7890] netlink: 'syz.3.580': attribute type 4 has an invalid length. [ 148.493330][ T7894] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 148.983659][ T7904] FAULT_INJECTION: forcing a failure. [ 148.983659][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.990204][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.1.584 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 148.993978][ T7904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.997692][ T7904] Call Trace: [ 148.998810][ T7904] [ 148.999837][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 149.001496][ T7904] should_fail_ex+0x497/0x5b0 [ 149.003121][ T7904] _copy_to_user+0x30/0xc0 [ 149.004589][ T7904] simple_read_from_buffer+0xd0/0x160 [ 149.006339][ T7904] proc_fail_nth_read+0x198/0x270 [ 149.007955][ T7904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.009870][ T7904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.011719][ T7904] vfs_read+0x1ce/0xbd0 [ 149.013123][ T7904] ? __fget_files+0x23a/0x3f0 [ 149.014708][ T7904] ? fdget_pos+0x24c/0x360 [ 149.016214][ T7904] ? __pfx_lock_release+0x10/0x10 [ 149.017939][ T7904] ? trace_lock_acquire+0x14a/0x1d0 [ 149.019724][ T7904] ? __pfx_vfs_read+0x10/0x10 [ 149.021382][ T7904] ? __pfx___mutex_lock+0x10/0x10 [ 149.023386][ T7904] ? __fget_files+0x244/0x3f0 [ 149.024982][ T7904] ksys_read+0x12f/0x260 [ 149.026049][ T7904] ? __pfx_ksys_read+0x10/0x10 [ 149.027269][ T7904] __do_fast_syscall_32+0x73/0x120 [ 149.028565][ T7904] do_fast_syscall_32+0x32/0x80 [ 149.029851][ T7904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.031497][ T7904] RIP: 0023:0xf7fb0579 [ 149.032564][ T7904] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.037409][ T7904] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 149.039482][ T7904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5736620 [ 149.041542][ T7904] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 149.043608][ T7904] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 149.045700][ T7904] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 149.047727][ T7904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.049774][ T7904] [ 150.446680][ T7920] netlink: 'syz.0.588': attribute type 13 has an invalid length. [ 150.736930][ T7926] 9pnet_fd: Insufficient options for proto=fd [ 150.793421][ T7932] 9pnet_fd: Insufficient options for proto=fd [ 150.795872][ T7932] netlink: 'syz.3.591': attribute type 5 has an invalid length. [ 150.798692][ T7932] openvswitch: : Dropping previously announced user features [ 151.553050][ T7946] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 151.555517][ T7946] netlink: 224 bytes leftover after parsing attributes in process `syz.2.594'. [ 151.732322][ T30] kernel read not supported for file /usbmon0 (pid: 30 comm: kworker/1:0) [ 151.806219][ T7955] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 151.821354][ T7955] netlink: 'syz.3.597': attribute type 2 has an invalid length. [ 152.237826][ T7969] block device autoloading is deprecated and will be removed. [ 152.842784][ T7977] overlayfs: missing 'lowerdir' [ 153.988766][ T7998] random: crng reseeded on system resumption [ 154.464321][ T8007] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 154.521271][ T8013] syz.3.609: attempt to access beyond end of device [ 154.521271][ T8013] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 154.524948][ T8013] EXT4-fs (loop3): unable to read superblock [ 154.564539][ T8013] hub 2-0:1.0: USB hub found [ 154.566300][ T8013] hub 2-0:1.0: 2 ports detected [ 154.952078][ T978] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.103075][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 155.112739][ T978] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 155.115310][ T978] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.117809][ T978] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.120112][ T978] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.132040][ T978] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.135618][ T978] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.138100][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.867959][ T8025] FAULT_INJECTION: forcing a failure. [ 155.867959][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 155.871361][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.3.615 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 155.874515][ T8025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.877417][ T8025] Call Trace: [ 155.878292][ T8025] [ 155.879070][ T8025] dump_stack_lvl+0x16c/0x1f0 [ 155.880328][ T8025] should_fail_ex+0x497/0x5b0 [ 155.881564][ T8025] ? fs_reclaim_acquire+0xae/0x150 [ 155.882901][ T8025] should_failslab+0xc2/0x120 [ 155.884131][ T8025] __kmalloc_noprof+0xcb/0x410 [ 155.885396][ T8025] ? __pfx_d_absolute_path+0x10/0x10 [ 155.886782][ T8025] tomoyo_encode2+0x100/0x3e0 [ 155.888026][ T8025] tomoyo_realpath_from_path+0x1a7/0x710 [ 155.889502][ T8025] tomoyo_path_number_perm+0x245/0x5b0 [ 155.891044][ T8025] ? tomoyo_path_number_perm+0x232/0x5b0 [ 155.892519][ T8025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.894112][ T8025] ? trace_lock_acquire+0x14a/0x1d0 [ 155.895467][ T8025] ? lock_acquire+0x2f/0xb0 [ 155.896653][ T8025] ? __fget_files+0x40/0x3f0 [ 155.897867][ T8025] ? __fget_files+0x244/0x3f0 [ 155.899113][ T8025] security_file_ioctl_compat+0x9b/0x240 [ 155.900824][ T8025] __do_compat_sys_ioctl+0x52/0x2b0 [ 155.902718][ T8025] __do_fast_syscall_32+0x73/0x120 [ 155.904105][ T8025] do_fast_syscall_32+0x32/0x80 [ 155.905390][ T8025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.907030][ T8025] RIP: 0023:0xf7f43579 [ 155.908104][ T8025] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.913084][ T8025] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 155.915232][ T8025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 155.917247][ T8025] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.919201][ T8025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.921730][ T8025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.924013][ T8025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.926061][ T8025] [ 155.927374][ T8025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.933642][ T978] usb 6-1: usb_control_msg returned -32 [ 155.935107][ T978] usbtmc 6-1:16.0: can't read capabilities [ 156.221185][ T8032] 9pnet_fd: Insufficient options for proto=fd [ 156.270263][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.274254][ T8030] batadv_slave_0: entered promiscuous mode [ 156.284311][ T8038] 9pnet_fd: Insufficient options for proto=fd [ 156.296121][ T8038] netlink: 'syz.0.613': attribute type 5 has an invalid length. [ 156.300417][ T8038] openvswitch: : Dropping previously announced user features [ 157.516375][ T8053] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.618934][ T8057] FAULT_INJECTION: forcing a failure. [ 157.618934][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 157.624473][ T8057] CPU: 3 UID: 0 PID: 8057 Comm: syz.2.623 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 157.627242][ T8057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.629954][ T8057] Call Trace: [ 157.630821][ T8057] [ 157.631599][ T8057] dump_stack_lvl+0x16c/0x1f0 [ 157.632869][ T8057] should_fail_ex+0x497/0x5b0 [ 157.634226][ T8057] ? fs_reclaim_acquire+0xae/0x150 [ 157.635550][ T8057] should_failslab+0xc2/0x120 [ 157.636823][ T8057] kmem_cache_alloc_node_noprof+0x71/0x310 [ 157.638332][ T8057] ? __alloc_skb+0x2b3/0x380 [ 157.639536][ T8057] __alloc_skb+0x2b3/0x380 [ 157.640728][ T8057] ? __pfx___alloc_skb+0x10/0x10 [ 157.642019][ T8057] netlink_alloc_large_skb+0x69/0x130 [ 157.643407][ T8057] netlink_sendmsg+0x689/0xd70 [ 157.644677][ T8057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.646044][ T8057] ? lock_acquire+0x2f/0xb0 [ 157.647282][ T8057] ____sys_sendmsg+0x9ae/0xb40 [ 157.648569][ T8057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.649930][ T8057] ? get_compat_msghdr+0x11b/0x170 [ 157.651248][ T8057] ? __pfx___lock_acquire+0x10/0x10 [ 157.652611][ T8057] ___sys_sendmsg+0x135/0x1e0 [ 157.653832][ T8057] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.655177][ T8057] ? lock_acquire+0x2f/0xb0 [ 157.656362][ T8057] ? __fget_files+0x40/0x3f0 [ 157.657593][ T8057] ? fdget+0x176/0x210 [ 157.658659][ T8057] __sys_sendmsg+0x117/0x1f0 [ 157.660024][ T8057] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.661364][ T8057] ? __fget_files+0x244/0x3f0 [ 157.662582][ T8057] __do_fast_syscall_32+0x73/0x120 [ 157.663896][ T8057] do_fast_syscall_32+0x32/0x80 [ 157.665170][ T8057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.666808][ T8057] RIP: 0023:0xf7f44579 [ 157.667890][ T8057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.672875][ T8057] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 157.674968][ T8057] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000200 [ 157.677027][ T8057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.679203][ T8057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.681249][ T8057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.683277][ T8057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.685336][ T8057] [ 157.698912][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.828616][ T4786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.832962][ T4786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.833354][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.836283][ T4786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.842138][ T4786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.845597][ T4786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.848245][ T4786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.941684][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.982858][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 158.051144][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.123253][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.125745][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.128316][ T8059] bridge_slave_0: entered allmulticast mode [ 158.134891][ T8059] bridge_slave_0: entered promiscuous mode [ 158.142869][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.147679][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.151329][ T8059] bridge_slave_1: entered allmulticast mode [ 158.156742][ T8059] bridge_slave_1: entered promiscuous mode [ 158.220715][ T5408] usb 6-1: USB disconnect, device number 6 [ 158.244714][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.248502][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.309140][ T11] bridge_slave_1: left allmulticast mode [ 158.319773][ T11] bridge_slave_1: left promiscuous mode [ 158.323123][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.342596][ T11] bridge_slave_0: left allmulticast mode [ 158.344561][ T11] bridge_slave_0: left promiscuous mode [ 158.346406][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.412259][ T8077] FAULT_INJECTION: forcing a failure. [ 158.412259][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 158.415530][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.1.629 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 158.418110][ T8077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.420749][ T8077] Call Trace: [ 158.421567][ T8077] [ 158.422292][ T8077] dump_stack_lvl+0x16c/0x1f0 [ 158.423465][ T8077] should_fail_ex+0x497/0x5b0 [ 158.424677][ T8077] ? fs_reclaim_acquire+0xae/0x150 [ 158.425931][ T8077] should_failslab+0xc2/0x120 [ 158.427058][ T8077] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 158.428465][ T8077] ? __d_alloc+0x35/0x8c0 [ 158.429569][ T8077] __d_alloc+0x35/0x8c0 [ 158.430611][ T8077] d_alloc+0x4a/0x1e0 [ 158.431595][ T8077] d_alloc_parallel+0xe9/0x12b0 [ 158.432818][ T8077] ? __d_lookup+0x25c/0x4a0 [ 158.433919][ T8077] ? trace_lock_acquire+0x14a/0x1d0 [ 158.435173][ T8077] ? __pfx_d_alloc_parallel+0x10/0x10 [ 158.436497][ T8077] ? __d_lookup+0x266/0x4a0 [ 158.437632][ T8077] lookup_open.isra.0+0xab5/0x14c0 [ 158.438885][ T8077] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 158.440239][ T8077] ? path_openat+0x88a/0x2d60 [ 158.441409][ T8077] ? lookup_fast+0x155/0x540 [ 158.442560][ T8077] path_openat+0x904/0x2d60 [ 158.443689][ T8077] ? __pfx_path_openat+0x10/0x10 [ 158.444909][ T8077] do_filp_open+0x1dc/0x430 [ 158.446039][ T8077] ? __pfx_do_filp_open+0x10/0x10 [ 158.447286][ T8077] ? __pfx_kfree_link+0x10/0x10 [ 158.448530][ T8077] ? _raw_spin_unlock+0x3e/0x50 [ 158.449700][ T8077] ? alloc_fd+0x2d7/0x6c0 [ 158.450781][ T8077] do_sys_openat2+0x17a/0x1e0 [ 158.451953][ T8077] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.453258][ T8077] ? __fget_files+0x244/0x3f0 [ 158.454487][ T8077] __ia32_compat_sys_openat+0x16e/0x210 [ 158.455937][ T8077] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 158.457522][ T8077] ? ksys_write+0x1ad/0x260 [ 158.458665][ T8077] __do_fast_syscall_32+0x73/0x120 [ 158.459953][ T8077] do_fast_syscall_32+0x32/0x80 [ 158.461236][ T8077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.462906][ T8077] RIP: 0023:0xf7fb0579 [ 158.463960][ T8077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.468889][ T8077] RSP: 002b:00000000f57364f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 158.470978][ T8077] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7310cd6 [ 158.472961][ T8077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f743bff4 [ 158.474959][ T8077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.476988][ T8077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.478939][ T8077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.480926][ T8077] [ 158.779390][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.788320][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.796037][ T11] bond0 (unregistering): Released all slaves [ 158.880069][ T11] bond1 (unregistering): Released all slaves [ 158.887132][ T8059] team0: Port device team_slave_0 added [ 158.923469][ T8059] team0: Port device team_slave_1 added [ 159.007346][ T11] : left promiscuous mode [ 159.021551][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.024222][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.032957][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.047274][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.049667][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.064525][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.151382][ T8059] hsr_slave_0: entered promiscuous mode [ 159.162199][ T8059] hsr_slave_1: entered promiscuous mode [ 159.175460][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.179273][ T8059] Cannot create hsr debugfs directory [ 159.395514][ T11] hsr_slave_0: left promiscuous mode [ 159.402400][ T11] hsr_slave_1: left promiscuous mode [ 159.405171][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.407486][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.410718][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.445906][ T11] veth1_macvtap: left promiscuous mode [ 159.447535][ T11] veth0_macvtap: left promiscuous mode [ 159.449292][ T11] veth1_vlan: left promiscuous mode [ 159.451042][ T11] veth0_vlan: left promiscuous mode [ 159.912716][ T4786] Bluetooth: hci1: command tx timeout [ 160.126549][ T11] team0 (unregistering): Port device team_slave_1 removed [ 160.763890][ T8099] netlink: 'syz.1.633': attribute type 13 has an invalid length. [ 160.902488][ T8124] input: syz0 as /devices/virtual/input/input6 [ 161.063177][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 161.066509][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 161.320577][ T8059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.324826][ T8059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.328804][ T8059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.342637][ T8059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.454417][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.465648][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.469528][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.471361][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.478372][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.480205][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.599021][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.624865][ T8168] netlink: 72 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.633302][ T8059] veth0_vlan: entered promiscuous mode [ 161.636964][ T8059] veth1_vlan: entered promiscuous mode [ 161.663339][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 161.670012][ T8059] veth0_macvtap: entered promiscuous mode [ 161.674082][ T8059] veth1_macvtap: entered promiscuous mode [ 161.679903][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.682720][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.685294][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.687932][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.691029][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.693937][ T8170] netlink: 'syz.1.644': attribute type 49 has an invalid length. [ 161.702196][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.705987][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.709586][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.717335][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.720648][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.724387][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.728380][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.733990][ T8059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.736204][ T8059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.738526][ T8059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.741750][ T8059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.769573][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.772032][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.783622][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.786422][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.811973][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 161.814705][ T30] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 161.816940][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.819878][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.823185][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.825909][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.829310][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.831797][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.932396][ T8177] FAULT_INJECTION: forcing a failure. [ 161.932396][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 161.935885][ T8177] CPU: 3 UID: 0 PID: 8177 Comm: syz.2.646 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 161.938587][ T8177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.941348][ T8177] Call Trace: [ 161.942228][ T8177] [ 161.943006][ T8177] dump_stack_lvl+0x16c/0x1f0 [ 161.944254][ T8177] should_fail_ex+0x497/0x5b0 [ 161.945583][ T8177] ? fs_reclaim_acquire+0xae/0x150 [ 161.946912][ T8177] should_failslab+0xc2/0x120 [ 161.948138][ T8177] __kmalloc_noprof+0xcb/0x410 [ 161.949396][ T8177] ? rcu_is_watching+0x12/0xc0 [ 161.950650][ T8177] lsm_blob_alloc+0x68/0x90 [ 161.951828][ T8177] security_sk_alloc+0x30/0x270 [ 161.953275][ T8177] sk_prot_alloc+0xfb/0x2a0 [ 161.954822][ T8177] sk_alloc+0x36/0xb90 [ 161.956146][ T8177] unix_create1+0xa6/0x6c0 [ 161.957837][ T8177] unix_create+0x10e/0x1d0 [ 161.959357][ T8177] __sock_create+0x32e/0x840 [ 161.960904][ T8177] __sys_socketpair+0x25d/0x5a0 [ 161.962560][ T8177] ? __pfx___sys_socketpair+0x10/0x10 [ 161.964521][ T8177] ? __might_fault+0xe3/0x190 [ 161.966137][ T8177] __do_compat_sys_socketcall+0x3f8/0x700 [ 161.968068][ T8177] ? __fget_files+0x244/0x3f0 [ 161.969665][ T8177] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 161.971758][ T8177] ? fput+0x30/0x390 [ 161.973180][ T8177] __do_fast_syscall_32+0x73/0x120 [ 161.974911][ T8177] do_fast_syscall_32+0x32/0x80 [ 161.976592][ T8177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.978713][ T8177] RIP: 0023:0xf7f44579 [ 161.980074][ T8177] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.986503][ T8177] RSP: 002b:00000000f56c64a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 161.989299][ T8177] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f56c64bc [ 161.991926][ T8177] RDX: 00000000f73cbff4 RSI: 00000000f7404f00 RDI: 0000000000000000 [ 161.992040][ T4786] Bluetooth: hci1: command tx timeout [ 161.995070][ T8177] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 161.995090][ T8177] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.995100][ T8177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.995122][ T8177] [ 162.068769][ T8180] FAULT_INJECTION: forcing a failure. [ 162.068769][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 162.072645][ T8180] CPU: 3 UID: 0 PID: 8180 Comm: syz.1.647 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 162.075403][ T8180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.078248][ T8180] Call Trace: [ 162.079122][ T8180] [ 162.079903][ T8180] dump_stack_lvl+0x16c/0x1f0 [ 162.081141][ T8180] should_fail_ex+0x497/0x5b0 [ 162.082368][ T8180] ? fs_reclaim_acquire+0xae/0x150 [ 162.083704][ T8180] should_failslab+0xc2/0x120 [ 162.084945][ T8180] __kmalloc_cache_noprof+0x6b/0x310 [ 162.086316][ T8180] ? fuse_alloc_inode+0x21f/0x350 [ 162.087743][ T8180] ? __pfx_fuse_inode_set+0x10/0x10 [ 162.089187][ T8180] fuse_alloc_inode+0x21f/0x350 [ 162.090682][ T8180] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 162.092066][ T8180] alloc_inode+0x5d/0x230 [ 162.093488][ T8180] iget5_locked+0x33b/0x3d0 [ 162.095122][ T8180] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.097014][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 162.097025][ T8180] ? __pfx_fuse_inode_eq+0x10/0x10 [ 162.100139][ T8180] ? __pfx_fuse_inode_set+0x10/0x10 [ 162.103431][ T8180] ? __pfx_iget5_locked+0x10/0x10 [ 162.105231][ T8180] ? kasan_quarantine_put+0x97/0x240 [ 162.107126][ T8180] fuse_iget+0x162/0x8c0 [ 162.108693][ T8180] ? __pfx_fuse_iget+0x10/0x10 [ 162.110415][ T8180] ? __fuse_simple_request+0x462/0xcb0 [ 162.112317][ T8180] fuse_lookup_name+0x44e/0x700 [ 162.113624][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 162.114022][ T8180] ? __pfx_fuse_lookup_name+0x10/0x10 [ 162.116936][ T8180] ? __pfx___mutex_lock+0x10/0x10 [ 162.118252][ T8180] fuse_lookup+0x1b1/0x430 [ 162.119382][ T8180] ? __pfx_fuse_lookup+0x10/0x10 [ 162.120587][ T8180] ? d_alloc_parallel+0x6b8/0x12b0 [ 162.121904][ T8180] ? __pfx_d_alloc_parallel+0x10/0x10 [ 162.122342][ T30] usbtmc 8-1:16.0: can't read capabilities [ 162.124916][ T8180] fuse_atomic_open+0x2cd/0x470 [ 162.126206][ T8180] ? __pfx_fuse_atomic_open+0x10/0x10 [ 162.127636][ T8180] lookup_open.isra.0+0xc9f/0x14c0 [ 162.128992][ T8180] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 162.130550][ T8180] ? path_openat+0x88a/0x2d60 [ 162.132291][ T8180] ? lookup_fast+0x155/0x540 [ 162.133726][ T8180] path_openat+0x904/0x2d60 [ 162.134890][ T8180] ? __pfx_path_openat+0x10/0x10 [ 162.136175][ T8180] ? __pfx___lock_acquire+0x10/0x10 [ 162.137817][ T8180] do_filp_open+0x1dc/0x430 [ 162.139037][ T8180] ? __pfx_do_filp_open+0x10/0x10 [ 162.140507][ T8180] ? _raw_spin_unlock+0x28/0x50 [ 162.141770][ T8180] ? alloc_fd+0x2d7/0x6c0 [ 162.142889][ T8180] do_sys_openat2+0x17a/0x1e0 [ 162.144110][ T8180] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.145459][ T8180] ? __fget_files+0x244/0x3f0 [ 162.146671][ T8180] __ia32_compat_sys_open+0x147/0x1e0 [ 162.148211][ T8180] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 162.149778][ T8180] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 162.152051][ T8180] __do_fast_syscall_32+0x73/0x120 [ 162.153613][ T8180] do_fast_syscall_32+0x32/0x80 [ 162.154795][ T8180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.156412][ T8180] RIP: 0023:0xf7fb0579 [ 162.157513][ T8180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.162670][ T8180] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 162.164795][ T8180] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 162.166796][ T8180] RDX: 0000000000000045 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.168825][ T8180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.171185][ T8180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.173951][ T8180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.175975][ T8180] [ 162.279964][ T8182] 9pnet_fd: Insufficient options for proto=fd [ 162.342215][ T8187] 9pnet_fd: Insufficient options for proto=fd [ 162.347171][ T8187] netlink: 'syz.1.648': attribute type 5 has an invalid length. [ 162.350656][ T8187] openvswitch: : Dropping previously announced user features [ 162.380213][ T8146] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 162.605121][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 162.623469][ T8194] gtp0: entered promiscuous mode [ 162.625138][ T8194] gtp0: entered allmulticast mode [ 162.802783][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 162.802797][ T40] audit: type=1326 audit(1729069410.822:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.832230][ T40] audit: type=1326 audit(1729069410.832:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.846518][ T40] audit: type=1326 audit(1729069410.832:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.854697][ T40] audit: type=1326 audit(1729069410.832:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.881833][ T40] audit: type=1326 audit(1729069410.832:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.905640][ T40] audit: type=1326 audit(1729069410.832:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.922326][ T40] audit: type=1326 audit(1729069410.832:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.940694][ T40] audit: type=1326 audit(1729069410.832:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.949247][ T40] audit: type=1326 audit(1729069410.842:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.962114][ T40] audit: type=1326 audit(1729069410.842:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 163.293819][ T8208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.679220][ T4786] Bluetooth: hci3: unexpected event for opcode 0x080f [ 164.072130][ T4786] Bluetooth: hci1: command tx timeout [ 164.397986][ T30] usb 8-1: USB disconnect, device number 12 [ 164.416310][ T8214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.459834][ T8236] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 165.926645][ T8258] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 165.929503][ T8258] UDF-fs: Scanning with blocksize 512 failed [ 165.934200][ T8258] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 165.936604][ T8258] UDF-fs: Scanning with blocksize 1024 failed [ 165.939020][ T8258] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 165.941347][ T8258] UDF-fs: Scanning with blocksize 2048 failed [ 165.943363][ T8258] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 165.945731][ T8258] UDF-fs: Scanning with blocksize 4096 failed [ 166.162175][ T4786] Bluetooth: hci1: command tx timeout [ 166.302137][ T5401] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.418090][ T8268] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.424240][ T8268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.474251][ T5401] usb 5-1: Using ep0 maxpacket: 8 [ 166.483410][ T5401] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 166.486334][ T5401] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 166.489258][ T5401] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 166.493209][ T5401] usb 5-1: config 250 has no interface number 0 [ 166.495458][ T5401] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 166.501019][ T5401] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 166.505120][ T5401] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.508698][ T5401] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.512687][ T5401] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 166.517472][ T5401] usb 5-1: config 250 interface 228 has no altsetting 0 [ 166.521391][ T5401] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 166.525012][ T5401] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 166.527997][ T5401] usb 5-1: Product: syz [ 166.529485][ T5401] usb 5-1: SerialNumber: syz [ 166.537296][ T5401] hub 5-1:250.228: bad descriptor, ignoring hub [ 166.539742][ T5401] hub 5-1:250.228: probe with driver hub failed with error -5 [ 166.747721][ T5401] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 166.846466][ T4786] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 167.049128][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 167.382103][ T5380] usb 5-1: USB disconnect, device number 8 [ 167.392651][ T5380] usblp0: removed [ 167.753861][ T4786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 167.757137][ T4786] Bluetooth: hci3: Injecting HCI hardware error event [ 167.763111][ T4786] Bluetooth: hci3: hardware error 0x00 [ 168.821752][ T8290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.824624][ T8290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.826295][ T8290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.827886][ T8290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.833717][ T8290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.543823][ T8314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 169.552420][ T8314] UDF-fs: Scanning with blocksize 512 failed [ 169.554199][ T8314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 169.556134][ T8314] UDF-fs: Scanning with blocksize 1024 failed [ 169.567039][ T8314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 169.571203][ T8314] UDF-fs: Scanning with blocksize 2048 failed [ 169.574192][ T8314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 169.576104][ T8314] UDF-fs: Scanning with blocksize 4096 failed [ 169.833457][ T4786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 169.892001][ T5401] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 169.991969][ T4786] Bluetooth: hci0: command 0x0406 tx timeout [ 170.052003][ T5401] usb 7-1: Using ep0 maxpacket: 8 [ 170.055052][ T5401] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 170.057743][ T5401] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 170.060556][ T5401] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 170.066300][ T5401] usb 7-1: config 250 has no interface number 0 [ 170.068293][ T5401] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 170.071934][ T5401] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 170.075237][ T5401] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.078467][ T5401] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.081470][ T5401] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 170.085622][ T5401] usb 7-1: config 250 interface 228 has no altsetting 0 [ 170.089901][ T5401] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 170.092755][ T5401] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 170.095112][ T5401] usb 7-1: Product: syz [ 170.096384][ T5401] usb 7-1: SerialNumber: syz [ 170.102622][ T5401] hub 7-1:250.228: bad descriptor, ignoring hub [ 170.104443][ T5401] hub 7-1:250.228: probe with driver hub failed with error -5 [ 170.133989][ T8332] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.304163][ T5401] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 170.334867][ T8337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 170.336837][ T8337] UDF-fs: Scanning with blocksize 512 failed [ 170.338531][ T8337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 170.340439][ T8337] UDF-fs: Scanning with blocksize 1024 failed [ 170.351568][ T8337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 170.353913][ T8337] UDF-fs: Scanning with blocksize 2048 failed [ 170.357518][ T8337] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 170.359873][ T8337] UDF-fs: Scanning with blocksize 4096 failed [ 170.559811][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.688'. [ 170.624687][ T8342] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 170.627589][ T8342] qnx6: wrong signature (magic) in superblock #1. [ 170.629279][ T8342] qnx6: unable to read the first superblock [ 170.723711][ T5401] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.872082][ T4786] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.872111][ T5349] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.875853][ T5401] usb 6-1: Using ep0 maxpacket: 8 [ 170.878597][ T5401] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 170.881319][ T5401] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 170.887430][ T5583] usb 7-1: USB disconnect, device number 12 [ 170.892410][ T5583] usblp0: removed [ 170.894494][ T5401] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 170.897769][ T5401] usb 6-1: config 250 has no interface number 0 [ 170.899999][ T5401] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 170.907014][ T5401] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 170.910623][ T5401] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.914315][ T5401] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.917870][ T5401] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 170.922814][ T5401] usb 6-1: config 250 interface 228 has no altsetting 0 [ 170.926592][ T5401] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 170.930032][ T5401] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 170.933285][ T5401] usb 6-1: Product: syz [ 170.934706][ T5401] usb 6-1: SerialNumber: syz [ 170.939290][ T5401] hub 6-1:250.228: bad descriptor, ignoring hub [ 170.941624][ T5401] hub 6-1:250.228: probe with driver hub failed with error -5 [ 170.990780][ T8350] 9pnet_fd: Insufficient options for proto=fd [ 171.052684][ T8355] 9pnet_fd: Insufficient options for proto=fd [ 171.056365][ T8355] netlink: 'syz.3.698': attribute type 5 has an invalid length. [ 171.058794][ T8355] openvswitch: : Dropping previously announced user features [ 171.145419][ T5401] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 171.449756][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.694'. [ 171.772906][ T8] usb 6-1: USB disconnect, device number 7 [ 171.782909][ T8] usblp0: removed SYZFAIL: ShmemBuilder: too large output offset size=486377583 consumed=-2103331725 (errno 9: Bad file descriptor) [ 172.070141][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.280582][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.521179][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.665807][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.759869][ T12] bridge_slave_1: left allmulticast mode [ 172.762181][ T12] bridge_slave_1: left promiscuous mode [ 172.764073][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.767887][ T12] bridge_slave_0: left allmulticast mode [ 172.769741][ T12] bridge_slave_0: left promiscuous mode [ 172.771702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.055744][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.061465][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.066988][ T12] bond0 (unregistering): Released all slaves [ 173.153118][ T12] : left promiscuous mode [ 173.441323][ T12] hsr_slave_0: left promiscuous mode [ 173.445289][ T12] hsr_slave_1: left promiscuous mode [ 173.447525][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.450083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.453190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.455770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.479223][ T12] veth1_macvtap: left promiscuous mode [ 173.481123][ T12] veth0_macvtap: left promiscuous mode [ 173.483930][ T12] veth1_vlan: left promiscuous mode [ 173.485683][ T12] veth0_vlan: left promiscuous mode [ 174.109713][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.197478][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.283702][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.350087][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.424089][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.554807][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.624071][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.685769][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.756092][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.877047][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.958645][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.060946][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.152048][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.244019][ T12] bridge_slave_1: left allmulticast mode [ 176.245879][ T12] bridge_slave_1: left promiscuous mode [ 176.248544][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.256389][ T12] bridge_slave_0: left allmulticast mode [ 176.257948][ T12] bridge_slave_0: left promiscuous mode [ 176.259543][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.264061][ T12] vlan0: left promiscuous mode [ 176.265391][ T12] vlan1: left promiscuous mode [ 176.266858][ T12] bridge0: port 2(vlan0) entered disabled state [ 176.269391][ T12] bridge_slave_0: left allmulticast mode [ 176.270870][ T12] bridge_slave_0: left promiscuous mode [ 176.272785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.843586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.849230][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.854753][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 176.862760][ T12] bond0 (unregistering): Released all slaves [ 176.951280][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.956847][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.961448][ T12] bond0 (unregistering): Released all slaves [ 177.046501][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.051763][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.056843][ T12] bond0 (unregistering): Released all slaves [ 177.063962][ T12] bond1 (unregistering): Released all slaves [ 177.138688][ T12] : left promiscuous mode [ 177.202805][ T12] : left promiscuous mode [ 177.776897][ T12] hsr_slave_0: left promiscuous mode [ 177.778826][ T12] hsr_slave_1: left promiscuous mode [ 177.780661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.783089][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.785056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.788947][ T12] hsr_slave_0: left promiscuous mode [ 177.790871][ T12] hsr_slave_1: left promiscuous mode [ 177.793419][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.795222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.797381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.799268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.806165][ T12] hsr_slave_0: left promiscuous mode [ 177.807912][ T12] hsr_slave_1: left promiscuous mode [ 177.809716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.811610][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.813847][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.815756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.881035][ T12] veth1_macvtap: left promiscuous mode [ 177.883171][ T12] veth0_macvtap: left promiscuous mode [ 177.885130][ T12] veth1_vlan: left promiscuous mode [ 177.886986][ T12] veth0_vlan: left promiscuous mode [ 177.889488][ T12] veth1_macvtap: left promiscuous mode [ 177.891475][ T12] veth0_macvtap: left promiscuous mode [ 177.893639][ T12] veth1_vlan: left promiscuous mode [ 177.895574][ T12] veth0_vlan: left promiscuous mode [ 177.898470][ T12] vlan1: left allmulticast mode [ 177.900252][ T12] veth0_vlan: left allmulticast mode [ 177.902274][ T12] veth1_macvtap: left promiscuous mode [ 177.904130][ T12] veth0_macvtap: left promiscuous mode [ 177.905636][ T12] veth1_vlan: left promiscuous mode [ 177.906910][ T12] veth0_vlan: left promiscuous mode [ 178.571311][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.655931][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.700262][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.761200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.837313][ T12] team0 (unregistering): Port device team_slave_1 removed VM DIAGNOSIS: 14:47:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888048347000 RCX=ffffffff81d6331c RDX=ffff8880296a0000 RSI=00000000000000fe RDI=0000000000000004 RBP=dffffc0000000000 RSP=ffffc9000344fdb0 R8 =0000000000000004 R9 =00000000000000fe R10=00000000000000ff R11=0000000000000000 R12=00000000000000ff R13=ffff888048347010 R14=ffff888048347030 R15=00000000000000fe RIP=ffffffff818cb91c RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f265c3b3d00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562ad53fd000 CR3=0000000029e50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa f7552dfaf7552dfa ZMM22=8550b2058550b205 8550b2058550b205 8550b2058550b205 8550b2058550b205 8550b2058550b205 8550b2058550b205 8550b2058550b205 8550b2058550b205 ZMM23=4af208804af20880 4af208804af20880 4af208804af20880 4af208804af20880 4af208804af20880 4af208804af20880 4af208804af20880 4af208804af20880 ZMM24=0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 0d84f1d90d84f1d9 ZMM25=12816be912816be9 12816be912816be9 12816be912816be9 12816be912816be9 12816be912816be9 12816be912816be9 12816be912816be9 12816be912816be9 ZMM26=316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 316a18b0316a18b0 ZMM27=8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff 8db432ff8db432ff ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=180b0000180b0000 180b0000180b0000 180b0000180b0000 180b0000180b0000 180b0000180b0000 180b0000180b0000 180b0000180b0000 180b0000180b0000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=1ffff9200069de8d RSI=ffffffff8b2014ff RDI=ffffc900034ef420 RBP=ffffc900034ef468 RSP=ffffc900034ef300 R8 =ffffc900034ef454 R9 =ffffffff915cec26 R10=ffffc900034ef420 R11=00000000000a12d9 R12=ffffffff8178a3d0 R13=ffffc900034ef420 R14=0000000000000000 R15=ffff88801f532440 RIP=ffffffff8b2019e1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020024000 CR3=0000000049d32000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffff888029c40048 RCX=ffffffff81ca3ff4 RDX=ffff888020470000 RSI=0000000000000002 RDI=ffff888029c40048 RBP=0000000000000002 RSP=ffffc90000eef8f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000001 R14=0000000000000002 R15=ffff88802472e000 RIP=ffffffff818cb928 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003191eff8 CR3=000000006b668000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b4467c0 RCX=ffffffff8180abcc RDX=ffff88801bbb0000 RSI=ffffffff8180aba6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900005d7a60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005688cf9 R13=0000000000000001 R14=ffff88802b4467c8 R15=ffff88802b740100 RIP=ffffffff8180aba8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70fdf90 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000