last executing test programs: 14.51253162s ago: executing program 0 (id=536): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 13.290840601s ago: executing program 0 (id=540): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7fffffff, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x2) keyctl$set_timeout(0xf, r4, 0x79) keyctl$instantiate_iov(0x14, r4, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 10.841958872s ago: executing program 0 (id=545): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 8.183359549s ago: executing program 2 (id=553): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 7.010026907s ago: executing program 3 (id=555): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}}, 0xc040) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x8, {{0xa, 0x4e20, 0x7b5b, @local, 0x9}}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xbd, 0x38}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x8) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) fsmount(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) 6.046589316s ago: executing program 0 (id=557): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bdb036199122bd7242b23cd71ba0c521ba608220da7460f8021686de3882227cbb7314eab187b7d8ec1d2fa0d8a7bd6eb377fa6d0008c0925c2af5e0f4410af6d2fb0df1302894ed1e1b726e9d75c6cbf8be002a0bcaea476464fa96985e83450b6e1002000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r2, 0x4}, 0x38) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="ae1ab42a83945264b1eba9e2a7274d9a86197a663b5dc0c78b5539fa3115cc2e56095d923d8e2634d9a53a0711cf638a8fe0778ca53e689d5766cd9710477a"], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r3, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.988734803s ago: executing program 1 (id=559): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f00000004c0)='\x00', 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r2, &(0x7f0000000040)="46f4b5", 0x3, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = socket$alg(0x26, 0x5, 0x0) mincore(&(0x7f0000b02000/0x2000)=nil, 0x2000, &(0x7f0000000500)=""/186) bind$alg(r4, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0xc800) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x28, 0xfa}) sendto$inet6(r0, &(0x7f00000001c0)="0225", 0x2, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 5.875813538s ago: executing program 3 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a97f"]) acct(&(0x7f0000002240)='./file0/file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r0, {0x7, 0x29, 0x0, 0x10012419, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x80, 0x200000a, 0x10010, r2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_tables_targets\x00') lseek(r4, 0x2000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket(0x840000000002, 0x1, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 5.858907214s ago: executing program 2 (id=561): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f8ffffff00"/26], 0x50) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20000053, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x4, 0x8, &(0x7f00000002c0)="b8000005", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x10) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0703081400c8009da818d55be7d84d0db85294ae86e0e32b2ef729462bccbab54d740f25b8c570d3c1535cdeed4add04de6df53e3a1bd56f92b81d798c4665e66b16c274fa2e43342665f89f65acaed10a9fa421374f7c648bfee24193a586cacbe3"], 0xa) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='loc']) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x3) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.715587916s ago: executing program 3 (id=562): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0xf80) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 4.710842527s ago: executing program 2 (id=570): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x3000f2}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4883}, 0x4894) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x64, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x2e, 0x0, 0x1, [@nested={0x48, 0x7d, 0x0, 0x1, [@typed={0xc, 0x110, 0x0, 0x0, @u64=0x800100000000}, @nested={0xc, 0x10f, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @u32=0x2}]}, @nested={0x2c, 0xc1, 0x0, 0x1, [@typed={0x5, 0xe4, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xd6, 0x0, 0x0, @fd}, @typed={0x9, 0x96, 0x0, 0x0, @binary="08c2aec365"}]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x24040000) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x14}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.614053307s ago: executing program 1 (id=563): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000140)={0x8, 0x0, [{0xd, 0x9, 0x5, 0xffff0000, 0x4, 0x3f, 0xd}, {0x1, 0x800, 0x2, 0xe5, 0x7, 0x1, 0x5}, {0x80000019, 0x4a7, 0x7, 0x7, 0x7, 0xf}, {0x80000001, 0x3, 0x3, 0x7, 0x66d5, 0xffffffff, 0x5}, {0x1, 0x8001, 0x1, 0xd9b, 0x2, 0x7, 0xf}, {0x40000001, 0xd2b, 0x0, 0x8, 0x9, 0x8001, 0x9}, {0x40000000, 0x0, 0x7, 0x1, 0x7fffffff, 0x5, 0x1}, {0x1, 0x7fffffff, 0x0, 0x1, 0x2, 0x80005, 0x6}]}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r2 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) openat(r1, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r3, 0x101fff) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x10, 0x4) r4 = openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000340)={0x4, {0x800, 0x2, 0x2, 0x6}, {0x6, 0x9, 0x7, 0xc7}, {0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b4}, 0x8, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000b00), 0x0, 0x20, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000020905"], 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x2000c040) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 4.325850562s ago: executing program 1 (id=564): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000700)={0x2, 0x0, 0x98, &(0x7f0000000640)={0xffffffffffffab3e, 0x2, 0x9}}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, 0x38, 0x400, 0x70bd25, 0x25dfdbfb, {0x1b}, [@nested={0xc, 0x1e, 0x0, 0x1, [@typed={0x4, 0x82}, @nested={0x4, 0x38}]}, @nested={0xd0, 0x158, 0x0, 0x1, [@generic="7e5a16c4d9f57b976e7f410f79cecafa047f541dff7d463ed267f880b497208054789982651a59a9c55125807b36f6b30dff38b740382b2cbc61e65d7df38f3c67d5c3b47d7e084dbee4d3706a7266aa901768059f32de269ddf10aa41c267ed9770e7014b075ab079e3e7fe8c29d43eef8f13edd12210f7d91371fbc0cbfffe8f1133368124c561ad5ed1da0d826513dc88085664f39281f9869e3f61dbcb0cb3ce984c9bbbf02e716b072fc394d63ebb7b9330ca49bb944e0ad927b1bd44065a0ab3055d9e73b6780f3d23"]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) 3.881403241s ago: executing program 2 (id=565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x0, 0xf9, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xffffffffffffeffd, 0x50}, {0x5}, 0x5, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x850) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc00"/30], 0xb8}}, 0x4000) 2.878779314s ago: executing program 0 (id=566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0xffff113d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 2.827347204s ago: executing program 3 (id=575): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0xd, 0x3eaa, 0xed67a8a992421365, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x7800, 0x7, 0x7}}) r2 = socket(0x400000000010, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0xff41) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtclass={0xd4, 0x28, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffe5}, {0x2, 0x6}, {0xd, 0x9}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_atm={{0x8}, {0x7acfbf4a21c1a864, 0x2, [@TCA_ATM_HDR={0x33, 0x3, "091615142750439a602cd444c88b7c5acc4652e8139a3a8c0924de9ff856ac906f2748317e8d9d26726baa5b859cbc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x14, 0x3, "85c5def2aed4b9be280ba3a85e4791a9"}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_dsmark={{}, {0x0, 0x2, @TCA_DSMARK_MASK={0x0, 0x4, 0x7}}}]}, 0xd4}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000800)=""/129, 0x81}, {&(0x7f0000000500)=""/92, 0x5c}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x2000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = memfd_create(&(0x7f00000005c0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x10\x00\x00\x00\x00\x00\x00\x00\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x981q\xcc%\x98\xa0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xcd,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0\xf2\x10\xe00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.102517285s ago: executing program 1 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='-net -freezer -io -hugetlb -hugetlb +free'], 0x36) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 1.741934121s ago: executing program 2 (id=568): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x3fffffe, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$hidraw(&(0x7f0000000140), 0x200, 0x400000) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000180)=""/31) sendmmsg$inet(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x3, 0x40480c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket(0x2d, 0x2, 0x0) connect$qrtr(r6, &(0x7f00000000c0)={0x2d, 0x2, 0x1}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close_range(r5, 0xffffffffffffffff, 0x2000000000000000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x7}, 0x0) 1.726167866s ago: executing program 3 (id=569): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000480)={0x0, 0xa5f8, 0x1000, 0xfffffffe, 0x38c, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.700375512s ago: executing program 2 (id=571): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x108, 0x1, &(0x7f00000001c0)="17c20000000040000000000000000000", 0x10) r5 = userfaultfd(0x801) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r8, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.108673258s ago: executing program 1 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x30, 0x65, 0x39, 0x64, 0x66, 0x33, 0x66, 0x37, 0xdc94e0c173c4f486, 0x39, 0x33, 0x34, 0x36, 0x66, 0x62, 0x66]}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0xa, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r5, 0x5, 0x80000}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 20.432142ms ago: executing program 1 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9c, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x1, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue0\x00', 0x5}) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000000)=0x4000000a, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000340)=0xb71, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba381030000000000000000cb4fdca05c0f920d54f365c5b1d43ee44fbf6fc93f0808251f"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004c00)=@delpolicy={0x58, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in=@multicast2, 0x4e21, 0x3, 0x4e24, 0x3, 0x2, 0x20, 0x80, 0x2f}, 0x6e6bb7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0305720, &(0x7f0000000000)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081204e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 19.993362ms ago: executing program 3 (id=574): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)={0x0, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x7, "3d03e1f771a66c"}]}, 0x18) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="c8aea2995600010600000400000000000700000000000000"], 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() r2 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x408240) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xe) 0s ago: executing program 0 (id=576): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) inotify_init1(0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.101808][ T42] audit: type=1326 audit(1784539855.673:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.107916][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.110357][ T42] audit: type=1326 audit(1784539855.673:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.114605][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.122273][ T42] audit: type=1326 audit(1784539855.673:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.129195][ T42] audit: type=1326 audit(1784539855.673:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.137128][ T42] audit: type=1326 audit(1784539855.673:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.140561][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 69.144924][ T42] audit: type=1326 audit(1784539855.673:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.3.42" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf701efec code=0x7ffc0000 [ 69.148041][ T6163] usbtmc 7-1:16.0: Unable to send data, error -71 [ 69.167562][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 69.171390][ T6163] usbtmc 7-1:16.0: Unable to send data, error -71 [ 69.176168][ T5834] usb 7-1: USB disconnect, device number 2 [ 69.492621][ T5761] Bluetooth: hci1: command tx timeout [ 69.610667][ T29] usb 44-1: device descriptor read/8, error -110 [ 70.144173][ T6183] input: syz0 as /devices/virtual/input/input5 [ 70.297308][ T5834] IPVS: starting estimator thread 0... [ 70.339870][ T6185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.47'. [ 70.391019][ T29] usb usb44-port1: attempt power cycle [ 70.393181][ T6186] IPVS: using max 28 ests per chain, 67200 per kthread [ 71.005692][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.007836][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.490552][ T29] usb usb44-port1: unable to enumerate USB device [ 71.571381][ T5761] Bluetooth: hci1: command tx timeout [ 71.578026][ T6201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 71.580847][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.602059][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 71.802405][ T6211] vhci_hcd: connection closed [ 71.804752][ T12] vhci_hcd vhci_hcd.1: stop threads [ 71.809374][ T12] vhci_hcd vhci_hcd.1: release socket [ 71.813190][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 72.352052][ T6217] input: syz0 as /devices/virtual/input/input6 [ 73.349008][ T6228] syz.1.57 (6228): drop_caches: 0 [ 73.402380][ T6228] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.411645][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 73.767128][ T5761] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 73.929944][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.950466][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.959130][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.965285][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.138899][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.148667][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.218283][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.222190][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.227576][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.232249][ T6229] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.528324][ T6239] qrtr: Invalid version 0 [ 74.688397][ T6239] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET) [ 74.700952][ T6239] syzkaller1: entered promiscuous mode [ 74.712368][ T6239] syzkaller1: entered allmulticast mode [ 74.756179][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 74.784853][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 74.790257][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 74.942120][ T6241] warning: `syz.3.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.640308][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 75.640328][ T42] audit: type=1326 audit(1784539862.223:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.665418][ T42] audit: type=1326 audit(1784539862.243:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.687314][ T42] audit: type=1326 audit(1784539862.243:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.697538][ T42] audit: type=1326 audit(1784539862.243:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.709288][ T42] audit: type=1326 audit(1784539862.253:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.723935][ T42] audit: type=1326 audit(1784539862.263:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.735970][ T42] audit: type=1326 audit(1784539862.263:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.749144][ T42] audit: type=1326 audit(1784539862.263:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.749196][ T42] audit: type=1326 audit(1784539862.283:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.749234][ T42] audit: type=1326 audit(1784539862.293:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.62" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 75.953339][ T6256] input: syz0 as /devices/virtual/input/input7 [ 76.199401][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 76.202976][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 76.402069][ T6266] hugetlbfs: syz.0.65 (6266): Using mlock ulimits for SHM_HUGETLB is obsolete [ 78.017572][ T6274] ======================================================= [ 78.017572][ T6274] WARNING: The mand mount option has been deprecated and [ 78.017572][ T6274] and is ignored by this kernel. Remove the mand [ 78.017572][ T6274] option from the mount to silence this warning. [ 78.017572][ T6274] ======================================================= [ 78.542670][ T960] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.723453][ T6284] overlayfs: failed to resolve './file0': -2 [ 78.770659][ T960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.779687][ T960] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.843030][ T960] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 78.850317][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.858099][ T960] usb 5-1: Product: syz [ 78.864826][ T960] usb 5-1: Manufacturer: syz [ 78.874440][ T960] usb 5-1: SerialNumber: syz [ 79.020999][ T960] usb 5-1: config 0 descriptor?? [ 79.186388][ T960] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 79.199644][ T960] imon 5-1:0.0: unable to initialize intf0, err -19 [ 79.210826][ T960] imon:imon_probe: failed to initialize context! [ 79.218556][ T960] imon 5-1:0.0: unable to register, err -19 [ 79.497430][ T1494] usb 5-1: USB disconnect, device number 2 [ 79.600172][ T6285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.338341][ T6300] input: syz0 as /devices/virtual/input/input8 [ 80.538691][ T6306] input: syz0 as /devices/virtual/input/input9 [ 80.863085][ T6318] random: crng reseeded on system resumption [ 81.856615][ T55] cfg80211: failed to load regulatory.db [ 82.228395][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 82.261268][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 82.261285][ T42] audit: type=1326 audit(1784539868.843:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.277093][ T42] audit: type=1326 audit(1784539868.863:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.290425][ T42] audit: type=1326 audit(1784539868.863:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.300902][ T42] audit: type=1326 audit(1784539868.863:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.312113][ T42] audit: type=1326 audit(1784539868.863:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.322949][ T42] audit: type=1326 audit(1784539868.863:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.344728][ T42] audit: type=1326 audit(1784539868.863:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.354682][ T42] audit: type=1326 audit(1784539868.863:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.364370][ T42] audit: type=1326 audit(1784539868.863:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 82.373536][ T42] audit: type=1326 audit(1784539868.873:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf701efec code=0x7ffc0000 [ 83.023179][ T5897] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.111861][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 83.174129][ T6347] input: syz0 as /devices/virtual/input/input10 [ 83.274654][ T6350] input: syz0 as /devices/virtual/input/input11 [ 84.637613][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 84.660214][ T6386] vlan2: entered allmulticast mode [ 84.662885][ T6386] dummy0: entered allmulticast mode [ 84.668880][ T6386] bridge0: port 3(vlan2) entered blocking state [ 84.671897][ T6386] bridge0: port 3(vlan2) entered disabled state [ 84.699507][ T6388] xt_ipcomp: unknown flags 1D [ 84.730669][ T6386] vlan2: entered promiscuous mode [ 84.733123][ T6386] dummy0: entered promiscuous mode [ 84.747594][ T6381] random: crng reseeded on system resumption [ 85.843810][ T6376] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 93.698244][ T6417] syz_tun: entered allmulticast mode [ 93.864635][ T6421] syz_tun: left allmulticast mode [ 93.868512][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.872869][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.878948][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.883042][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.885868][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.888468][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.892704][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.899978][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.926313][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.933413][ T6422] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 93.968910][ T6428] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.94'. [ 93.991734][ T6428] openvswitch: netlink: Message has 512 unknown bytes. [ 94.152995][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 94.334658][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 94.356536][ T60] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 94.363828][ T60] usb 7-1: config 127 has no interface number 0 [ 94.375635][ T60] usb 7-1: config 127 interface 124 has no altsetting 0 [ 94.386868][ T60] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 94.401256][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.406924][ T60] usb 7-1: Product: syz [ 94.408718][ T60] usb 7-1: Manufacturer: syz [ 94.415383][ T60] usb 7-1: SerialNumber: syz [ 94.684723][ T5897] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 94.846040][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 94.918983][ T5897] usb 8-1: config 0 has no interfaces? [ 94.921589][ T5897] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 94.932601][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.060306][ T5897] usb 8-1: config 0 descriptor?? [ 95.388353][ T6430] Bluetooth: MGMT ver 1.23 [ 95.399631][ T9] usb 8-1: USB disconnect, device number 3 [ 95.671402][ T6440] input: syz0 as /devices/virtual/input/input12 [ 95.686546][ T6442] input: syz0 as /devices/virtual/input/input13 [ 96.829222][ T60] usb 7-1: USB disconnect, device number 3 [ 96.969438][ T6461] atomic_op ffff888026d6b198 conn xmit_atomic 0000000000000000 [ 98.360133][ T6482] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 7, id = 0 [ 98.711610][ T6484] input: syz0 as /devices/virtual/input/input14 [ 99.101890][ T6486] input: syz0 as /devices/virtual/input/input15 [ 100.029321][ T6505] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 100.084915][ T6505] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 100.088892][ T6505] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 100.092448][ T6505] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 100.101045][ T6505] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 100.112372][ T6505] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 100.127111][ T6505] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 100.131982][ T6505] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 100.166048][ T6505] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 100.173321][ T6505] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 100.647922][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 100.647941][ T42] audit: type=1326 audit(1784539887.233:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.660536][ T42] audit: type=1326 audit(1784539887.233:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.667629][ T42] audit: type=1326 audit(1784539887.233:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.674783][ T42] audit: type=1326 audit(1784539887.243:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.687706][ T42] audit: type=1326 audit(1784539887.243:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.696778][ T42] audit: type=1326 audit(1784539887.243:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.704178][ T42] audit: type=1326 audit(1784539887.243:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.723282][ T42] audit: type=1326 audit(1784539887.243:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.729846][ T42] audit: type=1326 audit(1784539887.243:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 100.742907][ T42] audit: type=1326 audit(1784539887.243:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.1.117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 101.050214][ T6521] input: syz0 as /devices/virtual/input/input16 [ 101.494128][ T6527] input: syz0 as /devices/virtual/input/input17 [ 101.563479][ T6531] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 7, id = 0 [ 101.771278][ T6519] syz.3.118 (6519) used greatest stack depth: 18560 bytes left [ 102.164451][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 102.742772][ T3996] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 102.894816][ T3996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.898430][ T3996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.901474][ T3996] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.905778][ T3996] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.908718][ T3996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.914584][ T3996] usb 7-1: config 0 descriptor?? [ 103.349944][ T6555] input: syz0 as /devices/virtual/input/input18 [ 103.357699][ T3996] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.656393][ T6547] capability: warning: `syz.2.126' uses deprecated v2 capabilities in a way that may be insecure [ 104.370809][ T6563] bond1 (unregistering): Released all slaves [ 104.624275][ T6571] input: syz0 as /devices/virtual/input/input19 [ 104.863441][ T5898] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 105.006287][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.135'. [ 105.980466][ T6593] validate_nla: 44 callbacks suppressed [ 105.980486][ T6593] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 106.159351][ T6597] input: syz0 as /devices/virtual/input/input20 [ 107.001482][ T6609] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 107.316146][ T9] usb 7-1: USB disconnect, device number 4 [ 108.003283][ T6621] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.011112][ T6621] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.017272][ T6621] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 108.031758][ T6621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.055240][ T6624] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 108.058396][ T6621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.080811][ T6624] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 108.279458][ T6626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 108.282249][ T6626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.291577][ T6626] vhci_hcd vhci_hcd.0: Device attached [ 108.293400][ T6617] trusted_key: encrypted_key: key user:syz not found [ 108.476003][ T6633] input: syz0 as /devices/virtual/input/input21 [ 108.552656][ T3996] usb 42-1: SetAddress Request (6) to port 0 [ 108.555331][ T3996] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 108.660143][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 108.686545][ T6635] block nbd0: not configured, cannot reconfigure [ 108.774832][ T6626] wg2 speed is unknown, defaulting to 1000 [ 108.784034][ T6626] wg2 speed is unknown, defaulting to 1000 [ 108.788384][ T6626] wg2 speed is unknown, defaulting to 1000 [ 109.360391][ T6627] vhci_hcd: connection reset by peer [ 109.364895][ T12] vhci_hcd vhci_hcd.2: stop threads [ 109.369222][ T12] vhci_hcd vhci_hcd.2: release socket [ 109.371334][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 109.374600][ T5834] wg2 speed is unknown, defaulting to 1000 [ 109.379052][ T6626] infiniband syz2: set active [ 109.383290][ T6626] infiniband syz2: added wg2 [ 109.400543][ T6626] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 109.407953][ T6626] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 109.416146][ T6626] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 109.454177][ T6626] RDS/IB: syz2: added [ 109.459288][ T6626] smc: adding ib device syz2 with port count 1 [ 109.464503][ T6626] smc: ib device syz2 port 1 has no pnetid [ 109.471283][ T5834] wg2 speed is unknown, defaulting to 1000 [ 109.481435][ T6626] wg2 speed is unknown, defaulting to 1000 [ 109.743716][ T6657] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 109.743716][ T6657] Please contact the netfilter-devel mailing list or update your nftables rules. [ 110.070028][ T6626] wg2 speed is unknown, defaulting to 1000 [ 110.320485][ T6626] wg2 speed is unknown, defaulting to 1000 [ 110.578373][ T6626] wg2 speed is unknown, defaulting to 1000 [ 110.763770][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.787544][ T6670] binder: 6669:6670 ioctl c00c6211 0 returned -14 [ 110.944885][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 110.955233][ T34] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 110.960572][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 110.967775][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.974571][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 110.980406][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 110.986054][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.992820][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.998022][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.082612][ T29] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 111.221598][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 111.223501][ T34] usbtmc 5-1:16.0: can't read capabilities [ 111.261712][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 111.266766][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 111.283779][ T29] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 111.288079][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.292996][ T29] usb 7-1: Product: syz [ 111.294474][ T29] usb 7-1: Manufacturer: syz [ 111.296580][ T29] usb 7-1: SerialNumber: syz [ 111.329540][ T29] usb 7-1: config 0 descriptor?? [ 111.351657][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 111.354042][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 111.390503][ T29] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 111.427150][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.436097][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.452749][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.457416][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.467268][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.471803][ T6665] usbtmc 5-1:16.0: Unable to send data, error -71 [ 111.479363][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.483668][ T6665] usbtmc 5-1:16.0: Unable to send data, error -71 [ 111.489652][ T24] usb 5-1: USB disconnect, device number 3 [ 112.198145][ T6667] syz.1.157 (6667): drop_caches: 3 [ 112.352909][ T5834] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 112.533862][ T5834] usb 8-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 112.543865][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 112.568337][ T5834] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.572843][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.577135][ T5834] usb 8-1: Product: syz [ 112.579392][ T5834] usb 8-1: Manufacturer: syz [ 112.585263][ T5834] usb 8-1: SerialNumber: syz [ 112.620510][ T5834] usb 8-1: config 0 descriptor?? [ 112.630713][ T6678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.744489][ T5834] usb 8-1: selecting invalid altsetting 0 [ 113.052668][ T6678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.644837][ T3996] usb 42-1: device descriptor read/8, error -110 [ 113.946388][ T6704] input: syz0 as /devices/virtual/input/input24 [ 113.972754][ T5834] usb 7-1: USB disconnect, device number 5 [ 114.034103][ T3996] usb usb42-port1: attempt power cycle [ 114.301067][ T6711] input: syz0 as /devices/virtual/input/input25 [ 114.616377][ T3996] usb usb42-port1: unable to enumerate USB device [ 114.684654][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 114.709079][ T6718] binder: 6716:6718 ioctl c0145608 80000140 returned -22 [ 114.712325][ T6717] kAFS: unable to lookup cell 'ÿ' [ 114.720357][ T6718] capability: warning: `syz.0.170' uses 32-bit capabilities (legacy support in use) [ 115.198415][ T5834] usb 8-1: USB disconnect, device number 4 [ 115.363384][ T6723] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 115.365493][ T6723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.374732][ T6723] vhci_hcd vhci_hcd.0: Device attached [ 115.398830][ T6727] random: crng reseeded on system resumption [ 115.612110][ T6736] input: syz0 as /devices/virtual/input/input26 [ 115.628993][ T6732] SQUASHFS error: Failed to read block 0x0: -5 [ 115.636866][ T6732] unable to read squashfs_super_block [ 115.684776][ T5834] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 115.832576][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 115.835511][ T5834] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 115.838243][ T5834] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 115.841891][ T5834] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.845129][ T5834] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 115.848736][ T5834] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.852185][ T5834] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.856820][ T5834] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.860527][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.107656][ T5834] usb 8-1: GET_CAPABILITIES returned 0 [ 116.111913][ T5834] usbtmc 8-1:16.0: can't read capabilities [ 116.112615][ T5826] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 116.172618][ T5826] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 116.190770][ T6725] vhci_hcd: connection reset by peer [ 116.195205][ T12] vhci_hcd vhci_hcd.2: stop threads [ 116.197008][ T12] vhci_hcd vhci_hcd.2: release socket [ 116.200970][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 116.313675][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.318131][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.326970][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.331355][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.338916][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 116.343062][ T6724] usbtmc 8-1:16.0: Unable to send data, error -71 [ 116.346491][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 116.350445][ T6724] usbtmc 8-1:16.0: Unable to send data, error -71 [ 116.359753][ T5834] usb 8-1: USB disconnect, device number 5 [ 116.606354][ T6750] input: syz0 as /devices/virtual/input/input27 [ 116.755141][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 116.838110][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.840900][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.903681][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 117.023684][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.036354][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.369322][ T6757] wg2 speed is unknown, defaulting to 1000 [ 117.381596][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.381777][ T6757] syz2: Port: 1 Link DOWN [ 117.386395][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.391157][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.403563][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.411335][ T6757] wg2 speed is unknown, defaulting to 1000 [ 117.740311][ T6774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 117.742418][ T6774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.749046][ T6774] vhci_hcd vhci_hcd.0: Device attached [ 117.775896][ T6778] input: syz0 as /devices/virtual/input/input28 [ 118.269420][ T5834] usb 38-1: SetAddress Request (2) to port 0 [ 118.271343][ T5834] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 118.637905][ T6775] vhci_hcd: connection reset by peer [ 118.640999][ T13] vhci_hcd vhci_hcd.0: stop threads [ 118.642931][ T13] vhci_hcd vhci_hcd.0: release socket [ 118.646208][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 118.862280][ T6790] input: syz0 as /devices/virtual/input/input29 [ 119.538895][ T6801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 119.541005][ T6801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.552449][ T6801] vhci_hcd vhci_hcd.0: Device attached [ 119.997093][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 120.213609][ T6807] bridge_slave_1: left allmulticast mode [ 120.216109][ T6807] bridge_slave_1: left promiscuous mode [ 120.220778][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.375900][ T6807] bridge_slave_0: left allmulticast mode [ 120.378160][ T6807] bridge_slave_0: left promiscuous mode [ 120.381344][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.792058][ T6802] vhci_hcd: connection closed [ 120.808193][ T12] vhci_hcd vhci_hcd.2: stop threads [ 120.831848][ T12] vhci_hcd vhci_hcd.2: release socket [ 120.854283][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 121.321479][ T5826] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 121.698662][ T6822] misc userio: The device must be registered before sending interrupts [ 122.108454][ T6820] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 122.516418][ T139] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.520436][ T139] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.482709][ T5834] usb 38-1: device descriptor read/8, error -110 [ 123.565259][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.568272][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.629117][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.633642][ T3996] usb usb42-port1: attempt power cycle [ 123.642230][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.812852][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 123.820357][ T5761] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 123.874808][ T5834] usb usb38-port1: attempt power cycle [ 124.126743][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.132414][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.148511][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.158107][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.492645][ T5897] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 124.722698][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 124.727499][ T5897] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 124.732457][ T5897] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.740811][ T5897] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.744839][ T5897] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.750182][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.758590][ T5897] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.764384][ T5897] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.768189][ T5897] usb 7-1: Product: syz [ 124.769569][ T5897] usb 7-1: Manufacturer: syz [ 124.771082][ T5897] usb 7-1: SerialNumber: syz [ 124.779326][ T5897] usb 7-1: config 0 descriptor?? [ 124.785527][ T5897] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.791409][ T5897] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.827209][ T3996] usb usb42-port1: unable to enumerate USB device [ 125.052176][ T5897] usb 7-1: USB disconnect, device number 6 [ 125.058150][ T5897] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 125.183582][ T5834] usb usb38-port1: unable to enumerate USB device [ 125.203210][ T6852] input: syz0 as /devices/virtual/input/input30 [ 126.549658][ T6847] syz.3.200 (6847): drop_caches: 3 [ 126.832844][ T6858] pim6reg: entered allmulticast mode [ 127.009039][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 127.335164][ T6851] pim6reg: left allmulticast mode [ 127.753089][ T5761] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 127.912114][ T5898] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.332591][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 128.336459][ T5898] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 128.339988][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.344649][ T5898] usb 7-1: config 0 has no interfaces? [ 128.347343][ T5898] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.351094][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.357904][ T5898] usb 7-1: config 0 descriptor?? [ 128.512516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.865163][ T6895] gfs2: gfs2 mount does not exist [ 128.885778][ T6894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 128.885811][ T6894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.887824][ T6894] vhci_hcd vhci_hcd.0: Device attached [ 129.050943][ T6900] input: syz0 as /devices/virtual/input/input32 [ 129.323143][ T60] usb 38-1: SetAddress Request (6) to port 0 [ 129.325782][ T60] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 129.655219][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 129.655238][ T42] audit: type=1800 audit(1784539916.243:148): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.214" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 129.711994][ T6896] vhci_hcd: connection reset by peer [ 129.722058][ T13] vhci_hcd vhci_hcd.0: stop threads [ 129.724452][ T13] vhci_hcd vhci_hcd.0: release socket [ 129.727219][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 129.748040][ T6908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.125798][ T5898] usb 7-1: USB disconnect, device number 7 [ 131.702595][ T5834] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 131.856581][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 131.861234][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.869799][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 131.874563][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 131.911799][ T5834] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 131.924664][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.933648][ T5834] usb 8-1: Product: syz [ 131.939599][ T5834] usb 8-1: Manufacturer: syz [ 131.941320][ T5834] usb 8-1: SerialNumber: syz [ 131.948850][ T6931] x_tables: duplicate underflow at hook 1 [ 131.985113][ T5834] usb 8-1: config 0 descriptor?? [ 132.462000][ T5834] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 132.470782][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.474976][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.479952][ T6913] wg2 speed is unknown, defaulting to 1000 [ 132.556619][ T6939] No source specified [ 132.872553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 132.930569][ T24] usb 8-1: USB disconnect, device number 6 [ 133.033365][ T6945] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 133.139830][ T6945] bond1: entered promiscuous mode [ 133.145073][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.227166][ T6945] bond1: (slave bridge1): making interface the new active one [ 133.231275][ T6945] bridge1: entered promiscuous mode [ 133.240856][ T6945] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 133.550047][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 133.556064][ T42] audit: type=1326 audit(1784539920.143:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 133.567323][ T42] audit: type=1326 audit(1784539920.153:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 133.588575][ T6960] netlink: 84 bytes leftover after parsing attributes in process `syz.3.226'. [ 133.599708][ T6960] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 134.545916][ T60] usb 38-1: device descriptor read/8, error -110 [ 134.750920][ T6972] input: syz0 as /devices/virtual/input/input35 [ 135.080051][ T60] usb usb38-port1: attempt power cycle [ 135.422028][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 135.425445][ T6978] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.801600][ T6983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 135.804394][ T6983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.814284][ T6983] vhci_hcd vhci_hcd.0: Device attached [ 135.980538][ T60] usb usb38-port1: unable to enumerate USB device [ 136.092627][ T5897] usb 40-1: SetAddress Request (3) to port 0 [ 136.095502][ T5897] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 136.487234][ T6984] vhci_hcd: connection reset by peer [ 136.496840][ T12] vhci_hcd vhci_hcd.1: stop threads [ 136.505465][ T12] vhci_hcd vhci_hcd.1: release socket [ 136.527725][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 136.538753][ T6995] fuse: Unknown parameter '' [ 137.462582][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.615675][ T5834] usb 5-1: config 0 has no interfaces? [ 137.617581][ T5834] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 137.623676][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.630571][ T5834] usb 5-1: config 0 descriptor?? [ 137.642512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.856829][ T5834] usb 5-1: USB disconnect, device number 4 [ 138.410382][ T7020] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 138.662766][ T5898] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 138.834090][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.838636][ T5898] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 138.843670][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.864089][ T5898] usb 5-1: config 0 descriptor?? [ 139.028545][ T7021] wg2 speed is unknown, defaulting to 1000 [ 139.092801][ T7020] bond1: Removing last ns target with arp_interval on [ 139.111986][ T5898] ath6kl: Failed to submit usb control message: -71 [ 139.117559][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 139.122036][ T5898] ath6kl: Unable to send get target info: -71 [ 139.127640][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 139.137096][ T5898] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 139.161715][ T5898] usb 5-1: USB disconnect, device number 5 [ 139.382657][ T845] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.498500][ T7039] No source specified [ 140.663030][ T845] usb 6-1: Using ep0 maxpacket: 32 [ 140.718567][ T7046] input: syz0 as /devices/virtual/input/input37 [ 140.794213][ T845] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.797299][ T845] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 140.802621][ T845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.808482][ T845] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 140.811347][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.814838][ T7048] input: syz0 as /devices/virtual/input/input39 [ 140.815809][ T845] usb 6-1: Product: syz [ 140.818212][ T845] usb 6-1: Manufacturer: syz [ 140.819734][ T845] usb 6-1: SerialNumber: syz [ 140.822836][ T845] usb 6-1: config 0 descriptor?? [ 140.901614][ T7051] No such timeout policy "syz1" qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 141.163430][ T5897] usb 40-1: device descriptor read/8, error -110 [ 141.348292][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.354867][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.381859][ T845] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 141.385376][ T845] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 141.563295][ T5897] usb usb40-port1: attempt power cycle [ 141.783625][ T7064] wg2 speed is unknown, defaulting to 1000 [ 141.892245][ T7069] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 141.894318][ T7069] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.903054][ T7069] vhci_hcd vhci_hcd.0: Device attached [ 141.946917][ T7070] vhci_hcd: connection closed [ 141.950057][ T13] vhci_hcd vhci_hcd.3: stop threads [ 141.954837][ T13] vhci_hcd vhci_hcd.3: release socket [ 141.956951][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 142.013824][ T7074] wg2 speed is unknown, defaulting to 1000 [ 142.042526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.102514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.133111][ T5897] usb usb40-port1: unable to enumerate USB device [ 142.356000][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 142.866219][ T7086] trusted_key: encrypted_key: insufficient parameters specified [ 144.072602][ T3996] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 144.238296][ T3996] usb 7-1: not running at top speed; connect to a high speed hub [ 144.243167][ T3996] usb 7-1: config 3 has an invalid interface number: 161 but max is 0 [ 144.246152][ T3996] usb 7-1: config 3 has no interface number 0 [ 144.248225][ T3996] usb 7-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 144.252037][ T3996] usb 7-1: config 3 interface 161 has no altsetting 0 [ 144.255083][ T3996] usb 7-1: language id specifier not provided by device, defaulting to English [ 144.269360][ T3996] usb 7-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 144.272832][ T3996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.675648][ T7099] Bluetooth: MGMT ver 1.23 [ 144.693472][ T3996] option 7-1:3.161: GSM modem (1-port) converter detected [ 144.699744][ T3996] usb 7-1: USB disconnect, device number 8 [ 144.704071][ T3996] option 7-1:3.161: device disconnected [ 147.359708][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 148.680861][ T7148] pim6reg: entered allmulticast mode [ 149.057589][ T7143] pim6reg: left allmulticast mode [ 149.552509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.114331][ T960] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 150.327077][ T960] usb 7-1: Using ep0 maxpacket: 32 [ 150.440883][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 150.465095][ T139] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.494504][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 150.508814][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 150.523819][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 150.534437][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 150.621240][ T960] usb 7-1: config index 0 descriptor too short (expected 49, got 27) [ 150.639005][ T960] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 150.661122][ T960] usb 7-1: config 0 has no interface number 0 [ 150.708731][ T960] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.724693][ T960] usb 7-1: config 0 interface 89 has no altsetting 0 [ 150.791245][ T960] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 150.805009][ T960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.832048][ T960] usb 7-1: Product: syz [ 150.842927][ T960] usb 7-1: Manufacturer: syz [ 150.846628][ T960] usb 7-1: SerialNumber: syz [ 151.155926][ T960] usb 7-1: config 0 descriptor?? [ 151.290133][ T960] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 151.302913][ T960] em28xx 7-1:0.89: Video interface 89 found: [ 151.304935][ T960] em28xx 7-1:0.89: DVB interface 89 found: [ 151.400197][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.411426][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.421557][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.429794][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.426791][ T960] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 152.470787][ T7186] siw: device registration error -23 [ 152.526274][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 152.541446][ T5761] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.565719][ T960] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 152.628113][ T960] em28xx 7-1:0.89: board has no eeprom [ 152.629971][ T7186] smbdirect: ib_dev[syz1] removed [ 152.692895][ T960] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 152.695550][ T960] em28xx 7-1:0.89: analog set to bulk mode. [ 152.701938][ T960] em28xx 7-1:0.89: dvb set to bulk mode. [ 152.705021][ T60] em28xx 7-1:0.89: Registering V4L2 extension [ 152.749750][ T960] usb 7-1: USB disconnect, device number 9 [ 152.771150][ T960] em28xx 7-1:0.89: Disconnecting em28xx [ 152.825379][ T60] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 152.829557][ T60] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 152.834585][ T60] em28xx 7-1:0.89: No AC97 audio processor [ 152.853705][ T60] usb 7-1: Decoder not found [ 152.855591][ T60] em28xx 7-1:0.89: failed to create media graph [ 152.857835][ T60] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 152.885674][ T60] em28xx 7-1:0.89: Registering snapshot button... [ 152.900257][ T60] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.89/input/input41 [ 152.919168][ T60] em28xx 7-1:0.89: Remote control support is not available for this card. [ 152.924212][ T960] em28xx 7-1:0.89: Closing input extension [ 152.927982][ T960] em28xx 7-1:0.89: Deregistering snapshot button [ 153.000399][ T960] em28xx 7-1:0.89: Freeing device [ 153.457526][ T7193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 153.460454][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.461794][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 153.513524][ T7193] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 153.525335][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 153.680490][ T7196] vhci_hcd: connection closed [ 153.682393][ T12] vhci_hcd vhci_hcd.0: stop threads [ 153.698298][ T12] vhci_hcd vhci_hcd.0: release socket [ 153.702841][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 153.958593][ T7204] wg2 speed is unknown, defaulting to 1000 [ 154.462634][ T3996] usb 38-1: enqueue for inactive port 0 [ 154.597953][ T7209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 154.600054][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.603125][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 154.614713][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.620026][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.647149][ T7209] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 154.882662][ T5827] usb 42-1: SetAddress Request (14) to port 0 [ 154.884721][ T5827] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 154.973729][ T3996] usb usb38-port1: attempt power cycle [ 155.553587][ T3996] usb usb38-port1: unable to enumerate USB device [ 155.931387][ T7210] vhci_hcd: connection reset by peer [ 155.933745][ T5825] vhci_hcd vhci_hcd.2: stop threads [ 155.935453][ T5825] vhci_hcd vhci_hcd.2: release socket [ 155.938760][ T5825] vhci_hcd vhci_hcd.2: disconnect device [ 156.427490][ T7241] Cannot find add_set index 2 as target [ 159.202375][ T7263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input42 [ 159.299953][ T7263] can0: slcan on ttyS3. [ 159.493339][ T7263] can0 (unregistered): slcan off ttyS3. [ 159.962632][ T5827] usb 42-1: device descriptor read/8, error -110 [ 159.993872][ T7277] pim6reg: entered allmulticast mode [ 160.117118][ T7251] pim6reg: left allmulticast mode [ 160.159906][ T7286] wg2 speed is unknown, defaulting to 1000 [ 160.352520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.353028][ T5827] usb usb42-port1: attempt power cycle [ 160.362758][ T1494] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.512572][ T1494] usb 5-1: Using ep0 maxpacket: 16 [ 160.515742][ T1494] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.519812][ T1494] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.525341][ T1494] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.528255][ T1494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.530803][ T1494] usb 5-1: Product: syz [ 160.532195][ T1494] usb 5-1: Manufacturer: syz [ 160.533725][ T1494] usb 5-1: SerialNumber: syz [ 160.540786][ T1494] usb 5-1: 0:2 : does not exist [ 160.542682][ T1494] usb 5-1: unit 9 not found! [ 160.607316][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 160.779159][ T1494] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 160.839876][ T1494] usb 5-1: USB disconnect, device number 6 [ 160.924579][ T5827] usb usb42-port1: unable to enumerate USB device [ 161.003924][ T6405] udevd[6405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.576347][ T7307] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 161.578600][ T7307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.597854][ T7307] vhci_hcd vhci_hcd.0: Device attached [ 161.872801][ T3996] usb 40-1: SetAddress Request (7) to port 0 [ 161.878048][ T3996] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 161.940816][ T7311] can0: slcan on ttyS3. [ 162.332520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 162.672579][ T7309] vhci_hcd: connection reset by peer [ 162.683063][ T12] vhci_hcd vhci_hcd.1: stop threads [ 162.685284][ T12] vhci_hcd vhci_hcd.1: release socket [ 162.687825][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 162.718742][ T7321] hub 8-0:1.0: USB hub found [ 162.722160][ T7321] hub 8-0:1.0: 1 port detected [ 162.747698][ T7321] erofs (device nbd2): cannot find valid erofs superblock [ 164.082743][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 164.115432][ T7304] can0 (unregistered): slcan off ttyS3. [ 164.232806][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 164.252520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 164.262560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.378809][ T60] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.381561][ T60] usb 8-1: config 0 has no interface number 0 [ 164.398375][ T60] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.415512][ T60] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.422366][ T60] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.438913][ T60] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.448612][ T60] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.457426][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.468228][ T7348] syzkaller0: entered promiscuous mode [ 164.470814][ T7348] syzkaller0: entered allmulticast mode [ 164.482080][ T7348] tipc: Started in network mode [ 164.486969][ T7348] tipc: Node identity 12f16eabfdbf, cluster identity 4711 [ 164.489668][ T60] usb 8-1: config 0 descriptor?? [ 164.490545][ T7348] tipc: Enabled bearer , priority 0 [ 164.506612][ T7348] tipc: Resetting bearer [ 164.521618][ T7347] tipc: Resetting bearer [ 164.566050][ T7347] tipc: Disabling bearer [ 164.576674][ T60] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.046459][ T7361] wg2 speed is unknown, defaulting to 1000 [ 165.251659][ T42] audit: type=1804 audit(1784539951.833:151): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.313" name="/newroot/70/file0" dev="tmpfs" ino=388 res=1 errno=0 [ 166.209165][ T7372] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 166.211730][ T7372] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 166.533511][ T7382] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.320'. [ 166.537644][ T7382] openvswitch: netlink: Message has 512 unknown bytes. [ 166.810139][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.818243][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.863683][ T5827] usb 8-1: USB disconnect, device number 7 [ 166.880112][ T5827] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 166.922623][ T3996] usb 40-1: device descriptor read/8, error -110 [ 166.982912][ T7386] input: syz0 as /devices/virtual/input/input44 [ 167.102971][ T7390] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.199490][ T7394] input: syz0 as /devices/virtual/input/input45 [ 167.335418][ T3996] usb usb40-port1: attempt power cycle [ 167.402607][ T5827] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 167.553220][ T5827] usb 8-1: Using ep0 maxpacket: 32 [ 167.561411][ T5827] usb 8-1: config 0 has no interfaces? [ 167.570801][ T5827] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 167.574741][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 167.577561][ T5827] usb 8-1: Product: syz [ 167.579153][ T5827] usb 8-1: Manufacturer: syz [ 167.580707][ T5827] usb 8-1: SerialNumber: syz [ 167.598197][ T5827] usb 8-1: config 0 descriptor?? [ 167.904692][ T3996] usb usb40-port1: unable to enumerate USB device [ 169.359502][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 169.417616][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 169.467766][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 169.489740][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 169.896237][ T3996] libceph: connect (1)[c::]:6789 error -101 [ 169.917860][ T3996] libceph: mon0 (1)[c::]:6789 connect error [ 169.995797][ T7452] netlink: 52 bytes leftover after parsing attributes in process `syz.2.329'. [ 170.066117][ T3996] usb 8-1: USB disconnect, device number 8 [ 170.269250][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 170.274468][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 170.370322][ T7427] ceph: No mds server is up or the cluster is laggy [ 174.081951][ T7488] bridge_slave_0: left allmulticast mode [ 174.094323][ T7488] bridge_slave_0: left promiscuous mode [ 174.106396][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.158292][ T7488] bridge_slave_1: left allmulticast mode [ 174.165730][ T7488] bridge_slave_1: left promiscuous mode [ 174.188691][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.214949][ T7465] syz.2.334 (7465) used greatest stack depth: 18048 bytes left [ 174.295506][ T7488] bond0: (slave bond_slave_0): Releasing backup interface [ 174.331262][ T7488] bond0: (slave bond_slave_1): Releasing backup interface [ 174.546736][ T7488] team0: Port device team_slave_0 removed [ 174.564383][ T7488] team0: Port device team_slave_1 removed [ 174.572292][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.580679][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.590611][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.604433][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.633024][ T7488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.684303][ T7500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 174.686408][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.708576][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 175.112794][ T3996] usb 42-1: SetAddress Request (18) to port 0 [ 175.130297][ T3996] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 175.298492][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.316029][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.424716][ T42] audit: type=1800 audit(1784539962.013:152): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.335" name="bus" dev="ramfs" ino=17522 res=0 errno=0 [ 175.482646][ T5106] Bluetooth: hci3: command 0x0405 tx timeout [ 175.562628][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 175.562646][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 175.587531][ T7502] vhci_hcd: connection reset by peer [ 175.590822][ T5825] vhci_hcd vhci_hcd.2: stop threads [ 175.592890][ T5825] vhci_hcd vhci_hcd.2: release socket [ 175.595836][ T5825] vhci_hcd vhci_hcd.2: disconnect device [ 176.023408][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.161983][ T7518] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 176.167883][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.342'. [ 176.174712][ T7518] bridge0: port 1(dummy0) entered blocking state [ 176.177661][ T7518] bridge0: port 1(dummy0) entered disabled state [ 176.182370][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.188866][ T7518] bridge0: port 1(dummy0) entered blocking state [ 176.191804][ T60] usb 5-1: config 3 has an invalid interface number: 249 but max is 0 [ 176.192187][ T7518] bridge0: port 1(dummy0) entered forwarding state [ 176.195578][ T60] usb 5-1: config 3 has no interface number 0 [ 176.200885][ T60] usb 5-1: config 3 interface 249 has no altsetting 0 [ 176.217400][ T60] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 176.220474][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.225725][ T60] usb 5-1: Product: syz [ 176.227659][ T60] usb 5-1: Manufacturer: syz [ 176.229493][ T60] usb 5-1: SerialNumber: syz [ 176.493540][ T7522] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.054546][ T7529] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 177.056543][ T7529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.076346][ T7529] vhci_hcd vhci_hcd.0: Device attached [ 177.296155][ T60] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 177.306700][ T60] gspca_sn9c2028: read1 error -71 [ 177.316501][ T60] gspca_sn9c2028: read1 error -71 [ 177.329216][ T60] gspca_sn9c2028: read1 error -71 [ 177.331217][ T60] sn9c2028 5-1:3.249: probe with driver sn9c2028 failed with error -71 [ 177.360154][ T60] usb 5-1: USB disconnect, device number 7 [ 177.552650][ T5827] usb 44-1: SetAddress Request (6) to port 0 [ 177.555418][ T5827] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 177.911347][ T7539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 177.914238][ T7539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.877925][ T7539] vhci_hcd vhci_hcd.0: Device attached [ 179.177342][ T7530] vhci_hcd: connection reset by peer [ 179.181965][ T12] vhci_hcd vhci_hcd.3: stop threads [ 179.183881][ T12] vhci_hcd vhci_hcd.3: release socket [ 179.185796][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 179.541496][ T7540] vhci_hcd: connection closed [ 179.559588][ T12] vhci_hcd vhci_hcd.2: stop threads [ 179.597833][ T12] vhci_hcd vhci_hcd.2: release socket [ 179.628939][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 180.202920][ T3996] usb 42-1: device descriptor read/8, error -110 [ 180.418743][ T7553] pim6reg: entered allmulticast mode [ 180.445959][ T7555] xt_ipcomp: unknown flags 1D [ 180.685686][ T3996] usb usb42-port1: attempt power cycle [ 180.737277][ T7553] pim6reg: left allmulticast mode [ 181.493328][ T3996] usb usb42-port1: unable to enumerate USB device [ 181.897648][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 182.192078][ T7571] random: crng reseeded on system resumption [ 182.498836][ T7567] vlan2: entered allmulticast mode [ 182.608662][ T5827] usb 44-1: device descriptor read/8, error -110 [ 182.615099][ T7567] dummy0: entered allmulticast mode [ 182.629214][ T7567] bridge0: port 3(vlan2) entered blocking state [ 182.647602][ T7567] bridge0: port 3(vlan2) entered disabled state [ 182.661911][ T7567] vlan2: entered promiscuous mode [ 182.673229][ T7567] dummy0: entered promiscuous mode [ 182.993700][ T5827] usb usb44-port1: attempt power cycle [ 183.913344][ T5827] usb usb44-port1: unable to enumerate USB device [ 183.915946][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 183.945992][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 183.961762][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 185.510641][ T7614] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 185.512732][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.597570][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 185.913112][ T5834] usb 38-1: SetAddress Request (14) to port 0 [ 185.913396][ T5834] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 186.309006][ T7625] rdma_rxe: rxe_newlink: failed to add wg2 [ 186.415603][ T7620] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 186.568376][ T7615] vhci_hcd: connection reset by peer [ 186.576072][ T12] vhci_hcd vhci_hcd.0: stop threads [ 186.578673][ T12] vhci_hcd vhci_hcd.0: release socket [ 186.584405][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 187.288862][ T7638] input: syz0 as /devices/virtual/input/input46 [ 188.688552][ T7652] wg2 speed is unknown, defaulting to 1000 [ 189.557823][ T42] audit: type=1326 audit(1784539976.143:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.569424][ T42] audit: type=1326 audit(1784539976.143:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.586759][ T42] audit: type=1326 audit(1784539976.143:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.594721][ T42] audit: type=1326 audit(1784539976.143:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.601666][ T42] audit: type=1326 audit(1784539976.143:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.609762][ T42] audit: type=1326 audit(1784539976.143:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.617298][ T42] audit: type=1326 audit(1784539976.143:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.625980][ T42] audit: type=1326 audit(1784539976.143:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.633846][ T42] audit: type=1326 audit(1784539976.143:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.640857][ T42] audit: type=1326 audit(1784539976.143:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 189.811393][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 189.817978][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.818013][ T64] Tainted: [L]=SOFTLOCKUP [ 189.818021][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.818063][ T64] Workqueue: hci3 hci_rx_work [ 189.818091][ T64] Call Trace: [ 189.818098][ T64] [ 189.818106][ T64] dump_stack_lvl+0x100/0x190 [ 189.818133][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 189.818166][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 189.818199][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 189.818225][ T64] ? find_held_lock+0x2b/0x80 [ 189.818246][ T64] ? kobject_add_internal+0x25f/0x930 [ 189.818272][ T64] ? kobject_add_internal+0x25f/0x930 [ 189.818300][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 189.818322][ T64] kobject_add_internal+0x2c8/0x930 [ 189.818353][ T64] kobject_add+0x16a/0x1e0 [ 189.818379][ T64] ? __pfx_kobject_add+0x10/0x10 [ 189.818404][ T64] ? class_to_subsys+0x10f/0x150 [ 189.818435][ T64] ? kobject_put+0xb9/0x640 [ 189.818458][ T64] ? _raw_spin_unlock+0x28/0x50 [ 189.818491][ T64] device_add+0x294/0x1970 [ 189.818519][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 189.818537][ T64] ? __pfx_device_add+0x10/0x10 [ 189.818561][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 189.818582][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 189.818601][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 189.818621][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 189.818664][ T64] ? hci_event_packet+0x186/0xcd0 [ 189.818686][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 189.818703][ T64] ? skb_pull_data+0x15f/0x1e0 [ 189.818732][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 189.818750][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 189.818771][ T64] hci_event_packet+0x51c/0xcd0 [ 189.818787][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 189.818830][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 189.818850][ T64] ? kcov_remote_start+0x384/0x670 [ 189.818876][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 189.818898][ T64] hci_rx_work+0x451/0xfc0 [ 189.818920][ T64] process_one_work+0xa23/0x1940 [ 189.818977][ T64] ? __pfx_process_one_work+0x10/0x10 [ 189.819011][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 189.819030][ T64] worker_thread+0x5ef/0xe50 [ 189.819061][ T64] ? kthread+0x13a/0x450 [ 189.819080][ T64] ? __pfx_worker_thread+0x10/0x10 [ 189.819101][ T64] kthread+0x370/0x450 [ 189.819120][ T64] ? __pfx_kthread+0x10/0x10 [ 189.819142][ T64] ret_from_fork+0x72b/0xd50 [ 189.819165][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 189.819186][ T64] ? __switch_to+0x800/0x10f0 [ 189.819209][ T64] ? __pfx_kthread+0x10/0x10 [ 189.819230][ T64] ret_from_fork_asm+0x1a/0x30 [ 189.819265][ T64] [ 189.821600][ T64] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.930602][ T64] Bluetooth: hci3: failed to register connection device [ 191.068207][ T5834] usb 38-1: device descriptor read/8, error -110 [ 191.090808][ T7679] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 191.110885][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.546591][ T5834] usb usb38-port1: attempt power cycle [ 192.148727][ T5834] usb usb38-port1: unable to enumerate USB device [ 193.162795][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.891557][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.895062][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.863878][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 194.863958][ T42] audit: type=1800 audit(1784539981.453:185): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.380" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 196.042633][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 196.169038][ T7730] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 196.171876][ T7730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.176394][ T7730] vhci_hcd vhci_hcd.0: Device attached [ 196.452643][ T6584] usb 38-1: SetAddress Request (18) to port 0 [ 196.460569][ T6584] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 196.613064][ T7739] vhci_hcd: connection reset by peer [ 196.619378][ T12] vhci_hcd vhci_hcd.0: stop threads [ 196.621611][ T12] vhci_hcd vhci_hcd.0: release socket [ 196.624721][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 197.015069][ T7747] binder: 7746:7747 ioctl c0306201 80000480 returned -14 [ 197.568581][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 199.344153][ T7778] bond0: entered promiscuous mode [ 199.350904][ T7778] bond_slave_0: entered promiscuous mode [ 199.353610][ T7778] bond_slave_1: entered promiscuous mode [ 199.356356][ T7778] batadv_slave_0: entered promiscuous mode [ 199.358357][ T7778] batadv_slave_0: left promiscuous mode [ 199.360586][ T7778] bond0: left promiscuous mode [ 199.362133][ T7778] bond_slave_0: left promiscuous mode [ 199.364733][ T7778] bond_slave_1: left promiscuous mode [ 199.390886][ T7779] syz_tun: entered allmulticast mode [ 199.453285][ T7779] bond0: entered promiscuous mode [ 199.455241][ T7779] bond_slave_0: entered promiscuous mode [ 199.457198][ T7779] bond_slave_1: entered promiscuous mode [ 199.549966][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 199.685870][ T7788] batadv_slave_1: entered promiscuous mode [ 199.798426][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 199.855827][ T7792] batadv_slave_1: left promiscuous mode [ 200.623776][ T7800] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.325000][ T7800] sctp: [Deprecated]: syz.0.396 (pid 7800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.325000][ T7800] Use struct sctp_sack_info instead [ 202.039896][ T6584] usb 38-1: device descriptor read/8, error -110 [ 202.058871][ T7781] orangefs_mount: mount request failed with -4 [ 202.818885][ T6584] usb usb38-port1: attempt power cycle [ 203.152735][ T1494] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 203.225068][ T7845] input: syz0 as /devices/virtual/input/input47 [ 203.426011][ T6584] usb usb38-port1: unable to enumerate USB device [ 204.279679][ T1494] usb 8-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 204.283038][ T1494] usb 8-1: config 0 interface 0 has no altsetting 0 [ 204.289181][ T1494] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.292215][ T1494] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.295327][ T1494] usb 8-1: Product: syz [ 204.296824][ T1494] usb 8-1: Manufacturer: syz [ 204.298733][ T1494] usb 8-1: SerialNumber: syz [ 204.317523][ T1494] usb 8-1: config 0 descriptor?? [ 204.326154][ T7843] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.337575][ T1494] usb 8-1: selecting invalid altsetting 0 [ 205.796793][ T7877] /dev/nullb0: Can't open blockdev [ 205.912614][ T1494] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.073692][ T1494] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 206.084435][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.087875][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.091301][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.103664][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.106519][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.109933][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.121356][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.124274][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.127686][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.136848][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.141468][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.147130][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.155241][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.159827][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.163307][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.166172][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.169077][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.172531][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.175395][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.178225][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.181629][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.184579][ T1494] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.187514][ T1494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.190979][ T1494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.194734][ T1494] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 206.197663][ T1494] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 206.200314][ T1494] usb 5-1: Product: syz [ 206.201718][ T1494] usb 5-1: Manufacturer: syz [ 206.203431][ T1494] usb 5-1: SerialNumber: syz [ 206.211393][ T1494] usb 5-1: config 0 descriptor?? [ 206.223383][ T1494] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 206.813222][ T5897] usb 8-1: USB disconnect, device number 9 [ 207.095324][ T5897] usb 5-1: USB disconnect, device number 8 [ 207.120474][ T5897] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 207.250714][ T7890] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 207.298979][ T7891] netlink: 14 bytes leftover after parsing attributes in process `syz.3.409'. [ 207.372939][ T7892] syz.3.409: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.379376][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.3.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.379404][ T7892] Tainted: [L]=SOFTLOCKUP [ 207.379410][ T7892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.379420][ T7892] Call Trace: [ 207.379426][ T7892] [ 207.379434][ T7892] dump_stack_lvl+0x100/0x190 [ 207.379459][ T7892] warn_alloc.cold+0x94/0xa8 [ 207.379481][ T7892] ? __pfx_warn_alloc+0x10/0x10 [ 207.379501][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379530][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379561][ T7892] __vmalloc_node_range_noprof+0x136c/0x1630 [ 207.379593][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379616][ T7892] ? do_replace+0x1c6/0x490 [ 207.379634][ T7892] ? __css_rstat_updated+0x1ce/0x5a0 [ 207.379658][ T7892] ? __pfx___css_rstat_updated+0x10/0x10 [ 207.379680][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379705][ T7892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.379730][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379753][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379780][ T7892] ? do_replace+0x1c6/0x490 [ 207.379795][ T7892] __vmalloc_node_noprof+0xad/0xf0 [ 207.379819][ T7892] ? do_replace+0x1c6/0x490 [ 207.379838][ T7892] __vmalloc_noprof+0xa3/0x120 [ 207.379861][ T7892] ? __pfx___vmalloc_noprof+0x10/0x10 [ 207.379891][ T7892] do_replace+0x1c6/0x490 [ 207.379909][ T7892] ? __pfx_do_replace+0x10/0x10 [ 207.379932][ T7892] ? __lock_acquire+0x49f/0x1a40 [ 207.379957][ T7892] ? register_lock_class+0x40/0x560 [ 207.379984][ T7892] compat_do_replace+0x589/0x7a0 [ 207.380004][ T7892] ? __pfx_compat_do_replace+0x10/0x10 [ 207.380035][ T7892] ? bpf_lsm_capable+0x9/0x10 [ 207.380052][ T7892] ? security_capable+0x80/0x260 [ 207.380106][ T7892] do_ebt_set_ctl+0x3f4/0x4a0 [ 207.380129][ T7892] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 207.380151][ T7892] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 207.380173][ T7892] ? futex_wake+0x4ea/0x5e0 [ 207.380198][ T7892] ? nf_sockopt_find.isra.0+0x222/0x290 [ 207.380221][ T7892] nf_setsockopt+0x8d/0xf0 [ 207.380241][ T7892] ip_setsockopt+0xcb/0xf0 [ 207.380270][ T7892] tcp_setsockopt+0xa7/0x100 [ 207.380301][ T7892] smc_setsockopt+0x1b6/0xa40 [ 207.380328][ T7892] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.380357][ T7892] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.380386][ T7892] ? aa_sock_opt_perm+0xfe/0x1b0 [ 207.380415][ T7892] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.380445][ T7892] do_sock_setsockopt+0xf3/0x1d0 [ 207.380471][ T7892] __sys_setsockopt+0x119/0x190 [ 207.380495][ T7892] __ia32_sys_setsockopt+0xbc/0x160 [ 207.380514][ T7892] ? __do_fast_syscall_32+0x98/0x970 [ 207.380533][ T7892] ? lockdep_hardirqs_on+0x78/0x100 [ 207.380550][ T7892] __do_fast_syscall_32+0xe7/0x970 [ 207.380568][ T7892] ? lockdep_hardirqs_on+0x78/0x100 [ 207.380587][ T7892] do_fast_syscall_32+0x32/0x70 [ 207.380607][ T7892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.380628][ T7892] RIP: 0023:0xf701efec [ 207.380649][ T7892] Code: Unable to access opcode bytes at 0xf701efc2. [ 207.380656][ T7892] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 207.380677][ T7892] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 207.380689][ T7892] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 207.380701][ T7892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.380713][ T7892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.380725][ T7892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.380749][ T7892] [ 207.380890][ T7892] Mem-Info: [ 207.508465][ T7892] active_anon:39920 inactive_anon:4874 isolated_anon:0 [ 207.508465][ T7892] active_file:436 inactive_file:21760 isolated_file:0 [ 207.508465][ T7892] unevictable:1768 dirty:512 writeback:0 [ 207.508465][ T7892] slab_reclaimable:6348 slab_unreclaimable:57843 [ 207.508465][ T7892] mapped:31549 shmem:40636 pagetables:1235 [ 207.508465][ T7892] sec_pagetables:303 bounce:0 [ 207.508465][ T7892] kernel_misc_reclaimable:0 [ 207.508465][ T7892] free:24722 free_pcp:14704 free_cma:0 [ 207.522058][ T7892] Node 0 active_anon:568kB inactive_anon:1160kB active_file:12kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:5092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:1232kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.533111][ T7892] Node 1 active_anon:160912kB inactive_anon:18336kB active_file:1732kB inactive_file:87036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:133056kB dirty:2044kB writeback:0kB shmem:159252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5752kB pagetables:3708kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.544057][ T7892] Node 0 DMA free:2408kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:4kB free_cma:0kB [ 207.553425][ T7892] lowmem_reserve[]: 0 280 280 280 280 [ 207.555156][ T7892] Node 0 DMA32 free:15712kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:540kB inactive_anon:1160kB active_file:12kB inactive_file:4kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:287056kB mlocked:0kB bounce:0kB free_pcp:14872kB local_pcp:3880kB free_cma:0kB [ 207.565885][ T7892] lowmem_reserve[]: 0 0 0 0 0 [ 207.567422][ T7892] Node 1 DMA32 free:80768kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160512kB inactive_anon:18336kB active_file:1732kB inactive_file:87036kB unevictable:3536kB writepending:2044kB zspages:1748kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:42428kB local_pcp:13684kB free_cma:0kB [ 207.578121][ T7892] lowmem_reserve[]: 0 0 0 0 0 [ 207.579587][ T7892] Node 0 DMA: 38*4kB (UM) 12*8kB (UM) 9*16kB (UM) 13*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2408kB [ 207.585384][ T7892] Node 0 DMA32: 326*4kB (UME) 77*8kB (UME) 30*16kB (UME) 130*32kB (UME) 35*64kB (UME) 16*128kB (UME) 1*256kB (E) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 15712kB [ 207.590614][ T7892] Node 1 DMA32: 6*4kB (UME) 147*8kB (UME) 116*16kB (UME) 171*32kB (UE) 122*64kB (UE) 53*128kB (UME) 19*256kB (UE) 13*512kB (UME) 3*1024kB (ME) 9*2048kB (UM) 6*4096kB (M) = 80720kB [ 207.597214][ T7892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.600563][ T7892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.605533][ T7892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.608319][ T7892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.611297][ T7892] 63598 total pagecache pages [ 207.612867][ T7892] 744 pages in swap cache [ 207.614229][ T7892] Free swap = 119532kB [ 207.615563][ T7892] Total swap = 124996kB [ 207.616868][ T7892] 524155 pages RAM [ 207.618066][ T7892] 0 pages HighMem/MovableOnly [ 207.619593][ T7892] 211498 pages reserved [ 207.621192][ T7892] 0 pages cma reserved [ 207.688256][ T7892] mmap: syz.3.409 (7892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 208.616501][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.696937][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.354357][ T7890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.388741][ T7876] Process accounting resumed [ 209.412320][ T7890] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 209.421738][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.506860][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.519053][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.413'. [ 209.602648][ T7891] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 209.608494][ T7891] bond0 (unregistering): Released all slaves [ 209.633550][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.637982][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.651494][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'. [ 209.664181][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.669595][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.709269][ T7911] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 209.746628][ T7911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.789283][ T7911] team0: Port device netdevsim1 added [ 212.351554][ T5827] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 212.563235][ T5827] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 212.590662][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.610660][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.630658][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.650901][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.655605][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.663829][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.673319][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.677113][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.680814][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.695478][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.698905][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.703412][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.713121][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.716333][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.720701][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.730405][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.734725][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.740733][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.748082][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.751631][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.755644][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.760558][ T5827] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.764200][ T5827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.768129][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.782543][ T5827] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.787123][ T5827] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.789893][ T5827] usb 7-1: Product: syz [ 212.791491][ T5827] usb 7-1: Manufacturer: syz [ 212.793244][ T5827] usb 7-1: SerialNumber: syz [ 212.830162][ T5827] usb 7-1: config 0 descriptor?? [ 212.887302][ T5827] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.037418][ T6584] usb 7-1: USB disconnect, device number 10 [ 214.067232][ T6584] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 214.801376][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 215.628578][ T7997] comedi comedi0: Minor 4 could not be opened [ 215.660853][ T7997] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 216.268105][ T8004] pim6reg: entered allmulticast mode [ 216.636879][ T8002] pim6reg: left allmulticast mode [ 216.957085][ T8009] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 218.051061][ T60] IPVS: starting estimator thread 0... [ 218.152708][ T8028] IPVS: using max 42 ests per chain, 100800 per kthread [ 218.363787][ T8029] kAFS: No cell specified [ 218.952467][ T8025] wg2 speed is unknown, defaulting to 1000 [ 220.395288][ T8052] siw: device registration error -23 [ 221.114066][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.117137][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.121537][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.329348][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.343101][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.349075][ T8052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.352424][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.361715][ T8052] veth1_vlan: left promiscuous mode [ 221.367868][ T8052] veth0_vlan: left promiscuous mode [ 221.370626][ T8052] veth0_vlan: entered promiscuous mode [ 221.377783][ T8052] veth1_vlan: entered promiscuous mode [ 221.382040][ T8052] veth1_macvtap: left promiscuous mode [ 221.384720][ T8052] veth0_macvtap: left promiscuous mode [ 221.387192][ T8052] veth0_macvtap: entered promiscuous mode [ 221.390480][ T8052] veth1_macvtap: entered promiscuous mode [ 221.399431][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.410802][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.415561][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.420953][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.428533][ T8052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.765676][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.887027][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.895905][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.899584][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.916780][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 221.921648][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 221.943528][ T5898] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 221.957073][ T6584] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 222.288728][ T8077] : renamed from bond_slave_0 [ 222.706321][ T6584] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 223.454070][ T5752] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 225.721877][ T845] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 225.888880][ T845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 225.893292][ T845] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 225.897585][ T845] usb 8-1: config 189 has no interface number 0 [ 225.904364][ T845] usb 8-1: config 189 interface 127 has no altsetting 0 [ 226.092767][ T845] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 226.101804][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.254320][ T845] usb 8-1: Product: syz [ 226.255706][ T845] usb 8-1: Manufacturer: syz [ 226.257198][ T845] usb 8-1: SerialNumber: syz [ 226.362689][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 227.263589][ T8120] syz.0.454 (8120): drop_caches: 3 [ 227.414940][ T8124] input: syz0 as /devices/virtual/input/input48 [ 227.772639][ T5827] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 228.384715][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 228.527056][ T5827] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 228.527056][ T845] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 228.529828][ T5827] usb 5-1: config 0 has no interface number 0 [ 228.536911][ T5827] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.540299][ T5827] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 228.543295][ T845] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 228.544176][ T5827] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.549013][ T845] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 228.552065][ T5827] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.556212][ T845] safe_serial 8-1:189.127: safe_serial converter detected [ 228.559201][ T5827] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.559215][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.561967][ T5827] usb 5-1: config 0 descriptor?? [ 228.563329][ T845] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 228.579079][ T5827] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 228.586383][ T845] usb 8-1: USB disconnect, device number 10 [ 228.795352][ T8143] fuse: Bad value for 'fd' [ 229.004458][ T845] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 229.152623][ T845] usb 8-1: Using ep0 maxpacket: 8 [ 229.156780][ T845] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 229.159441][ T845] usb 8-1: config 0 has no interface number 0 [ 229.161413][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.165066][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 229.168854][ T845] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.172363][ T845] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.176772][ T845] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 229.179630][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.183922][ T845] usb 8-1: config 0 descriptor?? [ 229.188583][ T845] ldusb 8-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 229.341072][ T8149] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 229.358893][ T8149] /dev/nullb0: Can't open blockdev [ 229.367739][ T8149] netlink: 52 bytes leftover after parsing attributes in process `syz.2.461'. [ 229.629910][ T5827] usb 5-1: USB disconnect, device number 9 [ 229.727033][ T5827] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 230.159077][ T8160] input: syz0 as /devices/virtual/input/input49 [ 230.349915][ T8163] input: syz0 as /devices/virtual/input/input50 [ 230.405678][ T6584] usb 8-1: USB disconnect, device number 11 [ 230.416587][ T6584] ldusb 8-1:0.55: LD USB Device #1 now disconnected [ 231.095195][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 231.108017][ T8174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.131494][ T8174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.157548][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.469'. [ 231.507801][ T8180] comedi comedi2: dt2814: I/O base address or length out of range [ 231.672791][ T8185] input: syz0 as /devices/virtual/input/input51 [ 231.779080][ T8187] input: syz0 as /devices/virtual/input/input52 [ 232.940754][ T8201] input: syz0 as /devices/virtual/input/input53 [ 232.954948][ T8204] input: syz0 as /devices/virtual/input/input54 [ 234.550754][ T8228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 234.553652][ T8228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.606841][ T8228] vhci_hcd vhci_hcd.0: Device attached [ 234.892896][ T5827] usb 38-1: SetAddress Request (22) to port 0 [ 234.895678][ T5827] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 235.062735][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 235.337695][ T8230] vhci_hcd: connection reset by peer [ 235.371993][ T5825] vhci_hcd vhci_hcd.0: stop threads [ 235.374429][ T5825] vhci_hcd vhci_hcd.0: release socket [ 235.376818][ T5825] vhci_hcd vhci_hcd.0: disconnect device [ 235.482723][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 236.554250][ T8272] input: syz0 as /devices/virtual/input/input55 [ 239.102345][ T8298] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 239.105142][ T8298] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.128318][ T8298] vhci_hcd vhci_hcd.0: Device attached [ 239.622721][ T3996] usb 42-1: SetAddress Request (22) to port 0 [ 239.708312][ T3996] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 239.963001][ T5827] usb 38-1: device descriptor read/8, error -110 [ 240.122694][ T6584] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 240.195787][ T8300] vhci_hcd: connection reset by peer [ 240.200380][ T5825] vhci_hcd vhci_hcd.2: stop threads [ 240.202389][ T5825] vhci_hcd vhci_hcd.2: release socket [ 240.205263][ T5825] vhci_hcd vhci_hcd.2: disconnect device [ 240.273966][ T6584] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.276822][ T6584] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.280426][ T6584] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.283455][ T6584] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.287146][ T6584] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.291912][ T6584] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.295094][ T6584] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.297683][ T6584] usb 8-1: Product: syz [ 240.299124][ T6584] usb 8-1: Manufacturer: syz [ 240.306130][ T6584] cdc_wdm 8-1:1.0: skipping garbage [ 240.308397][ T6584] cdc_wdm 8-1:1.0: skipping garbage [ 240.316811][ T6584] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 240.318747][ T6584] cdc_wdm 8-1:1.0: Unknown control protocol [ 240.366337][ T5827] usb usb38-port1: attempt power cycle [ 240.957680][ T5827] usb usb38-port1: unable to enumerate USB device [ 241.769272][ T8319] xt_CT: No such helper "pptp" [ 242.027306][ T8312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 242.029461][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 242.253382][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 242.325970][ T8311] netlink: 'syz.0.491': attribute type 12 has an invalid length. [ 242.327078][ T8319] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 242.650245][ T8336] netlink: 224 bytes leftover after parsing attributes in process `syz.1.503'. [ 242.733376][ T5826] usb 38-1: SetAddress Request (26) to port 0 [ 242.735749][ T5826] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 242.741649][ T8328] vhci_hcd: connection closed [ 242.742269][ T13] vhci_hcd vhci_hcd.0: stop threads [ 242.755009][ T13] vhci_hcd vhci_hcd.0: release socket [ 242.757717][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 243.446340][ T8348] wg2 speed is unknown, defaulting to 1000 [ 243.447844][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 243.730142][ T5827] usb 8-1: USB disconnect, device number 12 [ 244.143862][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 244.609926][ T8366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 244.612835][ T8366] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.659318][ T8366] vhci_hcd vhci_hcd.0: Device attached [ 244.868071][ T3996] usb 42-1: device descriptor read/8, error -110 [ 244.939983][ T5854] usb 40-1: SetAddress Request (11) to port 0 [ 244.943059][ T5854] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 245.293677][ T3996] usb usb42-port1: attempt power cycle [ 245.762619][ T5827] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 245.875093][ T8378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 245.877906][ T8378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.898130][ T8378] vhci_hcd vhci_hcd.0: Device attached [ 245.917847][ T3996] usb usb42-port1: unable to enumerate USB device [ 245.944903][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.968875][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 245.996335][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.119749][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.132553][ T5827] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.136088][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.148541][ T5827] usb 7-1: config 0 descriptor?? [ 246.165771][ T8374] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.213706][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.216856][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.266628][ T8367] vhci_hcd: connection reset by peer [ 246.269987][ T5825] vhci_hcd vhci_hcd.1: stop threads [ 246.271950][ T5825] vhci_hcd vhci_hcd.1: release socket [ 246.274262][ T5825] vhci_hcd vhci_hcd.1: disconnect device [ 246.549089][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 246.612978][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.615422][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.617965][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.620389][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.623200][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.625591][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.628158][ T5827] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 246.644132][ T5827] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 246.680123][ T8379] vhci_hcd: connection reset by peer [ 246.683246][ T5825] vhci_hcd vhci_hcd.0: stop threads [ 246.685511][ T5825] vhci_hcd vhci_hcd.0: release socket [ 246.688034][ T5825] vhci_hcd vhci_hcd.0: disconnect device [ 246.937732][ T42] audit: type=1326 audit(1784540033.523:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 246.957037][ T42] audit: type=1326 audit(1784540033.543:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 246.974721][ T42] audit: type=1326 audit(1784540033.553:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70befec code=0x7ffc0000 [ 246.992647][ T42] audit: type=1326 audit(1784540033.553:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 246.993443][ T8391] input: syz0 as /devices/virtual/input/input57 [ 246.999362][ T42] audit: type=1326 audit(1784540033.553:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.010073][ T42] audit: type=1326 audit(1784540033.553:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.018441][ T42] audit: type=1326 audit(1784540033.553:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.027727][ T42] audit: type=1326 audit(1784540033.553:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.037506][ T42] audit: type=1326 audit(1784540033.563:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.158245][ T42] audit: type=1326 audit(1784540033.743:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.2.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 247.814258][ T5826] usb 38-1: device descriptor read/8, error -110 [ 247.952700][ T5898] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 248.092610][ T5898] usb 7-1: device descriptor read/64, error -32 [ 248.240744][ T5826] usb usb38-port1: attempt power cycle [ 248.402587][ T5898] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 248.704030][ T5898] usb 7-1: device descriptor read/64, error -32 [ 248.738479][ T8410] x_tables: duplicate underflow at hook 1 [ 248.755927][ T8410] hub 8-0:1.0: USB hub found [ 248.758275][ T8410] hub 8-0:1.0: 1 port detected [ 248.865720][ T5826] usb usb38-port1: unable to enumerate USB device [ 249.761634][ T6584] usb 7-1: USB disconnect, device number 11 [ 249.951213][ T8418] wg2 speed is unknown, defaulting to 1000 [ 250.042661][ T5854] usb 40-1: device descriptor read/8, error -110 [ 250.055441][ T8424] pim6reg: entered allmulticast mode [ 250.260241][ T8424] pim6reg: left allmulticast mode [ 250.433166][ T5854] usb usb40-port1: attempt power cycle [ 250.996411][ T5854] usb usb40-port1: unable to enumerate USB device [ 252.952787][ T6584] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 253.082842][ T64] Bluetooth: hci1: command 0x0405 tx timeout [ 253.218653][ T6584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 253.255500][ T6584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.277254][ T6584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 253.282094][ T6584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 253.413113][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 253.450333][ T6584] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 253.458347][ T6584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.471157][ T6584] usb 7-1: Product: syz [ 253.476312][ T6584] usb 7-1: Manufacturer: syz [ 253.489063][ T6584] usb 7-1: SerialNumber: syz [ 253.598811][ T6584] usb 7-1: config 0 descriptor?? [ 254.056197][ T6584] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 254.285819][ T8461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.308149][ T8461] block device autoloading is deprecated and will be removed. [ 254.316576][ T5827] usb 7-1: USB disconnect, device number 12 [ 254.652379][ T8472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 254.654444][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.658128][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 254.944350][ T5827] usb 44-1: SetAddress Request (10) to port 0 [ 254.954995][ T5827] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 255.214080][ T8473] vhci_hcd: connection reset by peer [ 255.217655][ T13] vhci_hcd vhci_hcd.3: stop threads [ 255.220608][ T13] vhci_hcd vhci_hcd.3: release socket [ 255.225282][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 255.253746][ T8481] team0: Port device netdevsim1 removed [ 255.330478][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.332969][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.270309][ T8492] set match dimension is over the limit! [ 256.421520][ T8493] pim6reg: entered allmulticast mode [ 256.621995][ T8495] wg2 speed is unknown, defaulting to 1000 [ 256.750222][ T8500] pim6reg: left allmulticast mode [ 257.798335][ C1] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 257.803146][ C1] sr 2:0:0:0: [sr0] tag#19 CDB: Test Unit Ready [ 260.043450][ T5827] usb 44-1: device descriptor read/8, error -110 [ 260.229654][ T8531] input: syz0 as /devices/virtual/input/input58 [ 260.433128][ T5827] usb usb44-port1: attempt power cycle [ 260.993118][ T5827] usb usb44-port1: unable to enumerate USB device [ 261.594853][ T8539] Cannot find add_set index 2 as target [ 264.293259][ T8562] fuse: Bad value for 'fd' [ 264.747236][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.753022][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.917988][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 264.918161][ T42] audit: type=1326 audit(1784540051.493:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 264.943814][ T42] audit: type=1326 audit(1784540051.493:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.013605][ T42] audit: type=1326 audit(1784540051.593:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.083851][ T42] audit: type=1326 audit(1784540051.653:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.114116][ T42] audit: type=1326 audit(1784540051.673:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.234542][ T42] audit: type=1326 audit(1784540051.823:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.272750][ T42] audit: type=1326 audit(1784540051.823:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.289237][ T42] audit: type=1326 audit(1784540051.823:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.308032][ T42] audit: type=1326 audit(1784540051.823:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71472eb code=0x7ffc0000 [ 265.320601][ T42] audit: type=1326 audit(1784540051.823:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.545" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f43fec code=0x7ffc0000 [ 265.472695][ T5854] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 265.632663][ T5854] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.635955][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.639394][ T5854] usb 5-1: Product: syz [ 265.640771][ T5854] usb 5-1: Manufacturer: syz [ 265.642422][ T5854] usb 5-1: SerialNumber: syz [ 265.661325][ T5854] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.709933][ T8586] input: syz0 as /devices/virtual/input/input59 [ 265.740007][ T5834] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.860940][ T8588] input: syz0 as /devices/virtual/input/input60 [ 266.185399][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 266.193074][ T8592] vlan2: left promiscuous mode [ 266.194769][ T8592] dummy0: left promiscuous mode [ 266.199032][ T8592] bridge0: port 3(vlan2) entered disabled state [ 266.235239][ T8592] bridge_slave_1: left allmulticast mode [ 266.237278][ T8592] bridge_slave_1: left promiscuous mode [ 266.244013][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.306203][ T8592] bridge_slave_0: left allmulticast mode [ 266.314224][ T8592] bridge_slave_0: left promiscuous mode [ 266.316298][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.352847][ T8574] wg2 speed is unknown, defaulting to 1000 [ 266.439700][ T8576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.451883][ T8576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.522941][ T8576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.526499][ T8576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.550621][ T8576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.560876][ T8576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.602104][ T8576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.618519][ T8576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.636767][ T8576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.771320][ T5834] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 266.859784][ T5834] ath9k_htc: Failed to initialize the device [ 266.986390][ T8576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 267.326869][ T5834] usb 5-1: ath9k_htc: USB layer deinitialized [ 268.490515][ T845] usb 5-1: USB disconnect, device number 10 [ 268.522831][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 268.602984][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 268.606404][ T5752] Bluetooth: hci3: command 0x0405 tx timeout [ 268.682632][ T5752] Bluetooth: hci1: command 0x0405 tx timeout [ 268.732130][ T8605] bridge0: entered promiscuous mode [ 268.734011][ T8605] bridge0: entered allmulticast mode [ 268.940508][ T8612] qrtr: Invalid version 0 [ 269.031574][ T8612] syzkaller1: entered promiscuous mode [ 269.037624][ T8612] syzkaller1: entered allmulticast mode [ 269.307516][ T8617] input: syz0 as /devices/virtual/input/input61 [ 269.622648][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.734102][ T5752] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 269.739445][ T8624] nfs: Unknown parameter 'loc' [ 269.772550][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 269.775987][ T5834] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 269.779302][ T5834] usb 5-1: config 0 has no interface number 0 [ 269.781714][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.785988][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 269.790738][ T5834] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.798141][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.803076][ T5834] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 269.806570][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.810689][ T5834] usb 5-1: config 0 descriptor?? [ 269.817792][ T5834] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 269.824664][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.832713][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.605487][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 270.682585][ T5752] Bluetooth: hci3: command 0x0405 tx timeout [ 270.762609][ T5752] Bluetooth: hci1: command 0x0405 tx timeout [ 270.921493][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 270.925066][ T8639] bridge_slave_1: left allmulticast mode [ 270.927674][ T8639] bridge_slave_1: left promiscuous mode [ 270.930499][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.942982][ T8639] bridge_slave_0: left allmulticast mode [ 270.945218][ T8639] bridge_slave_0: left promiscuous mode [ 270.947727][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.107675][ T8644] pim6reg: entered allmulticast mode [ 271.486130][ T8638] pim6reg: left allmulticast mode [ 271.912517][ T8648] netlink: 296 bytes leftover after parsing attributes in process `syz.1.564'. [ 271.966143][ T8652] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 271.968992][ T8652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.973599][ T8652] vhci_hcd vhci_hcd.0: Device attached [ 272.024870][ T8652] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 272.169774][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 272.242633][ T5834] usb 42-1: SetAddress Request (26) to port 0 [ 272.244665][ T5834] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 272.515738][ T5898] usb 5-1: USB disconnect, device number 11 [ 272.527546][ T5898] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 272.636634][ T8653] vhci_hcd: connection reset by peer [ 272.652697][ T13] vhci_hcd vhci_hcd.2: stop threads [ 272.654634][ T13] vhci_hcd vhci_hcd.2: release socket [ 272.665011][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 272.763447][ T5752] Bluetooth: hci3: command 0x0405 tx timeout [ 272.842989][ T5752] Bluetooth: hci1: command 0x0405 tx timeout [ 273.767694][ T8675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 273.774005][ T8673] input: syz0 as /devices/virtual/input/input62 [ 273.778345][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 274.132587][ T5854] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 274.284601][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 274.288586][ T5854] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.291208][ T5854] usb 7-1: config 179 has no interface number 0 [ 274.293363][ T5854] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 274.297302][ T5854] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 274.306786][ T5854] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.310470][ T5854] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.314367][ T5854] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.329522][ T5854] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.347273][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.356770][ T8679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.594392][ T8679] Unknown status report in ack skb [ 275.763932][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.767523][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.859312][ T845] usb 7-1: USB disconnect, device number 13 [ 275.859420][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 275.864733][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.868646][ C1] ================================================================== [ 275.871235][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 275.873703][ C1] Read of size 4 at addr ffff888024c6d85c by task syz.3.574/8690 [ 275.877826][ C1] [ 275.879084][ C1] CPU: 1 UID: 0 PID: 8690 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.879103][ C1] Tainted: [L]=SOFTLOCKUP [ 275.879107][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.879138][ C1] Call Trace: [ 275.879142][ C1] [ 275.879147][ C1] dump_stack_lvl+0x100/0x190 [ 275.879163][ C1] print_report+0x13d/0x4b0 [ 275.879179][ C1] ? __virt_addr_valid+0x239/0x430 [ 275.879191][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 275.879201][ C1] kasan_report+0xdf/0x1c0 [ 275.879216][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 275.879228][ C1] do_raw_spin_lock+0x23b/0x260 [ 275.879239][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 275.879250][ C1] ? kcov_remote_stop+0x201/0x540 [ 275.879265][ C1] ? kcov_remote_stop+0x201/0x540 [ 275.879280][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 275.879337][ C1] ? __wake_up+0x1c/0x60 [ 275.879350][ C1] __wake_up+0x1c/0x60 [ 275.879364][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 275.879376][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 275.879394][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 275.879410][ C1] dummy_timer+0xda1/0x36c0 [ 275.879429][ C1] ? find_held_lock+0x2b/0x80 [ 275.879443][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 275.879461][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 275.879523][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 275.879539][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 275.879556][ C1] ? mark_held_locks+0x40/0x70 [ 275.879572][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 275.879590][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 275.879606][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 275.879620][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 275.879633][ C1] handle_softirqs+0x1ea/0x9b0 [ 275.879645][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 275.879656][ C1] ? _raw_spin_unlock+0x28/0x50 [ 275.879672][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 275.879686][ C1] __irq_exit_rcu+0x162/0x210 [ 275.879696][ C1] irq_exit_rcu+0x9/0x30 [ 275.879706][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 275.879725][ C1] [ 275.879728][ C1] [ 275.879732][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.879745][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 275.879758][ C1] Code: 90 90 90 90 f3 0f 1e fa 8b 05 6e 3d 6b 05 85 c0 74 20 8b 05 00 70 6b 05 85 c0 74 16 65 48 8b 05 c8 ed ab 08 8b 80 9c 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 fd 3e 03 00 66 2e 0f 1f 84 00 00 00 00 [ 275.879769][ C1] RSP: 0018:ffffc9000653f5c0 EFLAGS: 00000202 [ 275.879779][ C1] RAX: 0000000000000000 RBX: ffff88804bd752c8 RCX: 0000000000000000 [ 275.879787][ C1] RDX: 0000000000000002 RSI: ffffffff8c400700 RDI: 0000000000000001 [ 275.879793][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2244dd2 [ 275.879800][ C1] R10: ffffffff91226e97 R11: 0000000000000000 R12: 0000000000000001 [ 275.879807][ C1] R13: 0000000000000012 R14: ffff88807ffd6140 R15: 0000000000000000 [ 275.879817][ C1] rcu_read_unlock+0x5/0x60 [ 275.879835][ C1] lruvec_stat_mod_folio+0x251/0x2e0 [ 275.879847][ C1] folio_add_file_rmap_ptes+0x756/0xdc0 [ 275.879865][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 275.879876][ C1] ? __pfx_folio_add_file_rmap_ptes+0x10/0x10 [ 275.879895][ C1] ? pte_offset_map_lock+0x174/0x320 [ 275.879908][ C1] set_pte_range+0x295/0xbd0 [ 275.879924][ C1] finish_fault+0x827/0x1400 [ 275.879941][ C1] do_fault+0xac5/0x1750 [ 275.879956][ C1] __handle_mm_fault+0x187d/0x2a00 [ 275.879974][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 275.879985][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 275.880002][ C1] ? pte_offset_map_lock+0x174/0x320 [ 275.880015][ C1] ? find_held_lock+0x2b/0x80 [ 275.880028][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 275.880044][ C1] handle_mm_fault+0x37b/0xa30 [ 275.880062][ C1] __get_user_pages+0x1178/0x32a0 [ 275.880078][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 275.880094][ C1] populate_vma_page_range+0x267/0x3f0 [ 275.880110][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 275.880125][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 275.880139][ C1] ? do_mmap+0x93f/0x12f0 [ 275.880153][ C1] __mm_populate+0x107/0x3a0 [ 275.880168][ C1] ? __pfx___mm_populate+0x10/0x10 [ 275.880183][ C1] ? up_write+0x2e5/0x5c0 [ 275.880193][ C1] vm_mmap_pgoff+0x37f/0x470 [ 275.880208][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 275.880221][ C1] ? __pfx_do_futex+0x10/0x10 [ 275.880232][ C1] ? __fget_files+0x215/0x3d0 [ 275.880250][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 275.880263][ C1] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 275.880276][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 275.880291][ C1] __do_fast_syscall_32+0xe7/0x970 [ 275.880304][ C1] do_fast_syscall_32+0x32/0x70 [ 275.880315][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.880333][ C1] RIP: 0023:0xf701efec [ 275.880348][ C1] Code: Unable to access opcode bytes at 0xf701efc2. [ 275.880352][ C1] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 275.880362][ C1] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 275.880369][ C1] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 275.880376][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.880382][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 275.880388][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.880398][ C1] [ 275.880402][ C1] [ 275.911101][ T8694] netlink: 'syz.1.573': attribute type 12 has an invalid length. [ 275.912597][ C1] Allocated by task 5854: [ 275.912643][ C1] kasan_save_stack+0x30/0x50 [ 275.926627][ T8694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.573'. [ 275.927404][ C1] kasan_save_track+0x14/0x30 [ 276.062621][ C1] __kasan_kmalloc+0xaa/0xb0 [ 276.064083][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 276.065778][ C1] xpad_probe+0x28e/0x1f60 [ 276.067172][ C1] usb_probe_interface+0x303/0x8f0 [ 276.068794][ C1] really_probe+0x241/0xa60 [ 276.070265][ C1] __driver_probe_device+0x20e/0x450 [ 276.071910][ C1] driver_probe_device+0x4a/0x140 [ 276.073498][ C1] __device_attach_driver+0x1df/0x320 [ 276.075187][ C1] bus_for_each_drv+0x159/0x1e0 [ 276.076704][ C1] __device_attach+0x1e4/0x4d0 [ 276.078208][ C1] device_initial_probe+0xaf/0xd0 [ 276.079913][ C1] bus_probe_device+0x64/0x160 [ 276.081428][ C1] device_add+0x121d/0x1970 [ 276.082891][ C1] usb_set_configuration+0xd97/0x1c60 [ 276.084434][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 276.086124][ C1] usb_probe_device+0xef/0x400 [ 276.087624][ C1] really_probe+0x241/0xa60 [ 276.089095][ C1] __driver_probe_device+0x20e/0x450 [ 276.090609][ C1] driver_probe_device+0x4a/0x140 [ 276.092137][ C1] __device_attach_driver+0x1df/0x320 [ 276.093843][ C1] bus_for_each_drv+0x159/0x1e0 [ 276.095391][ C1] __device_attach+0x1e4/0x4d0 [ 276.096895][ C1] device_initial_probe+0xaf/0xd0 [ 276.098406][ C1] bus_probe_device+0x64/0x160 [ 276.099961][ C1] device_add+0x121d/0x1970 [ 276.101392][ C1] usb_new_device.cold+0x685/0x115c [ 276.103054][ C1] hub_event+0x30a3/0x4a60 [ 276.104453][ C1] process_one_work+0xa23/0x1940 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 276.106234][ C1] worker_thread+0x5ef/0xe50 [ 276.107830][ C1] kthread+0x370/0x450 [ 276.109168][ C1] ret_from_fork+0x72b/0xd50 [ 276.110642][ C1] ret_from_fork_asm+0x1a/0x30 [ 276.112152][ C1] [ 276.112935][ C1] Freed by task 845: [ 276.114183][ C1] kasan_save_stack+0x30/0x50 [ 276.115678][ C1] kasan_save_track+0x14/0x30 [ 276.117152][ C1] kasan_save_free_info+0x3b/0x70 [ 276.118764][ C1] __kasan_slab_free+0x5f/0x80 [ 276.120263][ C1] kfree+0x22b/0x6c0 [ 276.121505][ C1] xpad_disconnect+0x1cf/0x530 [ 276.123046][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 276.124679][ C1] device_remove+0x12a/0x180 [ 276.126153][ C1] device_release_driver_internal+0x44e/0x620 [ 276.128045][ C1] bus_remove_device+0x2bc/0x560 [ 276.129797][ C1] device_del+0x376/0x9b0 [ 276.131490][ C1] usb_disable_device+0x367/0x810 [ 276.133441][ C1] usb_disconnect+0x2e2/0x9a0 [ 276.135249][ C1] hub_event+0x1c4f/0x4a60 [ 276.136663][ C1] process_one_work+0xa23/0x1940 [ 276.138243][ C1] worker_thread+0x5ef/0xe50 [ 276.139699][ C1] kthread+0x370/0x450 [ 276.140979][ C1] ret_from_fork+0x72b/0xd50 [ 276.142484][ C1] ret_from_fork_asm+0x1a/0x30 [ 276.143992][ C1] [ 276.144753][ C1] The buggy address belongs to the object at ffff888024c6d800 [ 276.144753][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 276.149034][ C1] The buggy address is located 92 bytes inside of [ 276.149034][ C1] freed 1024-byte region [ffff888024c6d800, ffff888024c6dc00) [ 276.153222][ C1] [ 276.154002][ C1] The buggy address belongs to the physical page: [ 276.156227][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24c68 [ 276.159697][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 276.163008][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 276.165979][ C1] page_type: f5(slab) [ 276.167582][ C1] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 276.170986][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 276.174461][ C1] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 276.177939][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 276.181422][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 276.184660][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 276.188090][ C1] page dumped because: kasan: bad access detected [ 276.190725][ C1] page_owner tracks the page as allocated [ 276.193008][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5156, tgid 5156 (S10udev), ts 19440015956, free_ts 19391458038 [ 276.200630][ C1] post_alloc_hook+0xfd/0x120 [ 276.202463][ C1] get_page_from_freelist+0xf48/0x3530 [ 276.204626][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 276.207009][ C1] new_slab+0xa2/0x650 [ 276.208710][ C1] refill_objects+0xe3/0x410 [ 276.210522][ C1] __pcs_replace_empty_main+0x376/0x680 [ 276.212673][ C1] __kmalloc_noprof+0x66d/0x820 [ 276.214632][ C1] tomoyo_init_log+0x1224/0x20c0 [ 276.216743][ C1] tomoyo_supervisor+0x506/0x1340 [ 276.218851][ C1] tomoyo_env_perm+0x191/0x200 [ 276.220853][ C1] tomoyo_find_next_domain+0x13d7/0x2010 [ 276.223181][ C1] tomoyo_bprm_check_security+0x12d/0x1d0 [ 276.225524][ C1] security_bprm_check+0x87/0x1e0 [ 276.227442][ C1] bprm_execve+0x84b/0x1730 [ 276.229287][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 276.231596][ C1] __x64_sys_execve+0x93/0xd0 [ 276.233540][ C1] page last free pid 5146 tgid 5146 stack trace: [ 276.236133][ C1] __free_frozen_pages+0x79f/0x1090 [ 276.238310][ C1] qlist_free_all+0x47/0xf0 [ 276.240210][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 276.242495][ C1] __kasan_slab_alloc+0x69/0x90 [ 276.244522][ C1] __kmalloc_node_track_caller_noprof+0x2cd/0x830 [ 276.246993][ C1] kmalloc_reserve+0xe8/0x350 [ 276.248745][ C1] __alloc_skb+0x185/0x710 [ 276.250404][ C1] alloc_skb_with_frags+0xdd/0x760 [ 276.252081][ C1] sock_alloc_send_pskb+0x801/0x980 [ 276.253730][ C1] unix_dgram_sendmsg+0x3c7/0x1810 [ 276.255339][ C1] __sys_sendto+0x48b/0x4e0 [ 276.256763][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 276.258272][ C1] do_syscall_64+0x115/0x840 [ 276.259756][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.261618][ C1] [ 276.262530][ C1] Memory state around the buggy address: [ 276.264571][ C1] ffff888024c6d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 276.266900][ C1] ffff888024c6d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 276.269398][ C1] >ffff888024c6d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.271881][ C1] ^ [ 276.274091][ C1] ffff888024c6d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.276997][ C1] ffff888024c6d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.279549][ C1] ================================================================== [ 276.281955][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 276.284075][ C1] CPU: 1 UID: 0 PID: 8690 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.287386][ C1] Tainted: [L]=SOFTLOCKUP [ 276.288726][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.291825][ C1] Call Trace: [ 276.292879][ C1] [ 276.293796][ C1] dump_stack_lvl+0x100/0x190 [ 276.295265][ C1] vpanic+0x552/0x970 [ 276.296544][ C1] ? __pfx_vpanic+0x10/0x10 [ 276.297933][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 276.299462][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 276.301028][ C1] panic+0xd1/0xe0 [ 276.302221][ C1] ? __pfx_panic+0x10/0x10 [ 276.303633][ C1] ? end_report.part.0+0x23/0x90 [ 276.305176][ C1] ? rcu_is_watching+0x12/0xc0 [ 276.306709][ C1] ? end_report.part.0+0x23/0x90 [ 276.308251][ C1] ? check_panic_on_warn+0x1f/0x90 [ 276.309862][ C1] check_panic_on_warn.cold+0x19/0x34 [ 276.311478][ C1] end_report.part.0+0x3a/0x90 [ 276.312878][ C1] kasan_report.cold+0xe/0x18 [ 276.314294][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 276.315858][ C1] do_raw_spin_lock+0x23b/0x260 [ 276.317401][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.319096][ C1] ? kcov_remote_stop+0x201/0x540 [ 276.320663][ C1] ? kcov_remote_stop+0x201/0x540 [ 276.322150][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 276.323668][ C1] ? __wake_up+0x1c/0x60 [ 276.324929][ C1] __wake_up+0x1c/0x60 [ 276.326128][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 276.327854][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 276.329543][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 276.331183][ C1] dummy_timer+0xda1/0x36c0 [ 276.332619][ C1] ? find_held_lock+0x2b/0x80 [ 276.334104][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 276.335924][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 276.337815][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 276.339702][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 276.341255][ C1] ? mark_held_locks+0x40/0x70 [ 276.342778][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 276.344594][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 276.346088][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 276.347667][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 276.349229][ C1] handle_softirqs+0x1ea/0x9b0 [ 276.350641][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 276.352223][ C1] ? _raw_spin_unlock+0x28/0x50 [ 276.353675][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 276.355311][ C1] __irq_exit_rcu+0x162/0x210 [ 276.356839][ C1] irq_exit_rcu+0x9/0x30 [ 276.358172][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 276.359949][ C1] [ 276.360880][ C1] [ 276.361822][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.363697][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 276.365637][ C1] Code: 90 90 90 90 f3 0f 1e fa 8b 05 6e 3d 6b 05 85 c0 74 20 8b 05 00 70 6b 05 85 c0 74 16 65 48 8b 05 c8 ed ab 08 8b 80 9c 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 fd 3e 03 00 66 2e 0f 1f 84 00 00 00 00 [ 276.371593][ C1] RSP: 0018:ffffc9000653f5c0 EFLAGS: 00000202 [ 276.373477][ C1] RAX: 0000000000000000 RBX: ffff88804bd752c8 RCX: 0000000000000000 [ 276.375905][ C1] RDX: 0000000000000002 RSI: ffffffff8c400700 RDI: 0000000000000001 [ 276.378368][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2244dd2 [ 276.380833][ C1] R10: ffffffff91226e97 R11: 0000000000000000 R12: 0000000000000001 [ 276.383283][ C1] R13: 0000000000000012 R14: ffff88807ffd6140 R15: 0000000000000000 [ 276.385730][ C1] rcu_read_unlock+0x5/0x60 [ 276.387253][ C1] lruvec_stat_mod_folio+0x251/0x2e0 [ 276.388918][ C1] folio_add_file_rmap_ptes+0x756/0xdc0 [ 276.390647][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.392310][ C1] ? __pfx_folio_add_file_rmap_ptes+0x10/0x10 [ 276.394265][ C1] ? pte_offset_map_lock+0x174/0x320 [ 276.395906][ C1] set_pte_range+0x295/0xbd0 [ 276.397391][ C1] finish_fault+0x827/0x1400 [ 276.398866][ C1] do_fault+0xac5/0x1750 [ 276.400193][ C1] __handle_mm_fault+0x187d/0x2a00 [ 276.401798][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.403473][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 276.405126][ C1] ? pte_offset_map_lock+0x174/0x320 [ 276.406802][ C1] ? find_held_lock+0x2b/0x80 [ 276.408273][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 276.409852][ C1] handle_mm_fault+0x37b/0xa30 [ 276.411350][ C1] __get_user_pages+0x1178/0x32a0 [ 276.412919][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 276.414598][ C1] populate_vma_page_range+0x267/0x3f0 [ 276.416286][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 276.418190][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 276.420028][ C1] ? do_mmap+0x93f/0x12f0 [ 276.421386][ C1] __mm_populate+0x107/0x3a0 [ 276.422860][ C1] ? __pfx___mm_populate+0x10/0x10 [ 276.424453][ C1] ? up_write+0x2e5/0x5c0 [ 276.425805][ C1] vm_mmap_pgoff+0x37f/0x470 [ 276.427293][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 276.428917][ C1] ? __pfx_do_futex+0x10/0x10 [ 276.430396][ C1] ? __fget_files+0x215/0x3d0 [ 276.431869][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 276.433337][ C1] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 276.435197][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 276.436871][ C1] __do_fast_syscall_32+0xe7/0x970 [ 276.438472][ C1] do_fast_syscall_32+0x32/0x70 [ 276.439997][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.441964][ C1] RIP: 0023:0xf701efec [ 276.443256][ C1] Code: Unable to access opcode bytes at 0xf701efc2. [ 276.445295][ C1] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 276.447902][ C1] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 276.450344][ C1] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 276.452767][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.455198][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.457698][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.460095][ C1] [ 276.461714][ C1] Kernel Offset: disabled [ 276.462927][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:34:22 Registers: info registers vcpu 0 CPU#0 RAX=000000000063a5d5 RBX=ffffffff8e891480 RCX=ffffffff8bb742d5 RDX=0000000000000000 RSI=ffffffff8e1a6fd9 RDI=ffffffff8c400780 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb7289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bee000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7361a60 CR3=0000000050cb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a06b25 RDI=ffffffff9b9e81a0 RBP=ffffffff9b9e8160 RSP=ffffc900005904f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b6e8225 R15=ffffffff85a06ac0 RIP=ffffffff85a06b4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cee000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4432afc CR3=0000000050cb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001d400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff91d5abc0 RBX=ffffffff91471314 RCX=dffffc0000000000 RDX=ffffffff829579e3 RSI=0000000000000000 RDI=ffffffff91471314 RBP=ffffffff91471318 RSP=ffffc9000d28f788 R8 =ffffffff91d5abc6 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019581 R12=ffffffff91471314 R13=ffffffff829581b8 R14=ffffffff91471314 R15=0000000000000000 RIP=ffffffff81b77bba RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f111aa1f880 ffffffff 00c00000 GS =0000 ffff888096dee000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53e5da4 CR3=00000000740fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004010001 Opmask01=0000000000000000 Opmask02=0000000001010037 Opmask03=0000000020400004 Opmask04=00000000fec0e0c0 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd273fbd70 00007ffd273fbd70 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd273fbd70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558da95ac730 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558da95cd7b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f111a3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffff0000ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a553b30018a2a 4159432a4159434e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055703a00003a 3a302e30312d0000 00003a613a703a73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 000000332e05634c 000000055865736b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000100 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000001 RCX=ffffffff81f4bf8a RDX=ffff8880242aca80 RSI=ffffffff81f4c0c6 RDI=ffff8880242aca80 RBP=0000000000000000 RSP=ffffc900005e8e20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888021fc5300 R13=0000000000000000 R14=0000000000000001 R15=ffff88802b528690 RIP=ffffffff81ed4c4d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096eee000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f2018cb8 CR3=0000000060446000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000