last executing test programs: 3m50.844539602s ago: executing program 1 (id=1125): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0xff, 0x4}, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x3, {}, 0x1}, 0x18) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xf9ffff06}], 0x1, 0x24004011) 3m50.843929942s ago: executing program 1 (id=1127): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0xe0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) umount2(&(0x7f0000000100)='./file0\x00', 0x3) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6], [0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x9}], '\x00', 0x6b4}) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="ce95a7f8", @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) 3m50.642484728s ago: executing program 1 (id=1129): bind(0xffffffffffffffff, &(0x7f00000000c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x80) r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00210625bd7000fddbdf250a0000000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3m50.642267383s ago: executing program 1 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0) (fail_nth: 18) 3m50.484392979s ago: executing program 1 (id=1132): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0486"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000840)=ANY=[@ANYBLOB="5d1044dbc5de8d9eae60b9ec16510692ec95bd958b9a81dd990000c0476a38647071", @ANYRES16=r2, @ANYBLOB="030f000000000000000008000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0x80a0000, 0x59, &(0x7f00000003c0)=""/89}, {0x8000000, 0x69, &(0x7f0000000640)=""/105}, {0x80a0000, 0xfb, &(0x7f00000006c0)=""/251}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x3, 0x24, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 3m49.913616755s ago: executing program 1 (id=1136): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x100080, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f0000000780)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000f8ff000391060065b993f00eff000000f432faffcc0000001825", @ANYRES32, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0xd}, {0x0, 0x5, 0xf, 0xb}, {0x0, 0x3, 0x7, 0xa}]}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001d3c0)=""/102394, 0xfffffd53) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000200)=0xfff) poll(&(0x7f0000000440), 0x0, 0x101) socket$nl_route(0x10, 0x3, 0x0) 3m34.736810451s ago: executing program 32 (id=1136): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x100080, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f0000000780)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000f8ff000391060065b993f00eff000000f432faffcc0000001825", @ANYRES32, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0xd}, {0x0, 0x5, 0xf, 0xb}, {0x0, 0x3, 0x7, 0xa}]}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001d3c0)=""/102394, 0xfffffd53) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000200)=0xfff) poll(&(0x7f0000000440), 0x0, 0x101) socket$nl_route(0x10, 0x3, 0x0) 5.771822678s ago: executing program 3 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r7, 0x6e2, 0x620, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (fail_nth: 1) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0) 4.912103423s ago: executing program 4 (id=2602): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x6, 0x9, 0x3}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x4004800) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0xff}, {&(0x7f00000005c0)="4eb49cacd7db5e8fa3517156ee0f9fc2370d77593d205832cf7c1ab44c1e4b04ab54da616978244a4d4bcc55f65934a33fabb285abcbbc4093f6f08f24e9c12b0e5fe76fd46b29785bbec435ecbdf064552f6af5b9e4f2cf0cfbd364744008274dff91b08ba37cf3502d77ad2dec05c833bc9f0cb4f225264316af65faed4b8c24b0d4b4df3477bb780abac1c8e1d7f21ef1809c5179153a462149b8fd243b28bf6eed5c617002784a5c9f25924844478521fc", 0xb3}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="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", 0xff}], 0x4, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x18}}, {{&(0x7f0000000880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000008c0)="3ba1fbb0f2f2ebc88987aec1030ba4d6a572d39cf29057b8ccb03262b75f7f2623c826d9f8977f1bd10d100a55d8855f4528ce6c325bc0c64697e6e961c8327265214ae57e6275fdf348b9ec5678d7c257709f0979664e18572f726ba918579ba05e82f947511fc4b92396623bc5378a36ca89223ed6574512c6bdf22fb27ae34b48443b8ecf08efb56068eb5b3ff6e9c4f922879f54738be48eafc59b21e35462b0f248849e118d0a991a833708", 0xae}], 0x1, &(0x7f0000000b40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0x9, [{@loopback, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x83}]}, @noop, @cipso={0x86, 0xe, 0x2, [{0x6, 0x8, "1e8f66435f17"}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0xf, 0x2d, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}]}, @rr={0x7, 0x13, 0xf6, [@empty, @multicast2, @loopback, @multicast1]}, @ssrr={0x89, 0xb, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0x27, 0xee, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @local, @broadcast, @empty, @private=0xa010102]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @broadcast}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010100}}}], 0xf8}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000c40)="992daad6c6c366177d74775759b2e491bcdcff42a6e25160587da231b51f81636de353f6b42c0173ce964b6d18e32fd53de4feb0ae967c8c5f137240e9b171a144b93c970c", 0x45}, {&(0x7f0000000d80)="c346c41dad46270ce559313626e7058ed5ee6facb3b1f335293ccef2037a8d271c7d845e034851bc02752fc9495be81da0f67cccbb106479a0a12d819161da43b6e5850c49f5aa6c948ce3e89119fb7458c13fed6d13817f33c4b481ce6354d1319342624b16572ec1c66b1e6375b474c35ee15cdb8bbdd1891ab75bf6d4f42eb1d4c181178492c7f910d6b23af9c89277e8766d0af5a4b80c8fb5fb2732dfd971801a8bf1da9c57c7a7aef1de210d5d5153b2ea09373843341f95c85a436565d1a672144b5cb7b492c940a8860e66a5f3aa61477f53f26dd916236d0e13187467e3cb1445f8c0c3bc8254eb8ab383cde5ae", 0xf2}, {&(0x7f0000000e80)="726d578fa618eac35416b821a7cb0321c7418a7e9af7daaae30ef7bfcfb40a8d5d71e9d7d1ca4d3fbbcc5dc219d3d4f6c1c90285b5c18f4d5f2d12c548c1fb6ee91427280d6fea165f8f5c481527a1dd0342cd832851158ac84ed7f38f22c2919d85c1d31ffcfaf5f85c916bbdc55c4491a5bd2dcb24f3dc175d96fafc46d4edb1a3f48052ed97526ef002a9772aa209ad3b6e22d9879a85e72e01063f51698897ccb6a591b98e58be6b4e225b3d45d57c8b9fc22d6834478d65a933a334c09221b45ef15c01024867", 0xc9}, {&(0x7f0000000f80)="b674094639fb871ea268b27ef4d160b8f6825999146a7d46cdeaa787e96e96632499151c355eef2e5328c1beada173eecd8fc2d581587f9fef4ae64671e025c9ed50d080442c6c0979a7c4fc", 0x4c}, {&(0x7f0000001000)="153bfaa126af6273098f2a6897ece488cf6f76785563855fc73411290d0b7db3a75a3bb6beb240bb12f0edc7033b9a000fc510620e6fadcf205359401c5b7fec079d1427a63a0d3b90caed6ec3d1ef5abc4cc159e879a21397c28fa9ada7eb91baa88cb75fbe1ecdd9aa5082f725691998702c101e489ac09477ceba5363d369a34aa5ac346a887f25075f94e47a929b9593", 0x92}, {&(0x7f00000010c0)="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", 0xfa}], 0x6, &(0x7f0000002340)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0x8, "5450b9f6fe28"}, {0x2, 0xc, "91b0cefc04c6fc567a0e"}, {0x2, 0xf, "4b09767e3b8a5004c18de8d1f7"}, {0x0, 0x7, "6049828eaf"}, {0x0, 0x4, "e039"}, {0x0, 0xe, "e3b64118427d9d6f550ea355"}, {0x1, 0x8, "8716f6dacef2"}, {0x1, 0x2}]}, @ssrr={0x89, 0xb, 0xd2, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x23, 0x1, 0x3, [{@remote, 0x6}, {@rand_addr=0x64010102, 0x1}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x4f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x5}, {@multicast1, 0x7}, {@local}, {@broadcast, 0x4}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xff}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x50, 0x3, 0x7, [{@rand_addr=0x64010101, 0x1}, {@empty, 0x6}, {@multicast2, 0x2}, {@loopback, 0xe62}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x92}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xf5, 0x0, 0x6, [0x0, 0x3]}, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x6, [{@local, 0x7}]}, @noop, @lsrr={0x83, 0x7, 0xa8, [@empty]}, @ssrr={0x89, 0x23, 0xb6, [@rand_addr=0x64010102, @local, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @end]}}}], 0x14c}}, {{&(0x7f0000001340)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001380)="a38fddcca9948fa78b1aa90df4ea7e243752", 0x12}, {&(0x7f00000013c0)="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", 0xfd}], 0x2, &(0x7f0000001500)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x50}}, @ip_ttl={{0x10}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x8, [{@loopback, 0x281}]}, @ssrr={0x89, 0x1f, 0x23, [@private=0xa010102, @remote, @private=0xa010101, @multicast1, @private=0xa010100, @broadcast, @remote]}, @rr={0x7, 0xb, 0x20, [@broadcast, @multicast2]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xa7, [@private=0xa010100, @remote, @loopback, @broadcast]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xf9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}, @ssrr={0x89, 0x13, 0x14, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @lsrr={0x83, 0xf, 0xaf, [@empty, @broadcast, @empty]}, @noop, @ssrr={0x89, 0x7, 0x51, [@broadcast]}, @noop]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd9, 0x0, 0x6, [0x9, 0x85ec, 0x479d, 0x200]}]}}}], 0x11c}}, {{&(0x7f0000001640)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001680)="4c3321390bdf34af204909c60a876a7df8d6353931f960a3a230642871c20b9b11c7ac7992619c95f7e64b38143ebbc6791ca0953e09db009916ce0b1e65e235f5b8ed7c7cb527cc8e4cc8f51f8e50c701d2d1e2", 0x54}], 0x1, &(0x7f0000001740)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6cde}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010102}}}], 0x48}}, {{&(0x7f00000017c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001800)="dd4d87d43b301dbf0247b274cea3a8884aac32bda3042dccfaf960c447754c6dba3e2932b4a3d76c8e26244179e96ffea552f019e78d2feeeef7c716158192d3e7bc6c67d7efa5cf", 0x48}, {&(0x7f0000001880)="6f2a2f1056965d6e089c75aeeb5d85ab413f6fceabcc9e470e8ebce010c7063838dd7ad6a86e9dbdca6c6daccc6512adbbc42692d1c443a5c77b8973db08c4d30c20f897726e621cd98b40ff47cf80adc2724ebb4c93d981186eef78aa983cc22ffd24bb444b922c290307e1eff477682b5f5258fff5d5616f921393df7d5cde15d4", 0x82}, {&(0x7f0000001940)="f88dcb3b7a2397c25407fe1c7376fcbead0c69a05f45bdb79e0a5302ba6941ef02bec9d79658904526790475d6ac344817a22e29ca9c46c636371c8b154e8ad14d44e9fc4afbd843712a53c7cffa31d77498aa97a0fd8fd5133e87445644476237ebf6581a31c5415cf7438dfd40e14d0bf69bb410a9ee769e07dcad0c6220abdba837e059f2c2c567789d65d50b2ad0aafc226156e595757ebb3d59a723b5c0ae5cfb0875", 0xa5}, {&(0x7f0000001a00)="7920ad367502cd8b30aabe5b6a1d65212e7119b6743c91dc2218122fc3721226649be5b3f3e8e847ab83aa5b9972b1b59485882e23bec2c2a266565dd6e27526f197e1e7b035e8800466853f2af6866c573c8b397e5f49510f49219491cc1f72132c7d281e9a8402107686a170b3549023f8a92f819ce7beca491e304dd8d81f5333023a4df27d7faac937e6782c969a2127131b44e2cb992b4d98e6174619fcee03c668530b6e18211446bcce2c3f39812aa5b87b53904e08a53b24101ac307b17486602ac8c84a4f916667e6c6798215c9ab231691cf025680155d8f215da8e4c87018d1baabfdf9627d731076b1c40c19ec6b097d93747cddb9", 0xfb}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="df8085cff49170ffd88eb0ac4ca0eb229d62271fe40173dd21c4a5e9990b5419f6882e38071079998e80ea1e68428c77e70a0fe3043e7ea4198c46d1485d0e3b3fc7c79ef16a8f60ea75e41ab7f23d2c2acfbf6187de561dc230f1acd6c3ec7e05f7505f10310d94b5119d1e04a828", 0x6f}, {&(0x7f0000001bc0)="9e20b50df3652c4f11e270fb2311d1ba1b7d3de97b984c618d20c682705c1663005e0836c812d7f33aee591b8a118952736e9ce1c06f8cbc", 0x38}], 0x7, &(0x7f0000001c40)=[@ip_ttl={{0x10, 0x0, 0x2, 0xe915}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x89c0}}, @ip_retopts={{0xc}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}], 0x64}}, {{&(0x7f0000001cc0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001d00)="a7c99f4875c18279d0e265d1087639ff1da47ab8a4f8a8406138cac132e103cc9c3c63f91c9d87389503fcd3494711d567ba0bd7892ffd7532c542d11bc31e0c5f7fa6e705b8ab452da6473b7356a5a385b3d74373ae911fce584963d25c66552a8b84383e2702e1e1f1ff96319ba542a07f65be28c4937b2d36c99ab6f646fc2f004d88e79bab8eb13021082f9ca2a642201e40a2492deb84554e08c916e7a615c4", 0xa2}, {&(0x7f0000001dc0)="747b9a57545c860249e9d3eea5b1ed103713e5f4ec8dd3f587e9f3601ea223b4452e8f452518e4a7d2a47c3143feedcbf4ff862c138ef91399f13b54c6ccfa8ad24f6cf513052cf3dd5210e28465d6b88b6997b249ba5d6fbe296d9a0a6e08c3a380569c82edb488623d9e0bf1544c7981b834566fd74637d6f009f04cc173818282ee984dd5540360ab6b45deae37c727be598170f40c552ad15a", 0x9b}, {&(0x7f0000001e80)="9d8c3acdae36e6bd2df042ed6f1611481d4d570c919428c3f7edf5a8e5ea76a5305028c546cbdee1b6be7f1e15b8f1e898f29887c65d9642a85b2e9d29124d4a84367e377fb3ff8d", 0x48}, {&(0x7f0000001f00)="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", 0xfc}, {&(0x7f0000002000)="6d0304e41d25d4b433f46944f5d1a90dd309750c62d5b0914585cc7ef57a81ec9c80318c2a95bcaa6e3ba7bef07ea9d514cdffd6b5b00ad9ac9e9ce3e64e6be2d45d9937b1053a03c6c170eaa445e871edae115f9cd053b52abe3f7fab285772d9bbcad08a3a78f8447221407475f5f894716c4f4222865f14444a96d6f1f0900a3087f4780d3dd90c873aa4df6a88a69bd607afd76fff00f9d39ea05c23265463e0cd8a511b66f516a3b32d0de759f2691876b3f4b11f1edcaa1d032e445db7a0077618ebae4968b0f90c8a8272b3702988d0069ca0185acd472db3deca89cbe7edf0878e02d33f9704274b4a4130a3", 0xf0}], 0x5, &(0x7f0000002140)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x68, [@local, @remote]}, @lsrr={0x83, 0x17, 0x45, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @empty]}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x6, [{@multicast1, 0x7}, {@rand_addr=0x64010102, 0x1}]}, @noop, @lsrr={0x83, 0x3, 0x6}]}}}], 0xd8}}], 0x7, 0x40) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c) 4.651827541s ago: executing program 3 (id=2605): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe1b) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe2$watch_queue(0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB="0000f6ffffffffffffffbb04c247775600"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x45ee28b1, r2, 0x4}, 0x38) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) unshare(0x62000000) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(0xffffffffffffffff, 0xfff) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001fbe25e085f0501c30300ea0904910b00c3dcea09"], 0x0) 4.651524396s ago: executing program 0 (id=2606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) openat$dlm_plock(0xffffff9c, 0x0, 0x4001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x4, 0x43, 0x24, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r10 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.012430307s ago: executing program 4 (id=2607): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0x6, 0x2, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x100000001, 0x39a, 0x0, 0x2000, 0x4], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000001c0)=0x10000007) r5 = getpid() socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc80"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.582433043s ago: executing program 0 (id=2609): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x2) 3.521860669s ago: executing program 0 (id=2610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001200192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1) 3.262367523s ago: executing program 0 (id=2611): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB]) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24084001}, 0x0) r4 = dup(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newsa={0x180, 0x10, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, 0x0, 0x0, 0x2000, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {0x0, 0xffffffffffffffff, 0x6, 0x8000000000000001}, {0x8, 0x0, 0x2000000000000}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr192\x00'}}}]}, 0x180}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000090) write$UHID_INPUT(r4, 0x0, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) 2.827367687s ago: executing program 2 (id=2614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x2, 0xfff, 0x6, 0x9, 0x6, 0xfffff000, 0x6e5, 0xf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 4) 2.672283443s ago: executing program 2 (id=2615): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000e, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x1f, 0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r1, 0x0, &(0x7f0000000340)=0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001dcde21700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205}, 0x94) 2.306459598s ago: executing program 0 (id=2616): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303034303030302c75f365725f69643d000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x434, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff7}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2c3, 0x1000, 0x18, 0x0, 0x4c52, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xb6a, 0x3, 0x3, 0x1ff, 0x6, 0xdc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x30, 0x0, 0x6, 0x5, 0xe8d3, 0x8001, 0x7, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfffb, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x12, 0x6c, 0x6, 0x5, 0x24, 0xb]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x6, 0x12, 0x1b, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x6, 0x9, 0x90, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x3, 0x4, 0x0, 0xb, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x92b, 0x6, 0x1, 0x3, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x0, 0x1, 0x7, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x1, 0x3, 0x8, 0xcf, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xa86f, 0xc2c, 0x9, 0x2900, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x5d, 0x7, 0x4, 0x326a, 0x7fff, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x9, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0xc, 0x36, 0x0, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x101, 0x57c, 0x2, 0x4, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9212cfe61b77720f, 0x36, 0x6c, 0xb, 0x1b, 0x16, 0x16, 0x3, 0x5, 0x6c, 0x6c, 0x60, 0x36, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x9, 0x401, 0x7c, 0x8, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe204, 0x9, 0x8, 0x0, 0x22, 0x18, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x2, 0x1, 0x3, 0xf757]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdff4, 0x8, 0x7, 0x10, 0x1, 0x7fff, 0xe4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x8, 0x15e, 0xfff0, 0x1, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x1000, 0xc39, 0x3, 0x3ff, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7bd1459584481418}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x14}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0x9, 0x9, 0x1, 0x70e, 0xd1, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xc, 0x60, 0x1, 0x60, 0x5, 0x0, 0x6, 0x5, 0x12, 0x0, 0x4, 0x9]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x30, 0x0, 0x3, 0x12, 0x1, 0x30, 0x6c, 0xb, 0x1b, 0x3, 0x12, 0x36, 0x60, 0xc, 0x48, 0x24, 0x24, 0x24, 0x6c, 0xc, 0x9, 0x6, 0x16, 0x0, 0x1b, 0x6c, 0x24, 0x2, 0x2]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xb1, 0x5958, 0x2, 0x6, 0xa, 0xa1, 0x2]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x3}, {0x6, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x101, 0xcc13, 0x7fff, 0xb01e, 0x96, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0x4, 0x1, 0x8, 0x6, 0x400, 0x3]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x434}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2.288580049s ago: executing program 2 (id=2617): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x46, 0x10000002}, 0x3}}, 0x80, 0x0}, 0x4000080) socket$inet6_mptcp(0xa, 0x1, 0x106) setrlimit(0x4, &(0x7f0000000000)={0x4, 0x6}) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)={'L+', 0x8001}, 0x16, 0x2) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x57ee, 0x10, 0x2, 0x34f}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x8, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r9}, 0x38) 2.281273751s ago: executing program 4 (id=2618): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000440)=0x2) 2.211446189s ago: executing program 4 (id=2619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x7, 0x7, 0x1, 0x4, 0x2, 0xe8}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010829bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="2801100008000000800c002b800800010094458c73afd903b9757d75f268aebdec5c013fba597fea706aad04e6291ea937da2ed249e6cc", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 2.061245129s ago: executing program 2 (id=2620): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) pipe2(&(0x7f0000000080), 0x80800) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.602271344s ago: executing program 3 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfff}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1c00000}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.470130273s ago: executing program 3 (id=2622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x13c, 0x11, 0x148, 0x0, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffff00, 'veth1_vlan\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'macvtap0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) r3 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x11bb, 0x200, 0x0, 0x200004}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.464274864s ago: executing program 2 (id=2623): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) epoll_create1(0x80000) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x22020400) r4 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4662, 0x8, 0x3, 0x100234}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) setrlimit(0x4, &(0x7f0000000000)={0x8, 0x35b}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={@default, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.321151603s ago: executing program 3 (id=2624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x1000, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0xfefffffd) r0 = getpid() r1 = memfd_create(&(0x7f0000000900)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x8, &(0x7f0000000000)={0x1c, 0x7, 0xfffff001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$CDROM_DISC_STATUS(r6, 0x5327) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x40, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 1.201988051s ago: executing program 4 (id=2625): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000e, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x1f, 0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r1, 0x0, &(0x7f0000000340)=0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001dcde21700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205}, 0x94) 585.806836ms ago: executing program 0 (id=2626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000580)={0x0, 0xd67a, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000280), &(0x7f00000001c0)) 432.239282ms ago: executing program 2 (id=2627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00014004fcff", 0x58}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x4, 0x79}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x3, 0x9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x4, 0xe5, 0x6, 0x40, 0x2}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "bb20546835144aaca1158a6b28613e7c"}]}, 0x6, [{0x60, &(0x7f0000000340)=@string={0x60, 0x3, "366e1273f6fe18f4df948e0c00000000503f35d12f56e73832b16ea8afdb71ed69c7ed3d996fcbce379765a9ac326dfedea46d8fcb20b67e7481d1eebc87249e143a67f989cf84a50fa4478c0f8e5cc39abc84229b7cde5ae21954dd4727"}}, {0xdd, &(0x7f0000000740)=@string={0xdd, 0x3, "62d50a019b8ab1676922aa1c1423aef81a576d38bcbd4d45b002ce88124153231b99e5f671526e89d308dc6560865cb5fd8b3bcdf5b47a610e65fb3726bcea9ed11997e794f714ede9f970ce10b640d3e99b410e67c3bf2ec212bd1780ca47ed3e37232c6c560703f61258d3e74819ca96826fbdb3a71c54302aecffca1f466442e6a20496745de9dd16ab8bc142fea294f791c8084c0db7c943f85b0321f9a572dd3ffdda8dd56051ff1e3c1ba80a94f80a664fcb1bfc45f12f164e539db05dac87c53fd3e9dddaeffaad34d20031cf2892fe9786dadc18576124"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40c}}, {0xdd, &(0x7f00000004c0)=@string={0xdd, 0x3, "19387d66c6752ff6046feb7870162cf81d331d6d8531aa6637330d32c702ba593ec6de2d0d48af52b8723b5fe0132a1aba4d158d352a32b1bf95518adb6776c0c33474495ec3dd8840bd5df886ecc0e09be861299dc28729bca6f08ad4b5f8b5cd3c04d83669688d4879efca0b2351cf717328a17a0fa6cbd8e83024ea01f463ebcd006f03f0f41bcf73380d329178fa55ba02708015296ef151772f6afd91e71bd5de0ed825d56890e26a7b31f00b50405268374c179824b24c23658454c2d93f3cbf39ab34abf3b2d6be567a9333e7f8ac1ac03fd8c64b5ec8fe"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x7d, &(0x7f0000000640)=@string={0x7d, 0x3, "680a6686a06b796df5768cb57348c221253d1e6980ec73b1218826043008c6b077e7a89e6d1a4eb52464502b97df0c6875230f7bfcfe7628b093e32b806ca8d58331bfbef1ec0ef8a3dc2315a7d7dbed11e1e93c77ce12cbaf1b93fa95620534da48f1fda47d1426c0f680d3fc084798c1a41d0a776963bd8b0745"}}]}) dup(r3) 294.247437ms ago: executing program 4 (id=2628): set_mempolicy(0x0, 0x0, 0x20000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) syz_io_uring_setup(0x68e2, &(0x7f0000000380)={0x0, 0x280b, 0x8, 0xfffffffd, 0x9}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0xfffffffffffffff5) r2 = open(&(0x7f0000000180)='./file0\x00', 0x1819ff, 0x123) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r2, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffe90, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x2400c840) socket$netlink(0x10, 0x3, 0x15) r7 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1656}}) 0s ago: executing program 3 (id=2629): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0xf00) kernel console output (not intermixed with test programs): ] type 2 family 0 port 6081 - 0 [ 413.011431][ T6928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.019372][ T6928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.036896][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.039400][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.095099][T14590] Bluetooth: hci5: command tx timeout [ 413.234894][ T5975] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 413.729034][ T5975] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.732399][ T5975] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 413.735865][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 413.737917][ T5975] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 413.740691][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.750566][ T5975] usb 7-1: config 0 descriptor?? [ 413.752699][T15700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 414.802141][T15733] FAULT_INJECTION: forcing a failure. [ 414.802141][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.806371][T15733] CPU: 3 UID: 0 PID: 15733 Comm: syz.0.2372 Not tainted syzkaller #0 PREEMPT(full) [ 414.806386][T15733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 414.806393][T15733] Call Trace: [ 414.806397][T15733] [ 414.806402][T15733] dump_stack_lvl+0x16c/0x1f0 [ 414.806421][T15733] should_fail_ex+0x512/0x640 [ 414.806439][T15733] _copy_from_user+0x2e/0xd0 [ 414.806456][T15733] get_compat_msghdr+0xa7/0x170 [ 414.806470][T15733] ? __pfx_get_compat_msghdr+0x10/0x10 [ 414.806501][T15733] ___sys_sendmsg+0x1ae/0x1d0 [ 414.806518][T15733] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.806539][T15733] ? find_held_lock+0x2b/0x80 [ 414.806559][T15733] __sys_sendmsg+0x16d/0x220 [ 414.806573][T15733] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.806594][T15733] ? rcu_is_watching+0x12/0xc0 [ 414.806607][T15733] __do_fast_syscall_32+0x7c/0x3a0 [ 414.806624][T15733] do_fast_syscall_32+0x32/0x80 [ 414.806638][T15733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.806652][T15733] RIP: 0023:0xf708e579 [ 414.806660][T15733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 414.806671][T15733] RSP: 002b:00000000f547e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 414.806682][T15733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 414.806689][T15733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.806695][T15733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.806702][T15733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 414.806708][T15733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.806721][T15733] [ 414.905647][ T6011] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 415.040803][T15740] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2375'. [ 415.054828][ T6011] usb 8-1: Using ep0 maxpacket: 32 [ 415.058193][ T6011] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 415.060885][ T6011] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 415.063669][ T6011] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 415.067589][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.070639][ T6011] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.073773][ T6011] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.078431][ T6011] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 415.081262][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.090064][ T6011] usb 8-1: config 0 descriptor?? [ 415.174860][T14590] Bluetooth: hci5: command tx timeout [ 415.335173][ T6011] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 415.363167][ T6011] usb 8-1: USB disconnect, device number 59 [ 415.369193][ T6011] usblp0: removed [ 415.410750][T15750] FAULT_INJECTION: forcing a failure. [ 415.410750][T15750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.416751][T15750] CPU: 3 UID: 0 PID: 15750 Comm: syz.4.2378 Not tainted syzkaller #0 PREEMPT(full) [ 415.416767][T15750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.416774][T15750] Call Trace: [ 415.416778][T15750] [ 415.416783][T15750] dump_stack_lvl+0x16c/0x1f0 [ 415.416802][T15750] should_fail_ex+0x512/0x640 [ 415.416820][T15750] _copy_from_iter+0x29f/0x1720 [ 415.416851][T15750] ? __alloc_skb+0x200/0x380 [ 415.416866][T15750] ? __pfx__copy_from_iter+0x10/0x10 [ 415.416883][T15750] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.416903][T15750] netlink_sendmsg+0x829/0xdd0 [ 415.416920][T15750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.416937][T15750] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 415.416951][T15750] ____sys_sendmsg+0xa95/0xc70 [ 415.416963][T15750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.416973][T15750] ? get_compat_msghdr+0x11a/0x170 [ 415.416993][T15750] ___sys_sendmsg+0x134/0x1d0 [ 415.417012][T15750] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.417033][T15750] ? find_held_lock+0x2b/0x80 [ 415.417054][T15750] __sys_sendmsg+0x16d/0x220 [ 415.417068][T15750] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.417089][T15750] ? rcu_is_watching+0x12/0xc0 [ 415.417102][T15750] __do_fast_syscall_32+0x7c/0x3a0 [ 415.417119][T15750] do_fast_syscall_32+0x32/0x80 [ 415.417133][T15750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.417147][T15750] RIP: 0023:0xf709e579 [ 415.417156][T15750] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 415.417167][T15750] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 415.417178][T15750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 415.417185][T15750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.417191][T15750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.417197][T15750] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 415.417204][T15750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.417217][T15750] [ 415.684054][ T5975] usbhid 7-1:0.0: can't add hid device: -71 [ 415.686115][ T5975] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 415.690421][ T5975] usb 7-1: USB disconnect, device number 47 [ 415.834758][ T6011] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 416.014829][ T6011] usb 8-1: Using ep0 maxpacket: 32 [ 416.019133][ T6011] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 416.021696][ T6011] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 416.024307][ T6011] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 416.027198][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 416.030108][ T6011] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 416.033062][ T6011] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.037076][ T6011] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 416.039829][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.045750][ T6011] usb 8-1: config 0 descriptor?? [ 416.258740][ T6011] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 416.515576][ C3] usblp0: nonzero read bulk status received: -71 [ 416.515696][ T6011] usb 8-1: USB disconnect, device number 60 [ 416.518326][T15727] usblp0: error -71 reading from printer [ 416.524581][ T6011] usblp0: removed [ 416.573974][T15791] FAULT_INJECTION: forcing a failure. [ 416.573974][T15791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.578277][T15791] CPU: 3 UID: 0 PID: 15791 Comm: syz.2.2393 Not tainted syzkaller #0 PREEMPT(full) [ 416.578302][T15791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 416.578310][T15791] Call Trace: [ 416.578314][T15791] [ 416.578319][T15791] dump_stack_lvl+0x16c/0x1f0 [ 416.578338][T15791] should_fail_ex+0x512/0x640 [ 416.578356][T15791] _copy_from_user+0x2e/0xd0 [ 416.578375][T15791] cmsghdr_from_user_compat_to_kern+0x4ec/0x7d0 [ 416.578395][T15791] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 416.578411][T15791] ? __might_fault+0xe3/0x190 [ 416.578424][T15791] ? __might_fault+0x13b/0x190 [ 416.578439][T15791] ____sys_sendmsg+0x488/0xc70 [ 416.578452][T15791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.578462][T15791] ? get_compat_msghdr+0x11a/0x170 [ 416.578482][T15791] ___sys_sendmsg+0x134/0x1d0 [ 416.578498][T15791] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.578520][T15791] ? find_held_lock+0x2b/0x80 [ 416.578541][T15791] __sys_sendmsg+0x16d/0x220 [ 416.578556][T15791] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.578577][T15791] ? rcu_is_watching+0x12/0xc0 [ 416.578591][T15791] __do_fast_syscall_32+0x7c/0x3a0 [ 416.578608][T15791] do_fast_syscall_32+0x32/0x80 [ 416.578629][T15791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.578643][T15791] RIP: 0023:0xf710e579 [ 416.578652][T15791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 416.578662][T15791] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 416.578673][T15791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 416.578680][T15791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.578686][T15791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.578692][T15791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 416.578699][T15791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.578711][T15791] [ 416.876578][T15804] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 417.079745][T15807] FAULT_INJECTION: forcing a failure. [ 417.079745][T15807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.083831][T15807] CPU: 2 UID: 0 PID: 15807 Comm: syz.3.2397 Not tainted syzkaller #0 PREEMPT(full) [ 417.083847][T15807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 417.083854][T15807] Call Trace: [ 417.083859][T15807] [ 417.083864][T15807] dump_stack_lvl+0x16c/0x1f0 [ 417.083883][T15807] should_fail_ex+0x512/0x640 [ 417.083900][T15807] _copy_from_iter+0x29f/0x1720 [ 417.083919][T15807] ? __alloc_skb+0x200/0x380 [ 417.083933][T15807] ? __pfx__copy_from_iter+0x10/0x10 [ 417.083951][T15807] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 417.083971][T15807] netlink_sendmsg+0x829/0xdd0 [ 417.083989][T15807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.084005][T15807] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 417.084019][T15807] ____sys_sendmsg+0xa95/0xc70 [ 417.084032][T15807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.084041][T15807] ? get_compat_msghdr+0x11a/0x170 [ 417.084061][T15807] ___sys_sendmsg+0x134/0x1d0 [ 417.084076][T15807] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.084097][T15807] ? find_held_lock+0x2b/0x80 [ 417.084117][T15807] __sys_sendmsg+0x16d/0x220 [ 417.084132][T15807] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.084152][T15807] ? rcu_is_watching+0x12/0xc0 [ 417.084165][T15807] __do_fast_syscall_32+0x7c/0x3a0 [ 417.084181][T15807] do_fast_syscall_32+0x32/0x80 [ 417.084196][T15807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.084210][T15807] RIP: 0023:0xf7f47579 [ 417.084219][T15807] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 417.084229][T15807] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 417.084241][T15807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 417.084248][T15807] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.084254][T15807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.084260][T15807] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 417.084267][T15807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.084284][T15807] [ 417.357211][T15829] FAULT_INJECTION: forcing a failure. [ 417.357211][T15829] name failslab, interval 1, probability 0, space 0, times 0 [ 417.361739][T15829] CPU: 3 UID: 0 PID: 15829 Comm: syz.3.2406 Not tainted syzkaller #0 PREEMPT(full) [ 417.361754][T15829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 417.361761][T15829] Call Trace: [ 417.361765][T15829] [ 417.361770][T15829] dump_stack_lvl+0x16c/0x1f0 [ 417.361789][T15829] should_fail_ex+0x512/0x640 [ 417.361807][T15829] should_failslab+0xc2/0x120 [ 417.361822][T15829] __kmalloc_cache_noprof+0x6a/0x3e0 [ 417.361833][T15829] ? ip_mc_add_src+0x2c3/0xf10 [ 417.361846][T15829] ? ip_mc_add_src+0x81d/0xf10 [ 417.361861][T15829] ip_mc_add_src+0x81d/0xf10 [ 417.361878][T15829] ip_mc_msfilter+0x607/0xc10 [ 417.361892][T15829] ? rcuref_put_slowpath+0x203/0x240 [ 417.361911][T15829] ? __pfx_ip_mc_msfilter+0x10/0x10 [ 417.361926][T15829] ? __local_bh_enable_ip+0xa4/0x120 [ 417.361939][T15829] ? ip_setsockopt+0x59/0xf0 [ 417.361952][T15829] do_ip_setsockopt+0x2dd4/0x3130 [ 417.361964][T15829] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 417.361976][T15829] ? aa_sk_perm+0x2f4/0xb10 [ 417.361990][T15829] ? ksys_write+0x190/0x250 [ 417.362003][T15829] ? __pfx_aa_sk_perm+0x10/0x10 [ 417.362019][T15829] ip_setsockopt+0x59/0xf0 [ 417.362031][T15829] tcp_setsockopt+0xa4/0x100 [ 417.362044][T15829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 417.362062][T15829] do_sock_setsockopt+0xf3/0x1d0 [ 417.362081][T15829] __sys_setsockopt+0x120/0x1a0 [ 417.362096][T15829] __ia32_sys_setsockopt+0xbc/0x160 [ 417.362109][T15829] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.362123][T15829] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 417.362138][T15829] __do_fast_syscall_32+0x7c/0x3a0 [ 417.362154][T15829] do_fast_syscall_32+0x32/0x80 [ 417.362169][T15829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.362183][T15829] RIP: 0023:0xf7f47579 [ 417.362191][T15829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 417.362202][T15829] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 417.362212][T15829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 417.362219][T15829] RDX: 0000000000000029 RSI: 0000000080000140 RDI: 000000000000001c [ 417.362226][T15829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.362232][T15829] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 417.362239][T15829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.362251][T15829] [ 417.510389][ T40] audit: type=1326 audit(1756251991.610:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.2408" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47579 code=0x0 [ 417.586905][ T6011] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 417.735066][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 417.746136][ T6011] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 417.749068][ T6011] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 417.751813][ T6011] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 417.755016][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 417.758271][ T6011] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 417.762344][ T6011] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 417.766903][ T6011] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 417.770270][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.776732][ T6011] usb 5-1: config 0 descriptor?? [ 417.833216][T15846] FAULT_INJECTION: forcing a failure. [ 417.833216][T15846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.837984][T15846] CPU: 3 UID: 0 PID: 15846 Comm: syz.4.2412 Not tainted syzkaller #0 PREEMPT(full) [ 417.838003][T15846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 417.838010][T15846] Call Trace: [ 417.838017][T15846] [ 417.838023][T15846] dump_stack_lvl+0x16c/0x1f0 [ 417.838045][T15846] should_fail_ex+0x512/0x640 [ 417.838065][T15846] _copy_from_user+0x2e/0xd0 [ 417.838084][T15846] get_compat_msghdr+0xa7/0x170 [ 417.838100][T15846] ? __pfx_get_compat_msghdr+0x10/0x10 [ 417.838115][T15846] ? __pfx__kstrtoull+0x10/0x10 [ 417.838131][T15846] ___sys_sendmsg+0x1ae/0x1d0 [ 417.838149][T15846] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.838175][T15846] ? __pfx___might_resched+0x10/0x10 [ 417.838192][T15846] __sys_sendmmsg+0x2f9/0x420 [ 417.838208][T15846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 417.838227][T15846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.838249][T15846] ? fput+0x9b/0xd0 [ 417.838266][T15846] ? ksys_write+0x1ac/0x250 [ 417.838279][T15846] ? __pfx_ksys_write+0x10/0x10 [ 417.838294][T15846] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 417.838308][T15846] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 417.838324][T15846] __do_fast_syscall_32+0x7c/0x3a0 [ 417.838341][T15846] do_fast_syscall_32+0x32/0x80 [ 417.838355][T15846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.838371][T15846] RIP: 0023:0xf709e579 [ 417.838381][T15846] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 417.838392][T15846] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 417.838403][T15846] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 417.838410][T15846] RDX: 0000000000000291 RSI: 0000000000008100 RDI: 0000000000000000 [ 417.838417][T15846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.838423][T15846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 417.838430][T15846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.838443][T15846] [ 417.987269][ T6011] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 417.994568][ T6011] usb 5-1: USB disconnect, device number 32 [ 418.015272][ T6011] usblp0: removed [ 418.155614][T15851] FAULT_INJECTION: forcing a failure. [ 418.155614][T15851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.160453][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.2.2414 Not tainted syzkaller #0 PREEMPT(full) [ 418.160468][T15851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 418.160475][T15851] Call Trace: [ 418.160479][T15851] [ 418.160484][T15851] dump_stack_lvl+0x16c/0x1f0 [ 418.160503][T15851] should_fail_ex+0x512/0x640 [ 418.160521][T15851] _copy_from_iter+0x29f/0x1720 [ 418.160540][T15851] ? __alloc_skb+0x200/0x380 [ 418.160555][T15851] ? __pfx__copy_from_iter+0x10/0x10 [ 418.160573][T15851] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 418.160592][T15851] netlink_sendmsg+0x829/0xdd0 [ 418.160609][T15851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.160626][T15851] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 418.160641][T15851] ____sys_sendmsg+0xa95/0xc70 [ 418.160653][T15851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.160662][T15851] ? get_compat_msghdr+0x11a/0x170 [ 418.160682][T15851] ___sys_sendmsg+0x134/0x1d0 [ 418.160697][T15851] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.160718][T15851] ? find_held_lock+0x2b/0x80 [ 418.160737][T15851] __sys_sendmsg+0x16d/0x220 [ 418.160752][T15851] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.160771][T15851] ? rcu_is_watching+0x12/0xc0 [ 418.160785][T15851] __do_fast_syscall_32+0x7c/0x3a0 [ 418.160801][T15851] do_fast_syscall_32+0x32/0x80 [ 418.160816][T15851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.160830][T15851] RIP: 0023:0xf710e579 [ 418.160839][T15851] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 418.160850][T15851] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 418.160861][T15851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 418.160868][T15851] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.160874][T15851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.160880][T15851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 418.160886][T15851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.160899][T15851] [ 418.484751][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.644780][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 418.649761][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 418.652949][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 418.671032][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 418.685851][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.690605][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.694330][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 418.701667][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 418.709609][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.734257][ T10] usb 5-1: config 0 descriptor?? [ 418.949056][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 419.021516][T15879] FAULT_INJECTION: forcing a failure. [ 419.021516][T15879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.025880][T15879] CPU: 2 UID: 0 PID: 15879 Comm: syz.4.2423 Not tainted syzkaller #0 PREEMPT(full) [ 419.025894][T15879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.025901][T15879] Call Trace: [ 419.025905][T15879] [ 419.025909][T15879] dump_stack_lvl+0x16c/0x1f0 [ 419.025927][T15879] should_fail_ex+0x512/0x640 [ 419.025945][T15879] should_fail_alloc_page+0xe7/0x130 [ 419.025968][T15879] prepare_alloc_pages+0x3c2/0x610 [ 419.025984][T15879] ? kernel_text_address+0x8d/0x100 [ 419.025997][T15879] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 419.026011][T15879] ? lock_acquire+0x179/0x350 [ 419.026026][T15879] ? find_held_lock+0x2b/0x80 [ 419.026037][T15879] ? bpf_trace_run2+0x26b/0x590 [ 419.026055][T15879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.026076][T15879] ? __lock_acquire+0xb97/0x1ce0 [ 419.026089][T15879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.026106][T15879] ? policy_nodemask+0xea/0x4e0 [ 419.026121][T15879] alloc_pages_mpol+0x1fb/0x550 [ 419.026136][T15879] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.026151][T15879] ? find_held_lock+0x2b/0x80 [ 419.026163][T15879] alloc_pages_noprof+0x131/0x390 [ 419.026178][T15879] get_free_pages_noprof+0x10/0xb0 [ 419.026193][T15879] do_proc_control+0x211/0x10a0 [ 419.026208][T15879] ? __might_fault+0x13b/0x190 [ 419.026221][T15879] ? __pfx_do_proc_control+0x10/0x10 [ 419.026238][T15879] usbdev_ioctl+0x2300/0x4070 [ 419.026254][T15879] ? __pfx_usbdev_ioctl+0x10/0x10 [ 419.026271][T15879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.026289][T15879] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 419.026311][T15879] ? find_held_lock+0x2b/0x80 [ 419.026321][T15879] ? hook_file_ioctl_common+0x145/0x410 [ 419.026339][T15879] ? __fget_files+0x20e/0x3c0 [ 419.026351][T15879] ? __pfx_usbdev_ioctl+0x10/0x10 [ 419.026365][T15879] compat_ptr_ioctl+0x6e/0xa0 [ 419.026380][T15879] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 419.026396][T15879] __ia32_compat_sys_ioctl+0x242/0x370 [ 419.026415][T15879] __do_fast_syscall_32+0x7c/0x3a0 [ 419.026431][T15879] do_fast_syscall_32+0x32/0x80 [ 419.026446][T15879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.026459][T15879] RIP: 0023:0xf709e579 [ 419.026467][T15879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 419.026478][T15879] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 419.026489][T15879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0185500 [ 419.026496][T15879] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.026502][T15879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.026508][T15879] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 419.026514][T15879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.026527][T15879] [ 419.198314][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 419.198676][ C2] usblp0: nonzero read bulk status received: -71 [ 419.199297][ T6055] usb 5-1: USB disconnect, device number 33 [ 419.207748][T15885] erspan0: entered promiscuous mode [ 419.209671][T15827] usblp0: removed [ 419.210876][T15885] macvtap1: entered promiscuous mode [ 419.213007][T15885] macvtap1: entered allmulticast mode [ 419.215047][T15885] erspan0: entered allmulticast mode [ 419.233936][T15885] erspan0: left allmulticast mode [ 419.236730][T15885] erspan0: left promiscuous mode [ 419.441533][T15903] FAULT_INJECTION: forcing a failure. [ 419.441533][T15903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.445934][T15903] CPU: 2 UID: 0 PID: 15903 Comm: syz.2.2431 Not tainted syzkaller #0 PREEMPT(full) [ 419.445950][T15903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.445957][T15903] Call Trace: [ 419.445961][T15903] [ 419.445966][T15903] dump_stack_lvl+0x16c/0x1f0 [ 419.445985][T15903] should_fail_ex+0x512/0x640 [ 419.446003][T15903] _copy_from_user+0x2e/0xd0 [ 419.446020][T15903] kstrtouint_from_user+0xd6/0x1d0 [ 419.446038][T15903] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 419.446051][T15903] ? __lock_acquire+0xb97/0x1ce0 [ 419.446068][T15903] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 419.446086][T15903] proc_fail_nth_write+0x83/0x220 [ 419.446099][T15903] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 419.446114][T15903] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 419.446125][T15903] vfs_write+0x2a0/0x11d0 [ 419.446141][T15903] ? __pfx_vfs_write+0x10/0x10 [ 419.446153][T15903] ? find_held_lock+0x2b/0x80 [ 419.446167][T15903] ? __fget_files+0x20e/0x3c0 [ 419.446183][T15903] ksys_write+0x12a/0x250 [ 419.446195][T15903] ? __pfx_ksys_write+0x10/0x10 [ 419.446209][T15903] ? rcu_is_watching+0x12/0xc0 [ 419.446222][T15903] __do_fast_syscall_32+0x7c/0x3a0 [ 419.446238][T15903] do_fast_syscall_32+0x32/0x80 [ 419.446253][T15903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.446267][T15903] RIP: 0023:0xf710e579 [ 419.446277][T15903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 419.446289][T15903] RSP: 002b:00000000f54fe590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 419.446299][T15903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54fe620 [ 419.446306][T15903] RDX: 0000000000000001 RSI: 00000000f7474ff4 RDI: 0000000000000000 [ 419.446313][T15903] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 419.446319][T15903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 419.446325][T15903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.446339][T15903] [ 419.798069][T15910] FAULT_INJECTION: forcing a failure. [ 419.798069][T15910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.802129][T15910] CPU: 3 UID: 0 PID: 15910 Comm: syz.0.2434 Not tainted syzkaller #0 PREEMPT(full) [ 419.802143][T15910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 419.802150][T15910] Call Trace: [ 419.802155][T15910] [ 419.802159][T15910] dump_stack_lvl+0x16c/0x1f0 [ 419.802178][T15910] should_fail_ex+0x512/0x640 [ 419.802196][T15910] _copy_to_user+0x32/0xd0 [ 419.802208][T15910] simple_read_from_buffer+0xcb/0x170 [ 419.802221][T15910] proc_fail_nth_read+0x197/0x240 [ 419.802233][T15910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.802246][T15910] ? rw_verify_area+0xcf/0x6c0 [ 419.802257][T15910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.802269][T15910] vfs_read+0x1e4/0xcf0 [ 419.802284][T15910] ? __pfx_vfs_read+0x10/0x10 [ 419.802306][T15910] ? find_held_lock+0x2b/0x80 [ 419.802323][T15910] ? __fget_files+0x20e/0x3c0 [ 419.802339][T15910] ksys_read+0x12a/0x250 [ 419.802351][T15910] ? __pfx_ksys_read+0x10/0x10 [ 419.802363][T15910] ? fput+0x9b/0xd0 [ 419.802378][T15910] ? rcu_is_watching+0x12/0xc0 [ 419.802391][T15910] __do_fast_syscall_32+0x7c/0x3a0 [ 419.802408][T15910] do_fast_syscall_32+0x32/0x80 [ 419.802422][T15910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.802436][T15910] RIP: 0023:0xf708e579 [ 419.802445][T15910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 419.802455][T15910] RSP: 002b:00000000f545d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 419.802466][T15910] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f545d620 [ 419.802473][T15910] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000 [ 419.802479][T15910] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 419.802485][T15910] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 419.802492][T15910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.802505][T15910] [ 419.856112][ T10] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 420.014732][ T10] usb 7-1: device descriptor read/64, error -71 [ 420.035436][T15917] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2437'. [ 420.167695][T15921] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 420.197537][T15924] FAULT_INJECTION: forcing a failure. [ 420.197537][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 420.201470][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.3.2440 Not tainted syzkaller #0 PREEMPT(full) [ 420.201484][T15924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 420.201491][T15924] Call Trace: [ 420.201496][T15924] [ 420.201501][T15924] dump_stack_lvl+0x16c/0x1f0 [ 420.201519][T15924] should_fail_ex+0x512/0x640 [ 420.201535][T15924] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 420.201550][T15924] should_failslab+0xc2/0x120 [ 420.201565][T15924] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 420.201578][T15924] ? __alloc_skb+0x2b2/0x380 [ 420.201594][T15924] __alloc_skb+0x2b2/0x380 [ 420.201607][T15924] ? __pfx___alloc_skb+0x10/0x10 [ 420.201621][T15924] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 420.201640][T15924] netlink_alloc_large_skb+0x69/0x130 [ 420.201656][T15924] netlink_sendmsg+0x6a1/0xdd0 [ 420.201673][T15924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.201689][T15924] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 420.201704][T15924] ____sys_sendmsg+0xa95/0xc70 [ 420.201716][T15924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.201726][T15924] ? get_compat_msghdr+0x11a/0x170 [ 420.201745][T15924] ___sys_sendmsg+0x134/0x1d0 [ 420.201761][T15924] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.201781][T15924] ? find_held_lock+0x2b/0x80 [ 420.201801][T15924] __sys_sendmsg+0x16d/0x220 [ 420.201815][T15924] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.201835][T15924] ? rcu_is_watching+0x12/0xc0 [ 420.201848][T15924] __do_fast_syscall_32+0x7c/0x3a0 [ 420.201865][T15924] do_fast_syscall_32+0x32/0x80 [ 420.201879][T15924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 420.201893][T15924] RIP: 0023:0xf7f47579 [ 420.201901][T15924] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 420.201912][T15924] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 420.201923][T15924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 420.201930][T15924] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 420.201936][T15924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.201943][T15924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 420.201949][T15924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.201962][T15924] [ 420.288098][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2441'. [ 420.372271][ T10] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 420.526627][ T10] usb 7-1: device descriptor read/64, error -71 [ 420.547090][ T6038] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 420.640945][ T10] usb usb7-port1: attempt power cycle [ 420.704764][ T6038] usb 8-1: Using ep0 maxpacket: 32 [ 420.707660][ T6038] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 420.710217][ T6038] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 420.712881][ T6038] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 420.715782][ T6038] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.719148][ T6038] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.722104][ T6038] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 420.726144][ T6038] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 420.728867][ T6038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.732764][ T6038] usb 8-1: config 0 descriptor?? [ 420.754670][ T6011] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 420.905423][ T6011] usb 5-1: too many configurations: 145, using maximum allowed: 8 [ 420.909481][ T6011] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 420.912002][ T6011] usb 5-1: can't read configurations, error -61 [ 420.951442][ T6038] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 420.960652][ T6038] usb 8-1: USB disconnect, device number 61 [ 420.968899][ T6038] usblp0: removed [ 421.034810][ T6011] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 421.053859][ T10] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 421.085408][ T10] usb 7-1: device descriptor read/8, error -71 [ 421.087339][T15939] fuse: Bad value for 'fd' [ 421.187104][ T6011] usb 5-1: too many configurations: 145, using maximum allowed: 8 [ 421.226757][ T6011] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 421.230157][ T6011] usb 5-1: can't read configurations, error -61 [ 421.232463][ T6011] usb usb5-port1: attempt power cycle [ 421.365131][ T10] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 421.387480][ T34] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 421.396617][ T10] usb 7-1: device descriptor read/8, error -71 [ 421.505355][ T10] usb usb7-port1: unable to enumerate USB device [ 421.534855][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 421.539421][ T34] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 421.542701][ T34] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 421.546401][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 421.549931][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.553688][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 421.557602][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 421.562798][ T34] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 421.564759][ T6011] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 421.566526][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.576747][ T34] usb 8-1: config 0 descriptor?? [ 421.586052][ T6011] usb 5-1: too many configurations: 145, using maximum allowed: 8 [ 421.590684][ T6011] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 421.593877][ T6011] usb 5-1: can't read configurations, error -61 [ 421.724838][ T6011] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 421.745769][ T6011] usb 5-1: too many configurations: 145, using maximum allowed: 8 [ 421.749323][ T6011] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 421.751634][ T6011] usb 5-1: can't read configurations, error -61 [ 421.753848][ T6011] usb usb5-port1: unable to enumerate USB device [ 421.782117][ T34] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 422.035570][ C0] usblp0: nonzero read bulk status received: -71 [ 422.035805][ T6055] usb 8-1: USB disconnect, device number 62 [ 422.037755][T15929] usblp0: error -71 reading from printer [ 422.043857][T15929] usblp0: removed [ 422.309857][T15953] FAULT_INJECTION: forcing a failure. [ 422.309857][T15953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.314255][T15953] CPU: 3 UID: 0 PID: 15953 Comm: syz.4.2450 Not tainted syzkaller #0 PREEMPT(full) [ 422.314270][T15953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.314277][T15953] Call Trace: [ 422.314282][T15953] [ 422.314287][T15953] dump_stack_lvl+0x16c/0x1f0 [ 422.314305][T15953] should_fail_ex+0x512/0x640 [ 422.314323][T15953] _copy_from_iter+0x29f/0x1720 [ 422.314342][T15953] ? __alloc_skb+0x200/0x380 [ 422.314356][T15953] ? __pfx__copy_from_iter+0x10/0x10 [ 422.314374][T15953] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 422.314394][T15953] netlink_sendmsg+0x829/0xdd0 [ 422.314411][T15953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.314427][T15953] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 422.314442][T15953] ____sys_sendmsg+0xa95/0xc70 [ 422.314454][T15953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.314464][T15953] ? get_compat_msghdr+0x11a/0x170 [ 422.314483][T15953] ___sys_sendmsg+0x134/0x1d0 [ 422.314498][T15953] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.314519][T15953] ? find_held_lock+0x2b/0x80 [ 422.314538][T15953] __sys_sendmsg+0x16d/0x220 [ 422.314552][T15953] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.314572][T15953] ? rcu_is_watching+0x12/0xc0 [ 422.314586][T15953] __do_fast_syscall_32+0x7c/0x3a0 [ 422.314615][T15953] do_fast_syscall_32+0x32/0x80 [ 422.314630][T15953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.314644][T15953] RIP: 0023:0xf709e579 [ 422.314653][T15953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 422.314664][T15953] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 422.314675][T15953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 422.314681][T15953] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.314688][T15953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.314694][T15953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 422.314700][T15953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.314713][T15953] [ 423.034567][T15969] fuse: Bad value for 'fd' [ 423.375491][T15977] FAULT_INJECTION: forcing a failure. [ 423.375491][T15977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.380085][T15977] CPU: 2 UID: 0 PID: 15977 Comm: syz.4.2457 Not tainted syzkaller #0 PREEMPT(full) [ 423.380100][T15977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.380107][T15977] Call Trace: [ 423.380112][T15977] [ 423.380116][T15977] dump_stack_lvl+0x16c/0x1f0 [ 423.380134][T15977] should_fail_ex+0x512/0x640 [ 423.380151][T15977] _copy_from_iter+0x29f/0x1720 [ 423.380170][T15977] ? __alloc_skb+0x200/0x380 [ 423.380184][T15977] ? __pfx__copy_from_iter+0x10/0x10 [ 423.380202][T15977] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 423.380222][T15977] netlink_sendmsg+0x829/0xdd0 [ 423.380239][T15977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.380256][T15977] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 423.380270][T15977] ____sys_sendmsg+0xa95/0xc70 [ 423.380282][T15977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.380291][T15977] ? get_compat_msghdr+0x11a/0x170 [ 423.380311][T15977] ___sys_sendmsg+0x134/0x1d0 [ 423.380326][T15977] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.380346][T15977] ? find_held_lock+0x2b/0x80 [ 423.380366][T15977] __sys_sendmsg+0x16d/0x220 [ 423.380381][T15977] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.380401][T15977] ? rcu_is_watching+0x12/0xc0 [ 423.380414][T15977] __do_fast_syscall_32+0x7c/0x3a0 [ 423.380430][T15977] do_fast_syscall_32+0x32/0x80 [ 423.380445][T15977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.380458][T15977] RIP: 0023:0xf709e579 [ 423.380467][T15977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 423.380478][T15977] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 423.380489][T15977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 423.380496][T15977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.380502][T15977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.380508][T15977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 423.380514][T15977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.380527][T15977] [ 423.496753][T15983] FAULT_INJECTION: forcing a failure. [ 423.496753][T15983] name failslab, interval 1, probability 0, space 0, times 0 [ 423.500727][T15983] CPU: 3 UID: 0 PID: 15983 Comm: syz.4.2459 Not tainted syzkaller #0 PREEMPT(full) [ 423.500742][T15983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.500749][T15983] Call Trace: [ 423.500754][T15983] [ 423.500759][T15983] dump_stack_lvl+0x16c/0x1f0 [ 423.500777][T15983] should_fail_ex+0x512/0x640 [ 423.500793][T15983] ? __kmalloc_noprof+0xbf/0x510 [ 423.500807][T15983] ? bpf_test_init.isra.0+0x9e/0x140 [ 423.500820][T15983] should_failslab+0xc2/0x120 [ 423.500834][T15983] __kmalloc_noprof+0xd2/0x510 [ 423.500851][T15983] ? __lock_acquire+0x62e/0x1ce0 [ 423.500872][T15983] bpf_test_init.isra.0+0x9e/0x140 [ 423.500886][T15983] bpf_prog_test_run_xdp+0x4f0/0x1590 [ 423.500905][T15983] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.500920][T15983] ? __might_fault+0x70/0x190 [ 423.500935][T15983] ? fput+0x9b/0xd0 [ 423.500950][T15983] ? __bpf_prog_get+0x97/0x2a0 [ 423.500963][T15983] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.500982][T15983] __sys_bpf+0x104d/0x4de0 [ 423.501000][T15983] ? __pfx___sys_bpf+0x10/0x10 [ 423.501016][T15983] ? ksys_write+0x190/0x250 [ 423.501030][T15983] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 423.501053][T15983] ? fput+0x9b/0xd0 [ 423.501068][T15983] ? ksys_write+0x1ac/0x250 [ 423.501079][T15983] ? __pfx_ksys_write+0x10/0x10 [ 423.501094][T15983] __ia32_sys_bpf+0x76/0xe0 [ 423.501111][T15983] __do_fast_syscall_32+0x7c/0x3a0 [ 423.501127][T15983] do_fast_syscall_32+0x32/0x80 [ 423.501142][T15983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.501156][T15983] RIP: 0023:0xf709e579 [ 423.501165][T15983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 423.501176][T15983] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 423.501187][T15983] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 423.501194][T15983] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.501200][T15983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.501206][T15983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 423.501212][T15983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.501225][T15983] [ 423.580658][T15979] Invalid/unusable pipe [ 423.635440][ T6059] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 423.806307][ T6059] usb 7-1: too many configurations: 145, using maximum allowed: 8 [ 423.823433][ T6059] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 423.826018][ T6059] usb 7-1: can't read configurations, error -61 [ 423.834933][ T34] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 423.849082][T15991] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 423.851677][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.855801][T15991] vhci_hcd vhci_hcd.0: Device attached [ 423.860301][T15991] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 423.862916][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.866149][T15991] vhci_hcd vhci_hcd.0: Device attached [ 423.869132][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.876244][T15991] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 423.878863][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.882108][T15991] vhci_hcd vhci_hcd.0: Device attached [ 423.888128][T15991] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 423.890993][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.894325][T15991] vhci_hcd vhci_hcd.0: Device attached [ 423.899159][T15991] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 423.901935][T15991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.906190][T15991] vhci_hcd vhci_hcd.0: Device attached [ 423.909645][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.913664][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.919036][T15991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.954320][T16000] vhci_hcd: connection closed [ 423.954404][T15998] vhci_hcd: connection closed [ 423.956602][ T6943] vhci_hcd: stop threads [ 423.958927][T15996] vhci_hcd: connection closed [ 423.959377][ T6943] vhci_hcd: release socket [ 423.959388][ T6943] vhci_hcd: disconnect device [ 423.959507][ T6943] vhci_hcd: stop threads [ 423.963571][T15994] vhci_hcd: connection closed [ 423.964190][T15992] vhci_hcd: connection closed [ 423.965039][ T6059] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 423.966116][ T6943] vhci_hcd: release socket [ 423.973382][ T6943] vhci_hcd: disconnect device [ 423.975453][ T6943] vhci_hcd: stop threads [ 423.976834][ T6943] vhci_hcd: release socket [ 423.978297][ T6943] vhci_hcd: disconnect device [ 423.979988][ T6943] vhci_hcd: stop threads [ 423.981354][ T6943] vhci_hcd: release socket [ 423.982855][ T6943] vhci_hcd: disconnect device [ 423.984852][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 423.989226][ T6943] vhci_hcd: stop threads [ 423.990591][ T6943] vhci_hcd: release socket [ 423.990802][ T34] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 423.992068][ T6943] vhci_hcd: disconnect device [ 423.994966][ T34] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 423.998903][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 424.001946][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.006430][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 424.009371][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.013420][ T34] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 424.016278][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.020032][ T34] usb 9-1: config 0 descriptor?? [ 424.034797][ T6024] vhci_hcd: vhci_device speed not set [ 424.115411][ T6059] usb 7-1: too many configurations: 145, using maximum allowed: 8 [ 424.119204][ T6059] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 424.121648][ T6059] usb 7-1: can't read configurations, error -61 [ 424.124038][ T6059] usb usb7-port1: attempt power cycle [ 424.229651][ T34] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 424.234909][ T34] usb 9-1: USB disconnect, device number 56 [ 424.242362][ T34] usblp0: removed [ 424.345400][ T6943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.350419][ T6943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.474687][ T6059] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 424.520829][ T6059] usb 7-1: too many configurations: 145, using maximum allowed: 8 [ 424.534383][ T6059] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 424.537023][ T6059] usb 7-1: can't read configurations, error -61 [ 424.675082][ T6059] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 424.696549][ T6059] usb 7-1: too many configurations: 145, using maximum allowed: 8 [ 424.700963][ T6059] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 424.703337][ T6059] usb 7-1: can't read configurations, error -61 [ 424.706011][ T6059] usb usb7-port1: unable to enumerate USB device [ 424.844990][ T34] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 424.994999][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 424.998779][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 425.001418][ T34] usb 8-1: config 0 has no interface number 0 [ 425.003469][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.007410][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 425.011023][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.014417][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 425.018791][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.021683][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.035002][ T34] usb 8-1: config 0 descriptor?? [ 425.039310][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 425.214894][ T9] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 425.246200][T16025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.249603][T16025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.254342][ T10] usb 8-1: USB disconnect, device number 63 [ 425.264094][ T10] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 425.368105][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 425.371755][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.375435][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.378449][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 425.385227][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 425.387987][ T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 425.391006][ T9] usb 9-1: Manufacturer: syz [ 425.396818][ T9] usb 9-1: config 0 descriptor?? [ 425.810587][ T9] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 425.814714][ T6038] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.821081][ T9] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 425.966769][ T6038] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 425.971143][ T6038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.976363][ T6038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.980221][ T6038] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 425.986406][ T6038] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 425.990067][ T6038] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 425.993294][ T6038] usb 5-1: Manufacturer: syz [ 425.997788][ T6038] usb 5-1: config 0 descriptor?? [ 426.406821][ T6038] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 426.430600][ T6038] appleir 0003:05AC:8243.000B: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 426.651094][ T6038] usb 9-1: USB disconnect, device number 57 [ 426.709791][T16048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 426.712355][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.715714][T16048] vhci_hcd vhci_hcd.0: Device attached [ 426.720349][T16048] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 426.722941][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.726447][T16048] vhci_hcd vhci_hcd.0: Device attached [ 426.735354][T16048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.741039][T16048] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 426.743130][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 426.745570][T16048] vhci_hcd vhci_hcd.0: Device attached [ 426.749707][T16048] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 426.751954][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 426.755588][T16048] vhci_hcd vhci_hcd.0: Device attached [ 426.762742][T16048] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 426.764774][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.768664][T16048] vhci_hcd vhci_hcd.0: Device attached [ 426.776428][T16048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.785407][T16048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.788387][T16048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 426.816673][T16059] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 426.818221][T16057] vhci_hcd: connection closed [ 426.818719][T16059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 426.819010][T16055] vhci_hcd: connection closed [ 426.819115][ T6928] vhci_hcd: stop threads [ 426.819127][ T6928] vhci_hcd: release socket [ 426.819142][ T6928] vhci_hcd: disconnect device [ 426.820334][T16059] vhci_hcd vhci_hcd.0: Device attached [ 426.822973][ T6928] vhci_hcd: stop threads [ 426.834753][ T6928] vhci_hcd: release socket [ 426.836671][ T6928] vhci_hcd: disconnect device [ 426.836929][T16053] vhci_hcd: connection closed [ 426.838984][T16051] vhci_hcd: connection closed [ 426.841883][T16049] vhci_hcd: connection closed [ 426.845160][ T6928] vhci_hcd: stop threads [ 426.848631][ T6928] vhci_hcd: release socket [ 426.854095][ T6928] vhci_hcd: disconnect device [ 426.857780][ T6928] vhci_hcd: stop threads [ 426.859241][ T6928] vhci_hcd: release socket [ 426.861466][ T6928] vhci_hcd: disconnect device [ 426.863106][ T6928] vhci_hcd: stop threads [ 426.864460][ T6928] vhci_hcd: release socket [ 426.867353][ T6928] vhci_hcd: disconnect device [ 426.894721][ T34] vhci_hcd: vhci_device speed not set [ 427.204726][ T6055] usb 42-1: SetAddress Request (2) to port 0 [ 427.206800][ T6055] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 427.225916][T16066] input: syz0 as /devices/virtual/input/input23 [ 427.522619][T16060] vhci_hcd: connection reset by peer [ 427.528283][ T6943] vhci_hcd: stop threads [ 427.530385][ T6943] vhci_hcd: release socket [ 427.538266][ T6943] vhci_hcd: disconnect device [ 427.706926][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 428.380979][T16082] syzkaller0: entered promiscuous mode [ 428.383452][T16082] syzkaller0: entered allmulticast mode [ 428.554230][T16090] FAULT_INJECTION: forcing a failure. [ 428.554230][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 428.558555][T16090] CPU: 0 UID: 0 PID: 16090 Comm: syz.2.2486 Not tainted syzkaller #0 PREEMPT(full) [ 428.558570][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 428.558577][T16090] Call Trace: [ 428.558581][T16090] [ 428.558586][T16090] dump_stack_lvl+0x16c/0x1f0 [ 428.558625][T16090] should_fail_ex+0x512/0x640 [ 428.558646][T16090] ? fs_reclaim_acquire+0xae/0x150 [ 428.558664][T16090] ? tomoyo_encode2+0x100/0x3e0 [ 428.558698][T16090] should_failslab+0xc2/0x120 [ 428.558713][T16090] __kmalloc_noprof+0xd2/0x510 [ 428.558729][T16090] tomoyo_encode2+0x100/0x3e0 [ 428.558746][T16090] tomoyo_encode+0x29/0x50 [ 428.558760][T16090] tomoyo_realpath_from_path+0x18f/0x6e0 [ 428.558777][T16090] ? tomoyo_profile+0x47/0x60 [ 428.558788][T16090] tomoyo_path_number_perm+0x245/0x580 [ 428.558801][T16090] ? tomoyo_path_number_perm+0x237/0x580 [ 428.558815][T16090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.558841][T16090] ? find_held_lock+0x2b/0x80 [ 428.558853][T16090] ? hook_file_ioctl_common+0x145/0x410 [ 428.558871][T16090] ? __fget_files+0x20e/0x3c0 [ 428.558886][T16090] security_file_ioctl_compat+0x9b/0x240 [ 428.558906][T16090] __ia32_compat_sys_ioctl+0xc3/0x370 [ 428.558925][T16090] __do_fast_syscall_32+0x7c/0x3a0 [ 428.558941][T16090] do_fast_syscall_32+0x32/0x80 [ 428.558956][T16090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.558970][T16090] RIP: 0023:0xf710e579 [ 428.558979][T16090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 428.558990][T16090] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 428.559001][T16090] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 428.559007][T16090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.559013][T16090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.559020][T16090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 428.559026][T16090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.559050][T16090] [ 428.559120][T16090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.602341][ T6011] usb 5-1: USB disconnect, device number 38 [ 428.606774][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 428.639564][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.659288][T16093] vhci_hcd vhci_hcd.0: Device attached [ 428.661852][T16097] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 428.664478][T16097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.668913][T16097] vhci_hcd vhci_hcd.0: Device attached [ 428.695274][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.701934][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 428.704399][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.707384][T16093] vhci_hcd vhci_hcd.0: Device attached [ 428.714463][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 428.717255][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.724218][T16093] vhci_hcd vhci_hcd.0: Device attached [ 428.747632][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 428.749716][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.752064][T16093] vhci_hcd vhci_hcd.0: Device attached [ 428.756302][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.759918][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.763554][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.780677][T16108] vhci_hcd: connection closed [ 428.780797][T16112] vhci_hcd: connection closed [ 428.780839][ T6926] vhci_hcd: stop threads [ 428.782996][T16101] vhci_hcd: connection closed [ 428.783686][T16105] vhci_hcd: connection closed [ 428.783916][ T6926] vhci_hcd: release socket [ 428.784111][T16094] vhci_hcd: connection closed [ 428.789777][T16115] bridge0: entered promiscuous mode [ 428.790114][ T6926] vhci_hcd: disconnect device [ 428.791745][T16115] macvlan2: entered promiscuous mode [ 428.793517][ T6926] vhci_hcd: stop threads [ 428.798816][ T6926] vhci_hcd: release socket [ 428.800802][ T6926] vhci_hcd: disconnect device [ 428.802505][ T6926] vhci_hcd: stop threads [ 428.803270][T16115] netlink: 'syz.2.2491': attribute type 10 has an invalid length. [ 428.803809][ T6926] vhci_hcd: release socket [ 428.803855][ T6926] vhci_hcd: disconnect device [ 428.808492][T16115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2491'. [ 428.812432][ T6926] vhci_hcd: stop threads [ 428.813358][T16115] batman_adv: batadv0: Adding interface: vlan1 [ 428.813749][ T6926] vhci_hcd: release socket [ 428.815936][T16115] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.817335][ T6926] vhci_hcd: disconnect device [ 428.834753][ T6926] vhci_hcd: stop threads [ 428.834790][ T59] vhci_hcd: vhci_device speed not set [ 428.835100][T16115] batman_adv: batadv0: Interface activated: vlan1 [ 428.836617][ T6926] vhci_hcd: release socket [ 428.843395][ T6926] vhci_hcd: disconnect device [ 428.851681][T16119] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2493'. [ 428.857831][T16119] netlink: 'syz.0.2493': attribute type 12 has an invalid length. [ 428.860324][T16119] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2493'. [ 428.877989][T16120] FAULT_INJECTION: forcing a failure. [ 428.877989][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 428.881864][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.4.2492 Not tainted syzkaller #0 PREEMPT(full) [ 428.881882][T16120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 428.881889][T16120] Call Trace: [ 428.881894][T16120] [ 428.881899][T16120] dump_stack_lvl+0x16c/0x1f0 [ 428.881918][T16120] should_fail_ex+0x512/0x640 [ 428.881934][T16120] ? fs_reclaim_acquire+0xae/0x150 [ 428.881952][T16120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 428.881979][T16120] should_failslab+0xc2/0x120 [ 428.881995][T16120] __kmalloc_noprof+0xd2/0x510 [ 428.882011][T16120] tomoyo_realpath_from_path+0xc2/0x6e0 [ 428.882028][T16120] ? tomoyo_profile+0x47/0x60 [ 428.882040][T16120] tomoyo_path_number_perm+0x245/0x580 [ 428.882053][T16120] ? tomoyo_path_number_perm+0x237/0x580 [ 428.882067][T16120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.882094][T16120] ? find_held_lock+0x2b/0x80 [ 428.882106][T16120] ? hook_file_ioctl_common+0x145/0x410 [ 428.882124][T16120] ? __fget_files+0x20e/0x3c0 [ 428.882138][T16120] security_file_ioctl_compat+0x9b/0x240 [ 428.882154][T16120] __ia32_compat_sys_ioctl+0xc3/0x370 [ 428.882185][T16120] __do_fast_syscall_32+0x7c/0x3a0 [ 428.882208][T16120] do_fast_syscall_32+0x32/0x80 [ 428.882229][T16120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.882263][T16120] RIP: 0023:0xf709e579 [ 428.882277][T16120] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 428.882292][T16120] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 428.882308][T16120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040182103 [ 428.882317][T16120] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.882326][T16120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.882335][T16120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 428.882345][T16120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.882380][T16120] [ 428.882400][T16120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.040995][T16123] syzkaller0: entered promiscuous mode [ 429.043130][T16123] syzkaller0: entered allmulticast mode [ 429.507243][T16139] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 429.507243][T16139] program syz.4.2499 not setting count and/or reply_len properly [ 430.520389][T16159] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 430.520570][T16163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 430.526126][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 430.530165][T16163] vhci_hcd vhci_hcd.0: Device attached [ 430.537399][T16163] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 430.539872][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.543219][T16163] vhci_hcd vhci_hcd.0: Device attached [ 430.547604][T16163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.551613][T16163] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 430.554499][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 430.558272][T16163] vhci_hcd vhci_hcd.0: Device attached [ 430.562703][T16163] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 430.565385][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 430.571333][T16163] vhci_hcd vhci_hcd.0: Device attached [ 430.578286][T16163] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 430.581199][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 430.584509][T16163] vhci_hcd vhci_hcd.0: Device attached [ 430.589242][T16163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.593496][T16163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.597922][T16163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.652101][T16174] vhci_hcd: connection closed [ 430.652299][T16166] vhci_hcd: connection closed [ 430.653622][T16170] vhci_hcd: connection closed [ 430.654085][T16168] vhci_hcd: connection closed [ 430.657481][T16172] vhci_hcd: connection closed [ 430.658006][ T6972] vhci_hcd: stop threads [ 430.673043][ T6972] vhci_hcd: release socket [ 430.676220][ T6972] vhci_hcd: disconnect device [ 430.679971][ T6972] vhci_hcd: stop threads [ 430.682698][ T6972] vhci_hcd: release socket [ 430.695843][ T6972] vhci_hcd: disconnect device [ 430.698057][ T6972] vhci_hcd: stop threads [ 430.699678][ T6972] vhci_hcd: release socket [ 430.701506][ T6972] vhci_hcd: disconnect device [ 430.703175][ T6972] vhci_hcd: stop threads [ 430.704540][ T6972] vhci_hcd: release socket [ 430.709020][ T6972] vhci_hcd: disconnect device [ 430.710625][ T6972] vhci_hcd: stop threads [ 430.712106][ T6972] vhci_hcd: release socket [ 430.713550][ T6972] vhci_hcd: disconnect device [ 431.222556][T16190] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 431.224633][T16190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 431.278785][T16194] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 431.281675][T16194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.402059][T16194] vhci_hcd vhci_hcd.0: Device attached [ 431.495169][T16190] vhci_hcd vhci_hcd.0: Device attached [ 431.498177][T16198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 431.507417][T16190] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 431.509767][T16190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 431.512482][T16190] vhci_hcd vhci_hcd.0: Device attached [ 431.515929][T16190] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 431.518159][T16190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 431.520712][T16190] vhci_hcd vhci_hcd.0: Device attached [ 431.523664][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 431.527483][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 431.531609][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 431.536580][T16194] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 431.538985][T16194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 431.541488][T16194] vhci_hcd vhci_hcd.0: Device attached [ 431.545293][T16203] vhci_hcd: connection closed [ 431.545502][ T6926] vhci_hcd: stop threads [ 431.545610][T16200] vhci_hcd: connection closed [ 431.547317][ T6926] vhci_hcd: release socket [ 431.547373][ T6926] vhci_hcd: disconnect device [ 431.549319][T16201] vhci_hcd: connection closed [ 431.554136][T16195] vhci_hcd: connection closed [ 431.555631][ T6926] vhci_hcd: stop threads [ 431.556535][T16191] vhci_hcd: connection closed [ 431.557643][ T6926] vhci_hcd: release socket [ 431.557672][ T6926] vhci_hcd: disconnect device [ 431.565720][ T6926] vhci_hcd: stop threads [ 431.567118][ T6926] vhci_hcd: release socket [ 431.569029][ T6926] vhci_hcd: disconnect device [ 431.571389][ T6926] vhci_hcd: stop threads [ 431.572982][ T6926] vhci_hcd: release socket [ 431.574856][ T6926] vhci_hcd: disconnect device [ 431.576667][ T6926] vhci_hcd: stop threads [ 431.578284][ T6926] vhci_hcd: release socket [ 431.580034][ T6926] vhci_hcd: disconnect device [ 431.584971][ T34] vhci_hcd: vhci_device speed not set [ 432.304834][ T6055] usb 42-1: device descriptor read/8, error -110 [ 432.421226][T16231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2523'. [ 432.761291][ T6055] usb usb42-port1: attempt power cycle [ 433.339531][ T6055] usb usb42-port1: unable to enumerate USB device [ 434.853770][T16291] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 434.856345][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 434.863415][T16291] vhci_hcd vhci_hcd.0: Device attached [ 434.868113][T16291] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 434.870856][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.874021][T16291] vhci_hcd vhci_hcd.0: Device attached [ 434.877596][T16291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.884402][T16291] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 434.887294][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 434.894151][T16291] vhci_hcd vhci_hcd.0: Device attached [ 434.909556][T16291] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 434.912402][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 434.916659][T16291] vhci_hcd vhci_hcd.0: Device attached [ 434.924003][T16291] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 434.926929][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 434.931067][T16291] vhci_hcd vhci_hcd.0: Device attached [ 434.934946][T16291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.939347][T16291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.943624][T16291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.966054][T16301] vhci_hcd: connection closed [ 434.966393][T16299] vhci_hcd: connection closed [ 434.967951][ T6933] vhci_hcd: stop threads [ 434.972362][T16297] vhci_hcd: connection closed [ 434.972513][ T6933] vhci_hcd: release socket [ 434.973240][T16292] vhci_hcd: connection closed [ 434.974334][T16295] vhci_hcd: connection closed [ 434.974494][ T6933] vhci_hcd: disconnect device [ 434.981599][ T6933] vhci_hcd: stop threads [ 434.983283][ T6933] vhci_hcd: release socket [ 434.985280][ T6933] vhci_hcd: disconnect device [ 434.987828][ T6933] vhci_hcd: stop threads [ 434.989681][ T6933] vhci_hcd: release socket [ 434.991755][ T6933] vhci_hcd: disconnect device [ 434.994068][ T6933] vhci_hcd: stop threads [ 434.996630][ T6933] vhci_hcd: release socket [ 434.998218][ T6933] vhci_hcd: disconnect device [ 435.000000][ T6933] vhci_hcd: stop threads [ 435.001474][ T6933] vhci_hcd: release socket [ 435.002946][ T6933] vhci_hcd: disconnect device [ 435.045221][ T34] vhci_hcd: vhci_device speed not set [ 435.331864][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2540'. [ 435.578353][T16310] netlink: 'syz.4.2540': attribute type 13 has an invalid length. [ 435.675643][ T10] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 435.868123][ T10] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 435.875531][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 435.879599][ T10] usb 8-1: can't read configurations, error -61 [ 436.204825][ T10] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 436.748821][ T10] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 436.753042][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 436.756069][ T10] usb 8-1: can't read configurations, error -61 [ 436.758724][ T10] usb usb8-port1: attempt power cycle [ 437.008892][T16329] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 437.134839][ T10] usb 8-1: new full-speed USB device number 66 using dummy_hcd [ 437.168531][ T10] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 437.179476][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 437.193650][ T10] usb 8-1: can't read configurations, error -61 [ 437.289940][ T5980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.294135][ T5980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.300006][ T5980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.304399][ T5980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.307431][ T5980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.354834][ T10] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 437.420469][ T10] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 437.429909][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 437.449132][ T10] usb 8-1: can't read configurations, error -61 [ 437.461110][ T10] usb usb8-port1: unable to enumerate USB device [ 437.520459][T16339] FAULT_INJECTION: forcing a failure. [ 437.520459][T16339] name failslab, interval 1, probability 0, space 0, times 0 [ 437.522298][T16333] chnl_net:caif_netlink_parms(): no params data found [ 437.524510][T16339] CPU: 1 UID: 0 PID: 16339 Comm: syz.3.2551 Not tainted syzkaller #0 PREEMPT(full) [ 437.524525][T16339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.524532][T16339] Call Trace: [ 437.524536][T16339] [ 437.524542][T16339] dump_stack_lvl+0x16c/0x1f0 [ 437.524560][T16339] should_fail_ex+0x512/0x640 [ 437.524575][T16339] ? __kmalloc_noprof+0xbf/0x510 [ 437.524600][T16339] ? rds_message_alloc+0x42/0x230 [ 437.524616][T16339] should_failslab+0xc2/0x120 [ 437.524631][T16339] __kmalloc_noprof+0xd2/0x510 [ 437.524643][T16339] ? rds_sendmsg+0x747/0x31f0 [ 437.524660][T16339] rds_message_alloc+0x42/0x230 [ 437.524673][T16339] rds_sendmsg+0xb5d/0x31f0 [ 437.524694][T16339] ? __pfx_rds_sendmsg+0x10/0x10 [ 437.524709][T16339] ? aa_sk_perm+0x2f4/0xb10 [ 437.524724][T16339] ? __pfx_aa_sk_perm+0x10/0x10 [ 437.524742][T16339] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 437.524755][T16339] ? ____sys_sendmsg+0xa95/0xc70 [ 437.524766][T16339] ____sys_sendmsg+0xa95/0xc70 [ 437.524777][T16339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.524787][T16339] ? get_compat_msghdr+0x11a/0x170 [ 437.524807][T16339] ___sys_sendmsg+0x134/0x1d0 [ 437.524822][T16339] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.524843][T16339] ? find_held_lock+0x2b/0x80 [ 437.524863][T16339] __sys_sendmsg+0x16d/0x220 [ 437.524878][T16339] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.524898][T16339] ? rcu_is_watching+0x12/0xc0 [ 437.524912][T16339] __do_fast_syscall_32+0x7c/0x3a0 [ 437.524929][T16339] do_fast_syscall_32+0x32/0x80 [ 437.524943][T16339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.524957][T16339] RIP: 0023:0xf7f47579 [ 437.524966][T16339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 437.524977][T16339] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 437.524988][T16339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 437.524994][T16339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.525001][T16339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.525007][T16339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 437.525013][T16339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.525027][T16339] [ 437.594925][T16341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 437.616863][T16341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.622207][T16341] vhci_hcd vhci_hcd.0: Device attached [ 437.631284][T16341] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 437.633393][T16341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.636362][T16341] vhci_hcd vhci_hcd.0: Device attached [ 437.643500][T16341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.649639][T16341] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 437.651770][T16341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 437.654237][T16341] vhci_hcd vhci_hcd.0: Device attached [ 437.667449][T16341] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 437.669779][T16341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 437.672436][T16341] vhci_hcd vhci_hcd.0: Device attached [ 437.677877][T16341] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 437.680398][T16341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.683253][T16341] vhci_hcd vhci_hcd.0: Device attached [ 437.691502][T16341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.698627][T16341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.703839][T16341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.795009][ T6055] vhci_hcd: vhci_device speed not set [ 437.803080][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.809286][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.813417][T16333] bridge_slave_0: entered allmulticast mode [ 437.824142][T16333] bridge_slave_0: entered promiscuous mode [ 437.839247][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.848271][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.851106][T16333] bridge_slave_1: entered allmulticast mode [ 437.854842][ T6055] usb 43-1: new high-speed USB device number 12 using vhci_hcd [ 437.859940][T16333] bridge_slave_1: entered promiscuous mode [ 437.876346][T16350] vhci_hcd: connection closed [ 437.876543][T16348] vhci_hcd: connection closed [ 437.880082][T16346] vhci_hcd: connection closed [ 437.882675][T16342] vhci_hcd: connection reset by peer [ 437.888299][T16344] vhci_hcd: connection closed [ 437.888831][ T6926] vhci_hcd: stop threads [ 437.893102][ T6926] vhci_hcd: release socket [ 437.903773][ T6926] vhci_hcd: disconnect device [ 437.914233][ T6926] vhci_hcd: stop threads [ 437.919202][ T6926] vhci_hcd: release socket [ 437.921117][ T6926] vhci_hcd: disconnect device [ 437.933295][ T6926] vhci_hcd: stop threads [ 437.935340][ T6926] vhci_hcd: release socket [ 437.937538][ T6926] vhci_hcd: disconnect device [ 437.939629][ T6926] vhci_hcd: stop threads [ 437.941558][ T6926] vhci_hcd: release socket [ 437.947292][ T6926] vhci_hcd: disconnect device [ 437.950627][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 437.953898][ T6926] vhci_hcd: stop threads [ 437.956873][ T6926] vhci_hcd: release socket [ 437.958492][ T6926] vhci_hcd: disconnect device [ 437.969391][T16365] FAULT_INJECTION: forcing a failure. [ 437.969391][T16365] name failslab, interval 1, probability 0, space 0, times 0 [ 437.973496][T16365] CPU: 3 UID: 0 PID: 16365 Comm: syz.4.2556 Not tainted syzkaller #0 PREEMPT(full) [ 437.973512][T16365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.973520][T16365] Call Trace: [ 437.973524][T16365] [ 437.973529][T16365] dump_stack_lvl+0x16c/0x1f0 [ 437.973548][T16365] should_fail_ex+0x512/0x640 [ 437.973563][T16365] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 437.973578][T16365] should_failslab+0xc2/0x120 [ 437.973595][T16365] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 437.973609][T16365] ? __alloc_skb+0x2b2/0x380 [ 437.973623][T16365] ? rcu_is_watching+0x12/0xc0 [ 437.973635][T16365] __alloc_skb+0x2b2/0x380 [ 437.973648][T16365] ? __pfx___alloc_skb+0x10/0x10 [ 437.973663][T16365] ? find_held_lock+0x2b/0x80 [ 437.973676][T16365] alloc_skb_with_frags+0xe0/0x860 [ 437.973695][T16365] sock_alloc_send_pskb+0x7fb/0x990 [ 437.973709][T16365] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 437.973728][T16365] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 437.973741][T16365] ? find_held_lock+0x2b/0x80 [ 437.973752][T16365] ? dev_get_by_index+0x17c/0x380 [ 437.973769][T16365] packet_sendmsg+0x2054/0x5850 [ 437.973789][T16365] ? __pfx___might_resched+0x10/0x10 [ 437.973803][T16365] ? aa_sk_perm+0x2f4/0xb10 [ 437.973819][T16365] ? __pfx_packet_sendmsg+0x10/0x10 [ 437.973830][T16365] ? __pfx_aa_sk_perm+0x10/0x10 [ 437.973843][T16365] ? __might_fault+0xe3/0x190 [ 437.973859][T16365] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 437.973873][T16365] __sys_sendto+0x4a0/0x520 [ 437.973886][T16365] ? __pfx___sys_sendto+0x10/0x10 [ 437.973909][T16365] ? ksys_write+0x1ac/0x250 [ 437.973922][T16365] ? __pfx_ksys_write+0x10/0x10 [ 437.973936][T16365] __ia32_sys_sendto+0xdd/0x1b0 [ 437.973948][T16365] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.973962][T16365] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 437.973977][T16365] __do_fast_syscall_32+0x7c/0x3a0 [ 437.973994][T16365] do_fast_syscall_32+0x32/0x80 [ 437.974008][T16365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.974022][T16365] RIP: 0023:0xf709e579 [ 437.974031][T16365] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 437.974041][T16365] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 437.974052][T16365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 437.974059][T16365] RDX: 00000000000000ac RSI: 0000000000000094 RDI: 0000000080000140 [ 437.974070][T16365] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 437.974077][T16365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 437.974083][T16365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.974096][T16365] [ 438.081305][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.086531][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.137626][T16333] team0: Port device team_slave_0 added [ 438.139883][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 438.141183][T16333] team0: Port device team_slave_1 added [ 438.190661][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.193542][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.205401][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.214910][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.218067][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.229692][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.313440][T16333] hsr_slave_0: entered promiscuous mode [ 438.316523][T16333] hsr_slave_1: entered promiscuous mode [ 438.318780][T16333] debugfs: 'hsr0' already exists in 'hsr' [ 438.320791][T16333] Cannot create hsr debugfs directory [ 438.448453][T16333] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.532191][T16376] FAULT_INJECTION: forcing a failure. [ 438.532191][T16376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.536880][T16376] CPU: 3 UID: 0 PID: 16376 Comm: syz.0.2560 Not tainted syzkaller #0 PREEMPT(full) [ 438.536897][T16376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.536905][T16376] Call Trace: [ 438.536910][T16376] [ 438.536915][T16376] dump_stack_lvl+0x16c/0x1f0 [ 438.536936][T16376] should_fail_ex+0x512/0x640 [ 438.536957][T16376] _copy_from_user+0x2e/0xd0 [ 438.536977][T16376] memdup_user+0x6b/0xe0 [ 438.537002][T16376] strndup_user+0x78/0xe0 [ 438.537017][T16376] __ia32_sys_mount+0x137/0x310 [ 438.537034][T16376] ? __pfx___ia32_sys_mount+0x10/0x10 [ 438.537051][T16376] ? rcu_is_watching+0x12/0xc0 [ 438.537067][T16376] __do_fast_syscall_32+0x7c/0x3a0 [ 438.537093][T16376] do_fast_syscall_32+0x32/0x80 [ 438.537110][T16376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.537125][T16376] RIP: 0023:0xf708e579 [ 438.537135][T16376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.537148][T16376] RSP: 002b:00000000f547e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 438.537161][T16376] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 438.537168][T16376] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 00000000800003c0 [ 438.537176][T16376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.537183][T16376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.537190][T16376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.537204][T16376] [ 438.600142][T16333] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.668246][T16333] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.764933][ T6024] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 438.884453][T16333] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.917365][ T6024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.921903][ T6024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.929678][ T6024] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.941490][ T6024] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.950558][ T6024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.970167][ T6024] usb 8-1: config 0 descriptor?? [ 439.034778][ T10] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 439.164554][T16333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.175688][T16333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.191966][T16333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.199952][T16333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.282211][T16333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.297216][T16333] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.312636][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.314988][ T6972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.319664][ T10] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 439.324867][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 439.329029][ T10] usb 9-1: can't read configurations, error -61 [ 439.330895][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.333955][ T6935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.344864][T14590] Bluetooth: hci1: command tx timeout [ 439.415300][ T6059] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 439.423560][ T6024] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 439.480465][ T10] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 439.558920][T16333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.590921][ T6059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.596447][ T6059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.600692][ T6059] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 439.606101][ T6059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.611682][ T6059] usb 5-1: config 0 descriptor?? [ 439.613130][T16333] veth0_vlan: entered promiscuous mode [ 439.624281][T16333] veth1_vlan: entered promiscuous mode [ 439.652628][T16333] veth0_macvtap: entered promiscuous mode [ 439.662276][T16333] veth1_macvtap: entered promiscuous mode [ 439.676962][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.680761][T16333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.680901][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.691566][T16333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.693434][ T10] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 439.704072][T16378] tmpfs: Bad value for 'mpol' [ 439.704532][ T6933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.709193][ T6933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.715481][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 439.718697][ T10] usb 9-1: can't read configurations, error -61 [ 439.722076][ T6933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.728344][ T10] usb usb9-port1: attempt power cycle [ 439.728641][ T6933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.737054][ T6514] usb 8-1: USB disconnect, device number 68 [ 439.809819][ T6972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.812563][ T6972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.836462][ T6935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.838907][ T6935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.148066][ T10] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 440.196487][ T10] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 440.200918][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 440.203727][ T10] usb 9-1: can't read configurations, error -61 [ 440.356591][ T10] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 440.380253][ T10] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 440.384465][ T10] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 440.386928][ T10] usb 9-1: can't read configurations, error -61 [ 440.389063][ T10] usb usb9-port1: unable to enumerate USB device [ 440.404040][T16410] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 440.674730][ T6038] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 440.826644][ T6038] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.829972][ T6038] usb 7-1: config 0 interface 0 has no altsetting 0 [ 440.834507][ T6038] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.837532][ T6038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.840113][ T6038] usb 7-1: Product: syz [ 440.841477][ T6038] usb 7-1: Manufacturer: syz [ 440.842967][ T6038] usb 7-1: SerialNumber: syz [ 440.846053][ T6038] usb 7-1: config 0 descriptor?? [ 440.853056][ T6038] usb 7-1: selecting invalid altsetting 0 [ 441.296130][T16414] md2: using deprecated bitmap file support [ 441.299478][T16414] md2: error: failed to get bitmap file [ 441.369824][T16417] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 441.371931][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.375740][T16417] vhci_hcd vhci_hcd.0: Device attached [ 441.390829][T16417] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 441.393483][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.397347][T16417] vhci_hcd vhci_hcd.0: Device attached [ 441.400779][T16417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.414891][T14590] Bluetooth: hci1: command tx timeout [ 441.418041][T16417] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 441.420121][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 441.422524][T16417] vhci_hcd vhci_hcd.0: Device attached [ 441.427132][T16428] fuse: Bad value for 'fd' [ 441.427516][T16417] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 441.430808][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 441.434774][T16417] vhci_hcd vhci_hcd.0: Device attached [ 441.445790][T16417] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 441.448177][T16417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.450992][T16417] vhci_hcd vhci_hcd.0: Device attached [ 441.456792][T16417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.460027][T16417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.464251][T16417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.483527][T16429] vhci_hcd: connection closed [ 441.483611][T16431] vhci_hcd: connection closed [ 441.483752][ T6935] vhci_hcd: stop threads [ 441.489318][T16425] vhci_hcd: connection closed [ 441.489704][T16420] vhci_hcd: connection closed [ 441.490240][ T6935] vhci_hcd: release socket [ 441.495245][T16423] vhci_hcd: connection closed [ 441.496304][ T6935] vhci_hcd: disconnect device [ 441.500271][ T6935] vhci_hcd: stop threads [ 441.501936][ T6935] vhci_hcd: release socket [ 441.504229][ T6935] vhci_hcd: disconnect device [ 441.508658][ T6935] vhci_hcd: stop threads [ 441.510614][ T6935] vhci_hcd: release socket [ 441.513681][ T6935] vhci_hcd: disconnect device [ 441.516408][ T6935] vhci_hcd: stop threads [ 441.518285][ T6935] vhci_hcd: release socket [ 441.520240][ T6935] vhci_hcd: disconnect device [ 441.522602][ T6935] vhci_hcd: stop threads [ 441.524423][ T6935] vhci_hcd: release socket [ 441.527460][ T6935] vhci_hcd: disconnect device [ 441.554877][ T29] vhci_hcd: vhci_device speed not set [ 441.564565][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 442.040256][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 442.045508][T16445] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2575'. [ 442.048496][T16445] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2575'. [ 442.514923][ T6059] usbhid 5-1:0.0: can't add hid device: -71 [ 442.525724][ T6059] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 442.530615][ T6059] usb 5-1: USB disconnect, device number 39 [ 442.564278][T16452] syzkaller0: entered promiscuous mode [ 442.568854][T16452] syzkaller0: entered allmulticast mode [ 442.970027][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 442.973761][T16454] FAULT_INJECTION: forcing a failure. [ 442.973761][T16454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.978665][T16454] CPU: 2 UID: 0 PID: 16454 Comm: syz.3.2578 Not tainted syzkaller #0 PREEMPT(full) [ 442.978689][T16454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 442.978701][T16454] Call Trace: [ 442.978708][T16454] [ 442.978716][T16454] dump_stack_lvl+0x16c/0x1f0 [ 442.978744][T16454] should_fail_ex+0x512/0x640 [ 442.978771][T16454] _copy_from_iter+0x29f/0x1720 [ 442.978799][T16454] ? __alloc_skb+0x200/0x380 [ 442.978819][T16454] ? __pfx__copy_from_iter+0x10/0x10 [ 442.978853][T16454] ? __pfx___might_resched+0x10/0x10 [ 442.978878][T16454] netlink_sendmsg+0x829/0xdd0 [ 442.978906][T16454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.978932][T16454] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 442.978956][T16454] ____sys_sendmsg+0xa95/0xc70 [ 442.978975][T16454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.978991][T16454] ? get_compat_msghdr+0x11a/0x170 [ 442.979020][T16454] ___sys_sendmsg+0x134/0x1d0 [ 442.979042][T16454] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.979072][T16454] ? find_held_lock+0x2b/0x80 [ 442.979099][T16454] __sys_sendmsg+0x16d/0x220 [ 442.979118][T16454] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.979145][T16454] ? rcu_is_watching+0x12/0xc0 [ 442.979166][T16454] __do_fast_syscall_32+0x7c/0x3a0 [ 442.979185][T16454] do_fast_syscall_32+0x32/0x80 [ 442.979200][T16454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.979214][T16454] RIP: 0023:0xf7f47579 [ 442.979224][T16454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 442.979235][T16454] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 442.979245][T16454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 442.979253][T16454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.979259][T16454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.979265][T16454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 442.979272][T16454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.979284][T16454] [ 443.044822][ T6055] vhci_hcd: vhci_device speed not set [ 443.310394][ T34] usb 7-1: USB disconnect, device number 56 [ 443.412448][T16467] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 443.415441][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 443.421278][T16467] vhci_hcd vhci_hcd.0: Device attached [ 443.427070][T16467] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 443.429854][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.433427][T16467] vhci_hcd vhci_hcd.0: Device attached [ 443.438259][T16467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.443916][T16467] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 443.446205][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 443.449240][T16467] vhci_hcd vhci_hcd.0: Device attached [ 443.452598][T16467] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 443.455018][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 443.457804][T16467] vhci_hcd vhci_hcd.0: Device attached [ 443.460794][T16467] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 443.463115][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 443.466678][T16467] vhci_hcd vhci_hcd.0: Device attached [ 443.470502][T16467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.474424][T16467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.482265][T16467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.495225][T14590] Bluetooth: hci1: command tx timeout [ 443.508428][T16478] vhci_hcd: connection closed [ 443.508452][T16476] vhci_hcd: connection closed [ 443.510076][T16481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.510271][ T6972] vhci_hcd: stop threads [ 443.512340][ T6972] vhci_hcd: release socket [ 443.517577][T16481] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 443.522135][ T6972] vhci_hcd: disconnect device [ 443.528755][T16474] vhci_hcd: connection closed [ 443.528867][T16470] vhci_hcd: connection closed [ 443.530513][T16468] vhci_hcd: connection closed [ 443.532663][ T6972] vhci_hcd: stop threads [ 443.537749][ T6972] vhci_hcd: release socket [ 443.539770][ T6972] vhci_hcd: disconnect device [ 443.541911][ T6972] vhci_hcd: stop threads [ 443.543813][ T6972] vhci_hcd: release socket [ 443.546605][ T6972] vhci_hcd: disconnect device [ 443.548941][ T6972] vhci_hcd: stop threads [ 443.550670][ T6972] vhci_hcd: release socket [ 443.552867][ T6972] vhci_hcd: disconnect device [ 443.557030][ T6972] vhci_hcd: stop threads [ 443.558427][ T6972] vhci_hcd: release socket [ 443.559919][ T6972] vhci_hcd: disconnect device [ 443.583056][ T6514] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 443.605240][ T6059] vhci_hcd: vhci_device speed not set [ 443.735653][T16485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2586'. [ 443.752462][ T6514] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 443.767416][ T6514] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 443.770841][ T6514] usb 9-1: can't read configurations, error -61 [ 443.831146][T16485] netlink: 'syz.2.2586': attribute type 13 has an invalid length. [ 443.914890][ T6514] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 444.145990][ T6514] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 444.219103][ T6514] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 444.226960][ T6514] usb 9-1: can't read configurations, error -61 [ 444.234444][ T6514] usb usb9-port1: attempt power cycle [ 444.610382][T14590] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 444.610857][ T6514] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 444.635732][ T6514] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 444.641720][ T6514] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 444.646176][ T6514] usb 9-1: can't read configurations, error -61 [ 444.776498][ T6514] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 444.801495][ T6514] usb 9-1: too many configurations: 145, using maximum allowed: 8 [ 444.813570][ T6514] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 444.818013][ T6514] usb 9-1: can't read configurations, error -61 [ 444.820888][ T6514] usb usb9-port1: unable to enumerate USB device [ 444.890674][T16508] syzkaller0: entered promiscuous mode [ 444.893030][T16508] syzkaller0: entered allmulticast mode [ 445.039113][T16512] FAULT_INJECTION: forcing a failure. [ 445.039113][T16512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.044510][T16512] CPU: 3 UID: 0 PID: 16512 Comm: syz.2.2594 Not tainted syzkaller #0 PREEMPT(full) [ 445.044535][T16512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.044547][T16512] Call Trace: [ 445.044555][T16512] [ 445.044564][T16512] dump_stack_lvl+0x16c/0x1f0 [ 445.044606][T16512] should_fail_ex+0x512/0x640 [ 445.044636][T16512] _copy_from_iter+0x29f/0x1720 [ 445.044667][T16512] ? __alloc_skb+0x200/0x380 [ 445.044688][T16512] ? __pfx__copy_from_iter+0x10/0x10 [ 445.044717][T16512] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 445.044747][T16512] netlink_sendmsg+0x829/0xdd0 [ 445.044773][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.044805][T16512] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 445.044828][T16512] ____sys_sendmsg+0xa95/0xc70 [ 445.044847][T16512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.044863][T16512] ? get_compat_msghdr+0x11a/0x170 [ 445.044894][T16512] ___sys_sendmsg+0x134/0x1d0 [ 445.044921][T16512] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.044954][T16512] ? find_held_lock+0x2b/0x80 [ 445.044988][T16512] __sys_sendmsg+0x16d/0x220 [ 445.045012][T16512] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.045044][T16512] ? rcu_is_watching+0x12/0xc0 [ 445.045066][T16512] __do_fast_syscall_32+0x7c/0x3a0 [ 445.045091][T16512] do_fast_syscall_32+0x32/0x80 [ 445.045115][T16512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.045136][T16512] RIP: 0023:0xf7f56579 [ 445.045151][T16512] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.045167][T16512] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 445.045184][T16512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 445.045195][T16512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.045205][T16512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.045215][T16512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 445.045225][T16512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.045247][T16512] [ 445.237502][T16517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 445.239670][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.242776][T16517] vhci_hcd vhci_hcd.0: Device attached [ 445.247169][T16517] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 445.249193][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.251685][T16517] vhci_hcd vhci_hcd.0: Device attached [ 445.254444][T16517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.261730][T16517] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 445.264504][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.268220][T16517] vhci_hcd vhci_hcd.0: Device attached [ 445.273144][T16517] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 445.275831][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.279554][T16517] vhci_hcd vhci_hcd.0: Device attached [ 445.283936][T16517] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 445.286778][T16517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 445.290202][T16517] vhci_hcd vhci_hcd.0: Device attached [ 445.294979][T16517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.299105][T16517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.303376][T16517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.332955][T16520] vhci_hcd: connection closed [ 445.340580][ T6972] vhci_hcd: stop threads [ 445.344442][ T6972] vhci_hcd: release socket [ 445.348579][T16518] vhci_hcd: connection closed [ 445.349037][ T6972] vhci_hcd: disconnect device [ 445.353200][ T6972] vhci_hcd: stop threads [ 445.359328][ T6972] vhci_hcd: release socket [ 445.361229][ T6972] vhci_hcd: disconnect device [ 445.369354][T16522] vhci_hcd: connection closed [ 445.369698][T16526] vhci_hcd: connection closed [ 445.373462][T16524] vhci_hcd: connection closed [ 445.379756][ T6972] vhci_hcd: stop threads [ 445.382612][ T6972] vhci_hcd: release socket [ 445.384106][ T6972] vhci_hcd: disconnect device [ 445.395181][ T6972] vhci_hcd: stop threads [ 445.396719][ T6972] vhci_hcd: release socket [ 445.398306][ T6972] vhci_hcd: disconnect device [ 445.604767][T14590] Bluetooth: hci1: command tx timeout [ 445.825974][ T6972] vhci_hcd: stop threads [ 445.827483][ T6972] vhci_hcd: release socket [ 445.828956][ T6972] vhci_hcd: disconnect device [ 446.139759][T16537] FAULT_INJECTION: forcing a failure. [ 446.139759][T16537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.144049][T16537] CPU: 1 UID: 0 PID: 16537 Comm: syz.3.2598 Not tainted syzkaller #0 PREEMPT(full) [ 446.144082][T16537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.144090][T16537] Call Trace: [ 446.144097][T16537] [ 446.144103][T16537] dump_stack_lvl+0x16c/0x1f0 [ 446.144121][T16537] should_fail_ex+0x512/0x640 [ 446.144139][T16537] _copy_from_user+0x2e/0xd0 [ 446.144157][T16537] get_compat_msghdr+0xa7/0x170 [ 446.144172][T16537] ? __pfx_get_compat_msghdr+0x10/0x10 [ 446.144190][T16537] ___sys_sendmsg+0x1ae/0x1d0 [ 446.144206][T16537] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.144227][T16537] ? find_held_lock+0x2b/0x80 [ 446.144247][T16537] __sys_sendmsg+0x16d/0x220 [ 446.144262][T16537] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.144282][T16537] ? rcu_is_watching+0x12/0xc0 [ 446.144296][T16537] __do_fast_syscall_32+0x7c/0x3a0 [ 446.144312][T16537] do_fast_syscall_32+0x32/0x80 [ 446.144327][T16537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.144341][T16537] RIP: 0023:0xf7f47579 [ 446.144350][T16537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 446.144361][T16537] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 446.144372][T16537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 446.144379][T16537] RDX: 0000000024044884 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.144385][T16537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.144392][T16537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 446.144398][T16537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.144411][T16537] [ 446.514816][ T5975] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 446.672020][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.675854][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.679276][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 446.684951][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.689094][ T5975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.692145][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.697204][ T5975] usb 7-1: config 0 descriptor?? [ 446.966458][T16547] syzkaller0: entered promiscuous mode [ 446.968665][T16547] syzkaller0: entered allmulticast mode [ 447.327344][ T5975] usbhid 7-1:0.0: can't add hid device: -71 [ 447.332580][ T5975] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 447.339349][ T5975] usb 7-1: USB disconnect, device number 57 [ 447.474967][ T24] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 447.626176][ T24] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 447.631582][ T24] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 447.634911][ T24] usb 8-1: can't read configurations, error -61 [ 447.774795][ T24] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 447.966654][ T24] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 447.970952][ T24] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 447.973390][ T24] usb 8-1: can't read configurations, error -61 [ 447.979892][ T24] usb usb8-port1: attempt power cycle [ 447.984201][T16566] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 447.987016][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 447.989088][T16565] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 447.991369][T16566] vhci_hcd vhci_hcd.0: Device attached [ 447.999185][T16566] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 448.001333][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.003806][T16566] vhci_hcd vhci_hcd.0: Device attached [ 448.006749][T16566] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.010295][T16566] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 448.012440][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 448.015164][T16566] vhci_hcd vhci_hcd.0: Device attached [ 448.018457][T16566] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 448.020498][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 448.023059][T16566] vhci_hcd vhci_hcd.0: Device attached [ 448.027618][T16566] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 448.029827][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 448.035299][T16566] vhci_hcd vhci_hcd.0: Device attached [ 448.038007][T16566] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.041166][T16566] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.044366][T16566] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.063873][T16577] vhci_hcd: connection closed [ 448.064084][ T6928] vhci_hcd: stop threads [ 448.067286][T16574] vhci_hcd: connection closed [ 448.068777][ T6928] vhci_hcd: release socket [ 448.069356][T16572] vhci_hcd: connection closed [ 448.070392][ T6928] vhci_hcd: disconnect device [ 448.072696][T16567] vhci_hcd: connection closed [ 448.073886][T16570] vhci_hcd: connection closed [ 448.075280][ T6928] vhci_hcd: stop threads [ 448.075289][ T6928] vhci_hcd: release socket [ 448.075297][ T6928] vhci_hcd: disconnect device [ 448.105510][ T6928] vhci_hcd: stop threads [ 448.106964][ T6928] vhci_hcd: release socket [ 448.108455][ T6928] vhci_hcd: disconnect device [ 448.111386][ T6928] vhci_hcd: stop threads [ 448.112753][ T6928] vhci_hcd: release socket [ 448.116200][ T6928] vhci_hcd: disconnect device [ 448.117867][ T6928] vhci_hcd: stop threads [ 448.119250][ T6928] vhci_hcd: release socket [ 448.120728][ T6928] vhci_hcd: disconnect device [ 448.153194][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2607'. [ 448.175317][ T6059] vhci_hcd: vhci_device speed not set [ 448.334874][ T24] usb 8-1: new full-speed USB device number 71 using dummy_hcd [ 448.355902][ T24] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 448.360225][ T24] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 448.363263][ T24] usb 8-1: can't read configurations, error -61 [ 448.495698][ T24] usb 8-1: new full-speed USB device number 72 using dummy_hcd [ 448.517608][ T24] usb 8-1: too many configurations: 145, using maximum allowed: 8 [ 448.522155][ T24] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 448.524958][ T24] usb 8-1: can't read configurations, error -61 [ 448.527574][ T24] usb usb8-port1: unable to enumerate USB device [ 448.580999][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 448.619197][T16588] tipc: Enabling of bearer rejected, failed to enable media [ 448.622297][T16588] syzkaller0: entered promiscuous mode [ 448.624027][T16588] syzkaller0: entered allmulticast mode [ 448.775929][T16590] tipc: Started in network mode [ 448.777523][T16590] tipc: Node identity aa55920c3df1, cluster identity 4711 [ 448.780222][T16590] tipc: Enabled bearer , priority 0 [ 448.783926][T16590] syzkaller0: entered promiscuous mode [ 448.788475][T16590] syzkaller0: entered allmulticast mode [ 448.801062][T16590] syzkaller0: mtu greater than device maximum [ 448.803922][T16589] tipc: Resetting bearer [ 448.819061][T16589] tipc: Disabling bearer [ 448.881658][T16592] tipc: Enabled bearer , priority 0 [ 448.884143][T16592] syzkaller0: entered promiscuous mode [ 448.886181][T16592] syzkaller0: entered allmulticast mode [ 448.897218][T16592] FAULT_INJECTION: forcing a failure. [ 448.897218][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.902162][T16592] CPU: 2 UID: 0 PID: 16592 Comm: syz.2.2614 Not tainted syzkaller #0 PREEMPT(full) [ 448.902178][T16592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 448.902187][T16592] Call Trace: [ 448.902192][T16592] [ 448.902198][T16592] dump_stack_lvl+0x16c/0x1f0 [ 448.902217][T16592] should_fail_ex+0x512/0x640 [ 448.902235][T16592] _copy_from_user+0x2e/0xd0 [ 448.902253][T16592] get_user_ifreq+0x116/0x1c0 [ 448.902270][T16592] sock_do_ioctl+0x16b/0x280 [ 448.902286][T16592] ? __pfx_sock_do_ioctl+0x10/0x10 [ 448.902303][T16592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.902322][T16592] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 448.902341][T16592] compat_sock_ioctl+0x301/0x730 [ 448.902354][T16592] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 448.902364][T16592] ? hook_file_ioctl_common+0x145/0x410 [ 448.902382][T16592] ? __fget_files+0x20e/0x3c0 [ 448.902397][T16592] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 448.902407][T16592] __ia32_compat_sys_ioctl+0x242/0x370 [ 448.902426][T16592] __do_fast_syscall_32+0x7c/0x3a0 [ 448.902442][T16592] do_fast_syscall_32+0x32/0x80 [ 448.902457][T16592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.902471][T16592] RIP: 0023:0xf7f56579 [ 448.902481][T16592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 448.902509][T16592] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 448.902520][T16592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 448.902527][T16592] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.902533][T16592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.902539][T16592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 448.902546][T16592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.902559][T16592] [ 448.903394][T16591] tipc: Resetting bearer [ 448.977408][T16591] tipc: Disabling bearer [ 449.456817][T16598] fuse: Unknown parameter 'uer_id' [ 449.484356][T16600] syzkaller1: entered promiscuous mode [ 449.487912][T16600] syzkaller1: entered allmulticast mode [ 449.495978][T16600] FAULT_INJECTION: forcing a failure. [ 449.495978][T16600] name failslab, interval 1, probability 0, space 0, times 0 [ 449.500186][T16600] CPU: 3 UID: 0 PID: 16600 Comm: syz.2.2617 Not tainted syzkaller #0 PREEMPT(full) [ 449.500201][T16600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.500209][T16600] Call Trace: [ 449.500213][T16600] [ 449.500218][T16600] dump_stack_lvl+0x16c/0x1f0 [ 449.500236][T16600] should_fail_ex+0x512/0x640 [ 449.500252][T16600] ? __kmalloc_noprof+0xbf/0x510 [ 449.500266][T16600] ? io_cache_alloc_new+0x45/0xf0 [ 449.500281][T16600] should_failslab+0xc2/0x120 [ 449.500296][T16600] __kmalloc_noprof+0xd2/0x510 [ 449.500311][T16600] io_cache_alloc_new+0x45/0xf0 [ 449.500327][T16600] io_uring_cmd_prep+0x373/0x590 [ 449.500344][T16600] io_submit_sqes+0x850/0x25c0 [ 449.500365][T16600] __do_sys_io_uring_enter+0xd6a/0x1630 [ 449.500380][T16600] ? __fget_files+0x20e/0x3c0 [ 449.500393][T16600] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 449.500408][T16600] ? fput+0x9b/0xd0 [ 449.500423][T16600] ? ksys_write+0x1ac/0x250 [ 449.500435][T16600] ? __pfx_ksys_write+0x10/0x10 [ 449.500449][T16600] ? rcu_is_watching+0x12/0xc0 [ 449.500462][T16600] __do_fast_syscall_32+0x7c/0x3a0 [ 449.500479][T16600] do_fast_syscall_32+0x32/0x80 [ 449.500494][T16600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.500509][T16600] RIP: 0023:0xf7f56579 [ 449.500517][T16600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.500528][T16600] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 449.500539][T16600] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000000047bc [ 449.500546][T16600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.500552][T16600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.500558][T16600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.500564][T16600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.500577][T16600] [ 449.636957][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2616'. [ 449.678947][T16609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 449.681552][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.684717][T16609] vhci_hcd vhci_hcd.0: Device attached [ 449.689290][T16609] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 449.691384][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.693780][T16609] vhci_hcd vhci_hcd.0: Device attached [ 449.698158][T16609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 449.702462][T16609] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 449.704572][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 449.708894][T16609] vhci_hcd vhci_hcd.0: Device attached [ 449.713127][T16609] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 449.715642][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 449.722828][T16609] vhci_hcd vhci_hcd.0: Device attached [ 449.734781][T16609] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 449.736903][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.739258][T16609] vhci_hcd vhci_hcd.0: Device attached [ 449.741690][T16609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 449.747318][T16609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 449.750211][T16609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 449.760847][T16618] vhci_hcd: connection closed [ 449.761053][ T6972] vhci_hcd: stop threads [ 449.761109][T16616] vhci_hcd: connection closed [ 449.762693][ T6972] vhci_hcd: release socket [ 449.762841][ T6972] vhci_hcd: disconnect device [ 449.769207][T16614] vhci_hcd: connection closed [ 449.769445][T16612] vhci_hcd: connection closed [ 449.771012][T16610] vhci_hcd: connection closed [ 449.772281][ T6972] vhci_hcd: stop threads [ 449.776899][ T6972] vhci_hcd: release socket [ 449.778357][ T6972] vhci_hcd: disconnect device [ 449.779963][ T6972] vhci_hcd: stop threads [ 449.781291][ T6972] vhci_hcd: release socket [ 449.782959][ T6972] vhci_hcd: disconnect device [ 449.784886][ T6972] vhci_hcd: stop threads [ 449.786181][ T6972] vhci_hcd: release socket [ 449.787708][ T6972] vhci_hcd: disconnect device [ 449.789302][ T6972] vhci_hcd: stop threads [ 449.790651][ T6972] vhci_hcd: release socket [ 449.792089][ T6972] vhci_hcd: disconnect device [ 449.826580][T16620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2619'. [ 450.134924][T16623] tipc: Enabling of bearer rejected, failed to enable media [ 450.138457][T16623] syzkaller0: entered promiscuous mode [ 450.140437][T16623] syzkaller0: entered allmulticast mode [ 450.330567][T16627] pim6reg1: entered promiscuous mode [ 450.332854][T16627] pim6reg1: entered allmulticast mode [ 451.362458][T16643] bridge_slave_0: left allmulticast mode [ 451.365015][T16643] bridge_slave_0: left promiscuous mode [ 451.367845][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.392663][T16643] bridge_slave_1: left allmulticast mode [ 451.397262][T16643] bridge_slave_1: left promiscuous mode [ 451.400022][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.441456][T16643] bond0: (slave bond_slave_0): Releasing backup interface [ 451.476439][T16643] bond0: (slave bond_slave_1): Releasing backup interface [ 451.480800][T16648] netlink: 'syz.2.2627': attribute type 10 has an invalid length. [ 451.524668][T16643] team0: Port device team_slave_0 removed [ 451.533890][T16643] team0: Port device team_slave_1 removed [ 451.536442][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.539635][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 451.542410][T16643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.548672][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.550967][T16643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.569299][T16645] team0: Mode changed to "loadbalance" [ 451.598998][T16648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.601706][T16648] team0: Port device bond0 added [ 451.856385][T16650] team0 (unregistering): Port device bond0 removed [ 451.884829][ T34] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 451.887955][T14668] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 451.890328][T14668] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14668, name: syz-executor [ 451.895367][T14668] preempt_count: 1, expected: 0 [ 451.896757][T14668] RCU nest depth: 0, expected: 0 [ 451.898150][T14668] no locks held by syz-executor/14668. [ 451.899668][T14668] Preemption disabled at: [ 451.899674][T14668] [] schedule+0xe0/0x3a0 [ 451.902700][T14668] CPU: 2 UID: 0 PID: 14668 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 451.902715][T14668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.902723][T14668] Call Trace: [ 451.902728][T14668] [ 451.902733][T14668] dump_stack_lvl+0x16c/0x1f0 [ 451.902751][T14668] __might_resched+0x3c0/0x5e0 [ 451.902765][T14668] ? __pfx___might_resched+0x10/0x10 [ 451.902775][T14668] ? pcpu_block_update+0x562/0x660 [ 451.902792][T14668] ? find_held_lock+0x2b/0x80 [ 451.902804][T14668] vfree+0x75/0xb50 [ 451.902822][T14668] ? rcu_is_watching+0x12/0xc0 [ 451.902833][T14668] ? kfree+0x24f/0x4d0 [ 451.902843][T14668] ? free_percpu+0x6db/0x13c0 [ 451.902856][T14668] futex_hash_free+0x98/0xc0 [ 451.902870][T14668] __mmdrop+0x33f/0x580 [ 451.902882][T14668] ? rcu_is_watching+0x12/0xc0 [ 451.902893][T14668] finish_task_switch.isra.0+0x7a4/0xc10 [ 451.902906][T14668] ? __switch_to+0x7a5/0x11a0 [ 451.902921][T14668] __schedule+0x1198/0x5de0 [ 451.902933][T14668] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 451.902954][T14668] ? __pfx___schedule+0x10/0x10 [ 451.902969][T14668] ? find_held_lock+0x2b/0x80 [ 451.902979][T14668] ? schedule+0x2d7/0x3a0 [ 451.902992][T14668] schedule+0xe7/0x3a0 [ 451.903005][T14668] do_nanosleep+0x21a/0x570 [ 451.903017][T14668] ? __pfx_do_nanosleep+0x10/0x10 [ 451.903028][T14668] ? __asan_memset+0x23/0x50 [ 451.903039][T14668] ? __hrtimer_setup+0x176/0x280 [ 451.903056][T14668] hrtimer_nanosleep+0x155/0x380 [ 451.903067][T14668] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 451.903079][T14668] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 451.903096][T14668] ? get_old_timespec32+0xda/0x130 [ 451.903110][T14668] ? __pfx_get_old_timespec32+0x10/0x10 [ 451.903125][T14668] common_nsleep+0xa1/0xd0 [ 451.903140][T14668] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 451.903152][T14668] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 451.903165][T14668] ? rcu_is_watching+0x12/0xc0 [ 451.903178][T14668] __do_fast_syscall_32+0x7c/0x3a0 [ 451.903194][T14668] do_fast_syscall_32+0x32/0x80 [ 451.903209][T14668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.903222][T14668] RIP: 0023:0xf708e579 [ 451.903231][T14668] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.903242][T14668] RSP: 002b:00000000ffc7c8e0 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 451.903253][T14668] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 451.903260][T14668] RDX: 00000000ffc7c914 RSI: 00000000ffc7c90c RDI: 00000000ffc7c914 [ 451.903266][T14668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.903272][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.903278][T14668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.903291][T14668] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.024963][T16657] tipc: Enabling of bearer rejected, failed to enable media [ 452.085624][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 452.089776][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 452.106668][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 452.110404][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.113444][ T34] usb 7-1: Product: Ќ [ 452.129531][ T34] usb 7-1: Manufacturer: 핢Ċ誛枱≩Ც⌔圚㡭붼䕍ʰ裎䄒⍓餛剱襮࣓旜虠땜诽촻듵慺攎㟻밦黪᧑里칰또퍀鯩แ썧⺿ዂួ쪀㜾Ⱓ噬̇ዶ퍘䣧쨙芖뵯Ꭓ吜⨰↓Ὴ摆Ң璖ᛝ讫䋁ꋾ좑䰈뜍䏉寸℃ꗹ﴿跚惕q㰞ꠛ鐊૸佦ᯋ䗼⿱世鵓嶰螬㿅﫯㒭Ò켱鈨韾ᣜ慗 [ 452.173568][ T34] usb 7-1: SerialNumber: 㠙晽痆漄磫ᙰ㌝洝ㆅ暪㌷㈍ˇ妺옾ⷞ䠍劯犸弻Ꮰᨪ䶺贕⨵넲閿詑柛쁶㓃䥴썞裝뵀⥡슝⦇ꚼ諰뗔뗸㳍椶赨祈쫯⌋콑獱ꄨེ쮦␰Ǫ援췫漀᯴珏സ鄲喝멕瀂ᖀ温凱⽷ﵪ픛ໞ◘棕筪個剀㝨ᝌ⒘䲲攣咄㰿㦿㒫횲嚾鍺곸쀚䯆졞 [ 452.814844][ T34] usb 7-1: can't set config #1, error -71 [ 452.818905][ T34] usb 7-1: USB disconnect, device number 58 VM DIAGNOSIS: 23:43:17 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff888026400000 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc90000007d70 R8 =0000000000000000 R9 =fffffbfff2157052 R10=ffffffff90ab8297 R11=0000000000000001 R12=1ffff92000000faf R13=0000000000000003 R14=0000000000000001 R15=ffffc90000007d98 RIP=ffffffff81695748 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080b36000 CR3=000000005a63f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000002d4e5 RBX=0000000000000000 RCX=ffffc9002ead4000 RDX=0000000000080000 RSI=ffffffff8182bb06 RDI=0000000000000007 RBP=0000000000000200 RSP=ffffc90003e67ae0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000008 R13=ffff88801b885400 R14=0000000000000001 R15=ffff88802058b800 RIP=ffffffff8182ba46 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080e6d000 CR3=00000000504d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc9000416f3f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b0f96c0 R15=ffffffff85616fe0 RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ac9de CR3=0000000060f01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e78c99578095bf95 31e6884d39a9cbb2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09679c7b93bd7d75 1c3350c189557fd4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61c29321fd94dc57 e2ef5d7a4e89d018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1b3b64eedffa75c 60bb9199477a0504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000d900 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 129eedf712b01614 9600000102000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 12ac706212b08176 12c2363912bd77df ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006777bdc000000 f2000001ae000001 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22000001ca000001 12b996acba3cc740 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9db75c4d1ca6877 99a22be6a18d787c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0ca6e8b5027f378 054a0380a4b050de ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff95dc9ed8 RBX=ffff888024e10af0 RCX=00000000cf86aa0e RDX=0000000000000000 RSI=ffff888024e10b68 RDI=ffff888024e10b68 RBP=0000000000000000 RSP=ffffc900005e8840 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=ffff888024e10b68 R13=ffff888024e10000 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff8197410d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056a954c0 CR3=0000000062262000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000