last executing test programs: 6.577829528s ago: executing program 0 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) 5.790957013s ago: executing program 1 (id=1088): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 5.390180376s ago: executing program 3 (id=1090): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 4.844791614s ago: executing program 1 (id=1091): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r9, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) 4.744961341s ago: executing program 0 (id=1092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unlink(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r4 = syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$KDDISABIO(r4, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 4.505616844s ago: executing program 3 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 4.199459722s ago: executing program 3 (id=1095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) r8 = dup(r3) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0xc2f6, 0x0, 0x1, 0x319}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0xfffffff9, 0x3, 0xca60, r8, 0x5, '\x00', 0x0, r8, 0x2, 0x3, 0x3, 0x0, @value=r8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31887ab3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0x7, 0x9, 0x20, 0x999d1e2a512ef073}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x68, &(0x7f0000000440)=""/104, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r8, r8, r8, r8, r13, 0x1, r8], &(0x7f0000000600)=[{0x2, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x5, 0xf, 0xe}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x5}, 0x94) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x73) setuid(0xee01) r14 = socket(0x1d, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x8) syz_io_uring_submit(r10, r11, 0x0) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.220468386s ago: executing program 2 (id=1096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 3.170279114s ago: executing program 0 (id=1097): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r2, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_setup(0x1765, &(0x7f0000000180)={0x0, 0x5792, 0x4, 0x2, 0x112}, &(0x7f0000000100), &(0x7f0000000240)) r8 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 2.955994117s ago: executing program 3 (id=1099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 2.326994983s ago: executing program 0 (id=1100): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa000905"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 2.125432956s ago: executing program 2 (id=1101): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.989482112s ago: executing program 1 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd41, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000380)=ANY=[], 0x0) 1.939476147s ago: executing program 1 (id=1103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x3, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 1.845902806s ago: executing program 3 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 1.709003668s ago: executing program 3 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 1.446983052s ago: executing program 2 (id=1106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.309141442s ago: executing program 2 (id=1107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 954.666383ms ago: executing program 1 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) r8 = dup(r3) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0xc2f6, 0x0, 0x1, 0x319}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0xfffffff9, 0x3, 0xca60, r8, 0x5, '\x00', 0x0, r8, 0x2, 0x3, 0x3, 0x0, @value=r8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31887ab3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0x7, 0x9, 0x20, 0x999d1e2a512ef073}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x68, &(0x7f0000000440)=""/104, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r8, r8, r8, r8, r13, 0x1, r8], &(0x7f0000000600)=[{0x2, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x5, 0xf, 0xe}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x5}, 0x94) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x73) setuid(0xee01) r14 = socket(0x1d, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x8) syz_io_uring_submit(r10, r11, 0x0) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 409.561207ms ago: executing program 2 (id=1109): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 292.338169ms ago: executing program 2 (id=1110): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r9, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) 197.700317ms ago: executing program 0 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd41, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000380)=ANY=[], 0x0) 196.841261ms ago: executing program 0 (id=1112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 0s ago: executing program 1 (id=1113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) kernel console output (not intermixed with test programs): 0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 63.640079][ T9] usb 8-1: USB disconnect, device number 3 [ 63.644595][ T9] usblp0: removed [ 64.097480][ T9] Process accounting resumed [ 64.124745][ T6176] Process accounting resumed [ 64.209615][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 64.220955][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.224371][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.227331][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.352020][ T6025] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.354229][ T6178] infiniband syz2: set down [ 64.356294][ T6178] infiniband syz2: added ip6_vti0 [ 64.384706][ T6178] RDS/IB: syz2: added [ 64.387131][ T6178] smc: adding ib device syz2 with port count 1 [ 64.390138][ T6178] smc: ib device syz2 port 1 has no pnetid [ 64.394580][ T6025] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.399325][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.526047][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.667025][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.838382][ T6178] ip6_vti0 speed is unknown, defaulting to 1000 [ 65.144327][ T6205] ======================================================= [ 65.144327][ T6205] WARNING: The mand mount option has been deprecated and [ 65.144327][ T6205] and is ignored by this kernel. Remove the mand [ 65.144327][ T6205] option from the mount to silence this warning. [ 65.144327][ T6205] ======================================================= [ 65.463640][ T6025] Process accounting resumed [ 65.466598][ T6210] Process accounting resumed [ 65.690864][ T893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.872965][ T893] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.878826][ T893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 65.882201][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 65.885390][ T893] usb 5-1: Product: syz [ 65.886931][ T893] usb 5-1: Manufacturer: syz [ 65.888450][ T893] usb 5-1: SerialNumber: syz [ 66.105709][ T893] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 66.928710][ T893] Process accounting resumed [ 66.946758][ T6252] Process accounting resumed [ 67.854170][ C3] usblp0: nonzero write bulk status received: -71 [ 67.854575][ T6025] usb 5-1: USB disconnect, device number 2 [ 67.860181][ T6025] usblp0: removed [ 68.404156][ T6255] Set syz1 is full, maxelem 65536 reached [ 68.691566][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 68.697755][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 68.950020][ T6023] Process accounting resumed [ 68.960976][ T6277] Process accounting resumed [ 69.340882][ T6023] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.492987][ T6023] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.502565][ T6023] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 69.505665][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 69.508716][ T6023] usb 6-1: Product: syz [ 69.510180][ T6023] usb 6-1: Manufacturer: syz [ 69.512077][ T6023] usb 6-1: SerialNumber: syz [ 69.741152][ T6023] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.832553][ T6316] Process accounting resumed [ 70.917103][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 71.044559][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 71.083825][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 71.452054][ C3] usblp0: nonzero write bulk status received: -71 [ 71.452161][ T9] usb 6-1: USB disconnect, device number 2 [ 71.458271][ T9] usblp0: removed [ 72.318565][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 72.407667][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 73.013903][ T6374] binder: 6373:6374 ioctl 4018620d 0 returned -22 [ 73.404347][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 73.410598][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 73.867806][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 73.916080][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 74.287204][ T6400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.619679][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 74.936672][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'. [ 74.994371][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 75.087529][ T6418] binder: 6417:6418 ioctl 4018620d 0 returned -22 [ 75.145376][ T6420] Set syz1 is full, maxelem 65536 reached [ 75.581096][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.747946][ T839] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 75.757915][ T839] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.761415][ T839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.766817][ T839] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.770284][ T839] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.773904][ T839] usb 7-1: Product: syz [ 75.776714][ T839] usb 7-1: Manufacturer: syz [ 75.778433][ T839] usb 7-1: SerialNumber: syz [ 75.782351][ T839] usb 7-1: config 0 descriptor?? [ 75.787810][ T839] hub 7-1:0.0: bad descriptor, ignoring hub [ 75.789801][ T839] hub 7-1:0.0: probe with driver hub failed with error -5 [ 75.795533][ T839] usb 7-1: selecting invalid altsetting 0 [ 75.996239][ T40] audit: type=1326 audit(1767177735.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 76.006567][ T40] audit: type=1326 audit(1767177735.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 76.014523][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.016278][ T40] audit: type=1326 audit(1767177735.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.141" exe="/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 76.017768][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.026830][ T40] audit: type=1326 audit(1767177735.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 76.049799][ T40] audit: type=1326 audit(1767177735.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 76.382291][ T6426] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 76.965496][ T5945] usb 7-1: USB disconnect, device number 2 [ 77.142499][ T6456] binder: 6455:6456 ioctl 4018620d 0 returned -22 [ 78.522847][ T6467] Set syz1 is full, maxelem 65536 reached [ 78.739893][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 78.758705][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.786424][ T6486] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.811215][ T6486] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 78.821547][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 78.836736][ T6486] bond1: (slave ip6gretap1): Releasing backup interface [ 78.839559][ T6486] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ca:57:b7:78:74:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 79.320948][ T893] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.470935][ T893] usb 8-1: Using ep0 maxpacket: 32 [ 79.475372][ T893] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 79.480239][ T893] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 79.486915][ T893] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.493097][ T893] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 79.501103][ T893] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 79.505405][ T893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.508948][ T893] usb 8-1: Product: syz [ 79.511246][ T893] usb 8-1: Manufacturer: syz [ 79.513304][ T893] usb 8-1: SerialNumber: syz [ 79.524189][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 79.534302][ T893] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input5 [ 79.741064][ T893] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 79.746175][ T893] (id 0x00) [ 79.840894][ T893] rc_core: IR keymap rc-imon-pad not found [ 79.843531][ T893] Registered IR keymap rc-empty [ 79.846582][ T893] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 79.851479][ T893] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 79.963955][ T893] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 79.973159][ T893] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input6 [ 79.984193][ T893] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:4> initialized [ 80.025958][ T6501] Set syz1 is full, maxelem 65536 reached [ 80.136229][ T893] usb 8-1: USB disconnect, device number 4 [ 81.359734][ T6531] veth3: entered allmulticast mode [ 82.243579][ T6550] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.670493][ T6525] Set syz1 is full, maxelem 65536 reached [ 84.418466][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 84.620246][ T6590] Process accounting resumed [ 84.772690][ T6599] binder: 6598:6599 ioctl c0306201 0 returned -14 [ 85.214928][ T6611] Set syz1 is full, maxelem 65536 reached [ 85.276127][ T6617] Process accounting resumed [ 85.306541][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 85.941016][ T6016] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.125829][ T6016] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.133011][ T6016] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 86.138053][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 86.141224][ T6016] usb 8-1: Product: syz [ 86.142573][ T6016] usb 8-1: Manufacturer: syz [ 86.144060][ T6016] usb 8-1: SerialNumber: syz [ 86.253494][ T34] cfg80211: failed to load regulatory.db [ 86.361867][ T6016] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.443772][ T6642] netlink: 'syz.0.218': attribute type 4 has an invalid length. [ 86.560116][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 87.351760][ T6655] kernel profiling enabled (shift: 6) [ 88.403624][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 88.627099][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 88.632840][ T53] usb 8-1: USB disconnect, device number 5 [ 88.644583][ T53] usblp0: removed [ 88.679604][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.705767][ T6683] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 88.791143][ T103] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 88.818710][ T6681] bond1: (slave veth9): Enslaving as a backup interface with a down link [ 88.877404][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 88.904518][ T46] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 88.939266][ T6689] syz.3.233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.853782][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 89.858043][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 90.132868][ T6716] Set syz1 is full, maxelem 65536 reached [ 90.198642][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 90.709119][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 91.333156][ T6741] Set syz1 is full, maxelem 65536 reached [ 91.454004][ T6747] veth3: entered allmulticast mode [ 92.198799][ T6765] netlink: 'syz.3.258': attribute type 4 has an invalid length. [ 92.468575][ T6769] Process accounting resumed [ 93.386144][ T6775] Set syz1 is full, maxelem 65536 reached [ 96.369817][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 97.658507][ T6899] Set syz1 is full, maxelem 65536 reached [ 99.353333][ T6957] binder: 6956:6957 ioctl c0306201 0 returned -14 [ 99.788202][ T6985] binder: 6984:6985 ioctl c0306201 0 returned -14 [ 100.651675][ T7013] binder: 7012:7013 ioctl c0306201 0 returned -14 [ 100.923243][ T7023] futex_wake_op: syz.2.354 tries to shift op by 144; fix this program [ 101.862071][ T7041] netlink: 84 bytes leftover after parsing attributes in process `syz.2.361'. [ 102.538085][ T7058] Illegal XDP return value 4294967262 on prog (id 38) dev syz_tun, expect packet loss! [ 103.112470][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 104.657185][ T40] audit: type=1326 audit(1767177764.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.3.383" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x0 [ 105.658759][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 105.664620][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 106.040971][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.181008][ T24] usb 6-1: device descriptor read/64, error -71 [ 106.381751][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 106.421044][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.550927][ T24] usb 6-1: device descriptor read/64, error -71 [ 106.661224][ T24] usb usb6-port1: attempt power cycle [ 107.000937][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 107.022111][ T24] usb 6-1: device descriptor read/8, error -71 [ 107.184990][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.401'. [ 107.189739][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.401'. [ 107.281033][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 107.301442][ T24] usb 6-1: device descriptor read/8, error -71 [ 107.421306][ T24] usb usb6-port1: unable to enumerate USB device [ 108.594007][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 108.603831][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 109.253212][ T7178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.824976][ T7184] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 109.828906][ T7184] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 110.160261][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 110.165066][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 110.440966][ T6004] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 110.604404][ T6004] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 110.607425][ T6004] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.610759][ T6004] usb 7-1: config 0 interface 0 has no altsetting 0 [ 110.618143][ T6004] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.621518][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.624373][ T6004] usb 7-1: Product: syz [ 110.625903][ T6004] usb 7-1: Manufacturer: syz [ 110.627744][ T6004] usb 7-1: SerialNumber: syz [ 110.631627][ T6004] usb 7-1: config 0 descriptor?? [ 110.637600][ T6004] hub 7-1:0.0: bad descriptor, ignoring hub [ 110.639951][ T6004] hub 7-1:0.0: probe with driver hub failed with error -5 [ 110.645402][ T6004] usb 7-1: selecting invalid altsetting 0 [ 111.447358][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.429'. [ 111.457217][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.429'. [ 111.731077][ T7198] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 113.144590][ T6016] usb 7-1: USB disconnect, device number 3 [ 114.583796][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 114.598405][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 114.991100][ T6813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 115.120945][ T6813] usb 8-1: device descriptor read/64, error -71 [ 115.190890][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.342272][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 115.345057][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.348479][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 115.360408][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.363645][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.366399][ T9] usb 6-1: Product: syz [ 115.367869][ T9] usb 6-1: Manufacturer: syz [ 115.369509][ T9] usb 6-1: SerialNumber: syz [ 115.371072][ T6813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 115.381463][ T9] usb 6-1: config 0 descriptor?? [ 115.385000][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 115.387059][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 115.401159][ T9] usb 6-1: selecting invalid altsetting 0 [ 115.521017][ T6813] usb 8-1: device descriptor read/64, error -71 [ 115.642535][ T6813] usb usb8-port1: attempt power cycle [ 116.000947][ T6813] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 116.021541][ T6813] usb 8-1: device descriptor read/8, error -71 [ 116.260924][ T6813] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 116.282185][ T6813] usb 8-1: device descriptor read/8, error -71 [ 116.301157][ T7265] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 116.391972][ T6813] usb usb8-port1: unable to enumerate USB device [ 116.882487][ T9] usb 6-1: USB disconnect, device number 7 [ 117.691083][ T6047] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 117.804360][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 117.852343][ T6047] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 117.855098][ T6047] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.858372][ T6047] usb 7-1: config 0 interface 0 has no altsetting 0 [ 117.863544][ T6047] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.866653][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.869487][ T6047] usb 7-1: Product: syz [ 117.871279][ T6047] usb 7-1: Manufacturer: syz [ 117.873118][ T6047] usb 7-1: SerialNumber: syz [ 117.877267][ T6047] usb 7-1: config 0 descriptor?? [ 117.881871][ T6047] hub 7-1:0.0: bad descriptor, ignoring hub [ 117.884834][ T6047] hub 7-1:0.0: probe with driver hub failed with error -5 [ 117.890642][ T6047] usb 7-1: selecting invalid altsetting 0 [ 118.790957][ T7292] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 119.381487][ T9] usb 7-1: USB disconnect, device number 4 [ 119.583722][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 119.621901][ T6023] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 119.751019][ T6023] usb 6-1: device descriptor read/64, error -71 [ 120.001013][ T6023] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 120.150888][ T6023] usb 6-1: device descriptor read/64, error -71 [ 120.261922][ T6023] usb usb6-port1: attempt power cycle [ 120.610892][ T6023] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 120.631797][ T6023] usb 6-1: device descriptor read/8, error -71 [ 120.642990][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 120.870965][ T6023] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.878348][ T7353] binder: 7348:7353 ioctl 0 80000040 returned -22 [ 120.932038][ T6023] usb 6-1: device descriptor read/8, error -71 [ 121.045886][ T6023] usb usb6-port1: unable to enumerate USB device [ 121.068579][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 121.602438][ T7357] syz.0.475 (7357) used greatest stack depth: 16872 bytes left [ 121.820932][ T6016] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 121.973552][ T6016] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 121.977248][ T6016] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.981177][ T6016] usb 8-1: config 0 interface 0 has no altsetting 0 [ 121.984968][ T6016] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.988832][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.991774][ T6016] usb 8-1: Product: syz [ 121.993327][ T6016] usb 8-1: Manufacturer: syz [ 121.994891][ T6016] usb 8-1: SerialNumber: syz [ 121.999320][ T6016] usb 8-1: config 0 descriptor?? [ 122.004453][ T6016] hub 8-1:0.0: bad descriptor, ignoring hub [ 122.007384][ T6016] hub 8-1:0.0: probe with driver hub failed with error -5 [ 122.011947][ T6016] usb 8-1: selecting invalid altsetting 0 [ 122.174872][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 122.186966][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 122.200373][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 122.259200][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 122.409518][ T7379] binder: 7374:7379 ioctl 0 80000040 returned -22 [ 122.941011][ T7365] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 125.535817][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 125.564073][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 125.623206][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 125.745667][ T7413] binder: 7409:7413 ioctl 0 80000040 returned -22 [ 128.171672][ T7365] usb 8-1: failed to restore interface 0 altsetting 251 (error=-110) [ 128.175909][ T9] usb 8-1: USB disconnect, device number 10 [ 128.541664][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 128.569582][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 128.616435][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 128.893633][ T7446] binder: 7437:7446 ioctl 0 80000040 returned -22 [ 128.992668][ T7443] binder: 7442:7443 ioctl 0 80000040 returned -22 [ 130.183696][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 130.395601][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 130.445945][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 131.228458][ T7489] binder: 7478:7489 ioctl 0 80000040 returned -22 [ 131.385769][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 131.471708][ T7483] binder: 7482:7483 ioctl 0 80000040 returned -22 [ 132.435703][ T7500] mkiss: ax0: crc mode is auto. [ 133.988626][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 134.475647][ T7536] binder: 7534:7536 ioctl 0 80000040 returned -22 [ 136.051037][ T6047] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 136.203274][ T6047] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.209152][ T6047] usb 6-1: config 0 has no interfaces? [ 136.216825][ T6047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 136.220673][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.233420][ T6047] usb 6-1: Product: syz [ 136.236780][ T6047] usb 6-1: Manufacturer: syz [ 136.240076][ T6047] usb 6-1: SerialNumber: syz [ 136.247755][ T6047] usb 6-1: config 0 descriptor?? [ 136.425728][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'. [ 136.937825][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 137.351168][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 137.463583][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.466502][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.502401][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 137.505455][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.509628][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.522260][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.526394][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.529961][ T24] usb 8-1: Product: syz [ 137.532483][ T24] usb 8-1: Manufacturer: syz [ 137.534816][ T24] usb 8-1: SerialNumber: syz [ 137.553799][ T24] usb 8-1: config 0 descriptor?? [ 137.566747][ T7578] binder: 7576:7578 ioctl 0 80000040 returned -22 [ 137.582203][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 137.585151][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 137.608091][ T24] usb 8-1: selecting invalid altsetting 0 [ 138.161033][ T7575] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 138.828838][ T6025] usb 6-1: USB disconnect, device number 12 [ 139.736167][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 140.856982][ T7613] binder: 7609:7613 ioctl 0 80000040 returned -22 [ 141.742931][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 141.764655][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 141.807361][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 142.064584][ T7620] binder: 7619:7620 ioctl 0 80000040 returned -22 [ 142.240977][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 142.392472][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.397110][ T9] usb 6-1: config 0 has no interfaces? [ 142.401537][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 142.405398][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 142.408929][ T9] usb 6-1: Product: syz [ 142.411472][ T9] usb 6-1: Manufacturer: syz [ 142.413094][ T9] usb 6-1: SerialNumber: syz [ 142.415869][ T9] usb 6-1: config 0 descriptor?? [ 143.371146][ T7575] usb 8-1: failed to restore interface 0 altsetting 251 (error=-110) [ 143.375693][ T6813] usb 8-1: USB disconnect, device number 12 [ 145.011932][ T9] usb 6-1: USB disconnect, device number 13 [ 145.039640][ T7660] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 145.043358][ T7660] netlink: 'syz.3.560': attribute type 2 has an invalid length. [ 145.165164][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 145.192446][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 145.264203][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 145.513468][ T7669] binder: 7665:7669 ioctl 0 80000040 returned -22 [ 145.680927][ T6023] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.245927][ T6023] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 146.249205][ T6023] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.252935][ T6023] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.257746][ T6023] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.260968][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.264090][ T6023] usb 5-1: Product: syz [ 146.265801][ T6023] usb 5-1: Manufacturer: syz [ 146.267558][ T6023] usb 5-1: SerialNumber: syz [ 146.285815][ T6023] usb 5-1: config 0 descriptor?? [ 146.293234][ T6023] hub 5-1:0.0: bad descriptor, ignoring hub [ 146.295829][ T6023] hub 5-1:0.0: probe with driver hub failed with error -5 [ 146.299589][ T6023] usb 5-1: selecting invalid altsetting 0 [ 146.620893][ T6047] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 146.793172][ T6047] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.797176][ T6047] usb 8-1: config 0 has no interfaces? [ 146.802194][ T6047] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 146.805556][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 146.808398][ T6047] usb 8-1: Product: syz [ 146.809855][ T6047] usb 8-1: Manufacturer: syz [ 146.811607][ T6047] usb 8-1: SerialNumber: syz [ 146.815477][ T6047] usb 8-1: config 0 descriptor?? [ 147.353540][ T7246] usb 5-1: USB disconnect, device number 3 [ 147.400407][ T7696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 147.402708][ T7696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.406735][ T7696] vhci_hcd vhci_hcd.0: Device attached [ 147.670951][ T7246] usb 42-1: SetAddress Request (2) to port 0 [ 147.674464][ T7246] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 148.161738][ T7697] vhci_hcd: connection reset by peer [ 148.167361][ T13] vhci_hcd vhci_hcd.2: stop threads [ 148.172162][ T13] vhci_hcd vhci_hcd.2: release socket [ 148.176280][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 149.173979][ T7711] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 149.176799][ T7711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.181011][ T7711] vhci_hcd vhci_hcd.0: Device attached [ 149.389768][ T6025] usb 8-1: USB disconnect, device number 14 [ 149.765503][ T7712] vhci_hcd: connection closed [ 149.767010][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 149.770581][ T1141] vhci_hcd vhci_hcd.2: release socket [ 149.783021][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 149.811106][ T7724] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 149.815075][ T7724] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 149.916432][ T7725] binder: 7719:7725 ioctl 0 80000040 returned -22 [ 150.770951][ T6047] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 150.951882][ T6047] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.956142][ T6047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.963913][ T6047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 150.967854][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 150.972306][ T6047] usb 6-1: Product: syz [ 150.974176][ T6047] usb 6-1: Manufacturer: syz [ 150.976305][ T6047] usb 6-1: SerialNumber: syz [ 151.824747][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 151.856711][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 151.905435][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 152.058036][ T7757] binder: 7753:7757 ioctl 0 80000040 returned -22 [ 152.254277][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 152.684502][ T7770] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 152.687649][ T7770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.693639][ T7770] vhci_hcd vhci_hcd.0: Device attached [ 152.730938][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.731571][ T7246] usb 42-1: device descriptor read/8, error -110 [ 152.980888][ T6047] usb 44-1: SetAddress Request (2) to port 0 [ 152.983020][ T6047] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 153.132219][ T7246] usb usb42-port1: attempt power cycle [ 153.268904][ T7771] vhci_hcd: connection reset by peer [ 153.272281][ T12] vhci_hcd vhci_hcd.3: stop threads [ 153.274659][ T12] vhci_hcd vhci_hcd.3: release socket [ 153.277048][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 153.466861][ T7779] Set syz1 is full, maxelem 65536 reached [ 153.516492][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 153.531817][ T6023] usb 6-1: USB disconnect, device number 14 [ 153.711376][ T7246] usb usb42-port1: unable to enumerate USB device [ 153.814150][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 153.836332][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 153.891624][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 154.102923][ T7792] binder: 7786:7792 ioctl 0 80000040 returned -22 [ 154.651089][ T6023] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 154.815922][ T6023] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 154.818663][ T6023] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.822042][ T6023] usb 6-1: config 0 interface 0 has no altsetting 0 [ 154.828243][ T6023] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.832497][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.835998][ T6023] usb 6-1: Product: syz [ 154.837839][ T6023] usb 6-1: Manufacturer: syz [ 154.839968][ T6023] usb 6-1: SerialNumber: syz [ 154.849311][ T6023] usb 6-1: config 0 descriptor?? [ 154.857440][ T6023] hub 6-1:0.0: bad descriptor, ignoring hub [ 154.862235][ T6023] hub 6-1:0.0: probe with driver hub failed with error -5 [ 154.866168][ T6023] usb 6-1: selecting invalid altsetting 0 [ 155.241029][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 155.402981][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.407307][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.416027][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 155.420130][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 155.424153][ T24] usb 7-1: Product: syz [ 155.425943][ T24] usb 7-1: Manufacturer: syz [ 155.428040][ T24] usb 7-1: SerialNumber: syz [ 155.913236][ T6025] usb 6-1: USB disconnect, device number 15 [ 156.100917][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.100960][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 157.208153][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 158.009401][ T7246] usb 7-1: USB disconnect, device number 5 [ 158.017150][ T6047] usb 44-1: device descriptor read/8, error -110 [ 158.412317][ T6047] usb usb44-port1: attempt power cycle [ 158.626739][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 158.659052][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 158.703625][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 158.781024][ T7246] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 158.870405][ T7856] binder: 7852:7856 ioctl 0 80000040 returned -22 [ 158.942683][ T7246] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 158.945857][ T7246] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.949531][ T7246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 158.954319][ T7246] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.957634][ T7246] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.961341][ T7246] usb 8-1: Product: syz [ 158.963174][ T7246] usb 8-1: Manufacturer: syz [ 158.965556][ T7246] usb 8-1: SerialNumber: syz [ 158.972557][ T7246] usb 8-1: config 0 descriptor?? [ 158.983162][ T7246] hub 8-1:0.0: bad descriptor, ignoring hub [ 158.985835][ T7246] hub 8-1:0.0: probe with driver hub failed with error -5 [ 158.992945][ T6047] usb usb44-port1: unable to enumerate USB device [ 158.997907][ T7246] usb 8-1: selecting invalid altsetting 0 [ 159.234333][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.240161][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.271911][ T7246] usb 8-1: USB disconnect, device number 15 [ 160.869842][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 161.352537][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 161.412637][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 161.430959][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 161.561163][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 161.644864][ T7899] binder: 7893:7899 ioctl 0 80000040 returned -22 [ 161.747947][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 161.953400][ T24] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 161.957853][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 161.971107][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 161.992233][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.996973][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.000222][ T24] usb 6-1: Product: syz [ 162.002144][ T24] usb 6-1: Manufacturer: syz [ 162.004327][ T24] usb 6-1: SerialNumber: syz [ 162.032562][ T24] usb 6-1: config 0 descriptor?? [ 162.063399][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 162.074181][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 162.091917][ T24] usb 6-1: selecting invalid altsetting 0 [ 162.328745][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.443680][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.471552][ T24] usb 6-1: USB disconnect, device number 16 [ 164.861003][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 165.023330][ T24] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 165.026096][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.029703][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.035407][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.038796][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.042065][ T24] usb 7-1: Product: syz [ 165.043560][ T24] usb 7-1: Manufacturer: syz [ 165.045152][ T24] usb 7-1: SerialNumber: syz [ 165.048175][ T24] usb 7-1: config 0 descriptor?? [ 165.051229][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 165.053761][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 165.057607][ T24] usb 7-1: selecting invalid altsetting 0 [ 165.295186][ T7950] binder: 7948:7950 ioctl 0 80000040 returned -22 [ 165.508569][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.517088][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.555473][ T6025] usb 7-1: USB disconnect, device number 6 [ 166.285882][ T7967] 9p: Bad value for 'rfdno' [ 167.923778][ T7988] binder: 7985:7988 ioctl 0 80000040 returned -22 [ 168.340112][ T7993] 9p: Bad value for 'rfdno' [ 168.669423][ T8000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 168.671692][ T8000] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.676781][ T8000] vhci_hcd vhci_hcd.0: Device attached [ 168.759324][ T6023] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 168.900981][ T6023] usb 8-1: device descriptor read/64, error -71 [ 168.962184][ T6047] usb 38-1: SetAddress Request (2) to port 0 [ 168.965110][ T6047] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 169.141265][ T6023] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 169.267222][ T8001] vhci_hcd: connection reset by peer [ 169.269669][ T4204] vhci_hcd vhci_hcd.0: stop threads [ 169.270945][ T6023] usb 8-1: device descriptor read/64, error -71 [ 169.275377][ T4204] vhci_hcd vhci_hcd.0: release socket [ 169.278413][ T4204] vhci_hcd vhci_hcd.0: disconnect device [ 169.381260][ T6023] usb usb8-port1: attempt power cycle [ 169.725817][ T6023] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 169.741493][ T6023] usb 8-1: device descriptor read/8, error -71 [ 169.980921][ T6023] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 170.011371][ T6023] usb 8-1: device descriptor read/8, error -71 [ 170.103196][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 170.133239][ T6023] usb usb8-port1: unable to enumerate USB device [ 170.176722][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 170.228548][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 170.397681][ T8018] binder: 8012:8018 ioctl 0 80000040 returned -22 [ 171.332970][ T8034] 9p: Bad value for 'rfdno' [ 171.743481][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 172.335309][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 172.337715][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 173.732872][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 173.762306][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 173.832580][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 174.012068][ T6047] usb 38-1: device descriptor read/8, error -110 [ 174.018338][ T8074] 9p: Bad value for 'wfdno' [ 174.202050][ T8067] binder: 8066:8067 ioctl 0 80000040 returned -22 [ 174.304192][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 174.511656][ T6047] usb usb38-port1: attempt power cycle [ 174.651028][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 174.654174][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.082256][ T6047] usb usb38-port1: unable to enumerate USB device [ 175.203926][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 175.316286][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 175.564202][ T8098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 175.567193][ T8098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.570926][ T8098] vhci_hcd vhci_hcd.0: Device attached [ 176.220971][ T8099] vhci_hcd: connection closed [ 176.221985][ T4204] vhci_hcd vhci_hcd.3: stop threads [ 176.226623][ T4204] vhci_hcd vhci_hcd.3: release socket [ 176.232584][ T4204] vhci_hcd vhci_hcd.3: disconnect device [ 176.873280][ T8115] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 176.876637][ T8115] netlink: 'syz.1.691': attribute type 2 has an invalid length. [ 177.615356][ T8125] 9p: Bad value for 'wfdno' [ 178.173050][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 178.839418][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 179.053189][ T8149] Set syz1 is full, maxelem 65536 reached [ 179.533567][ T8155] Set syz1 is full, maxelem 65536 reached [ 179.930926][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 179.932906][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.069563][ T8170] 9p: Bad value for 'wfdno' [ 180.491038][ T5952] Bluetooth: hci0: command 0x0406 tx timeout [ 180.494115][ T5952] Bluetooth: hci3: command 0x0406 tx timeout [ 180.509295][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 180.513252][ T5938] Bluetooth: hci1: command 0x0406 tx timeout [ 181.073593][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 181.640335][ T8192] Set syz1 is full, maxelem 65536 reached [ 181.971126][ T7246] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 182.123274][ T7246] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.127505][ T7246] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.131850][ T7246] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.140249][ T7246] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 182.144265][ T7246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 182.147026][ T7246] usb 7-1: Product: syz [ 182.148490][ T7246] usb 7-1: Manufacturer: syz [ 182.150066][ T7246] usb 7-1: SerialNumber: syz [ 182.366181][ T7246] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.736753][ T7246] usb 7-1: USB disconnect, device number 7 [ 182.745526][ T7246] usblp0: removed [ 183.124510][ T8211] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 183.128392][ T8211] netlink: 'syz.0.714': attribute type 2 has an invalid length. [ 183.218136][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 183.624146][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 183.795170][ T8224] Set syz1 is full, maxelem 65536 reached [ 183.931093][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 183.945174][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.300942][ T6025] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 184.380931][ T7246] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 184.472775][ T6025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.477708][ T6025] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.482412][ T6025] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.490708][ T6025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 184.495420][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 184.499666][ T6025] usb 6-1: Product: syz [ 184.501667][ T6025] usb 6-1: Manufacturer: syz [ 184.503873][ T6025] usb 6-1: SerialNumber: syz [ 184.520889][ T7246] usb 7-1: device descriptor read/64, error -71 [ 184.714654][ T6025] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.771010][ T7246] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 184.786085][ T8242] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 184.789108][ T8242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.793026][ T8242] vhci_hcd vhci_hcd.0: Device attached [ 184.913085][ T7246] usb 7-1: device descriptor read/64, error -71 [ 185.033916][ T7246] usb usb7-port1: attempt power cycle [ 185.070998][ T6047] usb 38-1: SetAddress Request (6) to port 0 [ 185.102266][ T7452] usb 6-1: USB disconnect, device number 17 [ 185.104689][ T6047] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 185.105716][ T7452] usblp0: removed [ 185.370919][ T7246] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 185.391414][ T7246] usb 7-1: device descriptor read/8, error -71 [ 185.412321][ T8243] vhci_hcd: connection reset by peer [ 185.415248][ T1046] vhci_hcd vhci_hcd.0: stop threads [ 185.417540][ T1046] vhci_hcd vhci_hcd.0: release socket [ 185.419845][ T1046] vhci_hcd vhci_hcd.0: disconnect device [ 185.650964][ T7246] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 185.682092][ T7246] usb 7-1: device descriptor read/8, error -71 [ 185.801451][ T7246] usb usb7-port1: unable to enumerate USB device [ 186.150529][ T8262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 186.153021][ T8262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 186.170281][ T8262] vhci_hcd vhci_hcd.0: Device attached [ 186.440945][ T6025] usb 44-1: SetAddress Request (7) to port 0 [ 186.444658][ T6025] usb 44-1: new SuperSpeed USB device number 7 using vhci_hcd [ 186.770482][ T8263] vhci_hcd: connection reset by peer [ 186.773547][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 186.775575][ T1148] vhci_hcd vhci_hcd.3: release socket [ 186.777573][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 186.841893][ T8272] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 186.845970][ T8272] netlink: 'syz.0.734': attribute type 2 has an invalid length. [ 188.041212][ T7246] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.193248][ T7246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.197525][ T7246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.201105][ T7246] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.209175][ T7246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 188.212690][ T7246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.215516][ T7246] usb 5-1: Product: syz [ 188.217057][ T7246] usb 5-1: Manufacturer: syz [ 188.218742][ T7246] usb 5-1: SerialNumber: syz [ 188.440097][ T7246] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.811605][ T7452] usb 5-1: USB disconnect, device number 4 [ 188.815013][ T7452] usblp0: removed [ 189.394394][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 189.440619][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 189.518016][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 189.737118][ T8324] binder: 8321:8324 ioctl 0 80000040 returned -22 [ 190.171048][ T6047] usb 38-1: device descriptor read/8, error -110 [ 190.572016][ T6047] usb usb38-port1: attempt power cycle [ 191.151714][ T6047] usb usb38-port1: unable to enumerate USB device [ 191.325136][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 191.531027][ T6047] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 191.531778][ T6025] usb 44-1: device descriptor read/8, error -110 [ 191.696585][ T8359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 191.698744][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 191.702835][ T6047] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.706998][ T6047] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.711592][ T6047] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.712369][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 191.720910][ T6047] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 191.724947][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.728723][ T6047] usb 7-1: Product: syz [ 191.730420][ T6047] usb 7-1: Manufacturer: syz [ 191.733115][ T6047] usb 7-1: SerialNumber: syz [ 191.921630][ T6025] usb usb44-port1: attempt power cycle [ 191.943499][ T6047] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.981703][ T6016] usb 38-1: SetAddress Request (10) to port 0 [ 191.984824][ T6016] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 192.123662][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 192.149194][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 192.224340][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 192.340562][ T8360] vhci_hcd: connection reset by peer [ 192.367605][ T8196] vhci_hcd vhci_hcd.0: stop threads [ 192.369903][ T8196] vhci_hcd vhci_hcd.0: release socket [ 192.372156][ T8196] vhci_hcd vhci_hcd.0: disconnect device [ 192.452311][ T24] usb 7-1: USB disconnect, device number 12 [ 192.461818][ T8367] binder: 8362:8367 ioctl 0 80000040 returned -22 [ 192.499936][ T6025] usb usb44-port1: unable to enumerate USB device [ 192.517026][ T24] usblp0: removed [ 193.378587][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 193.919548][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 195.270926][ T7246] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 195.452022][ T7246] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.469924][ T7246] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.504494][ T7246] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.537667][ T7246] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 195.558613][ T7246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 195.572320][ T7246] usb 8-1: Product: syz [ 195.587295][ T7246] usb 8-1: Manufacturer: syz [ 195.598135][ T7246] usb 8-1: SerialNumber: syz [ 195.953480][ T7246] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.341521][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 196.344191][ T5945] usb 8-1: USB disconnect, device number 20 [ 196.347980][ T5945] usblp0: removed [ 196.829577][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 196.941935][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 196.974936][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 197.023297][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 197.051054][ T6016] usb 38-1: device descriptor read/8, error -110 [ 197.207063][ T8442] binder: 8438:8442 ioctl 0 80000040 returned -22 [ 197.453593][ T6016] usb usb38-port1: attempt power cycle [ 198.051590][ T6016] usb usb38-port1: unable to enumerate USB device [ 198.171450][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 198.171737][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.380923][ T6025] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 198.413188][ T8469] binder: 8466:8469 ioctl 0 80000040 returned -22 [ 198.542509][ T6025] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.549639][ T6025] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 198.552962][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 198.555800][ T6025] usb 7-1: Product: syz [ 198.557207][ T6025] usb 7-1: Manufacturer: syz [ 198.558775][ T6025] usb 7-1: SerialNumber: syz [ 198.831257][ T6025] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.853611][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 198.895315][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.951011][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.354921][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 200.090950][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.090988][ T5946] Bluetooth: hci5: command 0x1003 tx timeout [ 201.174250][ T142] usb 7-1: USB disconnect, device number 13 [ 201.183086][ T142] usblp0: removed [ 202.194502][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 202.514886][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 203.000956][ T6016] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 203.172549][ T6016] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.179098][ T6016] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.183589][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.186474][ T6016] usb 8-1: Product: syz [ 203.188014][ T6016] usb 8-1: Manufacturer: syz [ 203.189702][ T6016] usb 8-1: SerialNumber: syz [ 203.356017][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 203.390467][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 203.401253][ T6016] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 203.432850][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 203.481249][ T142] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 203.660594][ T142] usb 6-1: device descriptor read/64, error -71 [ 203.681959][ T8549] binder: 8545:8549 ioctl 0 80000040 returned -22 [ 203.718357][ T6016] usb 8-1: USB disconnect, device number 21 [ 203.742395][ T6016] usblp0: removed [ 203.920924][ T142] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 204.050869][ T142] usb 6-1: device descriptor read/64, error -71 [ 204.163135][ T142] usb usb6-port1: attempt power cycle [ 204.377188][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 204.500867][ T142] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 204.532794][ T142] usb 6-1: device descriptor read/8, error -71 [ 204.777094][ T142] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 204.801259][ T142] usb 6-1: device descriptor read/8, error -71 [ 204.911132][ T142] usb usb6-port1: unable to enumerate USB device [ 206.250078][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 206.640620][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 206.687397][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 206.808094][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 207.078286][ T8582] binder: 8578:8582 ioctl 0 80000040 returned -22 [ 207.231274][ T8586] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 207.234857][ T8586] netlink: 'syz.2.821': attribute type 2 has an invalid length. [ 207.481063][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 207.652590][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.658838][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 207.661904][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 207.664232][ T8591] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 207.664947][ T10] usb 5-1: Product: syz [ 207.664959][ T10] usb 5-1: Manufacturer: syz [ 207.664966][ T10] usb 5-1: SerialNumber: syz [ 207.685279][ T8591] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 207.896975][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.061680][ T7246] usb 5-1: USB disconnect, device number 5 [ 208.064809][ T7246] usblp0: removed [ 208.430528][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 208.698275][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 209.966745][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 209.987831][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 210.046298][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 210.256739][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 210.268969][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.461714][ T8630] binder: 8623:8630 ioctl 0 80000040 returned -22 [ 211.190860][ T6025] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 211.402261][ T6025] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.412131][ T6025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 211.415199][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 211.421992][ T6025] usb 6-1: Product: syz [ 211.423553][ T6025] usb 6-1: Manufacturer: syz [ 211.425040][ T6025] usb 6-1: SerialNumber: syz [ 211.520950][ T8655] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 211.523044][ T8655] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.526406][ T8655] vhci_hcd vhci_hcd.0: Device attached [ 211.774281][ T6025] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.811055][ T24] usb 44-1: SetAddress Request (11) to port 0 [ 211.813145][ T24] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 212.199218][ T8656] vhci_hcd: connection reset by peer [ 212.201971][ T8196] vhci_hcd vhci_hcd.3: stop threads [ 212.204281][ T8196] vhci_hcd vhci_hcd.3: release socket [ 212.207344][ T8196] vhci_hcd vhci_hcd.3: disconnect device [ 212.407334][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 212.811027][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 212.811130][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 213.293980][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 213.883085][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 213.912316][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 213.942501][ T10] usb 6-1: USB disconnect, device number 22 [ 213.949977][ T10] usblp0: removed [ 213.969626][ T8685] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 213.973014][ T8685] netlink: 'syz.0.844': attribute type 2 has an invalid length. [ 214.001957][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 214.216051][ T8682] binder: 8676:8682 ioctl 0 80000040 returned -22 [ 214.290989][ T8121] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 214.420899][ T8121] usb 8-1: device descriptor read/64, error -71 [ 214.661078][ T8121] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 214.763999][ T8699] mkiss: ax0: crc mode is auto. [ 214.810989][ T8121] usb 8-1: device descriptor read/64, error -71 [ 214.921080][ T8121] usb usb8-port1: attempt power cycle [ 215.083718][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 215.261013][ T8121] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 215.281683][ T8121] usb 8-1: device descriptor read/8, error -71 [ 215.531548][ T8121] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 215.561969][ T8121] usb 8-1: device descriptor read/8, error -71 [ 215.681055][ T8121] usb usb8-port1: unable to enumerate USB device [ 215.798583][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 216.011044][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 216.011819][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 216.051380][ T8724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 216.053746][ T8724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.057193][ T8724] vhci_hcd vhci_hcd.0: Device attached [ 216.140896][ T6016] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 216.292317][ T6016] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.298589][ T6016] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 216.302174][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 216.304984][ T6016] usb 6-1: Product: syz [ 216.306447][ T6016] usb 6-1: Manufacturer: syz [ 216.308414][ T6016] usb 6-1: SerialNumber: syz [ 216.321038][ T6047] usb 42-1: SetAddress Request (6) to port 0 [ 216.323161][ T6047] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 216.517649][ T6016] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 216.678309][ T8725] vhci_hcd: connection reset by peer [ 216.686277][ T4982] vhci_hcd vhci_hcd.2: stop threads [ 216.688647][ T4982] vhci_hcd vhci_hcd.2: release socket [ 216.696611][ T4982] vhci_hcd vhci_hcd.2: disconnect device [ 216.698216][ T8731] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 216.699626][ T6025] usb 6-1: USB disconnect, device number 23 [ 216.701475][ T8731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.701682][ T8731] vhci_hcd vhci_hcd.0: Device attached [ 216.708703][ T6025] usblp0: removed [ 216.891021][ T24] usb 44-1: device descriptor read/8, error -110 [ 216.971043][ T6016] usb 38-1: SetAddress Request (14) to port 0 [ 216.973167][ T6016] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 217.067304][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 217.287470][ T24] usb usb44-port1: attempt power cycle [ 217.346484][ T8732] vhci_hcd: connection reset by peer [ 217.361190][ T75] vhci_hcd vhci_hcd.0: stop threads [ 217.363004][ T75] vhci_hcd vhci_hcd.0: release socket [ 217.378797][ T75] vhci_hcd vhci_hcd.0: disconnect device [ 217.866541][ T24] usb usb44-port1: unable to enumerate USB device [ 218.790966][ T5956] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 218.829166][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 218.940922][ T5956] usb 8-1: device descriptor read/64, error -71 [ 219.190871][ T5956] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 219.331062][ T5956] usb 8-1: device descriptor read/64, error -71 [ 219.356252][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 219.450961][ T5956] usb usb8-port1: attempt power cycle [ 219.590907][ T7452] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 219.791017][ T5956] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 219.811305][ T5956] usb 8-1: device descriptor read/8, error -71 [ 219.840315][ T7452] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.852204][ T7452] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 219.855365][ T7452] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 219.858065][ T7452] usb 7-1: Product: syz [ 219.859527][ T7452] usb 7-1: Manufacturer: syz [ 219.861519][ T7452] usb 7-1: SerialNumber: syz [ 219.958611][ T8775] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 219.961562][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.966929][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 220.060896][ T5956] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 220.088018][ T5956] usb 8-1: device descriptor read/8, error -71 [ 220.103901][ T7452] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 220.201247][ T5956] usb usb8-port1: unable to enumerate USB device [ 220.261878][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 220.264594][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 220.278532][ T5956] usb 7-1: USB disconnect, device number 14 [ 220.286175][ T5956] usblp0: removed [ 220.593487][ T8776] vhci_hcd: connection reset by peer [ 220.596167][ T75] vhci_hcd vhci_hcd.1: stop threads [ 220.598564][ T75] vhci_hcd vhci_hcd.1: release socket [ 220.601156][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 221.371094][ T6047] usb 42-1: device descriptor read/8, error -110 [ 221.655821][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 221.698631][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 221.783231][ T6047] usb usb42-port1: attempt power cycle [ 222.016224][ T6016] usb 38-1: device descriptor read/8, error -110 [ 222.282078][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 222.361373][ T6047] usb usb42-port1: unable to enumerate USB device [ 222.412211][ T6016] usb usb38-port1: attempt power cycle [ 222.733711][ T8820] mkiss: ax0: crc mode is auto. [ 222.741032][ T53] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.893675][ T53] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.942254][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.951099][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.954237][ T53] usb 5-1: Product: syz [ 222.955878][ T53] usb 5-1: Manufacturer: syz [ 222.957446][ T53] usb 5-1: SerialNumber: syz [ 223.001664][ T6016] usb usb38-port1: unable to enumerate USB device [ 223.186507][ T53] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.264848][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 223.288131][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 223.353302][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 223.623878][ T8827] binder: 8822:8827 ioctl 0 80000040 returned -22 [ 223.678741][ T8834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 223.681769][ T8834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.709491][ T7452] usb 5-1: USB disconnect, device number 6 [ 223.713698][ T7452] usblp0: removed [ 223.722267][ T8834] vhci_hcd vhci_hcd.0: Device attached [ 224.011056][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 224.140900][ T10] usb 8-1: device descriptor read/64, error -71 [ 224.171042][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 224.175454][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.219808][ T8835] vhci_hcd: connection closed [ 224.220672][ T13] vhci_hcd vhci_hcd.1: stop threads [ 224.225418][ T13] vhci_hcd vhci_hcd.1: release socket [ 224.227617][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 224.400914][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 224.550851][ T10] usb 8-1: device descriptor read/64, error -71 [ 224.661282][ T10] usb usb8-port1: attempt power cycle [ 225.000992][ T10] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 225.022643][ T10] usb 8-1: device descriptor read/8, error -71 [ 225.189230][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 225.260915][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 225.269409][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 225.291013][ T24] usb 40-1: device descriptor read/8, error -110 [ 225.302311][ T10] usb 8-1: device descriptor read/8, error -71 [ 225.421367][ T10] usb usb8-port1: unable to enumerate USB device [ 225.691974][ T24] usb usb40-port1: attempt power cycle [ 226.261864][ T24] usb usb40-port1: unable to enumerate USB device [ 227.210891][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 228.003111][ T8886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 228.006802][ T8886] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.021896][ T8886] vhci_hcd vhci_hcd.0: Device attached [ 228.321185][ T10] usb 42-1: SetAddress Request (10) to port 0 [ 228.323357][ T10] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 228.599423][ T8887] vhci_hcd: connection reset by peer [ 228.606051][ T1046] vhci_hcd vhci_hcd.2: stop threads [ 228.608190][ T1046] vhci_hcd vhci_hcd.2: release socket [ 228.612052][ T1046] vhci_hcd vhci_hcd.2: disconnect device [ 229.158921][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 229.507159][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 229.650935][ T8121] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 229.825370][ T8121] usb 6-1: config 0 has no interfaces? [ 229.834427][ T8121] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.837465][ T8121] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.840087][ T8121] usb 6-1: Product: syz [ 229.841600][ T8121] usb 6-1: Manufacturer: syz [ 229.843492][ T8121] usb 6-1: SerialNumber: syz [ 229.903189][ T8121] usb 6-1: config 0 descriptor?? [ 230.111150][ T53] usb 6-1: USB disconnect, device number 24 [ 230.551007][ T53] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 230.703755][ T53] usb 6-1: config 0 has no interfaces? [ 230.708134][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.711481][ T53] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.714217][ T53] usb 6-1: Product: syz [ 230.715693][ T53] usb 6-1: Manufacturer: syz [ 230.717261][ T53] usb 6-1: SerialNumber: syz [ 230.720443][ T53] usb 6-1: config 0 descriptor?? [ 231.293227][ T8919] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 231.295436][ T8919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.298555][ T8919] vhci_hcd vhci_hcd.0: Device attached [ 231.554839][ T8933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 231.557032][ T8933] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.560127][ T8933] vhci_hcd vhci_hcd.0: Device attached [ 231.582055][ T6016] usb 44-1: SetAddress Request (15) to port 0 [ 231.582540][ T6016] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 231.777708][ T8926] vhci_hcd: connection reset by peer [ 231.782671][ T8124] vhci_hcd vhci_hcd.3: stop threads [ 231.788308][ T8124] vhci_hcd vhci_hcd.3: release socket [ 231.793577][ T8124] vhci_hcd vhci_hcd.3: disconnect device [ 232.184171][ T8934] vhci_hcd: connection closed [ 232.187641][ T4982] vhci_hcd vhci_hcd.2: stop threads [ 232.191146][ T4982] vhci_hcd vhci_hcd.2: release socket [ 232.194541][ T4982] vhci_hcd vhci_hcd.2: disconnect device [ 232.381150][ T8121] usb 6-1: USB disconnect, device number 25 [ 232.471572][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 232.939084][ T8950] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 232.941899][ T8950] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 233.045750][ T8955] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 233.048721][ T8955] netlink: 'syz.2.917': attribute type 2 has an invalid length. [ 233.371258][ T10] usb 42-1: device descriptor read/8, error -110 [ 233.771297][ T10] usb usb42-port1: attempt power cycle [ 234.027606][ T8967] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 234.030271][ T8967] netlink: 'syz.2.921': attribute type 2 has an invalid length. [ 234.361937][ T10] usb usb42-port1: unable to enumerate USB device [ 234.430082][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 234.460948][ T7452] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 234.624312][ T7452] usb 7-1: config 0 has no interfaces? [ 234.632311][ T7452] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.640005][ T7452] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 234.645632][ T7452] usb 7-1: Product: syz [ 234.647124][ T7452] usb 7-1: Manufacturer: syz [ 234.651001][ T7452] usb 7-1: SerialNumber: syz [ 234.655892][ T7452] usb 7-1: config 0 descriptor?? [ 234.873777][ T5945] usb 7-1: USB disconnect, device number 15 [ 235.320976][ T5945] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 235.472441][ T5945] usb 7-1: config 0 has no interfaces? [ 235.477430][ T5945] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.481621][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.485120][ T5945] usb 7-1: Product: syz [ 235.487127][ T5945] usb 7-1: Manufacturer: syz [ 235.488817][ T5945] usb 7-1: SerialNumber: syz [ 235.492018][ T5945] usb 7-1: config 0 descriptor?? [ 235.781190][ T9002] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 235.784929][ T9002] netlink: 'syz.1.930': attribute type 2 has an invalid length. [ 236.089947][ T9008] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 236.092609][ T9008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.102347][ T9008] vhci_hcd vhci_hcd.0: Device attached [ 236.391797][ T5956] usb 38-1: SetAddress Request (18) to port 0 [ 236.396381][ T5956] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 236.661041][ T6016] usb 44-1: device descriptor read/8, error -110 [ 236.719790][ T9009] vhci_hcd: connection reset by peer [ 236.722987][ T1046] vhci_hcd vhci_hcd.0: stop threads [ 236.725250][ T1046] vhci_hcd vhci_hcd.0: release socket [ 236.727844][ T1046] vhci_hcd vhci_hcd.0: disconnect device [ 237.054275][ T6016] usb usb44-port1: attempt power cycle [ 237.215516][ T24] usb 7-1: USB disconnect, device number 16 [ 237.571264][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 237.599455][ T9025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 237.601943][ T9025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.609698][ T9025] vhci_hcd vhci_hcd.0: Device attached [ 237.681086][ T6016] usb 44-1: SetAddress Request (18) to port 0 [ 237.690285][ T6016] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 238.166895][ T9026] vhci_hcd: connection reset by peer [ 238.170278][ T4982] vhci_hcd vhci_hcd.3: stop threads [ 238.174326][ T4982] vhci_hcd vhci_hcd.3: release socket [ 238.176661][ T4982] vhci_hcd vhci_hcd.3: disconnect device [ 238.636782][ T9040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 238.639172][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.643502][ T9040] vhci_hcd vhci_hcd.0: Device attached [ 238.714777][ T9043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 238.716992][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.719976][ T9043] vhci_hcd vhci_hcd.0: Device attached [ 238.923442][ T6047] usb 40-1: SetAddress Request (6) to port 0 [ 238.926244][ T6047] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 238.990943][ T7246] usb 42-1: SetAddress Request (14) to port 0 [ 238.994164][ T7246] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 239.486777][ T9044] vhci_hcd: connection reset by peer [ 239.489464][ T4982] vhci_hcd vhci_hcd.2: stop threads [ 239.492327][ T4982] vhci_hcd vhci_hcd.2: release socket [ 239.495125][ T4982] vhci_hcd vhci_hcd.2: disconnect device [ 239.499121][ T9041] vhci_hcd: connection reset by peer [ 239.501285][ T4982] vhci_hcd vhci_hcd.1: stop threads [ 239.504017][ T4982] vhci_hcd vhci_hcd.1: release socket [ 239.506565][ T4982] vhci_hcd vhci_hcd.1: disconnect device [ 239.521251][ T24] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 239.693966][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.702498][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 239.705626][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 239.709604][ T24] usb 8-1: Product: syz [ 239.711790][ T24] usb 8-1: Manufacturer: syz [ 239.713945][ T24] usb 8-1: SerialNumber: syz [ 239.931965][ T24] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 240.089968][ T9056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 240.092420][ T9056] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.101188][ T9056] vhci_hcd vhci_hcd.0: Device attached [ 240.303616][ T24] usb 8-1: USB disconnect, device number 34 [ 240.311395][ T24] usblp0: removed [ 240.698474][ T9057] vhci_hcd: connection closed [ 240.698991][ T12] vhci_hcd vhci_hcd.0: stop threads [ 240.703640][ T12] vhci_hcd vhci_hcd.0: release socket [ 240.706157][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 240.814577][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 241.127368][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 241.461189][ T5956] usb 38-1: device descriptor read/8, error -110 [ 241.853368][ T5956] usb usb38-port1: attempt power cycle [ 242.421597][ T5956] usb usb38-port1: unable to enumerate USB device [ 242.570965][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 242.730982][ T6016] usb 44-1: device descriptor read/8, error -110 [ 242.841053][ T6016] usb usb44-port1: unable to enumerate USB device [ 243.098394][ T9113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 243.101046][ T9113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.121357][ T9113] vhci_hcd vhci_hcd.0: Device attached [ 243.280909][ T7452] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 243.420880][ T53] usb 38-1: SetAddress Request (22) to port 0 [ 243.423056][ T53] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 243.457496][ T7452] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.465657][ T7452] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 243.469592][ T7452] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 243.473091][ T7452] usb 7-1: Product: syz [ 243.474932][ T7452] usb 7-1: Manufacturer: syz [ 243.476969][ T7452] usb 7-1: SerialNumber: syz [ 243.710151][ T7452] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.828744][ T9114] vhci_hcd: connection reset by peer [ 243.833550][ T13] vhci_hcd vhci_hcd.0: stop threads [ 243.835460][ T13] vhci_hcd vhci_hcd.0: release socket [ 243.837293][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 243.934572][ T9123] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 243.936780][ T9123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.940671][ T9123] vhci_hcd vhci_hcd.0: Device attached [ 244.092731][ T7246] usb 42-1: device descriptor read/8, error -110 [ 244.123085][ T24] usb 7-1: USB disconnect, device number 17 [ 244.128084][ T24] usblp0: removed [ 244.478209][ T9124] vhci_hcd: connection reset by peer [ 244.480419][ T9104] vhci_hcd vhci_hcd.1: stop threads [ 244.481491][ T7246] usb usb42-port1: attempt power cycle [ 244.482539][ T9104] vhci_hcd vhci_hcd.1: release socket [ 244.486306][ T9104] vhci_hcd vhci_hcd.1: disconnect device [ 244.486319][ T6047] usb 40-1: device descriptor read/8, error -110 [ 244.891533][ T6047] usb usb40-port1: attempt power cycle [ 245.081387][ T7246] usb usb42-port1: unable to enumerate USB device [ 245.481456][ T6047] usb usb40-port1: unable to enumerate USB device [ 245.611048][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.613196][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 246.326932][ T9150] syz.1.968: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.343316][ T9150] CPU: 1 UID: 0 PID: 9150 Comm: syz.1.968 Not tainted syzkaller #0 PREEMPT(full) [ 246.343334][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.343341][ T9150] Call Trace: [ 246.343345][ T9150] [ 246.343349][ T9150] dump_stack_lvl+0x16c/0x1f0 [ 246.343372][ T9150] warn_alloc+0x248/0x3a0 [ 246.343387][ T9150] ? __pfx_warn_alloc+0x10/0x10 [ 246.343400][ T9150] ? __mutex_unlock_slowpath+0x161/0x790 [ 246.343428][ T9150] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 246.343449][ T9150] ? stack_trace_save+0x8e/0xc0 [ 246.343481][ T9150] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.343496][ T9150] ? stack_depot_save_flags+0x29/0x9b0 [ 246.343514][ T9150] ? __kasan_kmalloc+0xaa/0xb0 [ 246.343528][ T9150] ? __kmalloc_noprof+0x33d/0x910 [ 246.343539][ T9150] ? comedi_isadma_alloc+0x10d/0x6e0 [ 246.343556][ T9150] ? pcl812_attach+0xca8/0x2110 [ 246.343568][ T9150] ? comedi_device_attach+0x3b3/0x900 [ 246.343589][ T9150] __alloc_pages_noprof+0xb/0x1b0 [ 246.343602][ T9150] __dma_direct_alloc_pages.constprop.0+0x4c5/0x950 [ 246.343624][ T9150] ? __pfx___dma_direct_alloc_pages.constprop.0+0x10/0x10 [ 246.343644][ T9150] ? dma_alloc_from_dev_coherent+0x2e4/0x570 [ 246.343657][ T9150] dma_direct_alloc+0x8f/0x580 [ 246.343676][ T9150] dma_alloc_attrs+0x185/0x2b0 [ 246.343690][ T9150] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 246.343704][ T9150] ? dma_direct_supported+0xca/0x220 [ 246.343725][ T9150] comedi_isadma_alloc+0x3de/0x6e0 [ 246.343744][ T9150] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 246.343762][ T9150] ? request_threaded_irq+0x2c8/0x3e0 [ 246.343776][ T9150] pcl812_attach+0xca8/0x2110 [ 246.343793][ T9150] comedi_device_attach+0x3b3/0x900 [ 246.343810][ T9150] do_devconfig_ioctl+0x1b1/0x710 [ 246.343827][ T9150] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 246.343837][ T9150] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 246.343865][ T9150] ? kasan_save_track+0x14/0x30 [ 246.343879][ T9150] ? kasan_save_free_info+0x3b/0x60 [ 246.343890][ T9150] ? __kasan_slab_free+0x5f/0x80 [ 246.343905][ T9150] ? kfree+0x2f8/0x6e0 [ 246.343915][ T9150] ? tomoyo_path_number_perm+0x470/0x580 [ 246.343928][ T9150] ? security_file_ioctl_compat+0x9b/0x240 [ 246.343941][ T9150] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 246.343955][ T9150] ? __do_fast_syscall_32+0xe8/0x680 [ 246.343976][ T9150] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 246.343992][ T9150] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 246.344012][ T9150] ? kasan_quarantine_put+0x10a/0x240 [ 246.344027][ T9150] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.344046][ T9150] ? find_held_lock+0x2b/0x80 [ 246.344062][ T9150] ? tomoyo_path_number_perm+0x295/0x580 [ 246.344077][ T9150] ? tomoyo_path_number_perm+0x18d/0x580 [ 246.344091][ T9150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.344106][ T9150] comedi_compat_ioctl+0x1ed/0xda0 [ 246.344118][ T9150] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 246.344129][ T9150] ? bpf_send_signal_common+0x3a9/0x540 [ 246.344145][ T9150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.344164][ T9150] ? do_vfs_ioctl+0x128/0x14f0 [ 246.344177][ T9150] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.344196][ T9150] ? hook_file_ioctl_common+0x144/0x410 [ 246.344213][ T9150] ? __might_fault+0xe3/0x190 [ 246.344226][ T9150] ? __might_fault+0x13b/0x190 [ 246.344241][ T9150] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 246.344252][ T9150] __ia32_compat_sys_ioctl+0x242/0x370 [ 246.344268][ T9150] __do_fast_syscall_32+0xe8/0x680 [ 246.344287][ T9150] do_fast_syscall_32+0x32/0x80 [ 246.344305][ T9150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.344320][ T9150] RIP: 0023:0xf7f74579 [ 246.344330][ T9150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 246.344341][ T9150] RSP: 002b:00000000f544555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 246.344352][ T9150] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 246.344358][ T9150] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.344365][ T9150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.344371][ T9150] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 246.344377][ T9150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.344392][ T9150] [ 246.490951][ T9150] Mem-Info: [ 246.492049][ T9150] active_anon:12343 inactive_anon:18 isolated_anon:0 [ 246.492049][ T9150] active_file:4241 inactive_file:39380 isolated_file:0 [ 246.492049][ T9150] unevictable:1768 dirty:266 writeback:0 [ 246.492049][ T9150] slab_reclaimable:6392 slab_unreclaimable:60435 [ 246.492049][ T9150] mapped:31649 shmem:8001 pagetables:1115 [ 246.492049][ T9150] sec_pagetables:306 bounce:0 [ 246.492049][ T9150] kernel_misc_reclaimable:0 [ 246.492049][ T9150] free:37607 free_pcp:148 free_cma:0 [ 246.537754][ T9150] Node 0 active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:2340kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8588kB pagetables:1856kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB [ 246.547920][ T9150] Node 0 DMA free:2104kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:592kB local_pcp:68kB free_cma:0kB [ 246.559714][ T9150] lowmem_reserve[]: 0 289 289 289 289 [ 246.562501][ T9150] Node 0 DMA: 4*4kB (U) 7*8kB (UE) 3*16kB (E) 10*32kB (UE) 6*64kB (UE) 0*128kB 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2104kB [ 246.567229][ T9150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.570846][ T9150] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.573880][ T9150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.577044][ T9150] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.580074][ T9150] 52745 total pagecache pages [ 246.582239][ T9150] 1127 pages in swap cache [ 246.583738][ T9150] Free swap = 117548kB [ 246.585136][ T9150] Total swap = 124996kB [ 246.586579][ T9150] 524155 pages RAM [ 246.587852][ T9150] 0 pages HighMem/MovableOnly [ 246.589408][ T9150] 209059 pages reserved [ 246.596505][ T9150] 0 pages cma reserved [ 247.410906][ T7246] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 247.434954][ T9178] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 247.437193][ T9178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.440559][ T9178] vhci_hcd vhci_hcd.0: Device attached [ 247.562555][ T7246] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.568601][ T7246] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.572741][ T7246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.576492][ T7246] usb 7-1: Product: syz [ 247.578368][ T7246] usb 7-1: Manufacturer: syz [ 247.580066][ T7246] usb 7-1: SerialNumber: syz [ 247.711693][ T8121] usb 44-1: SetAddress Request (19) to port 0 [ 247.714511][ T8121] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 247.794875][ T7246] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.090347][ T9188] mkiss: ax0: crc mode is auto. [ 248.174164][ T9179] vhci_hcd: connection reset by peer [ 248.176189][ T7246] usb 7-1: USB disconnect, device number 18 [ 248.176903][ T75] vhci_hcd vhci_hcd.3: stop threads [ 248.181166][ T7246] usblp0: removed [ 248.181182][ T75] vhci_hcd vhci_hcd.3: release socket [ 248.201102][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 248.339653][ T9190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 248.341981][ T9190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.345561][ T9190] vhci_hcd vhci_hcd.0: Device attached [ 248.863540][ T9191] vhci_hcd: connection reset by peer [ 248.869912][ T8124] vhci_hcd vhci_hcd.0: stop threads [ 248.872670][ T8124] vhci_hcd vhci_hcd.0: release socket [ 248.898234][ T53] usb 38-1: device descriptor read/8, error -110 [ 248.898268][ T8124] vhci_hcd vhci_hcd.0: disconnect device [ 248.970974][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 248.973252][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 249.842538][ T53] usb usb38-port1: attempt power cycle [ 250.421545][ T53] usb usb38-port1: unable to enumerate USB device [ 251.165558][ T9223] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 251.168424][ T9223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.172610][ T9223] vhci_hcd vhci_hcd.0: Device attached [ 251.200940][ T53] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 251.352223][ T53] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.400588][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 251.404274][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 251.428042][ T53] usb 6-1: Product: syz [ 251.430250][ T53] usb 6-1: Manufacturer: syz [ 251.433016][ T53] usb 6-1: SerialNumber: syz [ 251.564905][ T9224] vhci_hcd: connection closed [ 251.565692][ T1194] vhci_hcd vhci_hcd.3: stop threads [ 251.570672][ T1194] vhci_hcd vhci_hcd.3: release socket [ 251.572831][ T1194] vhci_hcd vhci_hcd.3: disconnect device [ 251.646124][ T53] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 251.851162][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 252.051212][ T7452] usb 6-1: USB disconnect, device number 26 [ 252.060315][ T7452] usblp0: removed [ 252.810885][ T8121] usb 44-1: device descriptor read/8, error -110 [ 252.867354][ T9241] mkiss: ax0: crc mode is auto. [ 253.218821][ T8121] usb usb44-port1: attempt power cycle [ 253.871576][ T8121] usb usb44-port1: unable to enumerate USB device [ 254.593412][ T7452] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 254.662386][ T9278] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 254.664753][ T9278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.719668][ T9278] vhci_hcd vhci_hcd.0: Device attached [ 254.781113][ T9282] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 254.781130][ T9282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.781332][ T9282] vhci_hcd vhci_hcd.0: Device attached [ 254.812520][ T7452] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.814606][ T7452] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 254.814623][ T7452] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 254.814634][ T7452] usb 7-1: Product: syz [ 254.814642][ T7452] usb 7-1: Manufacturer: syz [ 254.814650][ T7452] usb 7-1: SerialNumber: syz [ 255.001028][ T53] usb 40-1: SetAddress Request (10) to port 0 [ 255.005816][ T53] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 255.053047][ T6025] usb 38-1: SetAddress Request (26) to port 0 [ 255.071247][ T7452] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.075833][ T6025] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 255.356050][ T9290] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 255.358255][ T9290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.391690][ T9290] vhci_hcd vhci_hcd.0: Device attached [ 255.432910][ T24] usb 7-1: USB disconnect, device number 19 [ 255.436239][ T24] usblp0: removed [ 255.665803][ T76] usb 44-1: SetAddress Request (23) to port 0 [ 255.669579][ T76] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 255.722877][ T9279] vhci_hcd: connection reset by peer [ 255.729601][ T7560] vhci_hcd vhci_hcd.1: stop threads [ 255.732021][ T7560] vhci_hcd vhci_hcd.1: release socket [ 255.734371][ T7560] vhci_hcd vhci_hcd.1: disconnect device [ 256.151522][ T9283] vhci_hcd: connection reset by peer [ 256.154509][ T13] vhci_hcd vhci_hcd.0: stop threads [ 256.156762][ T13] vhci_hcd vhci_hcd.0: release socket [ 256.159303][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 256.162196][ T9291] vhci_hcd: connection reset by peer [ 256.164783][ T13] vhci_hcd vhci_hcd.3: stop threads [ 256.167190][ T13] vhci_hcd vhci_hcd.3: release socket [ 256.169559][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 256.246536][ T9297] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 256.248742][ T9297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.252443][ T9297] vhci_hcd vhci_hcd.0: Device attached [ 256.261078][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 256.261096][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 256.530948][ T24] usb 42-1: SetAddress Request (18) to port 0 [ 256.533913][ T24] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 256.901662][ T9298] vhci_hcd: connection reset by peer [ 256.903729][ T8196] vhci_hcd vhci_hcd.2: stop threads [ 256.905674][ T8196] vhci_hcd vhci_hcd.2: release socket [ 256.912529][ T8196] vhci_hcd vhci_hcd.2: disconnect device [ 257.062321][ T9306] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 257.066105][ T9306] netlink: 'syz.0.999': attribute type 2 has an invalid length. [ 257.860907][ T6047] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 258.012397][ T6047] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 258.015397][ T6047] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.021439][ T6047] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.026003][ T6047] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.032348][ T6047] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.035791][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.039458][ T6047] usb 6-1: Product: syz [ 258.041795][ T6047] usb 6-1: Manufacturer: syz [ 258.043866][ T6047] usb 6-1: SerialNumber: syz [ 258.047864][ T6047] usb 6-1: config 0 descriptor?? [ 258.053929][ T6047] hub 6-1:0.0: bad descriptor, ignoring hub [ 258.055981][ T6047] hub 6-1:0.0: probe with driver hub failed with error -5 [ 258.077733][ T6047] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 258.113359][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.361062][ T6047] usb 6-1: USB disconnect, device number 27 [ 258.791051][ T7452] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 258.841854][ T9340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 258.844758][ T9340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.848878][ T9340] vhci_hcd vhci_hcd.0: Device attached [ 258.993918][ T7452] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 258.996811][ T7452] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.000353][ T7452] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.007228][ T7452] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.014074][ T7452] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.017064][ T7452] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.019750][ T7452] usb 6-1: Product: syz [ 259.021477][ T7452] usb 6-1: Manufacturer: syz [ 259.023056][ T7452] usb 6-1: SerialNumber: syz [ 259.027626][ T7452] usb 6-1: config 0 descriptor?? [ 259.046220][ T7452] hub 6-1:0.0: bad descriptor, ignoring hub [ 259.048629][ T7452] hub 6-1:0.0: probe with driver hub failed with error -5 [ 259.080737][ T7452] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 259.099963][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.385108][ T9309] usb 6-1: USB disconnect, device number 28 [ 259.463084][ T9341] vhci_hcd: connection closed [ 259.466161][ T8512] vhci_hcd vhci_hcd.0: stop threads [ 259.506646][ T8512] vhci_hcd vhci_hcd.0: release socket [ 259.517297][ T8512] vhci_hcd vhci_hcd.0: disconnect device [ 259.542026][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 259.544691][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 259.887073][ T9348] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 259.889706][ T9348] netlink: 'syz.3.1011': attribute type 2 has an invalid length. [ 260.100929][ T53] usb 40-1: device descriptor read/8, error -110 [ 260.180987][ T6025] usb 38-1: device descriptor read/8, error -110 [ 260.359841][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.362758][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.491849][ T53] usb usb40-port1: attempt power cycle [ 260.581889][ T6025] usb usb38-port1: attempt power cycle [ 260.602143][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 260.629800][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 260.698868][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 260.730926][ T76] usb 44-1: device descriptor read/8, error -110 [ 260.981712][ T9371] binder: 9367:9371 ioctl 0 80000040 returned -22 [ 261.062568][ T53] usb usb40-port1: unable to enumerate USB device [ 261.132415][ T76] usb usb44-port1: attempt power cycle [ 261.142127][ T6025] usb usb38-port1: unable to enumerate USB device [ 261.319171][ T9383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 261.321510][ T9383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.415080][ T9383] vhci_hcd vhci_hcd.0: Device attached [ 261.535553][ T9384] mkiss: ax0: crc mode is auto. [ 261.621476][ T24] usb 42-1: device descriptor read/8, error -110 [ 261.711790][ T5945] usb 40-1: SetAddress Request (14) to port 0 [ 261.712511][ T76] usb usb44-port1: unable to enumerate USB device [ 261.714229][ T5945] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 261.887710][ T9385] vhci_hcd: connection reset by peer [ 261.894180][ T8512] vhci_hcd vhci_hcd.1: stop threads [ 261.897919][ T8512] vhci_hcd vhci_hcd.1: release socket [ 261.901516][ T8512] vhci_hcd vhci_hcd.1: disconnect device [ 261.931003][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 261.931093][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 261.980899][ T8121] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 262.031414][ T24] usb usb42-port1: attempt power cycle [ 262.134013][ T8121] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 262.137081][ T8121] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.140740][ T8121] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.145386][ T8121] usb 8-1: config 0 interface 0 has no altsetting 0 [ 262.152241][ T8121] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.155462][ T8121] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.158259][ T8121] usb 8-1: Product: syz [ 262.159642][ T8121] usb 8-1: Manufacturer: syz [ 262.177137][ T8121] usb 8-1: SerialNumber: syz [ 262.194152][ T8121] usb 8-1: config 0 descriptor?? [ 262.197195][ T8121] hub 8-1:0.0: bad descriptor, ignoring hub [ 262.199293][ T8121] hub 8-1:0.0: probe with driver hub failed with error -5 [ 262.226719][ T8121] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 262.258184][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.512086][ T7246] usb 8-1: USB disconnect, device number 35 [ 262.591843][ T24] usb usb42-port1: unable to enumerate USB device [ 262.731099][ T5298] Bluetooth: hci5: command 0x1003 tx timeout [ 262.731127][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 262.851213][ T7246] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 262.890988][ T8121] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 263.002762][ T7246] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 263.006116][ T7246] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.010388][ T7246] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.016152][ T7246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.020748][ T7246] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.024602][ T7246] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.028197][ T7246] usb 8-1: Product: syz [ 263.029987][ T7246] usb 8-1: Manufacturer: syz [ 263.032128][ T7246] usb 8-1: SerialNumber: syz [ 263.037708][ T7246] usb 8-1: config 0 descriptor?? [ 263.042045][ T7246] hub 8-1:0.0: bad descriptor, ignoring hub [ 263.044608][ T7246] hub 8-1:0.0: probe with driver hub failed with error -5 [ 263.057388][ T7246] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 263.073114][ T8121] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.076537][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.079171][ T8121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 263.087177][ T8121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 263.089897][ T8121] usb 6-1: Product: syz [ 263.091506][ T8121] usb 6-1: Manufacturer: syz [ 263.093080][ T8121] usb 6-1: SerialNumber: syz [ 263.304458][ T8121] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.351524][ T24] usb 8-1: USB disconnect, device number 36 [ 263.678857][ T7452] usb 6-1: USB disconnect, device number 29 [ 263.684951][ T7452] usblp0: removed [ 263.789131][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 263.821885][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 263.891236][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 264.041796][ T9418] binder: 9414:9418 ioctl 0 80000040 returned -22 [ 264.251029][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 264.251046][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 264.266144][ T9422] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 264.269286][ T9422] netlink: 'syz.3.1029': attribute type 2 has an invalid length. [ 265.361064][ T8121] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 265.384787][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.407999][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.458678][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.512958][ T8121] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 265.515806][ T8121] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.519165][ T8121] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.523766][ T8121] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.529678][ T8121] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.532916][ T8121] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.539502][ T8121] usb 8-1: Product: syz [ 265.544001][ T8121] usb 8-1: Manufacturer: syz [ 265.547261][ T8121] usb 8-1: SerialNumber: syz [ 265.551416][ T8121] usb 8-1: config 0 descriptor?? [ 265.554580][ T8121] hub 8-1:0.0: bad descriptor, ignoring hub [ 265.556777][ T8121] hub 8-1:0.0: probe with driver hub failed with error -5 [ 265.577381][ T8121] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 265.608863][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.733853][ T9452] binder: 9447:9452 ioctl 0 80000040 returned -22 [ 265.951139][ T7246] usb 8-1: USB disconnect, device number 37 [ 266.184999][ T9461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 266.187932][ T9461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.213357][ T9461] vhci_hcd vhci_hcd.0: Device attached [ 266.280947][ T7246] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 266.411005][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 266.413720][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 266.455873][ T7246] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 266.459036][ T7246] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.465437][ T7246] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.473945][ T7246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 266.482854][ T7246] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.485940][ T7246] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.488663][ T7246] usb 8-1: Product: syz [ 266.501245][ T7246] usb 8-1: Manufacturer: syz [ 266.501927][ T24] usb 38-1: SetAddress Request (30) to port 0 [ 266.503487][ T7246] usb 8-1: SerialNumber: syz [ 266.505991][ T24] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 266.510017][ T7246] usb 8-1: config 0 descriptor?? [ 266.514429][ T7246] hub 8-1:0.0: bad descriptor, ignoring hub [ 266.516698][ T7246] hub 8-1:0.0: probe with driver hub failed with error -5 [ 266.534100][ T7246] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 266.573850][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.811001][ T5945] usb 40-1: device descriptor read/8, error -110 [ 266.823456][ T7246] usb 8-1: USB disconnect, device number 38 [ 266.851144][ T9462] vhci_hcd: connection reset by peer [ 266.854669][ T7560] vhci_hcd vhci_hcd.0: stop threads [ 266.856665][ T7560] vhci_hcd vhci_hcd.0: release socket [ 266.864787][ T7560] vhci_hcd vhci_hcd.0: disconnect device [ 267.213085][ T5945] usb usb40-port1: attempt power cycle [ 267.586763][ T9484] misc userio: No port type given on /dev/userio [ 267.590631][ T9484] misc userio: The device must be registered before sending interrupts [ 267.596972][ T9484] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 267.600291][ T9484] netlink: 'syz.2.1045': attribute type 2 has an invalid length. [ 267.782403][ T5945] usb usb40-port1: unable to enumerate USB device [ 268.651516][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 268.653383][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 268.970940][ T5951] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 268.990928][ T7246] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 269.149027][ T9514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 269.151308][ T9514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.152170][ T7246] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 269.157288][ T7246] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.160892][ T9514] vhci_hcd vhci_hcd.0: Device attached [ 269.170873][ T7246] usb 7-1: config 0 interface 0 has no altsetting 0 [ 269.191776][ T7246] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.211729][ T7246] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 269.211771][ T7246] usb 7-1: Product: syz [ 269.211780][ T7246] usb 7-1: Manufacturer: syz [ 269.211788][ T7246] usb 7-1: SerialNumber: syz [ 269.212999][ T7246] usb 7-1: config 0 descriptor?? [ 269.233160][ T7246] hub 7-1:0.0: bad descriptor, ignoring hub [ 269.233185][ T7246] hub 7-1:0.0: probe with driver hub failed with error -5 [ 269.243287][ T7246] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 269.266971][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.460954][ T7246] usb 40-1: SetAddress Request (18) to port 0 [ 269.463381][ T7246] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 269.541709][ T6047] usb 7-1: USB disconnect, device number 20 [ 269.890888][ T6047] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 269.986517][ T9515] vhci_hcd: connection reset by peer [ 269.989249][ T8512] vhci_hcd vhci_hcd.1: stop threads [ 269.992089][ T8512] vhci_hcd vhci_hcd.1: release socket [ 269.994455][ T8512] vhci_hcd vhci_hcd.1: disconnect device [ 270.062642][ T6047] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 270.066197][ T6047] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.101323][ T6047] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.107106][ T6047] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.110097][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 270.112945][ T6047] usb 7-1: Product: syz [ 270.114372][ T6047] usb 7-1: Manufacturer: syz [ 270.115942][ T6047] usb 7-1: SerialNumber: syz [ 270.118646][ T6047] usb 7-1: config 0 descriptor?? [ 270.122442][ T6047] hub 7-1:0.0: bad descriptor, ignoring hub [ 270.124810][ T6047] hub 7-1:0.0: probe with driver hub failed with error -5 [ 270.137003][ T6047] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 270.152894][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.432520][ T6047] usb 7-1: USB disconnect, device number 21 [ 270.810898][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 270.811088][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 270.920987][ T6047] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 271.082223][ T6047] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.088787][ T6047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 271.092933][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 271.095996][ T6047] usb 6-1: Product: syz [ 271.097382][ T6047] usb 6-1: Manufacturer: syz [ 271.098937][ T6047] usb 6-1: SerialNumber: syz [ 271.308534][ T6047] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 271.531231][ T24] usb 38-1: device descriptor read/8, error -110 [ 271.952475][ T24] usb usb38-port1: attempt power cycle [ 272.418491][ T9560] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 272.422343][ T9560] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 272.522441][ T24] usb usb38-port1: unable to enumerate USB device [ 272.966614][ T9566] mkiss: ax0: crc mode is auto. [ 273.051087][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 273.052351][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 273.130905][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.280965][ T6047] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 273.717284][ T7452] usb 6-1: USB disconnect, device number 30 [ 273.723879][ T7452] usblp0: removed [ 274.313815][ T6047] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 274.316659][ T6047] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.321148][ T6047] usb 8-1: config 0 interface 0 has no altsetting 0 [ 274.325727][ T6047] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.328705][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 274.331521][ T6047] usb 8-1: Product: syz [ 274.332891][ T6047] usb 8-1: Manufacturer: syz [ 274.334404][ T6047] usb 8-1: SerialNumber: syz [ 274.339141][ T6047] usb 8-1: config 0 descriptor?? [ 274.346101][ T6047] hub 8-1:0.0: bad descriptor, ignoring hub [ 274.348150][ T6047] hub 8-1:0.0: probe with driver hub failed with error -5 [ 274.360449][ T6047] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 274.377522][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.490949][ T7246] usb 40-1: device descriptor read/8, error -110 [ 274.602101][ T9580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 274.604770][ T9580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.612734][ T9580] vhci_hcd vhci_hcd.0: Device attached [ 274.662020][ T24] usb 8-1: USB disconnect, device number 39 [ 274.873062][ T7246] usb 40-1: SetAddress Request (19) to port 0 [ 274.875472][ T7246] usb 40-1: new SuperSpeed USB device number 19 using vhci_hcd [ 274.991201][ T7452] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 275.195026][ T9582] vhci_hcd: connection reset by peer [ 275.200339][ T1194] vhci_hcd vhci_hcd.1: stop threads [ 275.202340][ T1194] vhci_hcd vhci_hcd.1: release socket [ 275.208373][ T1194] vhci_hcd vhci_hcd.1: disconnect device [ 275.212700][ T7452] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 275.215534][ T7452] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.219892][ T7452] usb 8-1: config 0 interface 0 has no altsetting 0 [ 275.224759][ T7452] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.227816][ T7452] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.230645][ T7452] usb 8-1: Product: syz [ 275.232149][ T7452] usb 8-1: Manufacturer: syz [ 275.233969][ T7452] usb 8-1: SerialNumber: syz [ 275.237726][ T7452] usb 8-1: config 0 descriptor?? [ 275.241300][ T7452] hub 8-1:0.0: bad descriptor, ignoring hub [ 275.243426][ T7452] hub 8-1:0.0: probe with driver hub failed with error -5 [ 275.267281][ T7452] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 275.284715][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.339987][ T9593] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 275.342188][ T9593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.354097][ T9593] vhci_hcd vhci_hcd.0: Device attached [ 275.558637][ T6016] usb 8-1: USB disconnect, device number 40 [ 275.640984][ T6047] usb 42-1: SetAddress Request (22) to port 0 [ 275.644660][ T6047] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 275.722889][ T9600] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 275.725780][ T9600] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.730423][ T9600] vhci_hcd vhci_hcd.0: Device attached [ 275.990939][ T24] usb 38-1: SetAddress Request (34) to port 0 [ 275.993073][ T24] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 276.236756][ T9594] vhci_hcd: connection reset by peer [ 276.242151][ T75] vhci_hcd vhci_hcd.2: stop threads [ 276.244724][ T75] vhci_hcd vhci_hcd.2: release socket [ 276.247194][ T75] vhci_hcd vhci_hcd.2: disconnect device [ 276.270484][ T9607] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 276.274066][ T9607] netlink: 'syz.1.1076': attribute type 2 has an invalid length. [ 276.348867][ T9601] vhci_hcd: connection reset by peer [ 276.352141][ T1194] vhci_hcd vhci_hcd.0: stop threads [ 276.354210][ T1194] vhci_hcd vhci_hcd.0: release socket [ 276.356376][ T1194] vhci_hcd vhci_hcd.0: disconnect device [ 279.817145][ T9650] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 279.819312][ T9650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.830138][ T9650] vhci_hcd vhci_hcd.0: Device attached [ 279.941862][ T7246] usb 40-1: device descriptor read/8, error -110 [ 280.161252][ T7246] usb usb40-port1: attempt power cycle [ 280.286725][ T9651] vhci_hcd: connection closed [ 280.287271][ T12] vhci_hcd vhci_hcd.0: stop threads [ 280.292617][ T12] vhci_hcd vhci_hcd.0: release socket [ 280.294899][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 280.616897][ T9670] mkiss: ax0: crc mode is auto. [ 280.730938][ T6047] usb 42-1: device descriptor read/8, error -110 [ 280.831391][ T7246] usb usb40-port1: unable to enumerate USB device [ 281.051044][ T24] usb 38-1: device descriptor read/8, error -110 [ 281.131156][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 281.141528][ T6047] usb usb42-port1: attempt power cycle [ 281.144340][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.479536][ T24] usb usb38-port1: attempt power cycle [ 281.701366][ T6047] usb usb42-port1: unable to enumerate USB device [ 282.003950][ T9693] mkiss: ax0: crc mode is auto. [ 282.071763][ T24] usb usb38-port1: unable to enumerate USB device [ 283.450942][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 283.454132][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 283.696273][ T76] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 283.801003][ T9714] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 283.804595][ T9714] netlink: 'syz.2.1101': attribute type 2 has an invalid length. [ 283.855207][ T76] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 283.859477][ T76] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 283.874594][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 283.880492][ T76] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.893134][ T76] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 283.896695][ T76] usb 5-1: Product: syz [ 283.898396][ T76] usb 5-1: Manufacturer: syz [ 283.908640][ T76] usb 5-1: SerialNumber: syz [ 283.915848][ T76] usb 5-1: config 0 descriptor?? [ 283.925187][ T76] hub 5-1:0.0: bad descriptor, ignoring hub [ 283.928262][ T76] hub 5-1:0.0: probe with driver hub failed with error -5 [ 283.946339][ T76] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 283.973964][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.240994][ T6047] usb 5-1: USB disconnect, device number 7 [ 284.418109][ T9730] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 284.421032][ T9730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.424809][ T9730] vhci_hcd vhci_hcd.0: Device attached [ 284.570916][ T6047] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.692175][ T7246] usb 44-1: SetAddress Request (27) to port 0 [ 284.697392][ T7246] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 284.744187][ T6047] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 284.748558][ T6047] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 284.754823][ T6047] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.760693][ T6047] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.765998][ T6047] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.771266][ T6047] usb 5-1: Product: syz [ 284.772825][ T6047] usb 5-1: Manufacturer: syz [ 284.774561][ T6047] usb 5-1: SerialNumber: syz [ 284.779954][ T6047] usb 5-1: config 0 descriptor?? [ 284.793975][ T6047] hub 5-1:0.0: bad descriptor, ignoring hub [ 284.797710][ T6047] hub 5-1:0.0: probe with driver hub failed with error -5 [ 284.872710][ T6047] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 284.895924][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.936160][ T9731] vhci_hcd: connection reset by peer [ 284.938740][ T13] vhci_hcd vhci_hcd.3: stop threads [ 284.941381][ T13] vhci_hcd vhci_hcd.3: release socket [ 284.944149][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 285.024353][ T9741] mkiss: ax0: crc mode is auto. [ 285.091764][ T76] usb 5-1: USB disconnect, device number 8 [ 285.854009][ T6047] ================================================================== [ 285.856680][ T6047] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 285.859254][ T6047] Read of size 4 at addr ffff88804cb3bab0 by task kworker/3:5/6047 [ 285.862757][ T6047] [ 285.864325][ T6047] CPU: 3 UID: 0 PID: 6047 Comm: kworker/3:5 Not tainted syzkaller #0 PREEMPT(full) [ 285.864342][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.864352][ T6047] Workqueue: events hci_uart_write_work [ 285.864367][ T6047] Call Trace: [ 285.864372][ T6047] [ 285.864376][ T6047] dump_stack_lvl+0x116/0x1f0 [ 285.864394][ T6047] print_report+0xcd/0x630 [ 285.864412][ T6047] ? __virt_addr_valid+0x81/0x610 [ 285.864429][ T6047] ? __phys_addr+0xe8/0x180 [ 285.864445][ T6047] ? hci_uart_write_work+0x82d/0x960 [ 285.864454][ T6047] kasan_report+0xe0/0x110 [ 285.864471][ T6047] ? hci_uart_write_work+0x82d/0x960 [ 285.864488][ T6047] hci_uart_write_work+0x82d/0x960 [ 285.864498][ T6047] ? __pfx_pty_write+0x10/0x10 [ 285.864513][ T6047] process_one_work+0x9ba/0x1b20 [ 285.864528][ T6047] ? __pfx_process_one_work+0x10/0x10 [ 285.864547][ T6047] ? assign_work+0x1a0/0x250 [ 285.864565][ T6047] worker_thread+0x6c8/0xf10 [ 285.864590][ T6047] ? __pfx_worker_thread+0x10/0x10 [ 285.864611][ T6047] kthread+0x3c5/0x780 [ 285.864629][ T6047] ? __pfx_kthread+0x10/0x10 [ 285.864648][ T6047] ? rcu_is_watching+0x12/0xc0 [ 285.864975][ T6047] ? __pfx_kthread+0x10/0x10 [ 285.864986][ T6047] ret_from_fork+0x983/0xb10 [ 285.864997][ T6047] ? __pfx_ret_from_fork+0x10/0x10 [ 285.865008][ T6047] ? __switch_to+0x7af/0x10d0 [ 285.865023][ T6047] ? __pfx_kthread+0x10/0x10 [ 285.865033][ T6047] ret_from_fork_asm+0x1a/0x30 [ 285.865053][ T6047] [ 285.865056][ T6047] [ 285.919363][ T6047] Allocated by task 6047: [ 285.920792][ T6047] kasan_save_stack+0x33/0x60 [ 285.922370][ T6047] kasan_save_track+0x14/0x30 [ 285.923949][ T6047] __kasan_slab_alloc+0x89/0x90 [ 285.925618][ T6047] kmem_cache_alloc_node_noprof+0x298/0x800 [ 285.927610][ T6047] __alloc_skb+0x156/0x410 [ 285.929308][ T6047] bcsp_prepare_pkt+0xe0/0xae0 [ 285.931114][ T6047] bcsp_dequeue+0x237/0x4b0 [ 285.932902][ T6047] hci_uart_write_work+0x4e3/0x960 [ 285.934827][ T6047] process_one_work+0x9ba/0x1b20 [ 285.936528][ T6047] worker_thread+0x6c8/0xf10 [ 285.938243][ T6047] kthread+0x3c5/0x780 [ 285.939618][ T6047] ret_from_fork+0x983/0xb10 [ 285.941491][ T6047] ret_from_fork_asm+0x1a/0x30 [ 285.943197][ T6047] [ 285.944087][ T6047] The buggy address belongs to the object at ffff88804cb3ba40 [ 285.944087][ T6047] which belongs to the cache skbuff_head_cache of size 240 [ 285.949282][ T6047] The buggy address is located 112 bytes inside of [ 285.949282][ T6047] freed 240-byte region [ffff88804cb3ba40, ffff88804cb3bb30) [ 285.953712][ T6047] [ 285.954547][ T6047] The buggy address belongs to the physical page: [ 285.956591][ T6047] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4cb3a [ 285.959381][ T6047] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 285.962048][ T6047] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 285.964647][ T6047] page_type: f5(slab) [ 285.965998][ T6047] raw: 04fff00000000040 ffff888041a9c8c0 0000000000000000 dead000000000001 [ 285.968952][ T6047] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 285.971733][ T6047] head: 04fff00000000040 ffff888041a9c8c0 0000000000000000 dead000000000001 [ 285.974670][ T6047] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 285.977544][ T6047] head: 04fff00000000001 ffffea000132ce81 00000000ffffffff 00000000ffffffff [ 285.980320][ T6047] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 285.983069][ T6047] page dumped because: kasan: bad access detected [ 285.985544][ T6047] page_owner tracks the page as allocated [ 285.987407][ T6047] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/2), ts 279408766330, free_ts 275572471783 [ 285.993485][ T6047] post_alloc_hook+0x1af/0x220 [ 285.995117][ T6047] get_page_from_freelist+0xd0b/0x31a0 [ 285.996885][ T6047] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 285.998843][ T6047] alloc_pages_mpol+0x1fb/0x550 [ 286.000431][ T6047] new_slab+0x2c3/0x430 [ 286.001789][ T6047] ___slab_alloc+0xe18/0x1c90 [ 286.003332][ T6047] __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 286.005141][ T6047] kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 286.007054][ T6047] napi_skb_cache_get+0x6ac/0x900 [ 286.008699][ T6047] __alloc_skb+0x2aa/0x410 [ 286.010213][ T6047] napi_alloc_skb+0x44b/0x820 [ 286.011748][ T6047] e1000_clean_rx_irq+0x2ae/0x1180 [ 286.013469][ T6047] e1000_clean+0x9cb/0x2670 [ 286.014939][ T6047] __napi_poll.constprop.0+0xb3/0x540 [ 286.016706][ T6047] net_rx_action+0x9f9/0xfa0 [ 286.018178][ T6047] handle_softirqs+0x219/0x950 [ 286.019800][ T6047] page last free pid 75 tgid 75 stack trace: [ 286.021744][ T6047] __free_frozen_pages+0x7df/0x1170 [ 286.023398][ T6047] rcu_core+0x79c/0x15f0 [ 286.024702][ T6047] handle_softirqs+0x219/0x950 [ 286.026731][ T6047] do_softirq+0xb2/0xf0 [ 286.028475][ T6047] __local_bh_enable_ip+0x100/0x120 [ 286.030611][ T6047] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 286.030873][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 286.030941][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 286.032998][ T6047] process_one_work+0x9ba/0x1b20 [ 286.033022][ T6047] worker_thread+0x6c8/0xf10 [ 286.033037][ T6047] kthread+0x3c5/0x780 [ 286.033051][ T6047] ret_from_fork+0x983/0xb10 [ 286.033068][ T6047] ret_from_fork_asm+0x1a/0x30 [ 286.044953][ T6047] [ 286.045860][ T6047] Memory state around the buggy address: [ 286.047719][ T6047] ffff88804cb3b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 286.050326][ T6047] ffff88804cb3ba00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 286.052886][ T6047] >ffff88804cb3ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.055524][ T6047] ^ [ 286.057393][ T6047] ffff88804cb3bb00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 286.059966][ T6047] ffff88804cb3bb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 286.062512][ T6047] ================================================================== [ 286.088349][ T6047] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.091030][ T6047] CPU: 3 UID: 0 PID: 6047 Comm: kworker/3:5 Not tainted syzkaller #0 PREEMPT(full) [ 286.094107][ T6047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.097731][ T6047] Workqueue: events hci_uart_write_work [ 286.099530][ T6047] Call Trace: [ 286.100620][ T6047] [ 286.101687][ T6047] dump_stack_lvl+0x3d/0x1f0 [ 286.103286][ T6047] vpanic+0x640/0x6f0 [ 286.104671][ T6047] panic+0xca/0xd0 [ 286.105980][ T6047] ? __pfx_panic+0x10/0x10 [ 286.107477][ T6047] ? hci_uart_write_work+0x82d/0x960 [ 286.109287][ T6047] ? preempt_schedule_common+0x44/0xc0 [ 286.111397][ T6047] ? preempt_schedule_thunk+0x16/0x30 [ 286.113542][ T6047] ? check_panic_on_warn+0x1f/0xb0 [ 286.115283][ T6047] check_panic_on_warn+0xab/0xb0 [ 286.116925][ T6047] end_report+0x107/0x160 [ 286.118356][ T6047] kasan_report+0xee/0x110 [ 286.119807][ T6047] ? hci_uart_write_work+0x82d/0x960 [ 286.121544][ T6047] hci_uart_write_work+0x82d/0x960 [ 286.123211][ T6047] ? __pfx_pty_write+0x10/0x10 [ 286.124755][ T6047] process_one_work+0x9ba/0x1b20 [ 286.126401][ T6047] ? __pfx_process_one_work+0x10/0x10 [ 286.128123][ T6047] ? assign_work+0x1a0/0x250 [ 286.129601][ T6047] worker_thread+0x6c8/0xf10 [ 286.131080][ T6047] ? __pfx_worker_thread+0x10/0x10 [ 286.132711][ T6047] kthread+0x3c5/0x780 [ 286.134098][ T6047] ? __pfx_kthread+0x10/0x10 [ 286.135649][ T6047] ? rcu_is_watching+0x12/0xc0 [ 286.137190][ T6047] ? __pfx_kthread+0x10/0x10 [ 286.138704][ T6047] ret_from_fork+0x983/0xb10 [ 286.140184][ T6047] ? __pfx_ret_from_fork+0x10/0x10 [ 286.141836][ T6047] ? __switch_to+0x7af/0x10d0 [ 286.143353][ T6047] ? __pfx_kthread+0x10/0x10 [ 286.144876][ T6047] ret_from_fork_asm+0x1a/0x30 [ 286.146469][ T6047] [ 286.148424][ T6047] Kernel Offset: disabled [ 286.149917][ T6047] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:45:45 Registers: info registers vcpu 0 CPU#0 RAX=00000000008ac9b3 RBX=0000000000000000 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7426288 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a382ada5a3bf4f5b a3e0d1d87e9c73e9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 193f729521657438 9e3826d5a8aa641f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d85bd2890f93ff41 64d5251db2d7cfb3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 954f8de3ee1ae5b5 599bb245d503b3ff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001a00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000050000adec 730d80002a95be00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000adeb0000adec 000000010000adfe ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000111d56e00 41e98b001043f600 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75e1aa0091c07200 0000adf6bedbd500 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7c3a9d72e739c64 76807eee6499976f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fac030a8c6ddc728 6eeca129ec56d033 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=04fff0000002000c RBX=ffffea0001569400 RCX=1ffffd40002ad280 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffea0001569400 RBP=ffffc90026fef228 RSP=ffffc90026fef1b0 R8 =0000000000000000 R9 =fffff940002ad280 R10=ffffea0001569407 R11=ffff88802548aff0 R12=ffff88806c7f8000 R13=0000000000000000 R14=ffff88806c7f804c R15=ffffea0001569438 RIP=ffffffff8230826a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000007ffffa40 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff8880278ac980 RCX=ffffffff81c68b4f RDX=0000000000000000 RSI=ffffffff8daa458e RDI=ffffffff8bf2b580 RBP=ffffc90027147b60 RSP=ffffc900271479b0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff9088e9d7 R11=ffff8880278ad4b0 R12=dffffc0000000000 R13=0000000000000002 R14=ffffc90027147b68 R15=ffff8880278ac980 RIP=ffffffff8b757e75 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa53f7225d0 CR3=000000004eabd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff8b72b596 RDX=ffff888026d2c980 RSI=0000000000000004 RDI=0000000000000001 RBP=ffffffff8cf5d0e0 RSP=ffffc90004bc6db0 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000001 R11=000000000000868b R12=0000000000000001 R13=0000000000000001 R14=0000000000000008 R15=0000000000000025 RIP=ffffffff81be662b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7486288 CR3=000000004eabd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000